Edit tour

Windows Analysis Report
http://frothylattestudio.com/

Overview

General Information

Sample URL:	http://frothylattestudio.com/
Analysis ID:	1540646
Tags:	urlscan
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Connects to several IPs in different countries

Detected suspicious crossdomain redirect

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2432 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6160 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2004,i,6961824384990481302,3734602455398645056,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1316 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4392 --field-trial-handle=2004,i,6961824384990481302,3734602455398645056,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7036 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://frothylattestudio.com/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: http://ww1.frothylattestudio.com/Frothy_Bloat.cfm?fp=2qoqDYI%2B0iJZGtPstQqccvV6mj3sWtCwuxlIlildqdntAr9vCYTVvHWakr2mYgOXvaI2w1lxQwNvQXQ9geMJWXl76t3S5yB%2BiBy%2BZCGz7fRNEfPfmlAL%2B069aOrJirw2FJnjwcPzaE3aWg0OVkAGQTIcS1usl4qXiQIt0xrHb3yncYN7pI0iAXPRcPni8exSan7QRmShFhmVmi8KFswxZrLXK%2BOUgJen18K1VzM4b1G1Lu5vHzl8ZYaBIW4hntdKakG3S9NtAbOds5CPuuOLB1pjsFT52eS2TmdodNxuSO8SdSiMpEHtXZO0Fn2iJEUzEPSdSn6fQwESLH%2BNGOM8Kg%3D%3D&yep=M6FboBuP98sdvcRwAsDx%2FyxJST0KXfB41zVuwQ%2FG8zz5eBalqNa3nTw4xx9bTiMCTfZD4TNwdokKLB%2Fmq%2BOEwXZ6cOAIejqa5Fnt4Udux7%2Fe1WTTGF4DOwXSOEGa%2B%2BQ8%2Fl7bpeCjv5d7px2wcISuPrYfnpp2z53JwpuA7FMPq%2FQUAwG7sOU7pMoYRXtw9bP3TbMCayGOhwzbWjlUpS7GN4%2FllYasm5FrgM0zxUuTwV4jsjXJH6KNTwx%2F4DgHfnupPnNHnCLJ5x0MnzjocudPm81zh%2F50DsJt5moQXBeSSyAbLEtSyEZWmL%2FJcLlq9ryaz2kEpNgj7YQRSWKSHVoVsRnbg%2Bvib080YywKXc9uZEE69bp3nnEN7UTipMx0zPqF1G%2BE65tK2unYlh64NRz2m%2FiJbdG%2B4TBba7BXJht8BEWPEyXl%2BDflzhI2JSnIEg7gaUzlrs%2Fl084s5kOgy2pSClnmP4Rb5DsrwxMqXzjp8qlcULhwyiim1m6AcQiHxsa6ZO9Ic8s1LD5fQDkWr1FFuQk8QOAkKb772scbyYCsuTrVHUiLFQ3R9PBz...

HTTP Parser: Base64 decoded: zI5gsmla/TBpGuQlW3/GbKNZj4Y78ZKwKmNdS0AfZp2io2NMrMohwHX+/6xaDaFl1ov8tEOCMDPW8GZjhg2o+NBW0yFVFfb/Y6UX91tE5wndc47jzoGsetjsx0zAoa77

Source: http://ww1.frothylattestudio.com/Frothy_Bloat.cfm?fp=2qoqDYI%2B0iJZGtPstQqccvV6mj3sWtCwuxlIlildqdntAr9vCYTVvHWakr2mYgOXvaI2w1lxQwNvQXQ9geMJWXl76t3S5yB%2BiBy%2BZCGz7fRNEfPfmlAL%2B069aOrJirw2FJnjwcPzaE3aWg0OVkAGQTIcS1usl4qXiQIt0xrHb3yncYN7pI0iAXPRcPni8exSan7QRmShFhmVmi8KFswxZrLXK%2BOUgJen18K1VzM4b1G1Lu5vHzl8ZYaBIW4hntdKakG3S9NtAbOds5CPuuOLB1pjsFT52eS2TmdodNxuSO8SdSiMpEHtXZO0Fn2iJEUzEPSdSn6fQwESLH%2BNGOM8Kg%3D%3D&yep=M6FboBuP98sdvcRwAsDx%2FyxJST0KXfB41zVuwQ%2FG8zz5eBalqNa3nTw4xx9bTiMCTfZD4TNwdokKLB%2Fmq%2BOEwXZ6cOAIejqa5Fnt4Udux7%2Fe1WTTGF4DOwXSOEGa%2B%2BQ8%2Fl7bpeCjv5d7px2wcISuPrYfnpp2z53JwpuA7FMPq%2FQUAwG7sOU7pMoYRXtw9bP3TbMCayGOhwzbWjlUpS7GN4%2FllYasm5FrgM0zxUuTwV4jsjXJH6KNTwx%2F4DgHfnupPnNHnCLJ5x0MnzjocudPm81zh%2F50DsJt5moQXBeSSyAbLEtSyEZWmL%2FJcLlq9ryaz2kEpNgj7YQRSWKSHVoVsRnbg%2Bvib080YywKXc9uZEE69bp3nnEN7UTipMx0zPqF1G%2BE65tK2unYlh64NRz2m%2FiJbdG%2B4TBba7BXJht8BEWPEyXl%2BDflzhI2JSnIEg7gaUzlrs%2Fl084s5kOgy2pSClnmP4Rb5DsrwxMqXzjp8qlcULhwyiim1m6AcQiHxsa6ZO9Ic8s1LD5fQDkWr1FFuQk8QOAkKb772scbyYCsuTrVHUiLFQ3R9PBz...	HTTP Parser: No favicon
Source: https://www.amazon.com/s?k=bloat+relief&language=en_US&adgrpid=1231453333089814&hvadid=76965999836122&hvbmt=bp&hvdev=c&hvlocphy=65300&hvnetw=s&hvqmt=p&hvtargid=kwd-76966067111871%3Aloc-190&hydadcr=9392_13640345&msclkid=5151cc87ffec1574cf49ab9e858f8c61&tag=txtstdbgdt-20&ref=pd_sl_9k7yfey2e4_p	HTTP Parser: No favicon
Source: https://www.amazon.com/s?k=bloat+relief&language=en_US&adgrpid=1231453333089814&hvadid=76965999836122&hvbmt=bp&hvdev=c&hvlocphy=65300&hvnetw=s&hvqmt=p&hvtargid=kwd-76966067111871%3Aloc-190&hydadcr=9392_13640345&msclkid=5151cc87ffec1574cf49ab9e858f8c61&tag=txtstdbgdt-20&ref=pd_sl_9k7yfey2e4_p	HTTP Parser: No favicon
Source: https://www.amazon.com/s?k=bloat+relief&language=en_US&adgrpid=1231453333089814&hvadid=76965999836122&hvbmt=bp&hvdev=c&hvlocphy=65300&hvnetw=s&hvqmt=p&hvtargid=kwd-76966067111871%3Aloc-190&hydadcr=9392_13640345&msclkid=5151cc87ffec1574cf49ab9e858f8c61&tag=txtstdbgdt-20&ref=pd_sl_9k7yfey2e4_p	HTTP Parser: No favicon
Source: https://www.amazon.com/s?k=bloat+relief&language=en_US&adgrpid=1231453333089814&hvadid=76965999836122&hvbmt=bp&hvdev=c&hvlocphy=65300&hvnetw=s&hvqmt=p&hvtargid=kwd-76966067111871%3Aloc-190&hydadcr=9392_13640345&msclkid=5151cc87ffec1574cf49ab9e858f8c61&tag=txtstdbgdt-20&ref=pd_sl_9k7yfey2e4_p	HTTP Parser: No favicon
Source: https://www.amazon.com/s?k=bloat+relief&language=en_US&adgrpid=1231453333089814&hvadid=76965999836122&hvbmt=bp&hvdev=c&hvlocphy=65300&hvnetw=s&hvqmt=p&hvtargid=kwd-76966067111871%3Aloc-190&hydadcr=9392_13640345&msclkid=5151cc87ffec1574cf49ab9e858f8c61&tag=txtstdbgdt-20&ref=pd_sl_9k7yfey2e4_p	HTTP Parser: No favicon
Source: https://www.amazon.com/s?k=bloat+relief&language=en_US&adgrpid=1231453333089814&hvadid=76965999836122&hvbmt=bp&hvdev=c&hvlocphy=65300&hvnetw=s&hvqmt=p&hvtargid=kwd-76966067111871%3Aloc-190&hydadcr=9392_13640345&msclkid=5151cc87ffec1574cf49ab9e858f8c61&tag=txtstdbgdt-20&ref=pd_sl_9k7yfey2e4_p	HTTP Parser: No favicon
Source: https://www.amazon.com/s?k=bloat+relief&language=en_US&adgrpid=1231453333089814&hvadid=76965999836122&hvbmt=bp&hvdev=c&hvlocphy=65300&hvnetw=s&hvqmt=p&hvtargid=kwd-76966067111871%3Aloc-190&hydadcr=9392_13640345&msclkid=5151cc87ffec1574cf49ab9e858f8c61&tag=txtstdbgdt-20&ref=pd_sl_9k7yfey2e4_p	HTTP Parser: No favicon
Source: https://www.amazon.com/s?k=bloat+relief&language=en_US&adgrpid=1231453333089814&hvadid=76965999836122&hvbmt=bp&hvdev=c&hvlocphy=65300&hvnetw=s&hvqmt=p&hvtargid=kwd-76966067111871%3Aloc-190&hydadcr=9392_13640345&msclkid=5151cc87ffec1574cf49ab9e858f8c61&tag=txtstdbgdt-20&ref=pd_sl_9k7yfey2e4_p	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.7:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.7:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.7:50058 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.7:50342 version: TLS 1.2

Source: unknown

Network traffic detected: IP country count 12

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: r.search.yahoo.com to https://www.bing.com/aclick?ld=e8rpypns_03bcmny4p9qru4zvucuzqws7_nfktegdx9uxue9ggnjrphp9xukperloatx5eqij0tw3bxcvmvhtonbmnxzmjnbdfdbwczuvg_roosna2okndr_swgcyiru_jaih9kbheznvrymglhnejpohilm45au1ylf9k9qixftvsvdyw&u=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&rlid=5151cc87ffec1574cf49ab9e858f8c61

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /delivery/js/cmp_en.min.js HTTP/1.1Host: cdn.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ww1.frothylattestudio.com/?fp=2qoqDYI%2B0iJZGtPstQqccpYVxaI6ObJitI3FjXXWfpuGUlRgNWh70labVRMtFUQ5LVzoMsVoCWLxiQoM%2BdHqAmXOoXaKy6JyeBLBtnHKVd%2FGKCsWGnM13tv86SZzSImbUwvUTGR%2FwbvV68cR0%2FelwwHzPZHwooLRpm81LFvUEvjkylyIR3ZT0%2B2EYh1V8Mk1LHsmLJgCnP3oZ1aTXFi%2FizUqz%2BiqR4qxlPDtjH3Rv7mUkC7JKPeRf7k2n5uCk9QpAZKz65a1XlYxqE%2BvpXcQKkjEW4hITPhDocilO%2FelAu0%3D&poru=b%2F8ZxUo4ug61cKbUIWuWZ9hktTN0TXmB5ubOU%2BIkZsWE32eqR80OwRFFQvOBToKB&_opnslfp=1&Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww1.frothylattestudio.com%2F%3Ffp%3D2qoqDYI%252B0iJZGtPstQqccpYVxaI6ObJitI3FjXXWfpuGUlRgNWh70labVRMtFUQ5LVzoMsVoCWLxiQoM%252BdHqAmXOoXaKy6JyeBLBtnHKVd%252FGKCsWGnM13tv86SZzSImbUwvUTGR%252FwbvV68cR0%252FelwwHzPZHwooLRpm81LFvUEvjkylyIR3ZT0%252B2EYh1V8Mk1LHsmLJgCnP3oZ1aTXFi%252FizUqz%252BiqR4qxlPDtjH3Rv7mUkC7JKPeRf7k2n5uCk9QpAZKz65a1XlYxqE%252BvpXcQKkjEW4hITPhDocilO%252FelAu0%253D%26poru%3Db%252F8ZxUo4ug61cKbUIWuWZ9hktTN0TXmB5ubOU%252BIkZsWE32eqR80OwRFFQvOBToKB%26_opnslfp%3D1%26&&l=en&o=1729722976676 HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ww1.frothylattestudio.com/?fp=2qoqDYI%2B0iJZGtPstQqccpYVxaI6ObJitI3FjXXWfpuGUlRgNWh70labVRMtFUQ5LVzoMsVoCWLxiQoM%2BdHqAmXOoXaKy6JyeBLBtnHKVd%2FGKCsWGnM13tv86SZzSImbUwvUTGR%2FwbvV68cR0%2FelwwHzPZHwooLRpm81LFvUEvjkylyIR3ZT0%2B2EYh1V8Mk1LHsmLJgCnP3oZ1aTXFi%2FizUqz%2BiqR4qxlPDtjH3Rv7mUkC7JKPeRf7k2n5uCk9QpAZKz65a1XlYxqE%2BvpXcQKkjEW4hITPhDocilO%2FelAu0%3D&poru=b%2F8ZxUo4ug61cKbUIWuWZ9hktTN0TXmB5ubOU%2BIkZsWE32eqR80OwRFFQvOBToKB&_opnslfp=1&Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww1.frothylattestudio.com%2F%3Ffp%3D2qoqDYI%252B0iJZGtPstQqccpYVxaI6ObJitI3FjXXWfpuGUlRgNWh70labVRMtFUQ5LVzoMsVoCWLxiQoM%252BdHqAmXOoXaKy6JyeBLBtnHKVd%252FGKCsWGnM13tv86SZzSImbUwvUTGR%252FwbvV68cR0%252FelwwHzPZHwooLRpm81LFvUEvjkylyIR3ZT0%252B2EYh1V8Mk1LHsmLJgCnP3oZ1aTXFi%252FizUqz%252BiqR4qxlPDtjH3Rv7mUkC7JKPeRf7k2n5uCk9QpAZKz65a1XlYxqE%252BvpXcQKkjEW4hITPhDocilO%252FelAu0%253D%26poru%3Db%252F8ZxUo4ug61cKbUIWuWZ9hktTN0TXmB5ubOU%252BIkZsWE32eqR80OwRFFQvOBToKB%26_opnslfp%3D1%26&&l=en&o=1729722976676 HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cmpcc=1
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?__cmpcc=1&id=68884&o=1729722978&h=http%3A%2F%2Fww1.frothylattestudio.com%2F%3Ffp%3D2qoqDYI%252B0iJZGtPstQqccpYVxaI6ObJitI3FjXXWfpuGUlRgNWh70labVRMtFUQ5LVzoMsVoCWLxiQoM%252BdHqAmXOoXaKy6JyeBLBtnHKVd%252FGKCsWGnM13tv86SZzSImbUwvUTGR%252FwbvV68cR0%252FelwwHzPZHwooLRpm81LFvUEvjkylyIR3ZT0%252B2EYh1V8Mk1LHsmLJgCnP3oZ1aTXFi%252FizUqz%252BiqR4qxlPDtjH3Rv7mUkC7JKPeRf7k2n5uCk9QpAZKz65a1XlYxqE%252BvpXcQKkjEW4hITPhDocilO%252FelAu0%253D%26poru%3Db%252F8ZxUo4ug61cKbUIWuWZ9hktTN0TXmB5ubOU%252BIkZsWE32eqR80OwRFFQvOBToKB%26_opnslfp%3D1%26&&l=en&odw=0&dlt=1&l=en HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ww1.frothylattestudio.com/?fp=2qoqDYI%2B0iJZGtPstQqccpYVxaI6ObJitI3FjXXWfpuGUlRgNWh70labVRMtFUQ5LVzoMsVoCWLxiQoM%2BdHqAmXOoXaKy6JyeBLBtnHKVd%2FGKCsWGnM13tv86SZzSImbUwvUTGR%2FwbvV68cR0%2FelwwHzPZHwooLRpm81LFvUEvjkylyIR3ZT0%2B2EYh1V8Mk1LHsmLJgCnP3oZ1aTXFi%2FizUqz%2BiqR4qxlPDtjH3Rv7mUkC7JKPeRf7k2n5uCk9QpAZKz65a1XlYxqE%2BvpXcQKkjEW4hITPhDocilO%2FelAu0%3D&poru=b%2F8ZxUo4ug61cKbUIWuWZ9hktTN0TXmB5ubOU%2BIkZsWE32eqR80OwRFFQvOBToKB&_opnslfp=1&Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cmpcc=1
Source: global traffic	HTTP traffic detected: GET /delivery/js/cmp_en.min.js HTTP/1.1Host: cdn.consentmanager.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww1.frothylattestudio.com%2FFrothy_Bloat.cfm%3Ffp%3D2qoqDYI%252B0iJZGtPstQqccvV6mj3sWtCwuxlIlildqdntAr9vCYTVvHWakr2mYgOXvaI2w1lxQwNvQXQ9geMJWXl76t3S5yB%252BiBy%252BZCGz7fRNEfPfmlAL%252B069aOrJirw2FJnjwcPzaE3aWg0OVkAGQTIcS1usl4qXiQIt0xrHb3yncYN7pI0iAXPRcPni8exSan7QRmShFhmVmi8KFswxZrLXK%252BOUgJen18K1VzM4b1G1Lu5vHzl8ZYaBIW4hntdKakG3S9NtAbOds5CPuuOLB1pjsFT52eS2TmdodNxuSO8SdSiMpEHtXZO0Fn2iJEUzEPSdSn6fQwESLH%252BNGOM8Kg%253D%253D%26yep%3DM6FboBuP98sdvcRwAsDx%252FyxJST0KXfB41zVuwQ%252FG8zz5eBalqNa3nTw4xx9bTiMCTfZD4TNwdokKLB%252Fmq%252BOEwXZ6cOAIejqa5Fnt4Udux7%252Fe1WTTGF4DOwXSOEGa%252B%252BQ8%252Fl7bpeCjv5d7px2wcISuPrYfnpp2z53JwpuA7FMPq%252FQUAwG7sOU7pMoYRXtw9bP3TbMCayGOhwzbWjlUpS7GN4%252FllYasm5FrgM0zxUuTwV4jsjXJH6KNTwx%252F4DgHfnupPnNHnCLJ5x0MnzjocudPm81zh%252F50DsJt5moQXBeSSyAbLEtSyEZWmL%252FJcLlq9ryaz2kEpNgj7YQRSWKSHVoVsRnbg%252Bvib080YywKXc9uZEE69bp3nnEN7UTipMx0zPqF1G%252BE65tK2unYlh64NRz2m%252FiJbdG%252B4TBba7BXJht8BEWPEyXl%252BDflzhI2JSnIEg7gaUzlrs%252Fl084s5kOgy2pSClnmP4Rb5DsrwxMqXzjp8qlcULhwyiim1m6AcQiHxsa6ZO9Ic8s1LD5fQDkWr1FFuQk8QOAkKb772scbyYCsuTrVHUiLFQ3R9PBz0brQmLLgYF%252FxpOg8Lg3eSqC7X%252FTGgiuR7tvN7kPlevT0JkYb4NCMi1JB6YRIC1MNT7NEJmYa6ug2%252FzS3RBqIkXs%252BIFdC9AYdeV0EjoWsiI7AHEH%252BYBwaX03L6%252FG%252Bp2DFlgD%252FtKfO%252FDTsJIP5WtNuyDBAs4gDtj8LJSSTlVlPmMbHmVFqAzf9q92z2zErU9X4%252BHljl0tbmPajZzoh%252B4KZD3mK%252BurSExz%252BfQDAUyhL4wBMQN0z3POl4LSbBsCxuD1Q2%252B2dpxfCBGApOsU8XYsFWfC7bdNk3LlwjnGpo4NHrkHoCPHXhaGPvBKZ4wdSeCUMc8uDwVihCDHO%252BAJmbcpgmOojkSYSAm%252BN15H2zCcYYbSbEG5qbZ6tocPQtZTBvxsQlL%252BazGDAGMDxoPXnTQxwbbA8nve5gud1YlnPdCjxoZ7GtMYJL80rc4kxrl0yXVUXrNT5qHTl89OJ1earDH%252FQ4uRYmGM4bhJa2bTwAAvbjP15VouWngXxtQSbaaV%252BErvTGH7vr2x%252BelRJe%252FB6ioFawWsATNLdPO8rO9L3CEq0iO4WWL%252FG2xENhQsAJ5nx47eBdTBXie0A2kF2D9SZNmzRwKxlWWvTWFi3IpfcOogm9eKlfg2Tn0ViP4CN5%252B1zM3cL5SjSToRX95ipqQChf84EH16AucfX5IWVIj8H7hZMJiZFW%252B7pceEK7VTpYEl4EiqszSXpz3n8Kos6F1y1k47nLMbM%252Fj6iytoibzzHWFayAGYP6WnHJCCiZbhp0esXP0DzM0GVemj8mTtjxXZcFozyt6ccVvmXrIcOHRa3UbayAIf%252FvR8lKiei47q24Y3bY7b8H%252FuxqLaMtBQ9zsybN8Hrk4XIg8DMENreQlyJ42SEk45332g2YBY8PKGJSWSZ5SqIVJDFCjfZgSxWyYigkVtuI5iYwpfNABoK3Mc0uCKo1bfOP3iE428MwC6Xbr%252F3xUTqgNQW6l4ZVMJxEDG%252Fj4M%252FT0FN9wpGtnGu7DlCgTsv4GqFUw7DYVCVRvFf6B7pnLeLrTKf3vEBh%252Bn3WAAHtwc%252BGVB74AKszAVEBdYuMN%252FzBN0b8HwP3WhuzCSxaQAtp2kSoDs5deoTR89AYH35bMjGOwnATl7Ax79lln58sfJA0UIvrGn1My6Nova5nxU54KCLjYMmDccBSf7l7RHoW8T6KpRKElCErtKTxM6He%252F8ohvR7mVWwFDg%253D%26gtnp%3D0%26gtpp%3D0%26kbetu%3D1%26maxads%3D0%26kld%3D1040%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26prvtof%3Db%252F8ZxUo4ug61cKbUIWuWZ9hktTN0TXmB5ubOU%252BIkZsWE32eqR80OwRFFQvOBToKB%26%26gtnp%3D0%26gtpp%3D0%26kt%3D362%26%26kbc%3Dfrothy%26ki%3D86919640%26ktd%3D0%26kld%3D1040%26kp%3D3%26bd%3D-4%25231024%25231280%25231%25230%2523639%2523443&&__cmpfcc=1&l=en&o=1729722979681 HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=B
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /delivery/customdata/bV8xLndfNjg4ODQucl9VU1REUFNBLmxfZW4uZF8zMzY2OC54XzM3LnYucC50XzMzNjY4Lnh0XzMz.js HTTP/1.1Host: cdn.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ww1.frothylattestudio.com/Frothy_Bloat.cfm?fp=2qoqDYI%2B0iJZGtPstQqccvV6mj3sWtCwuxlIlildqdntAr9vCYTVvHWakr2mYgOXvaI2w1lxQwNvQXQ9geMJWXl76t3S5yB%2BiBy%2BZCGz7fRNEfPfmlAL%2B069aOrJirw2FJnjwcPzaE3aWg0OVkAGQTIcS1usl4qXiQIt0xrHb3yncYN7pI0iAXPRcPni8exSan7QRmShFhmVmi8KFswxZrLXK%2BOUgJen18K1VzM4b1G1Lu5vHzl8ZYaBIW4hntdKakG3S9NtAbOds5CPuuOLB1pjsFT52eS2TmdodNxuSO8SdSiMpEHtXZO0Fn2iJEUzEPSdSn6fQwESLH%2BNGOM8Kg%3D%3D&yep=M6FboBuP98sdvcRwAsDx%2FyxJST0KXfB41zVuwQ%2FG8zz5eBalqNa3nTw4xx9bTiMCTfZD4TNwdokKLB%2Fmq%2BOEwXZ6cOAIejqa5Fnt4Udux7%2Fe1WTTGF4DOwXSOEGa%2B%2BQ8%2Fl7bpeCjv5d7px2wcISuPrYfnpp2z53JwpuA7FMPq%2FQUAwG7sOU7pMoYRXtw9bP3TbMCayGOhwzbWjlUpS7GN4%2FllYasm5FrgM0zxUuTwV4jsjXJH6KNTwx%2F4DgHfnupPnNHnCLJ5x0MnzjocudPm81zh%2F50DsJt5moQXBeSSyAbLEtSyEZWmL%2FJcLlq9ryaz2kEpNgj7YQRSWKSHVoVsRnbg%2Bvib080YywKXc9uZEE69bp3nnEN7UTipMx0zPqF1G%2BE65tK2unYlh64NRz2m%2FiJbdG%2B4TBba7BXJht8BEWPEyXl%2BDflzhI2JSnIEg7gaUzlrs%2Fl084s5kOgy2pSClnmP4Rb5DsrwxMqXzjp8qlcULhwyiim1m6AcQiHxsa6ZO9Ic8s1LD5fQDkWr1FFuQk8QOAkKb772scbyYCsuTrVHUiLFQ3R9PBz0brQmLLgYF%2FxpOg8Lg3eSqC7X%2FTGgiuR7tvN7kPlevT0JkYb4NCMi1JB6YRIC1MNT7NEJmYa6ug2%2FzS3RBqIkXs%2BIFdC9AYdeV0EjoWsiI7AHEH%2BYBwaX03L6%2FG%2Bp2DFlgD%2FtKfO%2FDTsJIP5WtNuyDBAs4gDtj8LJSSTlVlPmMbHmVFqAzf9q92z2zErU9X4%2BHljl0tbmPajZzoh%2B4KZD3mK%2BurSExz%2BfQDAUyhL4wBMQN0z3POl4LSbBsCxuD1Q2%2B2dpxfCBGApOsU8XYsFWfC7bdNk3LlwjnGpo4NHrkHoCPHXhaGPvBKZ4wdSeCUMc8uDwVihCDHO%2BAJmbcpgmOojkSYSAm%2BN15H2zCcYYbSbEG5qbZ6tocPQtZTBvxsQlL%2BazGDAGMDxoPXnTQxwbbA8nve5gud1YlnPdCjxoZ7GtMYJL80rc4kxrl0yXVUXrNT5qHTl89OJ1earDH%2FQ4uRYmGM4bhJa2bTwAAvbjP15VouWngXxtQSbaaV%2BErvTGH7vr2x%2BelRJe%2FB6ioFawWsATNLdPO8rO9L3CEq0iO4WWL%2FG2xENhQsAJ5nx47eBdTBXie0A2kF2D9SZNmzRwKxlWWvTWFi3IpfcOogm9eKlfg2Tn0ViP4CN5%2B1zM3cL5SjSToRX95ipqQChf84EH16AucfX5IWVIj8H7hZMJiZFW%2B7pceEK7VTpYEl4EiqszSXpz3n8Kos6F1y1k47nLMbM%2Fj6iytoibzzHWFayAGYP6WnHJCCiZbhp0esXP0DzM0GVemj8mTtjxXZcFozyt6ccVvmXrIcOHRa3UbayAIf%2FvR8lKiei47q24Y3bY7b8H%2FuxqLaMtBQ9zsybN8Hrk4XIg8DMENreQlyJ42SEk45332g2YBY8PKGJSWSZ5SqIVJDFCjfZgSxWyYigkVtuI5iYwpfNABoK3Mc0uCKo1bfOP3iE428MwC6Xbr%2F3xUTqgNQW6l4ZVMJxEDG%2Fj4M%2FT0FN9wpGtnGu7DlCgTsv4GqFUw7DYVCVRvFf6B7pnLeLrTKf3vEBh%2Bn3WAAHtwc%2BGVB74AKszAVEBdYuMN%2FzBN0b8HwP3WhuzCSxaQAtp2kSoDs5deoTR89AYH35bMjGOwnATl7Ax79lln58sfJA0UIvrGn1My6Nova5nxU54KCLjYMmDccBSf7l7RHoW8T6KpRKElCErtKTxM6He%2F8ohvR7mVWwFDg%3D&gtnp=0&gtpp=0&kbetu=1&maxads=0&kld=1040&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=b%2F8ZxUo4ug61cKbUIWuWZ9hktTN0TXmB5ubOU%2BIkZsWE32eqR80OwRFFQvOBToKB&&gtnp=0&gtp
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww1.frothylattestudio.com%2FFrothy_Bloat.cfm%3Ffp%3D2qoqDYI%252B0iJZGtPstQqccvV6mj3sWtCwuxlIlildqdntAr9vCYTVvHWakr2mYgOXvaI2w1lxQwNvQXQ9geMJWXl76t3S5yB%252BiBy%252BZCGz7fRNEfPfmlAL%252B069aOrJirw2FJnjwcPzaE3aWg0OVkAGQTIcS1usl4qXiQIt0xrHb3yncYN7pI0iAXPRcPni8exSan7QRmShFhmVmi8KFswxZrLXK%252BOUgJen18K1VzM4b1G1Lu5vHzl8ZYaBIW4hntdKakG3S9NtAbOds5CPuuOLB1pjsFT52eS2TmdodNxuSO8SdSiMpEHtXZO0Fn2iJEUzEPSdSn6fQwESLH%252BNGOM8Kg%253D%253D%26yep%3DM6FboBuP98sdvcRwAsDx%252FyxJST0KXfB41zVuwQ%252FG8zz5eBalqNa3nTw4xx9bTiMCTfZD4TNwdokKLB%252Fmq%252BOEwXZ6cOAIejqa5Fnt4Udux7%252Fe1WTTGF4DOwXSOEGa%252B%252BQ8%252Fl7bpeCjv5d7px2wcISuPrYfnpp2z53JwpuA7FMPq%252FQUAwG7sOU7pMoYRXtw9bP3TbMCayGOhwzbWjlUpS7GN4%252FllYasm5FrgM0zxUuTwV4jsjXJH6KNTwx%252F4DgHfnupPnNHnCLJ5x0MnzjocudPm81zh%252F50DsJt5moQXBeSSyAbLEtSyEZWmL%252FJcLlq9ryaz2kEpNgj7YQRSWKSHVoVsRnbg%252Bvib080YywKXc9uZEE69bp3nnEN7UTipMx0zPqF1G%252BE65tK2unYlh64NRz2m%252FiJbdG%252B4TBba7BXJht8BEWPEyXl%252BDflzhI2JSnIEg7gaUzlrs%252Fl084s5kOgy2pSClnmP4Rb5DsrwxMqXzjp8qlcULhwyiim1m6AcQiHxsa6ZO9Ic8s1LD5fQDkWr1FFuQk8QOAkKb772scbyYCsuTrVHUiLFQ3R9PBz0brQmLLgYF%252FxpOg8Lg3eSqC7X%252FTGgiuR7tvN7kPlevT0JkYb4NCMi1JB6YRIC1MNT7NEJmYa6ug2%252FzS3RBqIkXs%252BIFdC9AYdeV0EjoWsiI7AHEH%252BYBwaX03L6%252FG%252Bp2DFlgD%252FtKfO%252FDTsJIP5WtNuyDBAs4gDtj8LJSSTlVlPmMbHmVFqAzf9q92z2zErU9X4%252BHljl0tbmPajZzoh%252B4KZD3mK%252BurSExz%252BfQDAUyhL4wBMQN0z3POl4LSbBsCxuD1Q2%252B2dpxfCBGApOsU8XYsFWfC7bdNk3LlwjnGpo4NHrkHoCPHXhaGPvBKZ4wdSeCUMc8uDwVihCDHO%252BAJmbcpgmOojkSYSAm%252BN15H2zCcYYbSbEG5qbZ6tocPQtZTBvxsQlL%252BazGDAGMDxoPXnTQxwbbA8nve5gud1YlnPdCjxoZ7GtMYJL80rc4kxrl0yXVUXrNT5qHTl89OJ1earDH%252FQ4uRYmGM4bhJa2bTwAAvbjP15VouWngXxtQSbaaV%252BErvTGH7vr2x%252BelRJe%252FB6ioFawWsATNLdPO8rO9L3CEq0iO4WWL%252FG2xENhQsAJ5nx47eBdTBXie0A2kF2D9SZNmzRwKxlWWvTWFi3IpfcOogm9eKlfg2Tn0ViP4CN5%252B1zM3cL5SjSToRX95ipqQChf84EH16AucfX5IWVIj8H7hZMJiZFW%252B7pceEK7VTpYEl4EiqszSXpz3n8Kos6F1y1k47nLMbM%252Fj6iytoibzzHWFayAGYP6WnHJCCiZbhp0esXP0DzM0GVemj8mTtjxXZcFozyt6ccVvmXrIcOHRa3UbayAIf%252FvR8lKiei47q24Y3bY7b8H%252FuxqLaMtBQ9zsybN8Hrk4XIg8DMENreQlyJ42SEk45332g2YBY8PKGJSWSZ5SqIVJDFCjfZgSxWyYigkVtuI5iYwpfNABoK3Mc0uCKo1bfOP3iE428MwC6Xbr%252F3xUTqgNQW6l4ZVMJxEDG%252Fj4M%252FT0FN9wpGtnGu7DlCgTsv4GqFUw7DYVCVRvFf6B7pnLeLrTKf3vEBh%252Bn3WAAHtwc%252BGVB74AKszAVEBdYuMN%252FzBN0b8HwP3WhuzCSxaQAtp2kSoDs5deoTR89AYH35bMjGOwnATl7Ax79lln58sfJA0UIvrGn1My6Nova5nxU54KCLjYMmDccBSf7l7RHoW8T6KpRKElCErtKTxM6He%252F8ohvR7mVWwFDg%253D%26gtnp%3D0%26gtpp%3D0%26kbetu%3D1%26maxads%3D0%26kld%3D1040%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26prvtof%3Db%252F8ZxUo4ug61cKbUIWuWZ9hktTN0TXmB5ubOU%252BIkZsWE32eqR80OwRFFQvOBToKB%26%26gtnp%3D0%26gtpp%3D0%26kt%3D362%26%26kbc%3Dfrothy%26ki%3D86919640%26ktd%3D0%26kld%3D1040%26kp%3D3%26bd%3D-4%25231024%25231280%25231%25230%2523639%2523443&&__cmpfcc=1&l=en&o=1729722979681 HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Wi
Source: global traffic	HTTP traffic detected: GET /delivery/recall/logos/68884 HTTP/1.1Host: cdn.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://ww1.frothylattestudio.com/Frothy_Bloat.cfm?fp=2qoqDYI%2B0iJZGtPstQqccvV6mj3sWtCwuxlIlildqdntAr9vCYTVvHWakr2mYgOXvaI2w1lxQwNvQXQ9geMJWXl76t3S5yB%2BiBy%2BZCGz7fRNEfPfmlAL%2B069aOrJirw2FJnjwcPzaE3aWg0OVkAGQTIcS1usl4qXiQIt0xrHb3yncYN7pI0iAXPRcPni8exSan7QRmShFhmVmi8KFswxZrLXK%2BOUgJen18K1VzM4b1G1Lu5vHzl8ZYaBIW4hntdKakG3S9NtAbOds5CPuuOLB1pjsFT52eS2TmdodNxuSO8SdSiMpEHtXZO0Fn2iJEUzEPSdSn6fQwESLH%2BNGOM8Kg%3D%3D&yep=M6FboBuP98sdvcRwAsDx%2FyxJST0KXfB41zVuwQ%2FG8zz5eBalqNa3nTw4xx9bTiMCTfZD4TNwdokKLB%2Fmq%2BOEwXZ6cOAIejqa5Fnt4Udux7%2Fe1WTTGF4DOwXSOEGa%2B%2BQ8%2Fl7bpeCjv5d7px2wcISuPrYfnpp2z53JwpuA7FMPq%2FQUAwG7sOU7pMoYRXtw9bP3TbMCayGOhwzbWjlUpS7GN4%2FllYasm5FrgM0zxUuTwV4jsjXJH6KNTwx%2F4DgHfnupPnNHnCLJ5x0MnzjocudPm81zh%2F50DsJt5moQXBeSSyAbLEtSyEZWmL%2FJcLlq9ryaz2kEpNgj7YQRSWKSHVoVsRnbg%2Bvib080YywKXc9uZEE69bp3nnEN7UTipMx0zPqF1G%2BE65tK2unYlh64NRz2m%2FiJbdG%2B4TBba7BXJht8BEWPEyXl%2BDflzhI2JSnIEg7gaUzlrs%2Fl084s5kOgy2pSClnmP4Rb5DsrwxMqXzjp8qlcULhwyiim1m6AcQiHxsa6ZO9Ic8s1LD5fQDkWr1FFuQk8QOAkKb772scbyYCsuTrVHUiLFQ3R9PBz0brQmLLgYF%2FxpOg8Lg3eSqC7X%2FTGgiuR7tvN7kPlevT0JkYb4NCMi1JB6YRIC1MNT7NEJmYa6ug2%2FzS3RBqIkXs%2BIFdC9AYdeV0EjoWsiI7AHEH%2BYBwaX03L6%2FG%2Bp2DFlgD%2FtKfO%2FDTsJIP5WtNuyDBAs4gDtj8LJSSTlVlPmMbHmVFqAzf9q92z2zErU9X4%2BHljl0tbmPajZzoh%2B4KZD3mK%2BurSExz%2BfQDAUyhL4wBMQN0z3POl4LSbBsCxuD1Q2%2B2dpxfCBGApOsU8XYsFWfC7bdNk3LlwjnGpo4NHrkHoCPHXhaGPvBKZ4wdSeCUMc8uDwVihCDHO%2BAJmbcpgmOojkSYSAm%2BN15H2zCcYYbSbEG5qbZ6tocPQtZTBvxsQlL%2BazGDAGMDxoPXnTQxwbbA8nve5gud1YlnPdCjxoZ7GtMYJL80rc4kxrl0yXVUXrNT5qHTl89OJ1earDH%2FQ4uRYmGM4bhJa2bTwAAvbjP15VouWngXxtQSbaaV%2BErvTGH7vr2x%2BelRJe%2FB6ioFawWsATNLdPO8rO9L3CEq0iO4WWL%2FG2xENhQsAJ5nx47eBdTBXie0A2kF2D9SZNmzRwKxlWWvTWFi3IpfcOogm9eKlfg2Tn0ViP4CN5%2B1zM3cL5SjSToRX95ipqQChf84EH16AucfX5IWVIj8H7hZMJiZFW%2B7pceEK7VTpYEl4EiqszSXpz3n8Kos6F1y1k47nLMbM%2Fj6iytoibzzHWFayAGYP6WnHJCCiZbhp0esXP0DzM0GVemj8mTtjxXZcFozyt6ccVvmXrIcOHRa3UbayAIf%2FvR8lKiei47q24Y3bY7b8H%2FuxqLaMtBQ9zsybN8Hrk4XIg8DMENreQlyJ42SEk45332g2YBY8PKGJSWSZ5SqIVJDFCjfZgSxWyYigkVtuI5iYwpfNABoK3Mc0uCKo1bfOP3iE428MwC6Xbr%2F3xUTqgNQW6l4ZVMJxEDG%2Fj4M%2FT0FN9wpGtnGu7DlCgTsv4GqFUw7DYVCVRvFf6B7pnLeLrTKf3vEBh%2Bn3WAAHtwc%2BGVB74AKszAVEBdYuMN%2FzBN0b8HwP3WhuzCSxaQAtp2kSoDs5deoTR89AYH35bMjGOwnATl7Ax79lln58sfJA0UIvrGn1My6Nova5nxU54KCLjYMmDccBSf7l7RHoW8T6KpRKElCErtKTxM6He%2F8ohvR7mVWwFDg%3D&gtnp=0&gtpp=0&kbetu=1&maxads=0&kld=1040&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=b%2F8ZxUo4ug61cKbUIWuWZ9hktTN0TXmB5ubOU%2BIkZsWE32eqR80OwRFFQvOBToKB&&gtnp=0&gtpp=0&kt=362&&
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=68884&did=3&cfdid=3&t=pv.d_ccpans.d_ll2.oonv.d_dnsx&h=http%3A%2F%2Fww1.frothylattestudio.com%2FFrothy_Bloat.cfm&o=1729722982805&l=EN&lv=107360&d=3&ct=14&e=&e2=&e3=&i=&sv=33&dv=37& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://ww1.frothylattestudio.com/Frothy_Bloat.cfm?fp=2qoqDYI%2B0iJZGtPstQqccvV6mj3sWtCwuxlIlildqdntAr9vCYTVvHWakr2mYgOXvaI2w1lxQwNvQXQ9geMJWXl76t3S5yB%2BiBy%2BZCGz7fRNEfPfmlAL%2B069aOrJirw2FJnjwcPzaE3aWg0OVkAGQTIcS1usl4qXiQIt0xrHb3yncYN7pI0iAXPRcPni8exSan7QRmShFhmVmi8KFswxZrLXK%2BOUgJen18K1VzM4b1G1Lu5vHzl8ZYaBIW4hntdKakG3S9NtAbOds5CPuuOLB1pjsFT52eS2TmdodNxuSO8SdSiMpEHtXZO0Fn2iJEUzEPSdSn6fQwESLH%2BNGOM8Kg%3D%3D&yep=M6FboBuP98sdvcRwAsDx%2FyxJST0KXfB41zVuwQ%2FG8zz5eBalqNa3nTw4xx9bTiMCTfZD4TNwdokKLB%2Fmq%2BOEwXZ6cOAIejqa5Fnt4Udux7%2Fe1WTTGF4DOwXSOEGa%2B%2BQ8%2Fl7bpeCjv5d7px2wcISuPrYfnpp2z53JwpuA7FMPq%2FQUAwG7sOU7pMoYRXtw9bP3TbMCayGOhwzbWjlUpS7GN4%2FllYasm5FrgM0zxUuTwV4jsjXJH6KNTwx%2F4DgHfnupPnNHnCLJ5x0MnzjocudPm81zh%2F50DsJt5moQXBeSSyAbLEtSyEZWmL%2FJcLlq9ryaz2kEpNgj7YQRSWKSHVoVsRnbg%2Bvib080YywKXc9uZEE69bp3nnEN7UTipMx0zPqF1G%2BE65tK2unYlh64NRz2m%2FiJbdG%2B4TBba7BXJht8BEWPEyXl%2BDflzhI2JSnIEg7gaUzlrs%2Fl084s5kOgy2pSClnmP4Rb5DsrwxMqXzjp8qlcULhwyiim1m6AcQiHxsa6ZO9Ic8s1LD5fQDkWr1FFuQk8QOAkKb772scbyYCsuTrVHUiLFQ3R9PBz0brQmLLgYF%2FxpOg8Lg3eSqC7X%2FTGgiuR7tvN7kPlevT0JkYb4NCMi1JB6YRIC1MNT7NEJmYa6ug2%2FzS3RBqIkXs%2BIFdC9AYdeV0EjoWsiI7AHEH%2BYBwaX03L6%2FG%2Bp2DFlgD%2FtKfO%2FDTsJIP5WtNuyDBAs4gDtj8LJSSTlVlPmMbHmVFqAzf9q92z2zErU9X4%2BHljl0tbmPajZzoh%2B4KZD3mK%2BurSExz%2BfQDAUyhL4wBMQN0z3POl4LSbBsCxuD1Q2%2B2dpxfCBGApOsU8XYsFWfC7bdNk3LlwjnGpo4NHrkHoCPHXhaGPvBKZ4wdSeCUMc8uDwVihCDHO%2BAJmbcpgmOojkSYSAm%2BN15H2zCcYYbSbEG5qbZ6tocPQtZTBvxsQlL%2BazGDAGMDxoPXnTQxwbbA8nve5gud1YlnPdCjxoZ7GtMYJL80rc4kxrl0yXVUXrNT5qHTl89OJ1earDH%2FQ4uRYmGM4bhJa2bTwAAvbjP15VouWngXxtQSbaaV%2BErvTGH7vr2x%2BelRJe%2FB6ioFawWsATNLdPO8rO9L3CEq0iO4WWL%2FG2xENhQsAJ5nx47eBdTBXie0A2kF2D9SZNmzRwKxlWWvTWFi3IpfcOogm9eKlfg2Tn0ViP4CN5%2B1zM3cL5SjSToRX95ipqQChf84EH16AucfX5IWVIj8H7hZMJiZFW%2B7pceEK7VTpYEl4EiqszSXpz3n8Kos6F1y1k47nLMbM%2Fj6iytoibzzHWFayAGYP6WnHJCCiZbhp0esXP0DzM0GVemj8mTtjxXZcFozyt6ccVvmXrIcOHRa3UbayAIf%2FvR8lKiei47q24Y3bY7b8H%2FuxqLaMtBQ9zsybN8Hrk4XIg8DMENreQlyJ42SEk45332g2YBY8PKGJSWSZ5SqIVJDFCjfZgSxWyYigkVtuI5iYwpfNABoK3Mc0uCKo1bfOP3iE428MwC6Xbr%2F3xUTqgNQW6l4ZVMJxEDG%2Fj4M%2FT0FN9wpGtnGu7DlCgTsv4GqFUw7DYVCVRvFf6B7pnLeLrTKf3vEBh%2Bn3WAAHtwc%2BGVB74AKszAVEBdYuMN%2FzBN0b8HwP3WhuzCSxaQAtp2kSoDs5deoTR89AYH35bMjGOwnATl7Ax79lln58sfJA0UIvrGn1My6Nova5nxU54KCLjYMmDccBSf7l7RHoW8T6KpRKElCErtKTxM6He%2F8ohvR7mVWwFDg%3D&gtnp=0&gtpp=0
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=5aEwkTfZgd1Wk41&MD=H4Keosmv HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /delivery/customdata/bV8xLndfNjg4ODQucl9VU1REUFNBLmxfZW4uZF8zMzY2OC54XzM3LnYucC50XzMzNjY4Lnh0XzMz.js HTTP/1.1Host: cdn.consentmanager.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /delivery/recall/logos/68884 HTTP/1.1Host: cdn.consentmanager.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=68884&did=3&cfdid=3&t=pv.d_ccpans.d_ll2.oonv.d_dnsx&h=http%3A%2F%2Fww1.frothylattestudio.com%2FFrothy_Bloat.cfm&o=1729722982805&l=EN&lv=107360&d=3&ct=14&e=&e2=&e3=&i=&sv=33&dv=37& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cmpcc=4
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rdclk/dWU9M0U2MUFDMDUzQTkwNDcwNSZ1dD0xNzI5NzIyOTc5Mzc3JnVvPTc2OTY1OTk5ODM2MTIyJmx0PTImcz0yJmVzPUVSRktqbkVBaHV0Vzl5MERRbkNidm9TRkFET05pTGpxVFJnMm02ZzZXaXI2MDFQMDRmR2ZKT0tOZERMREgyYjA4NEdlSmlyVkZuQ085dy0t/RV=2/RE=1732314979/RO=14/RU=https%3a%2f%2fwww.bing.com%2faclick%3fld%3de8RPyPnS_03BcMny4P9QrU4zVUCUzQWs7_nfkTegDX9UXUe9ggNjRpHp9xUKperLOATX5eqIj0tW3bxcvmvhTONBMNxZmjNbDfDbwczUvG_rooSnA2OKnDr_SwgcyIru_jAIH9KbHEZNvRymGlHnEjPohilM45Au1YlF9k9qixFtvSvDYW%26u%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%26rlid%3d5151cc87ffec1574cf49ab9e858f8c61/RK=2/RS=5G.OEM3NhQeZqePlvNPr6PXP4l0- HTTP/1.1Host: r.search.yahoo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: http://ww1.frothylattestudio.com/Frothy_Bloat.cfm?fp=2qoqDYI%2B0iJZGtPstQqccvV6mj3sWtCwuxlIlildqdntAr9vCYTVvHWakr2mYgOXvaI2w1lxQwNvQXQ9geMJWXl76t3S5yB%2BiBy%2BZCGz7fRNEfPfmlAL%2B069aOrJirw2FJnjwcPzaE3aWg0OVkAGQTIcS1usl4qXiQIt0xrHb3yncYN7pI0iAXPRcPni8exSan7QRmShFhmVmi8KFswxZrLXK%2BOUgJen18K1VzM4b1G1Lu5vHzl8ZYaBIW4hntdKakG3S9NtAbOds5CPuuOLB1pjsFT52eS2TmdodNxuSO8SdSiMpEHtXZO0Fn2iJEUzEPSdSn6fQwESLH%2BNGOM8Kg%3D%3D&yep=M6FboBuP98sdvcRwAsDx%2FyxJST0KXfB41zVuwQ%2FG8zz5eBalqNa3nTw4xx9bTiMCTfZD4TNwdokKLB%2Fmq%2BOEwXZ6cOAIejqa5Fnt4Udux7%2Fe1WTTGF4DOwXSOEGa%2B%2BQ8%2Fl7bpeCjv5d7px2wcISuPrYfnpp2z53JwpuA7FMPq%2FQUAwG7sOU7pMoYRXtw9bP3TbMCayGOhwzbWjlUpS7GN4%2FllYasm5FrgM0zxUuTwV4jsjXJH6KNTwx%2F4DgHfnupPnNHnCLJ5x0MnzjocudPm81zh%2F50DsJt5moQXBeSSyAbLEtSyEZWmL%2FJcLlq9ryaz2kEpNgj7YQRSWKSHVoVsRnbg%2Bvib080YywKXc9uZEE69bp3nnEN7UTipMx0zPqF1G%2BE65tK2unYlh64NRz2m%2FiJbdG%2B4TBba7BXJht8BEWPEyXl%2BDflzhI2JSnIEg7gaUzlrs%2Fl084s5kOgy2pSClnmP4Rb5DsrwxMqXzjp8qlcULhwyiim1m6AcQiHxsa6ZO9Ic8s1LD5fQDkWr1FFuQk8QOAkKb772scbyYCsuTrVHUiLFQ3R9PBz0brQmLLgYF%2FxpOg8Lg3eSqC7X%2FTGgiuR7tvN7kPlevT0JkYb4NCMi1JB6YRIC1MNT7NEJmYa6ug2%2FzS3RBqIkXs%2BIFdC9AYdeV0EjoWsiI7AHEH%2BYBwaX03L6%2FG%2Bp2DFlgD%2FtKfO%2FDTsJIP5WtNuyDBAs4gDtj8LJSSTlVlPmMbHmVFqAzf9q92z2zErU9X4%2BHljl0tbmPajZzoh%2B4KZD3mK%2BurSExz%2BfQDAUyhL4wBMQN0z3POl4LSbBsCxuD1Q2%2B2dp
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /s/?ie=UTF8&keywords=bloat+relief&index=aps&tag=txtstdbgdt-20&ref=pd_sl_9k7yfey2e4_p&adgrpid=1231453333089814&hvadid=76965999836122&hvnetw=s&hvqmt=p&hvbmt=bp&hvdev=c&hvlocint=&hvlocphy=65300&hvtargid=kwd-76966067111871:loc-190&hydadcr=9392_13640345&language=en_US&msclkid=5151cc87ffec1574cf49ab9e858f8c61 HTTP/1.1Host: www.amazon.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: http://ww1.frothylattestudio.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/I/11EIQ5IGqaL._RC%7C01e5ncglxyL.css,01lF2n-pPaL.css,51xslYVQAqL.css,318PabRHnEL.css,01fQPWUjn0L.css,11GEPqXartL.css,01qPl4hxayL.css,01ti0q+221L.css,413Vvv3GONL.css,11TIuySqr6L.css,01Rw4F+QU6L.css,115C34M4eKL.css,01DwiCRvNnL.css,01IdKcBuAdL.css,01dRHIoUjnL.css,216JhEla-AL.css,01lFHae5dSL.css,51pXp+P9GuL.css,01XPHJk60-L.css,11yW2wLgbZL.css,01QhqFH8I8L.css,01i8xapXUHL.css,21guB8pakaL.css,11G8RVHqS+L.css,21yWHgAzkkL.css,11DG4yr02+L.css,216LjtW6ADL.css,01CFUgsA-YL.css,31pGBgRFRdL.css,116t+WD27UL.css,11RvIU5HAoL.css,11lDoAr2PUL.css,11SbsdsyyJL.css,01Jlt0oEURL.css,01X+Gu6WK9L.css,21wzK4uL-JL.css,11Xwl-ZIbpL.css,01LzHhtXxxL.css,21hyIh8IHUL.css,110mkKR-MDL.css,11hvENnYNUL.css,11KWFgYmPtL.css,01890+Vwk8L.css,013tIj5f8aL.css,01cbS3UK11L.css,21F85am0yFL.css,016mfgi+D2L.css,01WslS8q5ML.css,113sefbl5fL.css,016Sx2kF1+L.css_.css?AUIClients/AmazonUI&vET8l+2h HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/41-WpIOxHtL._RC%7C71hATdwg7nL.css,51dhHsnDssL.css,110cRm1b1WL.css,119KcSi-BAL.css,31-P1-9TebL.css,31YZpDCYJPL.css,21pkK7OQMnL.css,41EtvNY2OrL.css,110Nj+wUGYL.css,31K0jc2KvHL.css,01R53xsjpjL.css,11EKggV-DlL.css,415g7iDx4VL.css_.css?AUIClients/NavDesktopUberAsset&0BRhfZ9s HTTP/1.1Host: images-na.ssl-images-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/01mI9NDJJTL._RC%7C01Hw8JIiKbL.css,11AQMRD3rsL.css,61VfgvRLcBL.css,01aTTaL5f8L.css,01NbgfyOxdL.css,01OfDy83BLL.css,11rNNhF9giL.css,41t-n4KOXvL.css,01AuLu1p0SL.css,01+A2nZ3DKL.css,11IaasccbKL.css,01m4HdUj51L.css,01LxUNzvnUL.css,11ABzUvcTsL.css,11a7luWQOCL.css,31J36LqHTUL.css,01e7DqahglL.css,01h5jb0krML.css,21O-2o3zNXL.css_.css?AUIClients/SearchAssets HTTP/1.1Host: images-na.ssl-images-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/21RZgaOpsqL._RC%7C01LNhrqAZmL.css,11mqgJVSK9L.css,01+6LDwsu8L.css,01ixfc-7StL.css,11ahlU8GWXL.css,01+neHskhqL.css,01U2pA95KSL.css,01fn6WRzO6L.css,21BUT35X5SL.css,01Sqn3dOuBL.css,01KrVAe0PrL.css,31wUat9O8SL.css,31gMGQBDl3L.css,01mP5ZKi0aL.css,01mEWw4285L.css,11OSAsJXa3L.css,01zG4X6TtRL.css,31FHXBkYr7L.css,11VKiAMd89L.css,11TWIoQuuIL.css,01K0fSFz6eL.css,014eilLW+IL.css,01MU0Cb7yFL.css,01UfLPWOEOL.css,01Gjv7o0taL.css,019L5P4oPhL.css_.css?AUIClients/SearchPartnerAssets HTTP/1.1Host: images-na.ssl-images-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/31fNEss5igL.css?AUIClients/DetailPageAllOffersDisplayAssets HTTP/1.1Host: images-na.ssl-images-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/G/01/gno/sprites/nav-sprite-global-1x-reorg-privacy._CB587940754_.png HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/G/01/digital/video/merch/Other/TNFL_24_SWM_700x78_POST_Final_noLocale_GSS00014519_GraphicalCountdown._CB544626030_.gif HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/G/01/ad-feedback/info_icon_1Xsprite.png HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/S/sash/Z8YwjOjqIHxqujG.png HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://images-na.ssl-images-amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/S/sash/McBZv0ZvnbehkIx.png HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://m.media-amazon.com/images/I/11EIQ5IGqaL._RC%7C01e5ncglxyL.css,01lF2n-pPaL.css,51xslYVQAqL.css,318PabRHnEL.css,01fQPWUjn0L.css,11GEPqXartL.css,01qPl4hxayL.css,01ti0q+221L.css,413Vvv3GONL.css,11TIuySqr6L.css,01Rw4F+QU6L.css,115C34M4eKL.css,01DwiCRvNnL.css,01IdKcBuAdL.css,01dRHIoUjnL.css,216JhEla-AL.css,01lFHae5dSL.css,51pXp+P9GuL.css,01XPHJk60-L.css,11yW2wLgbZL.css,01QhqFH8I8L.css,01i8xapXUHL.css,21guB8pakaL.css,11G8RVHqS+L.css,21yWHgAzkkL.css,11DG4yr02+L.css,216LjtW6ADL.css,01CFUgsA-YL.css,31pGBgRFRdL.css,116t+WD27UL.css,11RvIU5HAoL.css,11lDoAr2PUL.css,11SbsdsyyJL.css,01Jlt0oEURL.css,01X+Gu6WK9L.css,21wzK4uL-JL.css,11Xwl-ZIbpL.css,01LzHhtXxxL.css,21hyIh8IHUL.css,110mkKR-MDL.css,11hvENnYNUL.css,11KWFgYmPtL.css,01890+Vwk8L.css,013tIj5f8aL.css,01cbS3UK11L.css,21F85am0yFL.css,016mfgi+D2L.css,01WslS8q5ML.css,113sefbl5fL.css,016Sx2kF1+L.css_.css?AUIClients/AmazonUI&vET8l+2hAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/loi/imp?b=JF0GLQ99JfDA0gbEg1BkC34AAAGSu4ZmxgEAAAH2AQBvbm9fdHhuX2JpZDUgICBvbm9fdHhuX2ltcDEgICDNkJse HTTP/1.1Host: aax-us-iad.amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fstaticb%26id%3DYT8YJ4B94N98J9DNZQCH:0 HTTP/1.1Host: fls-na.amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US
Source: global traffic	HTTP traffic detected: GET /transcode/storyTeller/ABFMOV4MO9GW4/0caeb388-53d0-4863-9a19-241f502f2c06-SBV_291884-T1/507239c7-4f15-4689-a8d1-f57fb521c41d/1601577022423.0000000.jpg HTTP/1.1Host: d1f0esyb34c1g2.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/I/31df7KEHL-L._AC_SR250,250_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/01HCjmNENyL._RC%7C01UK0OQ0FvL.css,01VFX23kLjL.css,216fxsCd+3L.css,01ryVQRyFSL.css,01Q8qaOT7JL.css,11z+zmbs3hL.css,01A95w3v6WL.css,11Vf4DwR+3L.css,01sjthDVJfL.css,01eMw4K+MpL.css,01jxKgTxu9L.css,01vHirPPBxL.css,0133XK-8TgL.css,01HgtFLcGIL.css,11Ab4RWO08L.css,01G2qBjBmGL.css,01MRciSCcjL.css,01NUbuAnhkL.css,11McKAVkPgL.css,016hZAhJi1L.css,11J1ZUwKAHL.css,01uwN1SkKRL.css,31amMaY7+8L.css,21do6rtkGRL.css,01gFzmO27eL.css,019qpMX5ivL.css,01XdbL7DyhL.css,31E0vFkmhUL.css,61pJPd6C9IL.css,11uhwBiv1GL.css,21Ap+PAtZQL.css,11NZSxWNVZL.css_.css?AUIClients/ProductUIServiceAssets-v1ozh2963o9b4124htsthvwpiwi HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/S/al-na-9d5791cf-3faf/ebb1fa76-949e-42d8-ac03-81005b8a17e4._AC_SX175_SY100_QL70_.png HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/G/01/gno/sprites/nav-sprite-global-1x-reorg-privacy._CB587940754_.png HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/S/sash/McBZv0ZvnbehkIx.png HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/G/01/ad-feedback/info_icon_1Xsprite.png HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/G/01/digital/video/merch/Other/TNFL_24_SWM_700x78_POST_Final_noLocale_GSS00014519_GraphicalCountdown._CB544626030_.gif HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/S/sash/Z8YwjOjqIHxqujG.png HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /e/loi/imp?b=JF0GLQ99JfDA0gbEg1BkC34AAAGSu4ZmxgEAAAH2AQBvbm9fdHhuX2JpZDUgICBvbm9fdHhuX2ltcDEgICDNkJse HTTP/1.1Host: aax-us-iad.amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fstaticb%26id%3DYT8YJ4B94N98J9DNZQCH:0 HTTP/1.1Host: fls-na.amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/I/31df7KEHL-L._AC_SR250,250_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/712T1u4V8bL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/loi/imp?b=JJ6U9ScxO1FQgryuKKeNFiQAAAGSu4ZmlwEAAAH2AQBvbm9fdHhuX2JpZDYgICBvbm9fdHhuX2ltcDEgICAoY3tj HTTP/1.1Host: aax-us-iad.amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US
Source: global traffic	HTTP traffic detected: GET /e/loi/imp?b=JAVedmlYc8qqblDo18mAwcQAAAGSu4ZmoAEAAAH2AQBvbm9fdHhuX2JpZDMgICBvbm9fdHhuX2ltcDEgICBgfv0P HTTP/1.1Host: aax-us-iad.amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US
Source: global traffic	HTTP traffic detected: GET /images/S/al-na-9d5791cf-3faf/ebb1fa76-949e-42d8-ac03-81005b8a17e4._AC_SX175_SY100_QL70_.png HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/loi/imp?b=JN1QJQxvhsiGtgIlgDrnRhQAAAGSu4ZnhQEAAAH2AQBvbm9fdHhuX2JpZDMgICBvbm9fdHhuX2ltcDEgICBZxzWx HTTP/1.1Host: aax-us-iad.amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US
Source: global traffic	HTTP traffic detected: GET /e/loi/imp?b=JKk5R1QXV0aNqhhv_ppSvdYAAAGSu4ZnhQEAAAH2AQBvbm9fdHhuX2JpZDMgICBvbm9fdHhuX2ltcDEgICCWdXPr HTTP/1.1Host: aax-us-iad.amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US
Source: global traffic	HTTP traffic detected: GET /images/G/01/x-locale/common/grey-pixel.gif HTTP/1.1Host: images-na.ssl-images-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/713IlfLrEYL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71kvz9PSYkL._AC_UL640_QL65_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/617lv+7zWTL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/S/sash/OMJ6YLPcVKydtJQ.png HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://images-na.ssl-images-amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /transcode/storyTeller/ABFMOV4MO9GW4/0caeb388-53d0-4863-9a19-241f502f2c06-SBV_291884-T1/507239c7-4f15-4689-a8d1-f57fb521c41d/1601577022423.0000000.jpg HTTP/1.1Host: d1f0esyb34c1g2.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/710OEdZRHIL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/I/51HA46bPoTL.js?xcp HTTP/1.1Host: images-na.ssl-images-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.amazon.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/G/01/csm/showads.v2.js?category=ad&adstype=-ad-column-&ad_size=-housead- HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.amazon.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/11mVszy8FIL.js?AUIClients/AmazonRushAssetLoader HTTP/1.1Host: images-na.ssl-images-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.amazon.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/41k9TQrnHzL.js?AUIClients/AmazonRushFramework HTTP/1.1Host: images-na.ssl-images-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.amazon.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/21cuxCuJB9L.js?AUIClients/AmazonRushRouter HTTP/1.1Host: images-na.ssl-images-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.amazon.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/S/sash/2KViI4b7ZZCNtr3.png HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://m.media-amazon.com/images/I/11EIQ5IGqaL._RC%7C01e5ncglxyL.css,01lF2n-pPaL.css,51xslYVQAqL.css,318PabRHnEL.css,01fQPWUjn0L.css,11GEPqXartL.css,01qPl4hxayL.css,01ti0q+221L.css,413Vvv3GONL.css,11TIuySqr6L.css,01Rw4F+QU6L.css,115C34M4eKL.css,01DwiCRvNnL.css,01IdKcBuAdL.css,01dRHIoUjnL.css,216JhEla-AL.css,01lFHae5dSL.css,51pXp+P9GuL.css,01XPHJk60-L.css,11yW2wLgbZL.css,01QhqFH8I8L.css,01i8xapXUHL.css,21guB8pakaL.css,11G8RVHqS+L.css,21yWHgAzkkL.css,11DG4yr02+L.css,216LjtW6ADL.css,01CFUgsA-YL.css,31pGBgRFRdL.css,116t+WD27UL.css,11RvIU5HAoL.css,11lDoAr2PUL.css,11SbsdsyyJL.css,01Jlt0oEURL.css,01X+Gu6WK9L.css,21wzK4uL-JL.css,11Xwl-ZIbpL.css,01LzHhtXxxL.css,21hyIh8IHUL.css,110mkKR-MDL.css,11hvENnYNUL.css,11KWFgYmPtL.css,01890+Vwk8L.css,013tIj5f8aL.css,01cbS3UK11L.css,21F85am0yFL.css,016mfgi+D2L.css,01WslS8q5ML.css,113sefbl5fL.css,016Sx2kF1+L.css_.css?AUIClients/AmazonUI&vET8l+2hAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/111mHoVK0kL._SS200_.png HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71EVTIdOTuL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/11XMgK3X1EL._RC%7C31PLWBroQRL.js,31Y5AkqmNvL.js,01WtpFkF58L.js,313k3X0MlqL.js,41STYmgYJcL.js,41eDmkHUGAL.js,01r1r3sVlxL.js,21k0EzbSxUL.js,019dBqWurRL.js,11begzhl8OL.js,011VrMJVPzL.js,01XQQDMWkKL.js,012z3lMdhOL.js,11Exu1nsH7L.js,01b82LFIRTL.js,11UyW+59ZyL.js,015CwW0puPL.js,21UoUtkStoL.js,0164lSJukTL.js,219jZMsEOWL.js,31ydWb2R4oL.js,01FA0ZefFJL.js,41sLQbGE0jL.js_.js?AUIClients/SearchAssets&YLE0U/+D HTTP/1.1Host: images-na.ssl-images-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.amazon.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/I/71JHU57JRuL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/61xYZl60gZL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/I/617lv+7zWTL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/S/sash/OMJ6YLPcVKydtJQ.png HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/710OEdZRHIL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/G/01/x-locale/common/grey-pixel.gif HTTP/1.1Host: images-na.ssl-images-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/712T1u4V8bL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71kvz9PSYkL._AC_UL640_QL65_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/713IlfLrEYL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/loi/imp?b=JN1QJQxvhsiGtgIlgDrnRhQAAAGSu4ZnhQEAAAH2AQBvbm9fdHhuX2JpZDMgICBvbm9fdHhuX2ltcDEgICBZxzWx HTTP/1.1Host: aax-us-iad.amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US
Source: global traffic	HTTP traffic detected: GET /e/loi/imp?b=JJ6U9ScxO1FQgryuKKeNFiQAAAGSu4ZmlwEAAAH2AQBvbm9fdHhuX2JpZDYgICBvbm9fdHhuX2ltcDEgICAoY3tj HTTP/1.1Host: aax-us-iad.amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US
Source: global traffic	HTTP traffic detected: GET /e/loi/imp?b=JAVedmlYc8qqblDo18mAwcQAAAGSu4ZmoAEAAAH2AQBvbm9fdHhuX2JpZDMgICBvbm9fdHhuX2ltcDEgICBgfv0P HTTP/1.1Host: aax-us-iad.amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US
Source: global traffic	HTTP traffic detected: GET /e/loi/imp?b=JKk5R1QXV0aNqhhv_ppSvdYAAAGSu4ZnhQEAAAH2AQBvbm9fdHhuX2JpZDMgICBvbm9fdHhuX2ltcDEgICCWdXPr HTTP/1.1Host: aax-us-iad.amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US
Source: global traffic	HTTP traffic detected: GET /images/I/71EszgPo1TL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/11mVszy8FIL.js?AUIClients/AmazonRushAssetLoader HTTP/1.1Host: images-na.ssl-images-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/51GRfnCRJBL._RC%7C31CuRA-rQfL.js,51YRyCQgcDL.js,01KTtrmeR5L.js,21RoFlDNKHL.js,41fFmJrK7zL.js,01N0G7oHRlL.js,31-hnA-p85L.js,118u4l1lw0L.js,01KVpvQDfZL.js,21XkditqCiL.js,0175nbnAD4L.js,41n8B+HM0VL.js,013F47KhYmL.js,21-qzi7P9VL.js,31qUHWTq-2L.js,21JVz3Jj7-L.js,01gkl49RM3L.js,31quKQWA5aL.js,01qtTpqN9TL.js,010atgkqRqL.js,11HK5yarA+L.js,010dZST96oL.js,01UY0Z7k19L.js,11c8N2Qbr7L.js,215jXa7j8AL.js,51toJYvD5nL.js,31jzxcc0Q6L.js,01ly-sHeg8L.js,018v226z-QL.js,21z34K3nOVL.js,31M8YAO7NgL.js,01993rJ5roL.js,01SiFpsoIzL.js,011gqdvx+zL.js,01sH1H-anWL.js,01gkFPx1YZL.js,01dfGSDqqiL.js,01v8HNSpzuL.js,01GsEhoWBNL.js,01n9shjbBjL.js,012USBOk43L.js,21ZDIxQB3qL.js,61jBrtcEeiL.js_.js?AUIClients/SearchPartnerAssets&73Qy/lVb HTTP/1.1Host: images-na.ssl-images-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.amazon.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/21cuxCuJB9L.js?AUIClients/AmazonRushRouter HTTP/1.1Host: images-na.ssl-images-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/81gtUiCXv5L._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/61PQY25+gxL.js?xcp HTTP/1.1Host: images-na.ssl-images-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.amazon.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/51HA46bPoTL.js?xcp HTTP/1.1Host: images-na.ssl-images-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/41k9TQrnHzL.js?AUIClients/AmazonRushFramework HTTP/1.1Host: images-na.ssl-images-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71Qh6EgiGJL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/714n187WXAL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/61qWDqN7W0L._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/819ZjzPD3EL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/G/01/csm/showads.v2.js?category=ad&adstype=-ad-column-&ad_size=-housead- HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/I/111mHoVK0kL._SS200_.png HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/S/sash/2KViI4b7ZZCNtr3.png HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/61xYZl60gZL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/411x8BHUrFL._RC%7C71YNyiX9pNL.js,01QvReFeJyL.js,01phmzCOwJL.js,01eOvPdxG7L.js,71Q5u7109ML.js,41jBieyCvYL.js,01wXnKULArL.js,01+pnQJuQ0L.js,21S7jO9Y-sL.js,41rlAdcznNL.js,51Wf+1TXw2L.js,31J-NEfNY0L.js,11lEMI5MhIL.js,31+UifI0MIL.js,01VYGE8lGhL.js_.js?AUIClients/NavDesktopUberAsset&guVxxPUN HTTP/1.1Host: images-na.ssl-images-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.amazon.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/I/71EVTIdOTuL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/11EIQ5IGqaL._RC%7C01e5ncglxyL.css,01lF2n-pPaL.css,519YvOBDG8L.css,318PabRHnEL.css,01fQPWUjn0L.css,11GEPqXartL.css,01qPl4hxayL.css,01pOTCa2wPL.css,413Vvv3GONL.css,11TIuySqr6L.css,01Rw4F+QU6L.css,11oq2t-LP6L.css,01J3raiFJrL.css,01IdKcBuAdL.css,01dRHIoUjnL.css,216JhEla-AL.css,01W0RNXC6mL.css,51eWt662OXL.css,01XPHJk60-L.css,11wvSzGn6tL.css,01ANX9Vx1mL.css,01cvE3JoRWL.css,21QZLEfhJ9L.css,11G8RVHqS+L.css,21RWaJb6t+L.css,11rcnzaRjSL.css,216LjtW6ADL.css,01CFUgsA-YL.css,31cRD+3IJtL.css,116t+WD27UL.css,11yEzLYDg2L.css,113QjYEJj-L.css,11BdrZWOJpL.css,01-FQc5gU7L.css,01X+Gu6WK9L.css,21ZipDicWQL.css,116PE3n1raL.css,01LzHhtXxxL.css,21djYMkdT6L.css,11Y4L5mw5IL.css,11hvENnYNUL.css,11jIWEQw57L.css,01890+Vwk8L.css,01bDiPuBD6L.css,01cbS3UK11L.css,21F85am0yFL.css,016mfgi+D2L.css,01WslS8q5ML.css,113sefbl5fL.css,016Sx2kF1+L.css_.css?AUIClients/AmazonUI&vET8l+2h HTTP/1.1Host: images-na.ssl-images-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71JHU57JRuL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/11XMgK3X1EL._RC%7C31PLWBroQRL.js,31Y5AkqmNvL.js,01WtpFkF58L.js,313k3X0MlqL.js,41STYmgYJcL.js,41eDmkHUGAL.js,01r1r3sVlxL.js,21k0EzbSxUL.js,019dBqWurRL.js,11begzhl8OL.js,011VrMJVPzL.js,01XQQDMWkKL.js,012z3lMdhOL.js,11Exu1nsH7L.js,01b82LFIRTL.js,11UyW+59ZyL.js,015CwW0puPL.js,21UoUtkStoL.js,0164lSJukTL.js,219jZMsEOWL.js,31ydWb2R4oL.js,01FA0ZefFJL.js,41sLQbGE0jL.js_.js?AUIClients/SearchAssets&YLE0U/+D HTTP/1.1Host: images-na.ssl-images-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71zbsUXaR5L._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/61-8yQx4+xL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71IYzVYpsGL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71ccDxTRtzL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/714MMaFIpVL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71EszgPo1TL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/81gtUiCXv5L._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/61qWDqN7W0L._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71Vr3kC5pBL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/I/61PQY25+gxL.js?xcp HTTP/1.1Host: images-na.ssl-images-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71Qh6EgiGJL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/I/714n187WXAL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/819ZjzPD3EL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/81mzTGKPAoL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/11oNqlOaNXL._RC%7C61xJcNKKLXL.js,11Y+5x+kkTL.js,51cR93oXsVL.js,11yKORv-GTL.js,11GgN1+C7hL.js,01+z+uIeJ-L.js,01VRMV3FBdL.js,21u+kGQyRqL.js,01meRT+S4PL.js,11aD5q6kNBL.js,11rRjDLdAVL.js,51t8Z4zPMfL.js,11nAhXzgUmL.js,119kvzYmMJL.js,11joUTnxHvL.js,11F8myQivDL.js,21eKR4hvwNL.js,01Q4S7ptbiL.js,5118qJbclGL.js,01JYHc2oIlL.js,31nfKXylf6L.js,01ktRCtOqKL.js,31RasBDgYVL.js,11bEz2VIYrL.js,31o2NGTXThL.js,01rpauTep4L.js,31IW8GrKLzL.js,01tvglXfQOL.js,11RxSrTRyHL.js,012ATIEpZ2L.js_.js?AUIClients/AmazonUI HTTP/1.1Host: images-na.ssl-images-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.amazon.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71tL5zXpzIL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71go+3-hUrL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71rsi4rgd1L._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71dblGDOzSL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/81JcE4L82NL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/I/71zbsUXaR5L._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/51GRfnCRJBL._RC%7C31CuRA-rQfL.js,51YRyCQgcDL.js,01KTtrmeR5L.js,21RoFlDNKHL.js,41fFmJrK7zL.js,01N0G7oHRlL.js,31-hnA-p85L.js,118u4l1lw0L.js,01KVpvQDfZL.js,21XkditqCiL.js,0175nbnAD4L.js,41n8B+HM0VL.js,013F47KhYmL.js,21-qzi7P9VL.js,31qUHWTq-2L.js,21JVz3Jj7-L.js,01gkl49RM3L.js,31quKQWA5aL.js,01qtTpqN9TL.js,010atgkqRqL.js,11HK5yarA+L.js,010dZST96oL.js,01UY0Z7k19L.js,11c8N2Qbr7L.js,215jXa7j8AL.js,51toJYvD5nL.js,31jzxcc0Q6L.js,01ly-sHeg8L.js,018v226z-QL.js,21z34K3nOVL.js,31M8YAO7NgL.js,01993rJ5roL.js,01SiFpsoIzL.js,011gqdvx+zL.js,01sH1H-anWL.js,01gkFPx1YZL.js,01dfGSDqqiL.js,01v8HNSpzuL.js,01GsEhoWBNL.js,01n9shjbBjL.js,012USBOk43L.js,21ZDIxQB3qL.js,61jBrtcEeiL.js_.js?AUIClients/SearchPartnerAssets&73Qy/lVb HTTP/1.1Host: images-na.ssl-images-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/61-8yQx4+xL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71ccDxTRtzL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/714MMaFIpVL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71Vr3kC5pBL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/I/71IYzVYpsGL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/81-c+8W5VSL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71t2OGXp3pL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71LxS3VKnTL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/411x8BHUrFL._RC%7C71YNyiX9pNL.js,01QvReFeJyL.js,01phmzCOwJL.js,01eOvPdxG7L.js,71Q5u7109ML.js,41jBieyCvYL.js,01wXnKULArL.js,01+pnQJuQ0L.js,21S7jO9Y-sL.js,41rlAdcznNL.js,51Wf+1TXw2L.js,31J-NEfNY0L.js,11lEMI5MhIL.js,31+UifI0MIL.js,01VYGE8lGhL.js_.js?AUIClients/NavDesktopUberAsset&guVxxPUN HTTP/1.1Host: images-na.ssl-images-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71y2IJlwKtL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71d1-v3l78L._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/81ZybcAzHyL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/11oNqlOaNXL._RC%7C61xJcNKKLXL.js,11Y+5x+kkTL.js,51cR93oXsVL.js,11yKORv-GTL.js,11GgN1+C7hL.js,01+z+uIeJ-L.js,01VRMV3FBdL.js,21u+kGQyRqL.js,01meRT+S4PL.js,11aD5q6kNBL.js,11rRjDLdAVL.js,51t8Z4zPMfL.js,11nAhXzgUmL.js,119kvzYmMJL.js,11joUTnxHvL.js,11F8myQivDL.js,21eKR4hvwNL.js,01Q4S7ptbiL.js,5118qJbclGL.js,01JYHc2oIlL.js,31nfKXylf6L.js,01ktRCtOqKL.js,31RasBDgYVL.js,11bEz2VIYrL.js,31o2NGTXThL.js,01rpauTep4L.js,31IW8GrKLzL.js,01tvglXfQOL.js,11RxSrTRyHL.js,012ATIEpZ2L.js_.js?AUIClients/AmazonUI HTTP/1.1Host: images-na.ssl-images-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/S/sash/KFPk-9IF4FqAqY-.woff2 HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.amazon.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://images-na.ssl-images-amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/S/sash/pDxWAF1pBB0dzGB.woff2 HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.amazon.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://images-na.ssl-images-amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/S/sash/Dv1WQ5DdeMS5qP7.woff2 HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.amazon.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://images-na.ssl-images-amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/S/sash/VjTR4RqBzY0mUYx.woff2 HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.amazon.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://images-na.ssl-images-amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/S/sash/WOnTLzkiaEccV7F.woff2 HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.amazon.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://images-na.ssl-images-amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/S/sash/2SazJx$EeTHfhMN.woff2 HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.amazon.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://images-na.ssl-images-amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/81mzTGKPAoL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71rsi4rgd1L._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71dblGDOzSL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/I/71tL5zXpzIL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71go+3-hUrL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/81br4xJUTNL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/81JcE4L82NL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71XanPqNduL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/511gJMeLRiL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71BV4t0JvPL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/51gsV34BhEL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/81CxfvHxNWL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71t2OGXp3pL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/81-c+8W5VSL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/S/sash/ozb5-CLHQWI6Soc.woff2 HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.amazon.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://images-na.ssl-images-amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71LxS3VKnTL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/S/sash/KwhNPG8Jz-Vz2X7.woff2 HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.amazon.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://images-na.ssl-images-amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/I/51QwE9fnk4L._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/61TLh0HyERL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/8138bYOBVdL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/61YexlHDlfL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/I/71y2IJlwKtL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/81ZybcAzHyL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71d1-v3l78L._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71foO-CpROL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71BfHrjAeqL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/511gJMeLRiL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71BV4t0JvPL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/81br4xJUTNL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/714Yu+YW29L._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/I/71vI67XaZDL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/61vCWYbKKXL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71eIkoJufjL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/I/71XanPqNduL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/51gsV34BhEL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/81CxfvHxNWL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/61TLh0HyERL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71iBD3KxLjL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/51QwE9fnk4L._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/61-8yQx4+xL._AC_UL640_QL65_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/8138bYOBVdL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/G/01/personalization/ybh/loading-4x-gray._CB485916920_.gif HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/I/61YexlHDlfL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/S/sash/ZpbG74laklgnz-i.png HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://m.media-amazon.com/images/I/11EIQ5IGqaL._RC%7C01e5ncglxyL.css,01lF2n-pPaL.css,51xslYVQAqL.css,318PabRHnEL.css,01fQPWUjn0L.css,11GEPqXartL.css,01qPl4hxayL.css,01ti0q+221L.css,413Vvv3GONL.css,11TIuySqr6L.css,01Rw4F+QU6L.css,115C34M4eKL.css,01DwiCRvNnL.css,01IdKcBuAdL.css,01dRHIoUjnL.css,216JhEla-AL.css,01lFHae5dSL.css,51pXp+P9GuL.css,01XPHJk60-L.css,11yW2wLgbZL.css,01QhqFH8I8L.css,01i8xapXUHL.css,21guB8pakaL.css,11G8RVHqS+L.css,21yWHgAzkkL.css,11DG4yr02+L.css,216LjtW6ADL.css,01CFUgsA-YL.css,31pGBgRFRdL.css,116t+WD27UL.css,11RvIU5HAoL.css,11lDoAr2PUL.css,11SbsdsyyJL.css,01Jlt0oEURL.css,01X+Gu6WK9L.css,21wzK4uL-JL.css,11Xwl-ZIbpL.css,01LzHhtXxxL.css,21hyIh8IHUL.css,110mkKR-MDL.css,11hvENnYNUL.css,11KWFgYmPtL.css,01890+Vwk8L.css,013tIj5f8aL.css,01cbS3UK11L.css,21F85am0yFL.css,016mfgi+D2L.css,01WslS8q5ML.css,113sefbl5fL.css,016Sx2kF1+L.css_.css?AUIClients/AmazonUI&vET8l+2hAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71foO-CpROL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71BfHrjAeqL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/01mbLYIbb6L._RC%7C415toge-ueL.js,01N-o5jCVWL.js,01F-TY9qDSL.js,01ZGDvAkjhL.js,11nc0DGmmiL.js,11YjwIBhUdL.js,21KEJRTMewL.js,019k1pYapEL.js,61bDcPQyFIL.js,11lXpvEc6zL.js,01SSs1udVFL.js,21V7U-031dL.js,11-ul7kZXDL.js,21mrN3iFaIL.js,313cqxMIEWL.js,11ASqgD+bXL.js,21Bdz26YXsL.js,310qnMx0yEL.js,01GT6fWw-jL.js,01QAD-zPWTL.js,21YrDdMzY2L.js,01SAg9vFH-L.js,01iboNcfS7L.js,01sN19mMRBL.js,41K0h6nhmAL.js,31dIl7-WDvL.js,01XEI6RsRiL.js,11AB+FWvxEL.js,01TGSsSgNIL.js,010BPdY0+dL.js,21XYmj0EpSL.js,21b88sJRXRL.js,41WzYnzOwRL.js,21UTchkGPvL.js,718iq7w16kL.js,016hXeI-9GL.js,31GHnH2dCML.js,31cmdux7V1L.js_.js?AUIClients/ProductUIServiceAssets-v1ozh2963o9b4124htsthvwpiwi HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.amazon.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/G/01/ad-feedback/new_info_icon_sprite_1x.png HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/61xJcNKKLXL.js?AUIClients/AmazonUIjQuery HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.amazon.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/11oNqlOaNXL._RC%7C11Y+5x+kkTL.js,51cR93oXsVL.js,11yKORv-GTL.js,11GgN1+C7hL.js,01+z+uIeJ-L.js,01VRMV3FBdL.js,21u+kGQyRqL.js,01meRT+S4PL.js,11aD5q6kNBL.js,11rRjDLdAVL.js,51t8Z4zPMfL.js,11nAhXzgUmL.js,119kvzYmMJL.js,11joUTnxHvL.js,11F8myQivDL.js,21eKR4hvwNL.js,01Q4S7ptbiL.js,5118qJbclGL.js,01JYHc2oIlL.js,31nfKXylf6L.js,01ktRCtOqKL.js,31RasBDgYVL.js,11bEz2VIYrL.js,31o2NGTXThL.js,01rpauTep4L.js,31IW8GrKLzL.js,01tvglXfQOL.js,11RxSrTRyHL.js,01eoUDsroDL.js_.js?AUIClients/AmazonUI HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.amazon.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/714Yu+YW29L._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/51BqsgbDI7L.js?AUIClients/CardJsRuntimeBuzzCopyBuild HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.amazon.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/I/71vI67XaZDL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/61vCWYbKKXL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71eIkoJufjL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/71iBD3KxLjL._AC_UL320_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/G/01/personalization/ybh/loading-4x-gray._CB485916920_.gif HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/61-8yQx4+xL._AC_UL640_QL65_.jpg HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/G/01/javascripts/lib/popover/images/snake._CB485935611_.gif HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/31YT4iYOlWL.js?AUIClients/AllOffersDisplayIngressAssets&P3lk6dwL HTTP/1.1Host: images-na.ssl-images-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.amazon.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/remote-weblab-triggers/1/OE/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$s:wl-client-id%3DCSMTriger%2Cwl%3DUEDATA_AA_SERVERSIDE_ASSIGNMENT_CLIENTSIDE_TRIGGER_190249%2FT1:1234 HTTP/1.1Host: fls-na.amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/S/al-na-9d5791cf-3faf/e038edb4-31bc-4d39-ab1a-a4a7bcee0b7a.mp4/r/THUMBNAIL_360P_FRAME_3_CAPTURE_2.JPG HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/G/01/ad-feedback/new_info_icon_sprite_1x.png HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fs-on-search-route%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26ctb%3D1%26m%3D1%26sc0%3Ds-on-search-route%26pc0%3D15202%26s-on-search-route0%3D15202%26t0%3D1729723014701%26rt%3Dcf%3A22-0-6-14-5-0-1_af%3A24-0-6-16-5-0-1_%26csmtags%3Daui%7Caui%3Aaui_build_date%3A3.24.8-2024-10-17%7CmutObsYes%7Cewc%3Aunpersist%7Cewc%3Aunpersist%3Aemptycart%7Cewc%3Abview%7Cewc%7Cewc%3Aunrec%7Cewc%3Acartsize%3A0%7Cewc%3Aaui%7Cnavbar%7Caui%3Asw%3Apage_proxy%3Ano_ctrl%7CmutObsActive%7CFWCIMEnabled%7Cfls-na-amazon-com%7CperfYes%7Cfy_cdn_fr%7Cfy_cdn_mp%7Cadblk_no%7Csupports%3Amutationobserver%3Atrue%7Csupports%3Agetelementsbyclassname%3Atrue%7Csupports%3Amap%3Atrue%7Ccsm-feature-touch-enabled%3Afalse%7Caui%3Acss%3Anetwork%7Caui%3Ajs%3Anetwork%26viz%3Dvisible%3A3%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:15203 HTTP/1.1Host: fls-na.amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fs-on-search-route%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26ctb%3D1%26sc0%3Daui%3Asw%3Appft%3Acallback_ricb%26bb0%3D2192%26pc0%3D2368%26ld0%3D2368%26t0%3Dundefined%26sc1%3Dportal-bb%26pc1%3D25%26ld1%3D26%26t1%3Dundefined%26sc2%3DhveNavSwmCountdownWidget%26bb2%3D2301%26pc2%3D2320%26ld2%3D2320%26t2%3Dundefined%26sc3%3DcsmCELLSframework%26bb3%3D4958%26pc3%3D4958%26ld3%3D4958%26t3%3Dundefined%26sc4%3DcsmCELLSpdm%26bb4%3D4958%26pc4%3D4976%26ld4%3D4976%26t4%3Dundefined%26sc5%3DcsmCELLSvpm%26bb5%3D4976%26pc5%3D4976%26ld5%3D4976%26t5%3Dundefined%26sc6%3DcsmCELLSfem%26bb6%3D4976%26pc6%3D4976%26ld6%3D4976%26t6%3Dundefined%26sc7%3Due_sushi_v1%26bb7%3D4976%26pc7%3D4977%26ld7%3D4977%26t7%3Dundefined%26sc8%3DamznSafeFrameHost%26bb8%3D6180%26pc8%3D6182%26ld8%3D6182%26t8%3Dundefined%26sc9%3DSocialShareJS%26bb9%3D14897%26be9%3D15085%26pc9%3D15085%26ld9%3D15085%26t9%3Dundefined%26sc10%3Ds-startup-component-scan%26bb10%3D15185%26cf10%3D15185%26pc10%3D15193%26ld10%3D15193%26t10%3Dundefined%26sc11%3Ds-swac%26bb11%3D15196%26cf11%3D15197%26pc11%3D15197%26ld11%3D15197%26t11%3Dundefined:15203 HTTP/1.1Host: fls-na.amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fld%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26ctb%3D1%26sc0%3Dsb-video-product-collection-desktop_loom-desktop-top-slot_1%26bb0%3D2330%26be0%3D2352%26pc0%3D15979%26ld0%3D15979%26t0%3D1729723015478%26csmtags%3DhasInlineWidgets%3Atrue%7Csearch_results%3Ahidden%3Afalse%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:15979 HTTP/1.1Host: fls-na.amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fld%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26ctb%3D1%26sc0%3Dmulti-brand-creative-desktop_loom-desktop-brand-footer-slot_87%26bb0%3D4765%26be0%3D4770%26pc0%3D15981%26ld0%3D15981%26t0%3D1729723015480%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:15981 HTTP/1.1Host: fls-na.amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210
Source: global traffic	HTTP traffic detected: GET /api/2017/suggestions?limit=11&prefix=bloat%20relief&suggestion-type=WIDGET&suggestion-type=KEYWORD&page-type=Search&alias=aps&site-variant=desktop&version=3&event=onkeypress&wc=&lop=en_US&last-prefix=%00&avg-ks-time=0&fb=1&predicted_text_accepted=&session-id=146-5727277-4453238&request-id=YT8YJ4B94N98J9DNZQCH&mid=ATVPDKIKX0DER&plain-mid=1&client-info=search-ui HTTP/1.1Host: completion.amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.amazon.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210
Source: global traffic	HTTP traffic detected: GET /images/S/sash/ZpbG74laklgnz-i.png HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/61xJcNKKLXL.js?AUIClients/AmazonUIjQuery HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/51BqsgbDI7L.js?AUIClients/CardJsRuntimeBuzzCopyBuild HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/11oNqlOaNXL._RC%7C11Y+5x+kkTL.js,51cR93oXsVL.js,11yKORv-GTL.js,11GgN1+C7hL.js,01+z+uIeJ-L.js,01VRMV3FBdL.js,21u+kGQyRqL.js,01meRT+S4PL.js,11aD5q6kNBL.js,11rRjDLdAVL.js,51t8Z4zPMfL.js,11nAhXzgUmL.js,119kvzYmMJL.js,11joUTnxHvL.js,11F8myQivDL.js,21eKR4hvwNL.js,01Q4S7ptbiL.js,5118qJbclGL.js,01JYHc2oIlL.js,31nfKXylf6L.js,01ktRCtOqKL.js,31RasBDgYVL.js,11bEz2VIYrL.js,31o2NGTXThL.js,01rpauTep4L.js,31IW8GrKLzL.js,01tvglXfQOL.js,11RxSrTRyHL.js,01eoUDsroDL.js_.js?AUIClients/AmazonUI HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/01mbLYIbb6L._RC%7C415toge-ueL.js,01N-o5jCVWL.js,01F-TY9qDSL.js,01ZGDvAkjhL.js,11nc0DGmmiL.js,11YjwIBhUdL.js,21KEJRTMewL.js,019k1pYapEL.js,61bDcPQyFIL.js,11lXpvEc6zL.js,01SSs1udVFL.js,21V7U-031dL.js,11-ul7kZXDL.js,21mrN3iFaIL.js,313cqxMIEWL.js,11ASqgD+bXL.js,21Bdz26YXsL.js,310qnMx0yEL.js,01GT6fWw-jL.js,01QAD-zPWTL.js,21YrDdMzY2L.js,01SAg9vFH-L.js,01iboNcfS7L.js,01sN19mMRBL.js,41K0h6nhmAL.js,31dIl7-WDvL.js,01XEI6RsRiL.js,11AB+FWvxEL.js,01TGSsSgNIL.js,010BPdY0+dL.js,21XYmj0EpSL.js,21b88sJRXRL.js,41WzYnzOwRL.js,21UTchkGPvL.js,718iq7w16kL.js,016hXeI-9GL.js,31GHnH2dCML.js,31cmdux7V1L.js_.js?AUIClients/ProductUIServiceAssets-v1ozh2963o9b4124htsthvwpiwi HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /transcode/storyTeller/A1S3VA65QL41QA/17dcbf81-80a9-4396-9cf4-1b1c0c946446/9019051b-8020-424a-8315-816decaeb23b/1697208577822.0000000.jpg HTTP/1.1Host: d1f0esyb34c1g2.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rd/uedata?s-on-search-route&v=0.299560.0&id=YT8YJ4B94N98J9DNZQCH&ctb=1&m=1&sc0=s-on-search-route&pc0=15202&s-on-search-route0=15202&t0=1729723014701&rt=cf:22-0-6-14-5-0-1_af:24-0-6-16-5-0-1_&csmtags=aui\|aui:aui_build_date:3.24.8-2024-10-17\|mutObsYes\|ewc:unpersist\|ewc:unpersist:emptycart\|ewc:bview\|ewc\|ewc:unrec\|ewc:cartsize:0\|ewc:aui\|navbar\|aui:sw:page_proxy:no_ctrl\|mutObsActive\|FWCIMEnabled\|fls-na-amazon-com\|perfYes\|fy_cdn_fr\|fy_cdn_mp\|adblk_no\|supports:mutationobserver:true\|supports:getelementsbyclassname:true\|supports:map:true\|csm-feature-touch-enabled:false\|aui:css:network\|aui:js:network&viz=visible:3&pty=Search&spty=List&pti=undefined&tid=YT8YJ4B94N98J9DNZQCH&aftb=1&lob=1 HTTP/1.1Host: www.amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"device-memory: 8rtt: 150sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-viewport-width: 1280sec-ch-device-memory: 8viewport-width: 1280sec-ch-ua-platform-version: "10.0.0"dpr: 1downlink: 7.9sec-ch-dpr: 1ect: 4gsec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/s?k=bloat+relief&language=en_US&adgrpid=1231453333089814&hvadid=76965999836122&hvbmt=bp&hvdev=c&hvlocphy=65300&hvnetw=s&hvqmt=p&hvtargid=kwd-76966067111871%3Aloc-190&hydadcr=9392_13640345&msclkid=5151cc87ffec1574cf49ab9e858f8c61&tag=txtstdbgdt-20&ref=pd_sl_9k7yfey2e4_pAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; csm-hit=tb:YT8YJ4B94N98J9DNZQCH+s-YT8YJ4B94N98J9DNZQCH\|1729723010042&t:1729723010043&adb:adblk_no; ubid-main=133-8772259-8314210
Source: global traffic	HTTP traffic detected: GET /transcode/storyTeller/ABFMOV4MO9GW4/0caeb388-53d0-4863-9a19-241f502f2c06-SBV_291884-T1/507239c7-4f15-4689-a8d1-f57fb521c41d/1601577022423sbv.mp4 HTTP/1.1Host: d1f0esyb34c1g2.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://www.amazon.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /images/I/31YT4iYOlWL.js?AUIClients/AllOffersDisplayIngressAssets&P3lk6dwL HTTP/1.1Host: images-na.ssl-images-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /cross_border_interstitial_sp/render HTTP/1.1Host: www.amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; csm-hit=tb:YT8YJ4B94N98J9DNZQCH+s-YT8YJ4B94N98J9DNZQCH\|1729723010042&t:1729723010043&adb:adblk_no; ubid-main=133-8772259-8314210
Source: global traffic	HTTP traffic detected: GET /images/G/01/javascripts/lib/popover/images/snake._CB485935611_.gif HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fld%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26ctb%3D1%26sc0%3Daod-ingress-assets-load-time%26bb0%3D16556%26pc0%3D16556%26ld0%3D16556%26t0%3D1729723016055%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:16556 HTTP/1.1Host: fls-na.amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210
Source: global traffic	HTTP traffic detected: GET /images/S/sash/XbXEZE76MQS35vU.png HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://images-na.ssl-images-amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/S/al-na-9d5791cf-3faf/e038edb4-31bc-4d39-ab1a-a4a7bcee0b7a.mp4/productVideoOptimized.mp4 HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://www.amazon.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /images/S/al-na-9d5791cf-3faf/e038edb4-31bc-4d39-ab1a-a4a7bcee0b7a.mp4/r/THUMBNAIL_360P_FRAME_3_CAPTURE_2.JPG HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fld%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26ctb%3D1%26sc0%3DTimeToFirstSuggestion%3Adesktop%26bb0%3D15379%26be0%3D17749%26pc0%3D17749%26ld0%3D17749%26t0%3D1729723017248%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:17749 HTTP/1.1Host: fls-na.amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210; session-token=Mg65LOaM2YcuE+FECmkvSLykeekU6vh4a4DsPx/EPMxOraF+H5C1lK2ckKr3lAlzCkazRrJ7lo35nuW5vzEp77CRBPtm1BNUPaha3jLPe1y61N0bOEN8/JY2hXrgJxfdg/J1C+EyLFwxQaiXIGgRNeuP4/nBxIUS2srMdLK3qhR38U6zrNMoCf2LKj74/c5owafjAL+v6RX2//KocONDNZt+bFrzvyCb/nL0UJOLKbyGUmuWR429Kx+u1yRBstHIP9Ltc46lyXw7EJ2RR+hAKaT5JYrF5gkTkeScvq9aq2CV/9IlW4tpIXAculs2igZZmcRnSOoe1v3l3Iz5dglMRNTq02GGladK
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fs-on-search-route%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26ctb%3D1%26m%3D1%26sc0%3Ds-on-search-route%26pc0%3D15202%26s-on-search-route0%3D15202%26t0%3D1729723014701%26rt%3Dcf%3A22-0-6-14-5-0-1_af%3A24-0-6-16-5-0-1_%26csmtags%3Daui%7Caui%3Aaui_build_date%3A3.24.8-2024-10-17%7CmutObsYes%7Cewc%3Aunpersist%7Cewc%3Aunpersist%3Aemptycart%7Cewc%3Abview%7Cewc%7Cewc%3Aunrec%7Cewc%3Acartsize%3A0%7Cewc%3Aaui%7Cnavbar%7Caui%3Asw%3Apage_proxy%3Ano_ctrl%7CmutObsActive%7CFWCIMEnabled%7Cfls-na-amazon-com%7CperfYes%7Cfy_cdn_fr%7Cfy_cdn_mp%7Cadblk_no%7Csupports%3Amutationobserver%3Atrue%7Csupports%3Agetelementsbyclassname%3Atrue%7Csupports%3Amap%3Atrue%7Ccsm-feature-touch-enabled%3Afalse%7Caui%3Acss%3Anetwork%7Caui%3Ajs%3Anetwork%26viz%3Dvisible%3A3%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:15203 HTTP/1.1Host: fls-na.amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210; session-token=Mg65LOaM2YcuE+FECmkvSLykeekU6vh4a4DsPx/EPMxOraF+H5C1lK2ckKr3lAlzCkazRrJ7lo35nuW5vzEp77CRBPtm1BNUPaha3jLPe1y61N0bOEN8/JY2hXrgJxfdg/J1C+EyLFwxQaiXIGgRNeuP4/nBxIUS2srMdLK3qhR38U6zrNMoCf2LKj74/c5owafjAL+v6RX2//KocONDNZt+bFrzvyCb/nL0UJOLKbyGUmuWR429Kx+u1yRBstHIP9Ltc46lyXw7EJ2RR+hAKaT5JYrF5gkTkeScvq9aq2CV/9IlW4tpIXAculs2igZZmcRnSOoe1v3l3Iz5dglMRNTq02GGladK
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fld%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26ctb%3D1%26sc0%3Dsb-video-product-collection-desktop_loom-desktop-top-slot_1%26bb0%3D2330%26be0%3D2352%26pc0%3D15979%26ld0%3D15979%26t0%3D1729723015478%26csmtags%3DhasInlineWidgets%3Atrue%7Csearch_results%3Ahidden%3Afalse%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:15979 HTTP/1.1Host: fls-na.amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210; session-token=Mg65LOaM2YcuE+FECmkvSLykeekU6vh4a4DsPx/EPMxOraF+H5C1lK2ckKr3lAlzCkazRrJ7lo35nuW5vzEp77CRBPtm1BNUPaha3jLPe1y61N0bOEN8/JY2hXrgJxfdg/J1C+EyLFwxQaiXIGgRNeuP4/nBxIUS2srMdLK3qhR38U6zrNMoCf2LKj74/c5owafjAL+v6RX2//KocONDNZt+bFrzvyCb/nL0UJOLKbyGUmuWR429Kx+u1yRBstHIP9Ltc46lyXw7EJ2RR+hAKaT5JYrF5gkTkeScvq9aq2CV/9IlW4tpIXAculs2igZZmcRnSOoe1v3l3Iz5dglMRNTq02GGladK
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fs-on-search-route%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26ctb%3D1%26sc0%3Daui%3Asw%3Appft%3Acallback_ricb%26bb0%3D2192%26pc0%3D2368%26ld0%3D2368%26t0%3Dundefined%26sc1%3Dportal-bb%26pc1%3D25%26ld1%3D26%26t1%3Dundefined%26sc2%3DhveNavSwmCountdownWidget%26bb2%3D2301%26pc2%3D2320%26ld2%3D2320%26t2%3Dundefined%26sc3%3DcsmCELLSframework%26bb3%3D4958%26pc3%3D4958%26ld3%3D4958%26t3%3Dundefined%26sc4%3DcsmCELLSpdm%26bb4%3D4958%26pc4%3D4976%26ld4%3D4976%26t4%3Dundefined%26sc5%3DcsmCELLSvpm%26bb5%3D4976%26pc5%3D4976%26ld5%3D4976%26t5%3Dundefined%26sc6%3DcsmCELLSfem%26bb6%3D4976%26pc6%3D4976%26ld6%3D4976%26t6%3Dundefined%26sc7%3Due_sushi_v1%26bb7%3D4976%26pc7%3D4977%26ld7%3D4977%26t7%3Dundefined%26sc8%3DamznSafeFrameHost%26bb8%3D6180%26pc8%3D6182%26ld8%3D6182%26t8%3Dundefined%26sc9%3DSocialShareJS%26bb9%3D14897%26be9%3D15085%26pc9%3D15085%26ld9%3D15085%26t9%3Dundefined%26sc10%3Ds-startup-component-scan%26bb10%3D15185%26cf10%3D15185%26pc10%3D15193%26ld10%3D15193%26t10%3Dundefined%26sc11%3Ds-swac%26bb11%3D15196%26cf11%3D15197%26pc11%3D15197%26ld11%3D15197%26t11%3Dundefined:15203 HTTP/1.1Host: fls-na.amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210; session-token=Mg65LOaM2YcuE+FECmkvSLykeekU6vh4a4DsPx/EPMxOraF+H5C1lK2ckKr3lAlzCkazRrJ7lo35nuW5vzEp77CRBPtm1BNUPaha3jLPe1y61N0bOEN8/JY2hXrgJxfdg/J1C+EyLFwxQaiXIGgRNeuP4/nBxIUS2srMdLK3qhR38U6zrNMoCf2LKj74/c5owafjAL+v6RX2//KocONDNZt+bFrzvyCb/nL0UJOLKbyGUmuWR429Kx+u1yRBstHIP9Ltc46lyXw7EJ2RR+hAKaT5JYrF5gkTkeScvq9aq2CV/9IlW4tpIXAculs2igZZmcRnSOoe1v3l3Iz5dglMRNTq02GGladK
Source: global traffic	HTTP traffic detected: GET /transcode/storyTeller/A1S3VA65QL41QA/17dcbf81-80a9-4396-9cf4-1b1c0c946446/9019051b-8020-424a-8315-816decaeb23b/1697208577822sbv.mp4 HTTP/1.1Host: d1f0esyb34c1g2.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://www.amazon.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fld%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26ctb%3D1%26sc0%3Dmulti-brand-creative-desktop_loom-desktop-brand-footer-slot_87%26bb0%3D4765%26be0%3D4770%26pc0%3D15981%26ld0%3D15981%26t0%3D1729723015480%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:15981 HTTP/1.1Host: fls-na.amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210; session-token=Mg65LOaM2YcuE+FECmkvSLykeekU6vh4a4DsPx/EPMxOraF+H5C1lK2ckKr3lAlzCkazRrJ7lo35nuW5vzEp77CRBPtm1BNUPaha3jLPe1y61N0bOEN8/JY2hXrgJxfdg/J1C+EyLFwxQaiXIGgRNeuP4/nBxIUS2srMdLK3qhR38U6zrNMoCf2LKj74/c5owafjAL+v6RX2//KocONDNZt+bFrzvyCb/nL0UJOLKbyGUmuWR429Kx+u1yRBstHIP9Ltc46lyXw7EJ2RR+hAKaT5JYrF5gkTkeScvq9aq2CV/9IlW4tpIXAculs2igZZmcRnSOoe1v3l3Iz5dglMRNTq02GGladK
Source: global traffic	HTTP traffic detected: GET /api/2017/suggestions?limit=11&prefix=bloat%20relief&suggestion-type=WIDGET&suggestion-type=KEYWORD&page-type=Search&alias=aps&site-variant=desktop&version=3&event=onkeypress&wc=&lop=en_US&last-prefix=%00&avg-ks-time=0&fb=1&predicted_text_accepted=&session-id=146-5727277-4453238&request-id=YT8YJ4B94N98J9DNZQCH&mid=ATVPDKIKX0DER&plain-mid=1&client-info=search-ui HTTP/1.1Host: completion.amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210; session-token=Mg65LOaM2YcuE+FECmkvSLykeekU6vh4a4DsPx/EPMxOraF+H5C1lK2ckKr3lAlzCkazRrJ7lo35nuW5vzEp77CRBPtm1BNUPaha3jLPe1y61N0bOEN8/JY2hXrgJxfdg/J1C+EyLFwxQaiXIGgRNeuP4/nBxIUS2srMdLK3qhR38U6zrNMoCf2LKj74/c5owafjAL+v6RX2//KocONDNZt+bFrzvyCb/nL0UJOLKbyGUmuWR429Kx+u1yRBstHIP9Ltc46lyXw7EJ2RR+hAKaT5JYrF5gkTkeScvq9aq2CV/9IlW4tpIXAculs2igZZmcRnSOoe1v3l3Iz5dglMRNTq02GGladK
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26m%3D1%26sc%3Dcsa%3AbrowserQuiteFn%26pc%3D19097%26at%3D19097%26t%3D1729723018596%26csmtags%3DbrowserQuiteFn%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:19098 HTTP/1.1Host: fls-na.amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210; session-token=RwxXLe/OCMr3sXpne7FMe3gHudBNzZS8qWWr5IZMdJA6pOR0LWWdzgjvg+qnKQPa+2yc4L1t9PgzMIgeBQt/11rqcF6hSWH1WGI392TRAn9d0O8/Xwq2yqE0DqjaXrxNj4bvW/NxZQ0j5JfmiUYJK1o2uRxeSeO8pmXE5Bf1iVSNfc1HV4/SxkE/u4+jGI7JyDZQdjEc78QNGY00Q+qScr2sDauiG7Z0y49qLuAY5aRVzluwCk50MKKlFStXTv21l4Y4NceDl+ltQoyV23Dy4K2WZ7t8J9TXqcNGISm9CS6mNn0zE+Q/c/eDCarfpPquUMjyxR4udFCdtWcfInOFnP2km2RBFLO9
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/I/31bJewCvY-L.js HTTP/1.1Host: images-na.ssl-images-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.amazon.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fld%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26sw%3D1280%26sh%3D1024%26vw%3D1263%26vh%3D907%26m%3D1%26sc%3DYT8YJ4B94N98J9DNZQCH%26ue%3D3%26bb%3D2213%26ns%3D2254%26ne%3D2927%26be%3D4954%26fp%3D2307%26fcp%3D2307%26cf%3D5080%26af%3D5129%26fn%3D5129%26pc%3D19088%26tc%3D-5574%26na_%3D-5574%26ul_%3D-1729722999499%26_ul%3D-1729722999499%26rd_%3D-1729722999499%26_rd%3D-1729722999499%26fe_%3D-1348%26lk_%3D-1345%26_lk%3D-1336%26co_%3D-1336%26_co%3D-476%26sc_%3D-1334%26rq_%3D-476%26rs_%3D-46%26_rs%3D2152%26dl_%3D-25%26di_%3D5043%26de_%3D5043%26_de%3D5044%26_dc%3D19087%26ld_%3D19087%26_ld%3D-1729722999499%26ntd%3D0%26ty%3D0%26rc%3D0%26hob%3D2%26hoe%3D4%26ld%3D19089%26t%3D1729723018588%26ctb%3D1%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26ui%3D2%26lob%3D1:19105 HTTP/1.1Host: fls-na.amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210; session-token=RwxXLe/OCMr3sXpne7FMe3gHudBNzZS8qWWr5IZMdJA6pOR0LWWdzgjvg+qnKQPa+2yc4L1t9PgzMIgeBQt/11rqcF6hSWH1WGI392TRAn9d0O8/Xwq2yqE0DqjaXrxNj4bvW/NxZQ0j5JfmiUYJK1o2uRxeSeO8pmXE5Bf1iVSNfc1HV4/SxkE/u4+jGI7JyDZQdjEc78QNGY00Q+qScr2sDauiG7Z0y49qLuAY5aRVzluwCk50MKKlFStXTv21l4Y4NceDl+ltQoyV23Dy4K2WZ7t8J9TXqcNGISm9CS6mNn0zE+Q/c/eDCarfpPquUMjyxR4udFCdtWcfInOFnP2km2RBFLO9
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26m%3D1%26sc%3Dcsa%3Alcp%26lcp%3D3950%26pc%3D19220%26at%3D19220%26t%3D1729723018719%26csmtags%3Daui%3Asw%3Abrowser%3Aregister%3Asupported%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:19221 HTTP/1.1Host: fls-na.amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210; session-token=RwxXLe/OCMr3sXpne7FMe3gHudBNzZS8qWWr5IZMdJA6pOR0LWWdzgjvg+qnKQPa+2yc4L1t9PgzMIgeBQt/11rqcF6hSWH1WGI392TRAn9d0O8/Xwq2yqE0DqjaXrxNj4bvW/NxZQ0j5JfmiUYJK1o2uRxeSeO8pmXE5Bf1iVSNfc1HV4/SxkE/u4+jGI7JyDZQdjEc78QNGY00Q+qScr2sDauiG7Z0y49qLuAY5aRVzluwCk50MKKlFStXTv21l4Y4NceDl+ltQoyV23Dy4K2WZ7t8J9TXqcNGISm9CS6mNn0zE+Q/c/eDCarfpPquUMjyxR4udFCdtWcfInOFnP2km2RBFLO9
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26m%3D1%26sc%3Dcsa%3AstartVL%26pc%3D19241%26at%3D19241%26t%3D1729723018740%26csmtags%3DstartVL%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:19241 HTTP/1.1Host: fls-na.amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210; session-token=RwxXLe/OCMr3sXpne7FMe3gHudBNzZS8qWWr5IZMdJA6pOR0LWWdzgjvg+qnKQPa+2yc4L1t9PgzMIgeBQt/11rqcF6hSWH1WGI392TRAn9d0O8/Xwq2yqE0DqjaXrxNj4bvW/NxZQ0j5JfmiUYJK1o2uRxeSeO8pmXE5Bf1iVSNfc1HV4/SxkE/u4+jGI7JyDZQdjEc78QNGY00Q+qScr2sDauiG7Z0y49qLuAY5aRVzluwCk50MKKlFStXTv21l4Y4NceDl+ltQoyV23Dy4K2WZ7t8J9TXqcNGISm9CS6mNn0zE+Q/c/eDCarfpPquUMjyxR4udFCdtWcfInOFnP2km2RBFLO9
Source: global traffic	HTTP traffic detected: GET /images/S/sash/XbXEZE76MQS35vU.png HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fld%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26ctb%3D1%26sc0%3Daod-ingress-assets-load-time%26bb0%3D16556%26pc0%3D16556%26ld0%3D16556%26t0%3D1729723016055%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:16556 HTTP/1.1Host: fls-na.amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210; session-token=RwxXLe/OCMr3sXpne7FMe3gHudBNzZS8qWWr5IZMdJA6pOR0LWWdzgjvg+qnKQPa+2yc4L1t9PgzMIgeBQt/11rqcF6hSWH1WGI392TRAn9d0O8/Xwq2yqE0DqjaXrxNj4bvW/NxZQ0j5JfmiUYJK1o2uRxeSeO8pmXE5Bf1iVSNfc1HV4/SxkE/u4+jGI7JyDZQdjEc78QNGY00Q+qScr2sDauiG7Z0y49qLuAY5aRVzluwCk50MKKlFStXTv21l4Y4NceDl+ltQoyV23Dy4K2WZ7t8J9TXqcNGISm9CS6mNn0zE+Q/c/eDCarfpPquUMjyxR4udFCdtWcfInOFnP2km2RBFLO9
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fld%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26ctb%3D1%26sc0%3DTimeToFirstSuggestion%3Adesktop%26bb0%3D15379%26be0%3D17749%26pc0%3D17749%26ld0%3D17749%26t0%3D1729723017248%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:17749 HTTP/1.1Host: fls-na.amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210; session-token=RwxXLe/OCMr3sXpne7FMe3gHudBNzZS8qWWr5IZMdJA6pOR0LWWdzgjvg+qnKQPa+2yc4L1t9PgzMIgeBQt/11rqcF6hSWH1WGI392TRAn9d0O8/Xwq2yqE0DqjaXrxNj4bvW/NxZQ0j5JfmiUYJK1o2uRxeSeO8pmXE5Bf1iVSNfc1HV4/SxkE/u4+jGI7JyDZQdjEc78QNGY00Q+qScr2sDauiG7Z0y49qLuAY5aRVzluwCk50MKKlFStXTv21l4Y4NceDl+ltQoyV23Dy4K2WZ7t8J9TXqcNGISm9CS6mNn0zE+Q/c/eDCarfpPquUMjyxR4udFCdtWcfInOFnP2km2RBFLO9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"device-memory: 8rtt: 150sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-viewport-width: 1280sec-ch-device-memory: 8viewport-width: 1280sec-ch-ua-platform-version: "10.0.0"dpr: 1downlink: 7.9sec-ch-dpr: 1ect: 4gsec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/s?k=bloat+relief&language=en_US&adgrpid=1231453333089814&hvadid=76965999836122&hvbmt=bp&hvdev=c&hvlocphy=65300&hvnetw=s&hvqmt=p&hvtargid=kwd-76966067111871%3Aloc-190&hydadcr=9392_13640345&msclkid=5151cc87ffec1574cf49ab9e858f8c61&tag=txtstdbgdt-20&ref=pd_sl_9k7yfey2e4_pAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; csm-hit=tb:YT8YJ4B94N98J9DNZQCH+s-YT8YJ4B94N98J9DNZQCH\|1729723010042&t:1729723010043&adb:adblk_no; ubid-main=133-8772259-8314210; session-token=RwxXLe/OCMr3sXpne7FMe3gHudBNzZS8qWWr5IZMdJA6pOR0LWWdzgjvg+qnKQPa+2yc4L1t9PgzMIgeBQt/11rqcF6hSWH1WGI392TRAn9d0O8/Xwq2yqE0DqjaXrxNj4bvW/NxZQ0j5JfmiUYJK1o2uRxeSeO8pmXE5Bf1iVSNfc1HV4/SxkE/u4+jGI7JyDZQdjEc78QNGY00Q+qScr2sDauiG7Z0y49qLuAY5aRVzluwCk50MKKlFStXTv21l4Y4NceDl+ltQoyV23Dy4K2WZ7t8J9TXqcNGISm9CS6mNn0zE+Q/c/eDCarfpPquUMjyxR4udFCdtWcfInOFnP2km2RBFLO9
Source: global traffic	HTTP traffic detected: GET /bao-csm/forensics/a9-tq-forensics-incremental.min.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.amazon.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rd/uedata?ld&v=0.299560.0&id=YT8YJ4B94N98J9DNZQCH&sw=1280&sh=1024&vw=1263&vh=907&m=1&sc=YT8YJ4B94N98J9DNZQCH&ue=3&bb=2213&ns=2254&ne=2927&be=4954&fp=2307&fcp=2307&cf=5080&af=5129&fn=5129&pc=19088&tc=-5574&na_=-5574&ul_=-1729722999499&_ul=-1729722999499&rd_=-1729722999499&_rd=-1729722999499&fe_=-1348&lk_=-1345&_lk=-1336&co_=-1336&_co=-476&sc_=-1334&rq_=-476&rs_=-46&_rs=2152&dl_=-25&di_=5043&de_=5043&_de=5044&_dc=19087&ld_=19087&_ld=-1729722999499&ntd=0&ty=0&rc=0&hob=2&hoe=4&ld=19089&t=1729723018588&ctb=1&pty=Search&spty=List&pti=undefined&tid=YT8YJ4B94N98J9DNZQCH&aftb=1&ui=2&lob=1 HTTP/1.1Host: www.amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"device-memory: 8rtt: 150sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-viewport-width: 1280sec-ch-device-memory: 8viewport-width: 1280sec-ch-ua-platform-version: "10.0.0"dpr: 1downlink: 7.9sec-ch-dpr: 1ect: 4gsec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/s?k=bloat+relief&language=en_US&adgrpid=1231453333089814&hvadid=76965999836122&hvbmt=bp&hvdev=c&hvlocphy=65300&hvnetw=s&hvqmt=p&hvtargid=kwd-76966067111871%3Aloc-190&hydadcr=9392_13640345&msclkid=5151cc87ffec1574cf49ab9e858f8c61&tag=txtstdbgdt-20&ref=pd_sl_9k7yfey2e4_pAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; csm-hit=tb:YT8YJ4B94N98J9DNZQCH+s-YT8YJ4B94N98J9DNZQCH\|1729723010042&t:1729723010043&adb:adblk_no; ubid-main=133-8772259-8314210; session-token=RwxXLe/OCMr3sXpne7FMe3gHudBNzZS8qWWr5IZMdJA6pOR0LWWdzgjvg+qnKQPa+2yc4L1t9PgzMIgeBQt/11rqcF6hSWH1WGI392TRAn9d0O8/Xwq2yqE0DqjaXrxNj4bvW/NxZQ0j5JfmiUYJK1o2uRxeSeO8pmXE5Bf1iVSNfc1HV4/SxkE/u4+jGI7JyDZQdjEc78QNGY00Q+qScr2sDauiG7Z0y49qLuAY5aRVzluwCk50MKKlFStXTv21l4Y4NceDl+ltQoyV23Dy4K2WZ7t8J9TXqcNGISm9CS6mNn0zE+Q/c/eDCarfpPquUMjyxR4udFCdtWcfInOFnP2km2RBFLO9
Source: global traffic	HTTP traffic detected: GET /service-worker.js HTTP/1.1Host: www.amazon.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.amazon.com/s?k=bloat+relief&language=en_US&adgrpid=1231453333089814&hvadid=76965999836122&hvbmt=bp&hvdev=c&hvlocphy=65300&hvnetw=s&hvqmt=p&hvtargid=kwd-76966067111871%3Aloc-190&hydadcr=9392_13640345&msclkid=5151cc87ffec1574cf49ab9e858f8c61&tag=txtstdbgdt-20&ref=pd_sl_9k7yfey2e4_pUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; csm-hit=tb:YT8YJ4B94N98J9DNZQCH+s-YT8YJ4B94N98J9DNZQCH\|1729723010042&t:1729723010043&adb:adblk_no; ubid-main=133-8772259-8314210; session-token=RwxXLe/OCMr3sXpne7FMe3gHudBNzZS8qWWr5IZMdJA6pOR0LWWdzgjvg+qnKQPa+2yc4L1t9PgzMIgeBQt/11rqcF6hSWH1WGI392TRAn9d0O8/Xwq2yqE0DqjaXrxNj4bvW/NxZQ0j5JfmiUYJK1o2uRxeSeO8pmXE5Bf1iVSNfc1HV4/SxkE/u4+jGI7JyDZQdjEc78QNGY00Q+qScr2sDauiG7Z0y49qLuAY5aRVzluwCk50MKKlFStXTv21l4Y4NceDl+ltQoyV23Dy4K2WZ7t8J9TXqcNGISm9CS6mNn0zE+Q/c/eDCarfpPquUMjyxR4udFCdtWcfInOFnP2km2RBFLO9
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26m%3D1%26sc%3Dcsa%3Avl50%26vl50%3D4232%26pc%3D19241%26at%3D19241%26t%3D1729723018740%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:19241 HTTP/1.1Host: fls-na.amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210; session-token=RwxXLe/OCMr3sXpne7FMe3gHudBNzZS8qWWr5IZMdJA6pOR0LWWdzgjvg+qnKQPa+2yc4L1t9PgzMIgeBQt/11rqcF6hSWH1WGI392TRAn9d0O8/Xwq2yqE0DqjaXrxNj4bvW/NxZQ0j5JfmiUYJK1o2uRxeSeO8pmXE5Bf1iVSNfc1HV4/SxkE/u4+jGI7JyDZQdjEc78QNGY00Q+qScr2sDauiG7Z0y49qLuAY5aRVzluwCk50MKKlFStXTv21l4Y4NceDl+ltQoyV23Dy4K2WZ7t8J9TXqcNGISm9CS6mNn0zE+Q/c/eDCarfpPquUMjyxR4udFCdtWcfInOFnP2km2RBFLO9
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26m%3D1%26sc%3Dcsa%3Avl90%26vl90%3D17754%26pc%3D19241%26at%3D19241%26t%3D1729723018740%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:19241 HTTP/1.1Host: fls-na.amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210; session-token=RwxXLe/OCMr3sXpne7FMe3gHudBNzZS8qWWr5IZMdJA6pOR0LWWdzgjvg+qnKQPa+2yc4L1t9PgzMIgeBQt/11rqcF6hSWH1WGI392TRAn9d0O8/Xwq2yqE0DqjaXrxNj4bvW/NxZQ0j5JfmiUYJK1o2uRxeSeO8pmXE5Bf1iVSNfc1HV4/SxkE/u4+jGI7JyDZQdjEc78QNGY00Q+qScr2sDauiG7Z0y49qLuAY5aRVzluwCk50MKKlFStXTv21l4Y4NceDl+ltQoyV23Dy4K2WZ7t8J9TXqcNGISm9CS6mNn0zE+Q/c/eDCarfpPquUMjyxR4udFCdtWcfInOFnP2km2RBFLO9
Source: global traffic	HTTP traffic detected: GET /iu3?d=amazon.com&slot=navFooter&a2=0101f37082c0676ca818495af9cb1caf231589c6a9ffc6046e4eeaa9faa814cd4059&old_oo=0&ts=1729723001440&s=ARhiMvOukKST3xM3vi4MXIj5q4zPzHiOhbDKUOPq82GC&gdpr_consent=&gdpr_consent_avl=&cb=1729723001440 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /transcode/storyTeller/A1S3VA65QL41QA/17dcbf81-80a9-4396-9cf4-1b1c0c946446/9019051b-8020-424a-8315-816decaeb23b/1697208577822.0000000.jpg HTTP/1.1Host: d1f0esyb34c1g2.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rd/uedata?s-on-search-route&v=0.299560.0&id=YT8YJ4B94N98J9DNZQCH&ctb=1&m=1&sc0=s-on-search-route&pc0=15202&s-on-search-route0=15202&t0=1729723014701&rt=cf:22-0-6-14-5-0-1_af:24-0-6-16-5-0-1_&csmtags=aui\|aui:aui_build_date:3.24.8-2024-10-17\|mutObsYes\|ewc:unpersist\|ewc:unpersist:emptycart\|ewc:bview\|ewc\|ewc:unrec\|ewc:cartsize:0\|ewc:aui\|navbar\|aui:sw:page_proxy:no_ctrl\|mutObsActive\|FWCIMEnabled\|fls-na-amazon-com\|perfYes\|fy_cdn_fr\|fy_cdn_mp\|adblk_no\|supports:mutationobserver:true\|supports:getelementsbyclassname:true\|supports:map:true\|csm-feature-touch-enabled:false\|aui:css:network\|aui:js:network&viz=visible:3&pty=Search&spty=List&pti=undefined&tid=YT8YJ4B94N98J9DNZQCH&aftb=1&lob=1 HTTP/1.1Host: www.amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; csm-hit=tb:YT8YJ4B94N98J9DNZQCH+s-YT8YJ4B94N98J9DNZQCH\|1729723010042&t:1729723010043&adb:adblk_no; ubid-main=133-8772259-8314210; session-token=RwxXLe/OCMr3sXpne7FMe3gHudBNzZS8qWWr5IZMdJA6pOR0LWWdzgjvg+qnKQPa+2yc4L1t9PgzMIgeBQt/11rqcF6hSWH1WGI392TRAn9d0O8/Xwq2yqE0DqjaXrxNj4bvW/NxZQ0j5JfmiUYJK1o2uRxeSeO8pmXE5Bf1iVSNfc1HV4/SxkE/u4+jGI7JyDZQdjEc78QNGY00Q+qScr2sDauiG7Z0y49qLuAY5aRVzluwCk50MKKlFStXTv21l4Y4NceDl+ltQoyV23Dy4K2WZ7t8J9TXqcNGISm9CS6mNn0zE+Q/c/eDCarfpPquUMjyxR4udFCdtWcfInOFnP2km2RBFLO9
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26m%3D1%26sc%3Dcsa%3Avl100%26vl100%3D17754%26pc%3D19242%26at%3D19242%26t%3D1729723018741%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:19242 HTTP/1.1Host: fls-na.amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210; session-token=RwxXLe/OCMr3sXpne7FMe3gHudBNzZS8qWWr5IZMdJA6pOR0LWWdzgjvg+qnKQPa+2yc4L1t9PgzMIgeBQt/11rqcF6hSWH1WGI392TRAn9d0O8/Xwq2yqE0DqjaXrxNj4bvW/NxZQ0j5JfmiUYJK1o2uRxeSeO8pmXE5Bf1iVSNfc1HV4/SxkE/u4+jGI7JyDZQdjEc78QNGY00Q+qScr2sDauiG7Z0y49qLuAY5aRVzluwCk50MKKlFStXTv21l4Y4NceDl+ltQoyV23Dy4K2WZ7t8J9TXqcNGISm9CS6mNn0zE+Q/c/eDCarfpPquUMjyxR4udFCdtWcfInOFnP2km2RBFLO9
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26m%3D1%26sc%3Dcsa%3AendVL%26pc%3D19242%26at%3D19242%26t%3D1729723018741%26csmtags%3DendVL%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:19242 HTTP/1.1Host: fls-na.amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210; session-token=RwxXLe/OCMr3sXpne7FMe3gHudBNzZS8qWWr5IZMdJA6pOR0LWWdzgjvg+qnKQPa+2yc4L1t9PgzMIgeBQt/11rqcF6hSWH1WGI392TRAn9d0O8/Xwq2yqE0DqjaXrxNj4bvW/NxZQ0j5JfmiUYJK1o2uRxeSeO8pmXE5Bf1iVSNfc1HV4/SxkE/u4+jGI7JyDZQdjEc78QNGY00Q+qScr2sDauiG7Z0y49qLuAY5aRVzluwCk50MKKlFStXTv21l4Y4NceDl+ltQoyV23Dy4K2WZ7t8J9TXqcNGISm9CS6mNn0zE+Q/c/eDCarfpPquUMjyxR4udFCdtWcfInOFnP2km2RBFLO9
Source: global traffic	HTTP traffic detected: GET /images/I/31bJewCvY-L.js HTTP/1.1Host: images-na.ssl-images-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26m%3D1%26sc%3Dcsa%3Asi%26si%3D7013%26pc%3D19242%26at%3D19242%26t%3D1729723018741%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:19242 HTTP/1.1Host: fls-na.amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210; session-token=RwxXLe/OCMr3sXpne7FMe3gHudBNzZS8qWWr5IZMdJA6pOR0LWWdzgjvg+qnKQPa+2yc4L1t9PgzMIgeBQt/11rqcF6hSWH1WGI392TRAn9d0O8/Xwq2yqE0DqjaXrxNj4bvW/NxZQ0j5JfmiUYJK1o2uRxeSeO8pmXE5Bf1iVSNfc1HV4/SxkE/u4+jGI7JyDZQdjEc78QNGY00Q+qScr2sDauiG7Z0y49qLuAY5aRVzluwCk50MKKlFStXTv21l4Y4NceDl+ltQoyV23Dy4K2WZ7t8J9TXqcNGISm9CS6mNn0zE+Q/c/eDCarfpPquUMjyxR4udFCdtWcfInOFnP2km2RBFLO9
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26m%3D1%26sc%3Dcsa%3Aatfsi%26atfsi%3D7013%26pc%3D19242%26at%3D19242%26t%3D1729723018741%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:19242 HTTP/1.1Host: fls-na.amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210; session-token=RwxXLe/OCMr3sXpne7FMe3gHudBNzZS8qWWr5IZMdJA6pOR0LWWdzgjvg+qnKQPa+2yc4L1t9PgzMIgeBQt/11rqcF6hSWH1WGI392TRAn9d0O8/Xwq2yqE0DqjaXrxNj4bvW/NxZQ0j5JfmiUYJK1o2uRxeSeO8pmXE5Bf1iVSNfc1HV4/SxkE/u4+jGI7JyDZQdjEc78QNGY00Q+qScr2sDauiG7Z0y49qLuAY5aRVzluwCk50MKKlFStXTv21l4Y4NceDl+ltQoyV23Dy4K2WZ7t8J9TXqcNGISm9CS6mNn0zE+Q/c/eDCarfpPquUMjyxR4udFCdtWcfInOFnP2km2RBFLO9
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26m%3D1%26sc%3Dcsa%3AbrowserQuiteFn%26pc%3D19097%26at%3D19097%26t%3D1729723018596%26csmtags%3DbrowserQuiteFn%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:19098 HTTP/1.1Host: fls-na.amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210; session-token=RwxXLe/OCMr3sXpne7FMe3gHudBNzZS8qWWr5IZMdJA6pOR0LWWdzgjvg+qnKQPa+2yc4L1t9PgzMIgeBQt/11rqcF6hSWH1WGI392TRAn9d0O8/Xwq2yqE0DqjaXrxNj4bvW/NxZQ0j5JfmiUYJK1o2uRxeSeO8pmXE5Bf1iVSNfc1HV4/SxkE/u4+jGI7JyDZQdjEc78QNGY00Q+qScr2sDauiG7Z0y49qLuAY5aRVzluwCk50MKKlFStXTv21l4Y4NceDl+ltQoyV23Dy4K2WZ7t8J9TXqcNGISm9CS6mNn0zE+Q/c/eDCarfpPquUMjyxR4udFCdtWcfInOFnP2km2RBFLO9
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fld%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26sw%3D1280%26sh%3D1024%26vw%3D1263%26vh%3D907%26m%3D1%26sc%3DYT8YJ4B94N98J9DNZQCH%26ue%3D3%26bb%3D2213%26ns%3D2254%26ne%3D2927%26be%3D4954%26fp%3D2307%26fcp%3D2307%26cf%3D5080%26af%3D5129%26fn%3D5129%26pc%3D19088%26tc%3D-5574%26na_%3D-5574%26ul_%3D-1729722999499%26_ul%3D-1729722999499%26rd_%3D-1729722999499%26_rd%3D-1729722999499%26fe_%3D-1348%26lk_%3D-1345%26_lk%3D-1336%26co_%3D-1336%26_co%3D-476%26sc_%3D-1334%26rq_%3D-476%26rs_%3D-46%26_rs%3D2152%26dl_%3D-25%26di_%3D5043%26de_%3D5043%26_de%3D5044%26_dc%3D19087%26ld_%3D19087%26_ld%3D-1729722999499%26ntd%3D0%26ty%3D0%26rc%3D0%26hob%3D2%26hoe%3D4%26ld%3D19089%26t%3D1729723018588%26ctb%3D1%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26ui%3D2%26lob%3D1:19105 HTTP/1.1Host: fls-na.amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210; session-token=RwxXLe/OCMr3sXpne7FMe3gHudBNzZS8qWWr5IZMdJA6pOR0LWWdzgjvg+qnKQPa+2yc4L1t9PgzMIgeBQt/11rqcF6hSWH1WGI392TRAn9d0O8/Xwq2yqE0DqjaXrxNj4bvW/NxZQ0j5JfmiUYJK1o2uRxeSeO8pmXE5Bf1iVSNfc1HV4/SxkE/u4+jGI7JyDZQdjEc78QNGY00Q+qScr2sDauiG7Z0y49qLuAY5aRVzluwCk50MKKlFStXTv21l4Y4NceDl+ltQoyV23Dy4K2WZ7t8J9TXqcNGISm9CS6mNn0zE+Q/c/eDCarfpPquUMjyxR4udFCdtWcfInOFnP2km2RBFLO9
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26m%3D1%26sc%3Dcsa%3Alcp%26lcp%3D3950%26pc%3D19220%26at%3D19220%26t%3D1729723018719%26csmtags%3Daui%3Asw%3Abrowser%3Aregister%3Asupported%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:19221 HTTP/1.1Host: fls-na.amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210; session-token=RwxXLe/OCMr3sXpne7FMe3gHudBNzZS8qWWr5IZMdJA6pOR0LWWdzgjvg+qnKQPa+2yc4L1t9PgzMIgeBQt/11rqcF6hSWH1WGI392TRAn9d0O8/Xwq2yqE0DqjaXrxNj4bvW/NxZQ0j5JfmiUYJK1o2uRxeSeO8pmXE5Bf1iVSNfc1HV4/SxkE/u4+jGI7JyDZQdjEc78QNGY00Q+qScr2sDauiG7Z0y49qLuAY5aRVzluwCk50MKKlFStXTv21l4Y4NceDl+ltQoyV23Dy4K2WZ7t8J9TXqcNGISm9CS6mNn0zE+Q/c/eDCarfpPquUMjyxR4udFCdtWcfInOFnP2km2RBFLO9
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26m%3D1%26sc%3Dcsa%3AstartVL%26pc%3D19241%26at%3D19241%26t%3D1729723018740%26csmtags%3DstartVL%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:19241 HTTP/1.1Host: fls-na.amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210; session-token=RwxXLe/OCMr3sXpne7FMe3gHudBNzZS8qWWr5IZMdJA6pOR0LWWdzgjvg+qnKQPa+2yc4L1t9PgzMIgeBQt/11rqcF6hSWH1WGI392TRAn9d0O8/Xwq2yqE0DqjaXrxNj4bvW/NxZQ0j5JfmiUYJK1o2uRxeSeO8pmXE5Bf1iVSNfc1HV4/SxkE/u4+jGI7JyDZQdjEc78QNGY00Q+qScr2sDauiG7Z0y49qLuAY5aRVzluwCk50MKKlFStXTv21l4Y4NceDl+ltQoyV23Dy4K2WZ7t8J9TXqcNGISm9CS6mNn0zE+Q/c/eDCarfpPquUMjyxR4udFCdtWcfInOFnP2km2RBFLO9
Source: global traffic	HTTP traffic detected: GET /iu3?d=amazon.com&slot=navFooter&a2=0101f37082c0676ca818495af9cb1caf231589c6a9ffc6046e4eeaa9faa814cd4059&old_oo=0&ts=1729723001440&s=ARhiMvOukKST3xM3vi4MXIj5q4zPzHiOhbDKUOPq82GC&gdpr_consent=&gdpr_consent_avl=&cb=1729723001440&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A00fIH9SqE5zlZlqAN1EFOM\|t
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26m%3D1%26sc%3Dcsa%3Avl50%26vl50%3D4232%26pc%3D19241%26at%3D19241%26t%3D1729723018740%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:19241 HTTP/1.1Host: fls-na.amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210; session-token=RwxXLe/OCMr3sXpne7FMe3gHudBNzZS8qWWr5IZMdJA6pOR0LWWdzgjvg+qnKQPa+2yc4L1t9PgzMIgeBQt/11rqcF6hSWH1WGI392TRAn9d0O8/Xwq2yqE0DqjaXrxNj4bvW/NxZQ0j5JfmiUYJK1o2uRxeSeO8pmXE5Bf1iVSNfc1HV4/SxkE/u4+jGI7JyDZQdjEc78QNGY00Q+qScr2sDauiG7Z0y49qLuAY5aRVzluwCk50MKKlFStXTv21l4Y4NceDl+ltQoyV23Dy4K2WZ7t8J9TXqcNGISm9CS6mNn0zE+Q/c/eDCarfpPquUMjyxR4udFCdtWcfInOFnP2km2RBFLO9
Source: global traffic	HTTP traffic detected: GET /1/events/com.amazon.eel.SearchAutocompleteUIServiceMetrics.nexus HTTP/1.1Host: unagi.amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210; session-token=RwxXLe/OCMr3sXpne7FMe3gHudBNzZS8qWWr5IZMdJA6pOR0LWWdzgjvg+qnKQPa+2yc4L1t9PgzMIgeBQt/11rqcF6hSWH1WGI392TRAn9d0O8/Xwq2yqE0DqjaXrxNj4bvW/NxZQ0j5JfmiUYJK1o2uRxeSeO8pmXE5Bf1iVSNfc1HV4/SxkE/u4+jGI7JyDZQdjEc78QNGY00Q+qScr2sDauiG7Z0y49qLuAY5aRVzluwCk50MKKlFStXTv21l4Y4NceDl+ltQoyV23Dy4K2WZ7t8J9TXqcNGISm9CS6mNn0zE+Q/c/eDCarfpPquUMjyxR4udFCdtWcfInOFnP2km2RBFLO9
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26m%3D1%26sc%3Dcsa%3Avl90%26vl90%3D17754%26pc%3D19241%26at%3D19241%26t%3D1729723018740%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:19241 HTTP/1.1Host: fls-na.amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210; session-token=RwxXLe/OCMr3sXpne7FMe3gHudBNzZS8qWWr5IZMdJA6pOR0LWWdzgjvg+qnKQPa+2yc4L1t9PgzMIgeBQt/11rqcF6hSWH1WGI392TRAn9d0O8/Xwq2yqE0DqjaXrxNj4bvW/NxZQ0j5JfmiUYJK1o2uRxeSeO8pmXE5Bf1iVSNfc1HV4/SxkE/u4+jGI7JyDZQdjEc78QNGY00Q+qScr2sDauiG7Z0y49qLuAY5aRVzluwCk50MKKlFStXTv21l4Y4NceDl+ltQoyV23Dy4K2WZ7t8J9TXqcNGISm9CS6mNn0zE+Q/c/eDCarfpPquUMjyxR4udFCdtWcfInOFnP2km2RBFLO9
Source: global traffic	HTTP traffic detected: GET /images/I/41JGxdrbFrL.js?AUIClients/AmazonLightsaberPageAssets HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.amazon.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/11+zeBoqC-L.js?AUIClients/WebFlowIngressJs HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.amazon.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/81LmaXL9x7L.js?AUIClients/FWCIMAssets HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.amazon.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/21vARlfe4pL._RC%7C11s0wiXngEL.js_.js?AUIClients/ARARegisterTriggerSubAssets-search HTTP/1.1Host: m.media-amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.amazon.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bao-csm/forensics/a9-tq-forensics-incremental.min.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A00fIH9SqE5zlZlqAN1EFOM\|t
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; csm-hit=tb:YT8YJ4B94N98J9DNZQCH+s-YT8YJ4B94N98J9DNZQCH\|1729723010042&t:1729723010043&adb:adblk_no; ubid-main=133-8772259-8314210; session-token=RwxXLe/OCMr3sXpne7FMe3gHudBNzZS8qWWr5IZMdJA6pOR0LWWdzgjvg+qnKQPa+2yc4L1t9PgzMIgeBQt/11rqcF6hSWH1WGI392TRAn9d0O8/Xwq2yqE0DqjaXrxNj4bvW/NxZQ0j5JfmiUYJK1o2uRxeSeO8pmXE5Bf1iVSNfc1HV4/SxkE/u4+jGI7JyDZQdjEc78QNGY00Q+qScr2sDauiG7Z0y49qLuAY5aRVzluwCk50MKKlFStXTv21l4Y4NceDl+ltQoyV23Dy4K2WZ7t8J9TXqcNGISm9CS6mNn0zE+Q/c/eDCarfpPquUMjyxR4udFCdtWcfInOFnP2km2RBFLO9
Source: global traffic	HTTP traffic detected: GET /rd/uedata?ld&v=0.299560.0&id=YT8YJ4B94N98J9DNZQCH&sw=1280&sh=1024&vw=1263&vh=907&m=1&sc=YT8YJ4B94N98J9DNZQCH&ue=3&bb=2213&ns=2254&ne=2927&be=4954&fp=2307&fcp=2307&cf=5080&af=5129&fn=5129&pc=19088&tc=-5574&na_=-5574&ul_=-1729722999499&_ul=-1729722999499&rd_=-1729722999499&_rd=-1729722999499&fe_=-1348&lk_=-1345&_lk=-1336&co_=-1336&_co=-476&sc_=-1334&rq_=-476&rs_=-46&_rs=2152&dl_=-25&di_=5043&de_=5043&_de=5044&_dc=19087&ld_=19087&_ld=-1729722999499&ntd=0&ty=0&rc=0&hob=2&hoe=4&ld=19089&t=1729723018588&ctb=1&pty=Search&spty=List&pti=undefined&tid=YT8YJ4B94N98J9DNZQCH&aftb=1&ui=2&lob=1 HTTP/1.1Host: www.amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; csm-hit=tb:YT8YJ4B94N98J9DNZQCH+s-YT8YJ4B94N98J9DNZQCH\|1729723010042&t:1729723010043&adb:adblk_no; ubid-main=133-8772259-8314210; session-token=RwxXLe/OCMr3sXpne7FMe3gHudBNzZS8qWWr5IZMdJA6pOR0LWWdzgjvg+qnKQPa+2yc4L1t9PgzMIgeBQt/11rqcF6hSWH1WGI392TRAn9d0O8/Xwq2yqE0DqjaXrxNj4bvW/NxZQ0j5JfmiUYJK1o2uRxeSeO8pmXE5Bf1iVSNfc1HV4/SxkE/u4+jGI7JyDZQdjEc78QNGY00Q+qScr2sDauiG7Z0y49qLuAY5aRVzluwCk50MKKlFStXTv21l4Y4NceDl+ltQoyV23Dy4K2WZ7t8J9TXqcNGISm9CS6mNn0zE+Q/c/eDCarfpPquUMjyxR4udFCdtWcfInOFnP2km2RBFLO9
Source: global traffic	HTTP traffic detected: GET /1/events/com.amazon.csm.csa.prod HTTP/1.1Host: unagi.amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210; session-token=RwxXLe/OCMr3sXpne7FMe3gHudBNzZS8qWWr5IZMdJA6pOR0LWWdzgjvg+qnKQPa+2yc4L1t9PgzMIgeBQt/11rqcF6hSWH1WGI392TRAn9d0O8/Xwq2yqE0DqjaXrxNj4bvW/NxZQ0j5JfmiUYJK1o2uRxeSeO8pmXE5Bf1iVSNfc1HV4/SxkE/u4+jGI7JyDZQdjEc78QNGY00Q+qScr2sDauiG7Z0y49qLuAY5aRVzluwCk50MKKlFStXTv21l4Y4NceDl+ltQoyV23Dy4K2WZ7t8J9TXqcNGISm9CS6mNn0zE+Q/c/eDCarfpPquUMjyxR4udFCdtWcfInOFnP2km2RBFLO9
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fld%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26ctb%3D1%26sc0%3Daui%3Asw%3Actrl_changed%26bb0%3D2192%26pc0%3D21469%26ld0%3D21469%26t0%3D1729723020968%26csmtags%3Daui%3Asw%3Actrl_changed%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:21469 HTTP/1.1Host: fls-na.amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210; session-token=RwxXLe/OCMr3sXpne7FMe3gHudBNzZS8qWWr5IZMdJA6pOR0LWWdzgjvg+qnKQPa+2yc4L1t9PgzMIgeBQt/11rqcF6hSWH1WGI392TRAn9d0O8/Xwq2yqE0DqjaXrxNj4bvW/NxZQ0j5JfmiUYJK1o2uRxeSeO8pmXE5Bf1iVSNfc1HV4/SxkE/u4+jGI7JyDZQdjEc78QNGY00Q+qScr2sDauiG7Z0y49qLuAY5aRVzluwCk50MKKlFStXTv21l4Y4NceDl+ltQoyV23Dy4K2WZ7t8J9TXqcNGISm9CS6mNn0zE+Q/c/eDCarfpPquUMjyxR4udFCdtWcfInOFnP2km2RBFLO9
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26m%3D1%26sc%3Dcsa%3Avl100%26vl100%3D17754%26pc%3D19242%26at%3D19242%26t%3D1729723018741%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:19242 HTTP/1.1Host: fls-na.amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210; session-token=RwxXLe/OCMr3sXpne7FMe3gHudBNzZS8qWWr5IZMdJA6pOR0LWWdzgjvg+qnKQPa+2yc4L1t9PgzMIgeBQt/11rqcF6hSWH1WGI392TRAn9d0O8/Xwq2yqE0DqjaXrxNj4bvW/NxZQ0j5JfmiUYJK1o2uRxeSeO8pmXE5Bf1iVSNfc1HV4/SxkE/u4+jGI7JyDZQdjEc78QNGY00Q+qScr2sDauiG7Z0y49qLuAY5aRVzluwCk50MKKlFStXTv21l4Y4NceDl+ltQoyV23Dy4K2WZ7t8J9TXqcNGISm9CS6mNn0zE+Q/c/eDCarfpPquUMjyxR4udFCdtWcfInOFnP2km2RBFLO9
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /v3/pr?exlist=n-xr-HMT_n-id-HMT_n-eq-HMT3_n-ix-HMT_n-y-HMT_n-cx-HMT_n-telaria_imdb_n-lucid_n-samba.tv_n-rb-HMT3_adb_mp_af_n-sk_n-mediarithmics_n-lm-HMT3_index_n-kg-HMT_an_n-pm-HMT_nsln_fbca_nd_n-ym-HMT_n-ox-hmt_tbl_ns_bsw_bk_n-dm2-HMT_gem_n-zeotap-4_fw_n-fo-HMT_n-kr-new_n-bsw-hmt_n-st-HMT1_n-fw-HMT1_n-og-HMT_adelphic_g_kr_n-comscr.com_ox_n-tl-HMT_n-semasio-ecm_n-gg-HMT2_n-g-hmt_n-ispot_pm&fv=1.0&ex-pl-fbca=Pr47TublSGSnaU-XQwoKfA&a=cm&ex-pl-n-kr-new=c4ok-UoJSuaY1UzBKbsS3Q&dmt=1&gdpr_consent=&ex-pl-n-g-hmt=U_vCsTmHQG6OePiHUIZ8Gg&ep=ttam_T219Ay-cPciHbT10sORSNjN-vkBBigNDsu7Rt3J0OONqt_wgY6xTFBUgBgQ_zXmoQzra_yAqECU7rhIDLmXe3oyj0OXuHr7AMCLT1CuYvAcZsUKq7mSgMUxOMJfjNmX2hUSdRrfBVC1Hru-I8HqDI-OipRzBX_COpktVWefZileh0llFX_k29XUuuefr65Ok9E8H2IWXYA02yCyS-XRnPi-igk4wVbeU3VAuqzOLaAqEcAyg-iuKKJDvwkgpSWf_Wi5VWD0iPOSTl9hYyaiIrLKkbD_UPc6KDfeOtCeYf67jApdizLIe7HId19a8l2SYg4xbth6JMKmbTWc6ys41o8E6sNUEK_fEZBlI6mcZfgAFvoICy7YgdVqLY7RGG67m1RVrIfWK6cXUWE2njdvwL1SzlUjGx92_oWWExMtuy1NoHt-n5LUSkTa3Ja2QhWooG3GdLaZGMJHe2h-X3YCdeymDEbHuctSwUddr5X9NxjgloD2bRbPN_RIZaAf0LIEBlchFwWV8sG5H96uNX-dtqFJOU8vVks6KygngJNmJE6PTqpNg3pqvykzIHJCbCy0AqsM-JHixNU8A98WxvEun8Yd_SaCeSQ04P-gODvWUJY3v8uoJuSi95rOTwwPikz6Z7tHv3gdfqk-15Re89g3Qj-_6BMH54iPkdAz77SYS592Nxjs05Rg2tJ0qXYPt7dWvz_Li-m5FVHY3WmhP_fq_eW9n8OrwE83mzn5Ofh2cA-sawb3ne3yqHz_LN00B4SiPB7D4FDGRLuclGcoDZShjRYIRn9PGOZGZ97FLz4oqNo43Iba0niQJxY2EDSOUCYuwwyA0d76YCJI8ii4xx5CxjbXAZX0tOQzHYNaRQNT2lFHf7Eg600DPa1auJjLrYxtTekWq77_8YENlhNgODa-1NeZn9cHlhzKIFrlvSBybRD36dKh4HhfLt4YOT6mNt3f68Ts_fPI9n7q0OzBHkF4ACVzy3RjEZ5rKTqPMOmuqujF_vL6Se2aeMG4N5mHM6xaWG9nAcbP9cN35Ma39U4FJwulefe4dyLEci3PL2s5mmQewrAubXBhC8RAymgqa5maNjzEddoi-wOl0X7_V9B0sajBlK7o2JxYl8FiNxtGxdYr1nlUNZaQuTWZMX0LYT-wnJAbx5o0ZwzISomYyk2WBV79QEVqIxhJ2UtV_rRCa5eQAU7lWbf9P-YSbL1eagAhzTN180Z7IGx1BgtwaQ HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A00fIH9SqE5zlZlqAN1EFOM; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /images/I/11+zeBoqC-L.js?AUIClients/WebFlowIngressJs HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/21vARlfe4pL._RC%7C11s0wiXngEL.js_.js?AUIClients/ARARegisterTriggerSubAssets-search HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/I/41JGxdrbFrL.js?AUIClients/AmazonLightsaberPageAssets HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26m%3D1%26sc%3Dcsa%3Asi%26si%3D7013%26pc%3D19242%26at%3D19242%26t%3D1729723018741%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:19242 HTTP/1.1Host: fls-na.amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210; session-token=RwxXLe/OCMr3sXpne7FMe3gHudBNzZS8qWWr5IZMdJA6pOR0LWWdzgjvg+qnKQPa+2yc4L1t9PgzMIgeBQt/11rqcF6hSWH1WGI392TRAn9d0O8/Xwq2yqE0DqjaXrxNj4bvW/NxZQ0j5JfmiUYJK1o2uRxeSeO8pmXE5Bf1iVSNfc1HV4/SxkE/u4+jGI7JyDZQdjEc78QNGY00Q+qScr2sDauiG7Z0y49qLuAY5aRVzluwCk50MKKlFStXTv21l4Y4NceDl+ltQoyV23Dy4K2WZ7t8J9TXqcNGISm9CS6mNn0zE+Q/c/eDCarfpPquUMjyxR4udFCdtWcfInOFnP2km2RBFLO9
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26m%3D1%26sc%3Dcsa%3AendVL%26pc%3D19242%26at%3D19242%26t%3D1729723018741%26csmtags%3DendVL%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:19242 HTTP/1.1Host: fls-na.amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210; session-token=RwxXLe/OCMr3sXpne7FMe3gHudBNzZS8qWWr5IZMdJA6pOR0LWWdzgjvg+qnKQPa+2yc4L1t9PgzMIgeBQt/11rqcF6hSWH1WGI392TRAn9d0O8/Xwq2yqE0DqjaXrxNj4bvW/NxZQ0j5JfmiUYJK1o2uRxeSeO8pmXE5Bf1iVSNfc1HV4/SxkE/u4+jGI7JyDZQdjEc78QNGY00Q+qScr2sDauiG7Z0y49qLuAY5aRVzluwCk50MKKlFStXTv21l4Y4NceDl+ltQoyV23Dy4K2WZ7t8J9TXqcNGISm9CS6mNn0zE+Q/c/eDCarfpPquUMjyxR4udFCdtWcfInOFnP2km2RBFLO9
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26m%3D1%26sc%3Dcsa%3Aatfsi%26atfsi%3D7013%26pc%3D19242%26at%3D19242%26t%3D1729723018741%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:19242 HTTP/1.1Host: fls-na.amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210; session-token=RwxXLe/OCMr3sXpne7FMe3gHudBNzZS8qWWr5IZMdJA6pOR0LWWdzgjvg+qnKQPa+2yc4L1t9PgzMIgeBQt/11rqcF6hSWH1WGI392TRAn9d0O8/Xwq2yqE0DqjaXrxNj4bvW/NxZQ0j5JfmiUYJK1o2uRxeSeO8pmXE5Bf1iVSNfc1HV4/SxkE/u4+jGI7JyDZQdjEc78QNGY00Q+qScr2sDauiG7Z0y49qLuAY5aRVzluwCk50MKKlFStXTv21l4Y4NceDl+ltQoyV23Dy4K2WZ7t8J9TXqcNGISm9CS6mNn0zE+Q/c/eDCarfpPquUMjyxR4udFCdtWcfInOFnP2km2RBFLO9
Source: global traffic	HTTP traffic detected: GET /conversion?eventType=searchConversion&debugKey=&obfuscatedMarketplaceId=ATVPDKIKX0DER&requestId=YT8YJ4B94N98J9DNZQCH&trackedItem=bloat%20relief&trackedItemType=Keyword&asins=B08M9JP6C3&asins=B08W3JHG19&asins=B0105YYALK&asins=B07TCQS4QJ&asins=B08R7TCX2J HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.amazon.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger;navigation-source;event-sourceReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/I/81LmaXL9x7L.js?AUIClients/FWCIMAssets HTTP/1.1Host: m.media-amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fld%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26ctb%3D1%26sc0%3Daui%3Asw%3Actrl_changed%26bb0%3D2192%26pc0%3D21469%26ld0%3D21469%26t0%3D1729723020968%26csmtags%3Daui%3Asw%3Actrl_changed%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:21469 HTTP/1.1Host: fls-na.amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US; ubid-main=133-8772259-8314210; session-token=RwxXLe/OCMr3sXpne7FMe3gHudBNzZS8qWWr5IZMdJA6pOR0LWWdzgjvg+qnKQPa+2yc4L1t9PgzMIgeBQt/11rqcF6hSWH1WGI392TRAn9d0O8/Xwq2yqE0DqjaXrxNj4bvW/NxZQ0j5JfmiUYJK1o2uRxeSeO8pmXE5Bf1iVSNfc1HV4/SxkE/u4+jGI7JyDZQdjEc78QNGY00Q+qScr2sDauiG7Z0y49qLuAY5aRVzluwCk50MKKlFStXTv21l4Y4NceDl+ltQoyV23Dy4K2WZ7t8J9TXqcNGISm9CS6mNn0zE+Q/c/eDCarfpPquUMjyxR4udFCdtWcfInOFnP2km2RBFLO9
Source: global traffic	HTTP traffic detected: GET /rrum?cm_dsp_id=198&external_user_id=jQrTD0V4QB-gqdAbsPRC2w&cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DindexHMT%26id%3D&gdpr_consent= HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /match?publisher_dsp_id=416&external_user_id=r0KLpdpnRzaFIi1JgSTpYw&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DimprovedigitalHMT%26id%3D%7BPUB_USER_ID%7D&gdpr_consent= HTTP/1.1Host: match.360yield.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redir/?partnerid=144&partneruserid=NSL_2fRzTSu-sd90Ksv6mA&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie_sync?https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsamba.tv%26id%3D HTTP/1.1Host: ads.samba.tvConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /amazon/pixel.gif?https://s.amazon-adsystem.com/ecm3?ex=luc.id&id= HTTP/1.1Host: usersync.samplicio.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=amazon&uid=UF8V4ELdTp6ztQa_BtQhSA&gdpr_consent= HTTP/1.1Host: pbs.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBHR6GWcCELq90cUQ6v_hueNDX4O-s6oFEgEBAQHLGmcjZ9xS0iMA_eMAAA&S=AQAAAmfjL5w_bFj7so3fM3sF4kk
Source: global traffic	HTTP traffic detected: GET /ads/idsync?cid=a706a6beb&ex=imdb.com HTTP/1.1Host: www.imdb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_485.5.dr	String found in binary or memory: <a href="http://ww1.frothylattestudio.com/trf?q=Frothy+Bloat&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9M0U2MUFDMDUzQTkwNDcwNSZ1dD0xNzI5NzIyOTc5Mzc3JnVvPTc2OTY1OTk5ODM2MTIyJmx0PTImcz0yJmVzPUVSRktqbkVBaHV0Vzl5MERRbkNidm9TRkFET05pTGpxVFJnMm02ZzZXaXI2MDFQMDRmR2ZKT0tOZERMREgyYjA4NEdlSmlyVkZuQ085dy0t%2FRV%3D2%2FRE%3D1732314979%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de8RPyPnS_03BcMny4P9QrU4zVUCUzQWs7_nfkTegDX9UXUe9ggNjRpHp9xUKperLOATX5eqIj0tW3bxcvmvhTONBMNxZmjNbDfDbwczUvG_rooSnA2OKnDr_SwgcyIru_jAIH9KbHEZNvRymGlHnEjPohilM45Au1YlF9k9qixFtvSvDYW%2526u%253daHR0cHMlM2ElMmYlMmZ3d3cuYW1hem9uLmNvbSUyZnMlMmYlM2ZpZSUzZFVURjglMjZrZXl3b3JkcyUzZGJsb2F0JTJicmVsaWVmJTI2aW5kZXglM2RhcHMlMjZ0YWclM2R0eHRzdGRiZ2R0LTIwJTI2cmVmJTNkcGRfc2xfOWs3eWZleTJlNF9wJTI2YWRncnBpZCUzZDEyMzE0NTMzMzMwODk4MTQlMjZodmFkaWQlM2Q3Njk2NTk5OTgzNjEyMiUyNmh2bmV0dyUzZHMlMjZodnFtdCUzZHAlMjZodmJtdCUzZGJwJTI2aHZkZXYlM2RjJTI2aHZsb2NpbnQlM2QlMjZodmxvY3BoeSUzZDY1MzAwJTI2aHZ0YXJnaWQlM2Rrd2QtNzY5NjYwNjcxMTE4NzElM2Fsb2MtMTkwJTI2aHlkYWRjciUzZDkzOTJfMTM2NDAzNDUlMjZsYW5ndWFnZSUzZGVuX1VTJTI2bXNjbGtpZCUzZDUxNTFjYzg3ZmZlYzE1NzRjZjQ5YWI5ZTg1OGY4YzYx%2526rlid%253d5151cc87ffec1574cf49ab9e858f8c61%2FRK%3D2%2FRS%3D5G.OEM3NhQeZqePlvNPr6PXP4l0-&o=VFmsd83PVsGc17Notsei1nhYrES1CZHGgnVrgvgeATJSLn%2BEUOLyr06e3E%2Fv1IzmYxEnm8LOEBVuwzffoKL30YFHmJk4d0y4dAS0rgkWpT1Km4oXqst3TMqHUHOXT%2BbnYMGR6blMwPcVaD1KjoleSABqFUySK95hpSt0ubY1zv9hnxbdTewuvXjqoJuNcdmNhd7jniNMl%2BF0K7jbQj1nw5wP8zoXwMiZFUTyBbiRzAfhbqFGT3ufd93F3uTp%2FUMfnAw29ai76ty3Zz1%2FNTQXGqXiR%2Bymh84gFAShQzRggNISp7Sm%2BS%2BEk4QJ73lJWsBqQkGf1RF%2Bv23IAf7uEKuCTGHAJLjeKnS6nIcPAayiC%2BlXTow2A%2BBrFOeyeZ8oDvTFM6PehDcwJyxAYTqkPHFQnSwLPOFFkJfEdYg72IZoh8LcoDZUVbYmOz%2Bj5JVo0wkAR2O07RtdGWhAXxY%2BcPjYFoNUurpEtH%2BtOb2XOOy%2Bx%2FUBf7U3NqyUp2vPSz6R3XOXetP%2FL8OqvQ5r3pam%2Bsd700eA4NxqlswEnQM6sAtCcxILk%2F7Z4qSTgvvx9xIdlJkhj%2FiEW9KnBYVkgrP6hbW3kCnMGixA7eCrWPIPaXP1g%2F2rMzamwKGDY0RgrjgV9SNCPJcs0govoMY7JDbOYmOMqA%3D%3D&c=210647726857918739901625&n=jfabrI%2FaXM7QueoQSSXfycouHyRWmFjntg37gpJURn2ZVSMAxPCcyD2b4Z3APA2xUOQdBLZkVo%2FFCo7aS8zVe4bLm%2BEENwBQn%2FuoTpnh4NeQ2x%2FP8SYGQJO9SCe3HKOFEm%2FbN4PcvdqTprk6tb%2BXp2RKJtqTCMjC3X5Ak9gx0sN32AbHBbqGH1vDIYlcMrT0omddcSdqlAPRHclFiVddLArIRMTVqSBJ0QXmhI%2FBkJ0Y3eDLxDD34fC8HRKsmcx8rfBIRRkpp3tfoptGArHh585KoFwaGJvsRT1F0v2JkCdSDru7qW0Ney6Gxcl8J3i3hDZQgdEs5DCA6rU%2Bj9zA2%2F2E1IosHLTUVb0t3cjASFlHcHeitbNk0Qu9yCeMDtUra80P8af1xgNvofwR%2BMcUK52lfxIaIaiWyEzYzzn3mSqLUmeqeQ1P1j4niXXW7La2%2Fb4bs09fzNASRvSBjllsJcqIZ1K8VuCn12WLGvIrD669EP4%2BFkKnK0nEUrBIacVkvTiRAAtLOGlSQFsbVc0OHw2jQ5P0Z1VvXQnM9xHYxw4JuetGawkkobR0ao63Vm7U3Bj%2BsCoM8fNsgn3MqKqmPWL8LmFUBzoudhvLm7lhJRXEorMHVh5EXSF9Cpxk6DTDr7k18r%2F%2BTsbGP5hWNJwqk00TMLhuu1mjh2srCiSTEi%2FgzS0a3%2Fq6IU0oL%2BhuFcH5%2BuV5026peW9bm8861kPEUR3qRhLXNqM43kBFEX8ZpAoee%2FvkreRETEtshZgwH%2BC2hKDVg%2Bw%2BlxhA04bB9dqd9vTHSrBMEU%2Fu1Fbj1pgHsaFwdoTTzBGklf3H%2FRPTMNKDdXlc2RtF0vUedC2ntdzwE%2BKJCuKZF96%2BJiccm2C2%2FVs3Ayhktu3ZwLC02f%2FBFWzh9lyOWOwmdRDgRtGOVg3I1JHiYMHjjFylsEf%2FEaJjhBUj4ku
Source: chromecache_485.5.dr	String found in binary or memory: <a href="http://ww1.frothylattestudio.com/trf?q=Frothy+Bloat&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9M0U2MUFDMDUzQTkwNDcwNSZ1dD0xNzI5NzIyOTc5Mzc3JnVvPTcyNzA1NTc0MDM1MDY0Jmx0PTImcz0yJmVzPTdSNVp1ME1PUWhUVXBEcEdzYTRLWENmaUY1MktFd0pPazNxVHNNSkFidm4zeXVrczBWQ0Z6Wnl6dEIwTlg3R3pweS5VNEc2RUVMbF9KUS0t%2FRV%3D2%2FRE%3D1732314979%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de8sAdlrKTyaIL7Wc5qXcIcgjVUCUyFWePPu5kFkT31Z_mX-DVnU3nXnAKzNNhGq2OWe4FLZMBURY9mPmX3Bvb0YoUcYkW0RIpWsfoXJRyQecjC5arBw1Q4Bo2pt5bDBR8RnGwgVJLoJ1ZCLjuJuVbE8A8JJExPiNgHxCYEK7AokCUuuCvW%2526u%253daHR0cHMlM2ElMmYlMmYxc3RwaG9ybS5jb20lMmZibG9ncyUyZm5ld3MlMmZob3ctdG8tcmVkdWNlLWJsb2F0aW5nJTNmdXRtX2NvbnRlbnQlM2Q2NzU4MjAzNTJfMTE2MzI4NTE1OTM0Nzg4MF8lMjZhX2FpZCUzZGY3MDc2Yzc0JTI2Y2hhbiUzZDY3NTgyMDM1MiUyNnV0bV9zb3VyY2UlM2RiaW5nJTI2dXRtX2NhbXBhaWduJTNkcXVhdHRybyUyNnV0bV9tZWRpdW0lM2RjcGMlMjZ1dG1fY29udGVudCUzZDY3NTgyMDM1Ml8xMTYzMjg1MTU5MzQ3ODgwXyUyNm1zY2xraWQlM2RkNjBiOGY5YTJkY2YxNmQ1NDliZGU4ODM1N2FjMGIxNSUyNnV0bV90ZXJtJTNkMXN0cGhvcm0uY29t%2526rlid%253dd60b8f9a2dcf16d549bde88357ac0b15%2FRK%3D2%2FRS%3DeWQezDqS4jwNOe_VMN_HYijYs0M-&o=VFmsd83PVsGc17Notsei1nhYrES1CZHGgnVrgvgeATJSLn%2BEUOLyr06e3E%2Fv1IzmYxEnm8LOEBVuwzffoKL30YFHmJk4d0y4dAS0rgkWpT1Km4oXqst3TMqHUHOXT%2BbnYMGR6blMwPcVaD1KjoleSABqFUySK95hpSt0ubY1zv9hnxbdTewuvXjqoJuNcdmNhd7jniNMl%2BF0K7jbQj1nw5wP8zoXwMiZFUTyBbiRzAfhbqFGT3ufd93F3uTp%2FUMfnAw29ai76ty3Zz1%2FNTQXGqXiR%2Bymh84gFAShQzRggNISp7Sm%2BS%2BEk4QJ73lJWsBqQkGf1RF%2Bv23IAf7uEKuCTGHAJLjeKnS6nIcPAayiC%2BlXTow2A%2BBrFOeyeZ8oDvTFM6PehDcwJyxAYTqkPHFQnSwLPOFFkJfEdYg72IZoh8LcoDZUVbYmOz%2Bj5JVo0wkAR2O07RtdGWhAXxY%2BcPjYFoNUurpEtH%2BtOb2XOOy%2Bx%2FUBf7U3NqyUp2vPSz6R3XOXetP%2FL8OqvQ5r3pam%2Bsd700eA4NxqlswEnQM6sAtCcxILk%2F7Z4qSTgvvx9xIdlJkhSHo981A7%2BceRMYVBPHZAYG0jmmkme0KjOimfcaIr3C9Hgu1W6x9WnP9zkgkUiqzA2BgBkeA%2FrpDizBvrMb361w%3D%3D&c=210647726857918739902637&n=jfabrI%2FaXM7QueoQSSXfycouHyRWmFjntg37gpJURn2ZVSMAxPCcyD2b4Z3APA2xUOQdBLZkVo%2FFCo7aS8zVe4bLm%2BEENwBQn%2FuoTpnh4NeQ2x%2FP8SYGQJO9SCe3HKOFEm%2FbN4PcvdqTprk6tb%2BXp2RKJtqTCMjC3X5Ak9gx0sN32AbHBbqGH1vDIYlcMrT0omddcSdqlAPRHclFiVddLArIRMTVqSBJ0QXmhI%2FBkJ0Y3eDLxDD34fC8HRKsmcx8rfBIRRkpp3tfoptGArHh585KoFwaGJvsRT1F0v2JkCcxZIijc%2B4OqwQT0Ahv1S8tU9f1eP4rfFbMQd0gLDydFv%2BEST2HUuVr02qb5b7YrKd1zrU5KC6Lf3wXrBtQBlzlvPE1uYj6wYLh96V78CJcPBYUNaNV%2BfJTbn%2FRBFqJy1cS5FZdA2V5DERwS8vFZ39Hou6UGqznn7mG7u8g4QNaqCSJnCMo70P0T6h7vPzWaiykH7C9tr17gNRtnn3Qv7Lf9vk%2BmcEkxROfnjeenVjo2kvlxtcP4uLTwBZtNpQOPn83xnRkEOSFhwHBD%2BEP5QRLXwtGY35wpybH1QAMOkeqkZb0udUD%2F2P1H4ONnrcIJtndQM71XfVbX6EYiDF32LjYIGj8fWW28dokVo%2FAxcTO7Zgms%2F8Nn8RNs0xyGPHWHKYgatVBBh%2FFY6kPHkbq7JKaNFDV4Tb0I5YHeZILex8Rjp5eE%2FNcj%2Fn%2F7EUMd9TOwL%2Fr2py%2B%2BTKfanWtfScwANU1pX%2F9Ttv01f4H7g6CGnBP4iaIjdSCf8I8AmNZc6b6ThJriQnSrgD51uzsdrSN3%2FjcYEKEj2p%2Bh1IhFn4Sfz9MJKz92J9p65s1RiN%2B9ZYK3qRNJz7VTbv0JaVwhwqUqresN6awlM6QeDEfPdygKBQC9QZdj5EkAVun2P1K8y%2BJzyxoF5RMCM3S26KgorcqDIY99R87tO%2BnHLt0hxxWV78L%2FzTx0lcBJaOKsx5kFH4iDY7jsq%2FwxzVwssVyn4%2BEm8EZ9MEaTfZjS7Jc3spt%2BfsI6
Source: chromecache_286.5.dr, chromecache_351.5.dr	String found in binary or memory: "Gateway",served_ind:"N"},F={popoverLabel:c.social_share_header_link,header:c.social_share_header_link,activate:"onclick",width:530},A=function(){w.hide();t.hide();L.hide()},D={facebook:{server:"//www.facebook.com",template:"/share.php?u\x3d__FULLURL__"},twitter:{server:"https://twitter.com",template:"/intent/tweet?original_referer\x3d__FULLURL__\x26text\x3d__DESCRIPTION__\x26related\x3d__RELATEDACCOUNTS__\x26url\x3d__SHORTURL__\x26via\x3d__VIA__",relatedAccounts:"amazondeals,amazonmp3"},ameba:{server:"https://blog.ameba.jp", equals www.facebook.com (Facebook)
Source: chromecache_286.5.dr, chromecache_351.5.dr	String found in binary or memory: "Gateway",served_ind:"N"},F={popoverLabel:c.social_share_header_link,header:c.social_share_header_link,activate:"onclick",width:530},A=function(){w.hide();t.hide();L.hide()},D={facebook:{server:"//www.facebook.com",template:"/share.php?u\x3d__FULLURL__"},twitter:{server:"https://twitter.com",template:"/intent/tweet?original_referer\x3d__FULLURL__\x26text\x3d__DESCRIPTION__\x26related\x3d__RELATEDACCOUNTS__\x26url\x3d__SHORTURL__\x26via\x3d__VIA__",relatedAccounts:"amazondeals,amazonmp3"},ameba:{server:"https://blog.ameba.jp", equals www.twitter.com (Twitter)
Source: chromecache_209.5.dr, chromecache_392.5.dr	String found in binary or memory: (function(h){var d=window.AmazonUIPageJS\|\|window.P,r=d._namespace\|\|d.attributeErrors,g=r?r("ShareWidgetTriggerAssets",""):d;g.guardFatal?g.guardFatal(h)(g,window):g.execute(function(){h(g,window)})})(function(h,d,r){h.now("tafShareOnNetwork").execute(function(d){"undefined"!==typeof d?h.log("tafShareOnNetwork is already registered","WARN","ShareWidgetTriggerAssets"):h.when("A","socialShareUtil").register("tafShareOnNetwork",function(c,a){var d={facebook:{shareEndpoint:"https://www.facebook.com/dialog/share", equals www.facebook.com (Facebook)
Source: chromecache_209.5.dr, chromecache_392.5.dr	String found in binary or memory: return"".concat(this.shareBaseUrl).concat(d).concat(b)}},fb:{label:"Facebook",name:"facebook",ref:"fa",shareBaseUrl:"https://www.facebook.com/dialog/share",image:"".concat("https://m.media-amazon.com/images/G/01/share-icons/","facebook-circular.svg"),imageSquared:"".concat("https://m.media-amazon.com/images/G/01/share-icons/","facebook-squared.svg"),canOpenInPopup:!0,getSharingUrl:function(b){b=encodeURIComponent(b\|\|a.shareUrl.getReturnForChannel(this.ref));var d=encodeURIComponent(a.shareUrl.getReturnForChannel(this.ref).replace("_r_", equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: frothylattestudio.com
Source: global traffic	DNS traffic detected: DNS query: ww1.frothylattestudio.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: delivery.consentmanager.net
Source: global traffic	DNS traffic detected: DNS query: cdn.consentmanager.net
Source: global traffic	DNS traffic detected: DNS query: a.delivery.consentmanager.net
Source: global traffic	DNS traffic detected: DNS query: i3.cdn-image.com
Source: global traffic	DNS traffic detected: DNS query: i1.cdn-image.com
Source: global traffic	DNS traffic detected: DNS query: r.search.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: www.amazon.com
Source: global traffic	DNS traffic detected: DNS query: m.media-amazon.com
Source: global traffic	DNS traffic detected: DNS query: images-na.ssl-images-amazon.com
Source: global traffic	DNS traffic detected: DNS query: completion.amazon.com
Source: global traffic	DNS traffic detected: DNS query: unagi-na.amazon.com
Source: global traffic	DNS traffic detected: DNS query: aax-us-iad.amazon.com
Source: global traffic	DNS traffic detected: DNS query: d1f0esyb34c1g2.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: fls-na.amazon.com
Source: global traffic	DNS traffic detected: DNS query: unagi.amazon.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: c.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: s.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: ara.paa-reporting-advertising.amazon
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: match.360yield.com
Source: global traffic	DNS traffic detected: DNS query: rtb-csync.smartadserver.com
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: pbs.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: capi.connatix.com
Source: global traffic	DNS traffic detected: DNS query: amazon.partners.tremorhub.com
Source: global traffic	DNS traffic detected: DNS query: www.imdb.com
Source: global traffic	DNS traffic detected: DNS query: usersync.samplicio.us
Source: global traffic	DNS traffic detected: DNS query: ads.samba.tv
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: odr.mookie1.com
Source: global traffic	DNS traffic detected: DNS query: c1.adform.net
Source: global traffic	DNS traffic detected: DNS query: bs.serving-sys.com
Source: global traffic	DNS traffic detected: DNS query: cookie-matching.mediarithmics.com
Source: global traffic	DNS traffic detected: DNS query: csync.loopme.me
Source: global traffic	DNS traffic detected: DNS query: ssum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: crb.kargo.com
Source: global traffic	DNS traffic detected: DNS query: image2.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: lm.serving-sys.com
Source: global traffic	DNS traffic detected: DNS query: loadus.exelator.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: lciapi.ninthdecimal.com
Source: global traffic	DNS traffic detected: DNS query: sync-amazon.ads.yieldmo.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: sync.taboola.com
Source: global traffic	DNS traffic detected: DNS query: aa.agkn.com
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: tags.bluekai.com
Source: global traffic	DNS traffic detected: DNS query: public-prod-dspcookiematching.dmxleo.com
Source: global traffic	DNS traffic detected: DNS query: cms.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: spl.zeotap.com
Source: global traffic	DNS traffic detected: DNS query: ads.stickyadstv.com
Source: global traffic	DNS traffic detected: DNS query: sync.rfp.fout.jp
Source: global traffic	DNS traffic detected: DNS query: beacon.krxd.net
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: match.sharethrough.com
Source: global traffic	DNS traffic detected: DNS query: ms-cookie-sync.presage.io
Source: global traffic	DNS traffic detected: DNS query: mwzeom.zeotap.com
Source: global traffic	DNS traffic detected: DNS query: usermatch.krxd.net
Source: global traffic	DNS traffic detected: DNS query: sb.scorecardresearch.com
Source: global traffic	DNS traffic detected: DNS query: eb2.3lift.com
Source: global traffic	DNS traffic detected: DNS query: uipglob.semasio.net
Source: global traffic	DNS traffic detected: DNS query: usersync.gumgum.com
Source: global traffic	DNS traffic detected: DNS query: pi.ispot.tv
Source: global traffic	DNS traffic detected: DNS query: image6.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: uipus.semasio.net
Source: global traffic	DNS traffic detected: DNS query: health.amazon.com

Source: unknown

HTTP traffic detected: POST /1/events/com.amazon.csm.nexusclient.prod HTTP/1.1Host: unagi-na.amazon.comConnection: keep-aliveContent-Length: 477sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://www.amazon.comSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session-id=146-5727277-4453238; session-id-time=2082787201l; i18n-prefs=USD; lc-main=en_US

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/jsonTransfer-Encoding: chunkedConnection: closeServer: ServerDate: Wed, 23 Oct 2024 22:36:58 GMTx-amz-rid: 9V7734WJKX1VC9G7B9V8set-cookie: session-token=RwxXLe/OCMr3sXpne7FMe3gHudBNzZS8qWWr5IZMdJA6pOR0LWWdzgjvg+qnKQPa+2yc4L1t9PgzMIgeBQt/11rqcF6hSWH1WGI392TRAn9d0O8/Xwq2yqE0DqjaXrxNj4bvW/NxZQ0j5JfmiUYJK1o2uRxeSeO8pmXE5Bf1iVSNfc1HV4/SxkE/u4+jGI7JyDZQdjEc78QNGY00Q+qScr2sDauiG7Z0y49qLuAY5aRVzluwCk50MKKlFStXTv21l4Y4NceDl+ltQoyV23Dy4K2WZ7t8J9TXqcNGISm9CS6mNn0zE+Q/c/eDCarfpPquUMjyxR4udFCdtWcfInOFnP2km2RBFLO9; Domain=.amazon.com; Expires=Thu, 23-Oct-2025 22:36:58 GMT; Path=/; SecureAccept-CH-Lifetime: 86400X-Content-Type-Options: nosniffcontent-security-policy-report-only: default-src 'self' blob: https: data: mediastream: 'unsafe-eval' 'unsafe-inline';report-uri https://metrics.media-amazon.com/Accept-CH: ect,rtt,downlink,device-memory,sec-ch-device-memory,viewport-width,sec-ch-viewport-width,dpr,sec-ch-dprX-XSS-Protection: 1;Content-Security-Policy: upgrade-insecure-requests;report-uri https://metrics.media-amazon.com/Strict-Transport-Security: max-age=47474747; includeSubDomains; preloadVary: Content-Type,Accept-Encoding,User-AgentX-Frame-Options: SAMEORIGINX-Cache: Error from cloudfrontVia: 1.1 163be08bc1bc44818353c4fd88655bee.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA6-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: UX1AFIjzWFFat6pRSSpyJE7x1q2KLg34clOviaiYi4tDpFQOXzoxKQ==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: ServerDate: Wed, 23 Oct 2024 22:37:01 GMTContent-Length: 29Connection: closex-amz-rid: VA4P1317J7XW4P2MPF2Wx-amzn-RequestId: 4bbaefed-e4c8-46a9-b501-b364eb56f235Vary: Content-Type,Accept-Encoding,User-AgentStrict-Transport-Security: max-age=47474747; includeSubDomains; preload
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: ServerDate: Wed, 23 Oct 2024 22:37:02 GMTContent-Length: 29Connection: closex-amz-rid: 5AJ2VQM5HF66MQ6CFZWMx-amzn-RequestId: c8dcbbee-aaf9-443e-b2a0-d3c1f5641addVary: Content-Type,Accept-Encoding,User-AgentStrict-Transport-Security: max-age=47474747; includeSubDomains; preload
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Length: 9Date: Wed, 23 Oct 2024 22:37:10 GMTVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: ServerDate: Wed, 23 Oct 2024 22:37:22 GMTContent-Length: 29Connection: closex-amz-rid: BNNM7GDQAF9DXR2GA4EYx-amzn-RequestId: 2593d8e1-ddb1-414a-bc66-74363243c60eVary: Content-Type,Accept-Encoding,User-AgentStrict-Transport-Security: max-age=47474747; includeSubDomains; preload
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Wed, 23 Oct 2024 22:36:19 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveContent-Encoding: gzipData Raw: 61 61 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed 90 b1 0a 02 31 10 44 7b c1 7f 58 3f 20 44 e1 ca 25 8d 28 58 68 e3 17 e4 dc f5 12 c8 6d 8e 18 c1 fb 7b 13 bd 03 b1 b6 b4 dc 99 37 c3 b0 e8 72 1f cc 72 81 8e 2d 19 cc 3e 07 36 cd ba 81 53 cc b0 8f 77 21 d4 6f 11 f5 0b 29 68 1b 69 ac 91 0b 4b e6 64 d0 6d be 13 45 41 3d d9 b5 bb 40 d3 25 9d 97 c7 a7 a7 e7 36 3d 2f 59 29 05 16 06 4b e4 a5 83 1c 81 fc cd b6 81 e1 78 3e ec c0 0a c1 d6 a5 d8 33 5c 93 67 a1 30 02 a7 14 53 49 74 0c 4a d5 65 ff 8a 5f fe e2 09 27 a7 bf a8 24 02 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: aa1D{X? D%(Xhm{7rr->6Sw!o)hiKdmEA=@%6=/Y)Kx>3\g0SItJe_'$0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 23 Oct 2024 22:36:19 GMTServer: ApacheReferrer-Policy: no-referrer-when-downgradeAccept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com")Content-Length: 196Keep-Alive: timeout=5, max=128Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Wed, 23 Oct 2024 22:36:22 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveContent-Encoding: gzipData Raw: 61 61 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed 90 b1 0a 02 31 10 44 7b c1 7f 58 3f 20 44 e1 ca 25 8d 28 58 68 e3 17 e4 dc f5 12 c8 6d 8e 18 c1 fb 7b 13 bd 03 b1 b6 b4 dc 99 37 c3 b0 e8 72 1f cc 72 81 8e 2d 19 cc 3e 07 36 cd ba 81 53 cc b0 8f 77 21 d4 6f 11 f5 0b 29 68 1b 69 ac 91 0b 4b e6 64 d0 6d be 13 45 41 3d d9 b5 bb 40 d3 25 9d 97 c7 a7 a7 e7 36 3d 2f 59 29 05 16 06 4b e4 a5 83 1c 81 fc cd b6 81 e1 78 3e ec c0 0a c1 d6 a5 d8 33 5c 93 67 a1 30 02 a7 14 53 49 74 0c 4a d5 65 ff 8a 5f fe e2 09 27 a7 bf a8 24 02 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: aa1D{X? D%(Xhm{7rr->6Sw!o)hiKdmEA=@%6=/Y)Kx>3\g0SItJe_'$0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Wed, 23 Oct 2024 22:36:22 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveContent-Encoding: gzipData Raw: 61 61 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed 90 b1 0a 02 31 10 44 7b c1 7f 58 3f 20 44 e1 ca 25 8d 28 58 68 e3 17 e4 dc f5 12 c8 6d 8e 18 c1 fb 7b 13 bd 03 b1 b6 b4 dc 99 37 c3 b0 e8 72 1f cc 72 81 8e 2d 19 cc 3e 07 36 cd ba 81 53 cc b0 8f 77 21 d4 6f 11 f5 0b 29 68 1b 69 ac 91 0b 4b e6 64 d0 6d be 13 45 41 3d d9 b5 bb 40 d3 25 9d 97 c7 a7 a7 e7 36 3d 2f 59 29 05 16 06 4b e4 a5 83 1c 81 fc cd b6 81 e1 78 3e ec c0 0a c1 d6 a5 d8 33 5c 93 67 a1 30 02 a7 14 53 49 74 0c 4a d5 65 ff 8a 5f fe e2 09 27 a7 bf a8 24 02 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: aa1D{X? D%(Xhm{7rr->6Sw!o)hiKdmEA=@%6=/Y)Kx>3\g0SItJe_'$0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Wed, 23 Oct 2024 22:36:22 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveContent-Encoding: gzipData Raw: 61 61 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed 90 b1 0a 02 31 10 44 7b c1 7f 58 3f 20 44 e1 ca 25 8d 28 58 68 e3 17 e4 dc f5 12 c8 6d 8e 18 c1 fb 7b 13 bd 03 b1 b6 b4 dc 99 37 c3 b0 e8 72 1f cc 72 81 8e 2d 19 cc 3e 07 36 cd ba 81 53 cc b0 8f 77 21 d4 6f 11 f5 0b 29 68 1b 69 ac 91 0b 4b e6 64 d0 6d be 13 45 41 3d d9 b5 bb 40 d3 25 9d 97 c7 a7 a7 e7 36 3d 2f 59 29 05 16 06 4b e4 a5 83 1c 81 fc cd b6 81 e1 78 3e ec c0 0a c1 d6 a5 d8 33 5c 93 67 a1 30 02 a7 14 53 49 74 0c 4a d5 65 ff 8a 5f fe e2 09 27 a7 bf a8 24 02 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: aa1D{X? D%(Xhm{7rr->6Sw!o)hiKdmEA=@%6=/Y)Kx>3\g0SItJe_'$0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 23 Oct 2024 22:36:26 GMTServer: ApacheReferrer-Policy: no-referrer-when-downgradeAccept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com")Content-Length: 10Keep-Alive: timeout=5, max=107Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 4e 6f 20 66 61 76 69 63 6f 6e Data Ascii: No favicon

Source: chromecache_209.5.dr, chromecache_392.5.dr	String found in binary or memory: http://amazon.com/
Source: chromecache_485.5.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot
Source: chromecache_485.5.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix
Source: chromecache_485.5.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf
Source: chromecache_485.5.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold
Source: chromecache_485.5.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf
Source: chromecache_485.5.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
Source: chromecache_485.5.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2
Source: chromecache_485.5.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot
Source: chromecache_485.5.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot?#iefix
Source: chromecache_485.5.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.otf
Source: chromecache_485.5.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.svg#montserrat-medium
Source: chromecache_485.5.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.ttf
Source: chromecache_485.5.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff
Source: chromecache_485.5.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff2
Source: chromecache_485.5.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot
Source: chromecache_485.5.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix
Source: chromecache_485.5.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.otf
Source: chromecache_485.5.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular
Source: chromecache_485.5.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf
Source: chromecache_485.5.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
Source: chromecache_485.5.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2
Source: chromecache_485.5.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/js/min.js?v2.3
Source: chromecache_485.5.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/pics/28905/res-arw.png)
Source: chromecache_485.5.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/pics/28905/search.png)
Source: chromecache_485.5.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/pics/29590/bg1.png)
Source: chromecache_437.5.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot
Source: chromecache_437.5.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix
Source: chromecache_437.5.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf
Source: chromecache_437.5.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold
Source: chromecache_437.5.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf
Source: chromecache_437.5.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
Source: chromecache_437.5.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2
Source: chromecache_437.5.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot
Source: chromecache_437.5.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix
Source: chromecache_437.5.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.otf
Source: chromecache_437.5.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular
Source: chromecache_437.5.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf
Source: chromecache_437.5.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
Source: chromecache_437.5.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2
Source: chromecache_437.5.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/js/min.js?v2.3
Source: chromecache_437.5.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/pics/28903/search.png)
Source: chromecache_437.5.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/pics/28905/arrrow.png)
Source: chromecache_437.5.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/pics/29590/bg1.png)
Source: chromecache_479.5.dr, chromecache_419.5.dr, chromecache_372.5.dr, chromecache_281.5.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_479.5.dr, chromecache_419.5.dr, chromecache_372.5.dr, chromecache_281.5.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_281.5.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_392.5.dr	String found in binary or memory: http://specs.openid.net/auth/2.0
Source: chromecache_392.5.dr	String found in binary or memory: http://specs.openid.net/auth/2.0/identifier_select
Source: chromecache_241.5.dr	String found in binary or memory: http://ww1.frothylattestudio.com/?fp=2qoqDYI%2B0iJZGtPstQqccpYVxaI6ObJitI3FjXXWfpuGUlRgNWh70labVRMtF
Source: chromecache_437.5.dr	String found in binary or memory: http://ww1.frothylattestudio.com/Frothy_Bloat.cfm?fp=2qoqDYI%2B0iJZGtPstQqccvV6mj3sWtCwuxlIlildqdntA
Source: chromecache_437.5.dr	String found in binary or memory: http://ww1.frothylattestudio.com/Frothy_Coffee.cfm?fp=2qoqDYI%2B0iJZGtPstQqccvV6mj3sWtCwuxlIlildqdnt
Source: chromecache_437.5.dr	String found in binary or memory: http://ww1.frothylattestudio.com/Frothy_Urine.cfm?fp=2qoqDYI%2B0iJZGtPstQqccvV6mj3sWtCwuxlIlildqdntA
Source: chromecache_485.5.dr, chromecache_437.5.dr	String found in binary or memory: http://ww1.frothylattestudio.com/display.cfm
Source: chromecache_485.5.dr	String found in binary or memory: http://ww1.frothylattestudio.com/trf?q=Frothy
Source: chromecache_304.5.dr	String found in binary or memory: https://aax-us-iad.amazon.com/e/loi/imp?b=JAVedmlYc8qqblDo18mAwcQAAAGSu4ZmoAEAAAH2AQBvbm9fdHhuX2JpZD
Source: chromecache_304.5.dr	String found in binary or memory: https://aax-us-iad.amazon.com/e/loi/imp?b=JJ6U9ScxO1FQgryuKKeNFiQAAAGSu4ZmlwEAAAH2AQBvbm9fdHhuX2JpZD
Source: chromecache_304.5.dr	String found in binary or memory: https://aax-us-iad.amazon.com/x/c/JAVedmlYc8qqblDo18mAwcQAAAGSu4ZmoAEAAAH2AQBvbm9fdHhuX2JpZDMgICBvbm
Source: chromecache_304.5.dr	String found in binary or memory: https://aax-us-iad.amazon.com/x/c/JJ6U9ScxO1FQgryuKKeNFiQAAAGSu4ZmlwEAAAH2AQBvbm9fdHhuX2JpZDYgICBvbm
Source: chromecache_304.5.dr	String found in binary or memory: https://aax-us-iad.amazon.com/x/px/RAVedmlYc8qqblDo18mAwcQAAAGSu4ZmaAEAAAH2AQBvbm9fdHhuX2JpZDMgICBvb
Source: chromecache_304.5.dr	String found in binary or memory: https://aax-us-iad.amazon.com/x/px/RJ6U9ScxO1FQgryuKKeNFiQAAAGSu4ZmXAEAAAH2AQBvbm9fdHhuX2JpZDYgICBvb
Source: chromecache_393.5.dr	String found in binary or memory: https://adsense.com.
Source: chromecache_304.5.dr	String found in binary or memory: https://advertising.amazon.com/?ref=ext_amzn_ftr
Source: chromecache_304.5.dr	String found in binary or memory: https://advertising.amazon.com/?ref=footer_advtsing_amzn_com
Source: chromecache_304.5.dr	String found in binary or memory: https://affiliate-program.amazon.com/
Source: chromecache_209.5.dr, chromecache_392.5.dr	String found in binary or memory: https://amazon.com
Source: chromecache_346.5.dr, chromecache_261.5.dr	String found in binary or memory: https://amazon.com/view-in-your-room/contextual-list?
Source: chromecache_346.5.dr, chromecache_261.5.dr	String found in binary or memory: https://amazon.com/view-in-your-room?
Source: chromecache_209.5.dr, chromecache_392.5.dr	String found in binary or memory: https://api.whatsapp.com/send?text
Source: chromecache_203.5.dr, chromecache_482.5.dr	String found in binary or memory: https://ara.paa-reporting-advertising.amazon
Source: chromecache_304.5.dr	String found in binary or memory: https://aws.amazon.com/what-is-cloud-computing/?sc_channel=EL&sc_campaign=amazonfooter
Source: chromecache_203.5.dr, chromecache_482.5.dr	String found in binary or memory: https://beta-ara.paa-reporting-advertising.amazon
Source: chromecache_304.5.dr	String found in binary or memory: https://blinkforhome.com/?ref=nav_footer
Source: chromecache_286.5.dr, chromecache_351.5.dr	String found in binary or memory: https://blog.ameba.jp
Source: chromecache_286.5.dr, chromecache_351.5.dr	String found in binary or memory: https://blog.goo.ne.jp
Source: chromecache_286.5.dr, chromecache_351.5.dr	String found in binary or memory: https://blog.hatena.ne.jp
Source: chromecache_304.5.dr	String found in binary or memory: https://brandservices.amazon.com/?ref=AOUSABRLGNRFOOT&ld=AOUSABRLGNRFOOT
Source: chromecache_304.5.dr	String found in binary or memory: https://c.amazon-adsystem.com/bao-csm/forensics/a9-tq-forensics-incremental.min.js
Source: chromecache_485.5.dr, chromecache_437.5.dr	String found in binary or memory: https://cdn.consentmanager.net
Source: chromecache_304.5.dr	String found in binary or memory: https://completion.amazon.com
Source: chromecache_304.5.dr	String found in binary or memory: https://d1f0esyb34c1g2.cloudfront.net/transcode/storyTeller/A1S3VA65QL41QA/17dcbf81-80a9-4396-9cf4-1
Source: chromecache_304.5.dr	String found in binary or memory: https://data.amazon.com/api/marketplaces/ATVPDKIKX0DER/cart/carts/retail/items?ref=sr_atc_rt_add_15&
Source: chromecache_304.5.dr	String found in binary or memory: https://data.amazon.com/api/marketplaces/ATVPDKIKX0DER/cart/carts/retail/items?ref=sr_atc_rt_add_29&
Source: chromecache_304.5.dr	String found in binary or memory: https://data.amazon.com/api/marketplaces/ATVPDKIKX0DER/cart/carts/retail/items?ref=sr_atc_rt_add_36&
Source: chromecache_304.5.dr	String found in binary or memory: https://data.amazon.com/api/marketplaces/ATVPDKIKX0DER/cart/carts/retail/items?ref=sr_atc_rt_add_39&
Source: chromecache_304.5.dr	String found in binary or memory: https://data.amazon.com/api/marketplaces/ATVPDKIKX0DER/cart/carts/retail/items?ref=sr_atc_rt_add_4&a
Source: chromecache_304.5.dr	String found in binary or memory: https://data.amazon.com/api/marketplaces/ATVPDKIKX0DER/cart/carts/retail/items?ref=sr_atc_rt_add_45&
Source: chromecache_304.5.dr	String found in binary or memory: https://data.amazon.com/api/marketplaces/ATVPDKIKX0DER/cart/carts/retail/items?ref=sr_atc_rt_add_48&
Source: chromecache_304.5.dr	String found in binary or memory: https://data.amazon.com/api/marketplaces/ATVPDKIKX0DER/cart/carts/retail/items?ref=sr_atc_rt_add_8&a
Source: chromecache_304.5.dr	String found in binary or memory: https://data.amazon.com/api/marketplaces/ATVPDKIKX0DER/cart/carts/retail/items?ref=sr_atc_rt_rmv_15&
Source: chromecache_304.5.dr	String found in binary or memory: https://data.amazon.com/api/marketplaces/ATVPDKIKX0DER/cart/carts/retail/items?ref=sr_atc_rt_rmv_29&
Source: chromecache_304.5.dr	String found in binary or memory: https://data.amazon.com/api/marketplaces/ATVPDKIKX0DER/cart/carts/retail/items?ref=sr_atc_rt_rmv_36&
Source: chromecache_304.5.dr	String found in binary or memory: https://data.amazon.com/api/marketplaces/ATVPDKIKX0DER/cart/carts/retail/items?ref=sr_atc_rt_rmv_39&
Source: chromecache_304.5.dr	String found in binary or memory: https://data.amazon.com/api/marketplaces/ATVPDKIKX0DER/cart/carts/retail/items?ref=sr_atc_rt_rmv_4&a
Source: chromecache_304.5.dr	String found in binary or memory: https://data.amazon.com/api/marketplaces/ATVPDKIKX0DER/cart/carts/retail/items?ref=sr_atc_rt_rmv_45&
Source: chromecache_304.5.dr	String found in binary or memory: https://data.amazon.com/api/marketplaces/ATVPDKIKX0DER/cart/carts/retail/items?ref=sr_atc_rt_rmv_48&
Source: chromecache_304.5.dr	String found in binary or memory: https://data.amazon.com/api/marketplaces/ATVPDKIKX0DER/cart/carts/retail/items?ref=sr_atc_rt_rmv_8&a
Source: chromecache_485.5.dr, chromecache_437.5.dr	String found in binary or memory: https://delivery.consentmanager.net
Source: chromecache_304.5.dr	String found in binary or memory: https://developer.amazon.com
Source: chromecache_304.5.dr	String found in binary or memory: https://eero.com/
Source: chromecache_304.5.dr	String found in binary or memory: https://email.aboutamazon.com/l/637851/2020-10-29/pd87g?utm_source=gateway&utm_medium=amazonfooters&
Source: chromecache_203.5.dr, chromecache_482.5.dr	String found in binary or memory: https://gamma-ara.paa-reporting-advertising.amazon
Source: chromecache_286.5.dr, chromecache_351.5.dr	String found in binary or memory: https://health.amazon.com/?ref
Source: chromecache_304.5.dr	String found in binary or memory: https://health.amazon.com/prime?ref_=nav_cs_all_health_ingress_onem_h
Source: chromecache_304.5.dr	String found in binary or memory: https://images-na.ssl-images-amazon.com
Source: chromecache_259.5.dr	String found in binary or memory: https://images-na.ssl-images-amazon.com/images/G/01/navcart/spinner-white._V4_.gif)
Source: chromecache_304.5.dr	String found in binary or memory: https://images-na.ssl-images-amazon.com/images/G/01/omaha/images/yoda/flyout_72dpi._V270255989_.png
Source: chromecache_286.5.dr, chromecache_351.5.dr	String found in binary or memory: https://images-na.ssl-images-amazon.com/images/G/01/poppin/JavaScript/moment-timezone-with-data.min.
Source: chromecache_286.5.dr, chromecache_351.5.dr	String found in binary or memory: https://images-na.ssl-images-amazon.com/images/G/01/poppin/JavaScript/moment.min._TTD_.js
Source: chromecache_304.5.dr	String found in binary or memory: https://images-na.ssl-images-amazon.com/images/G/01/prime/piv/YourPrimePIV_fallback_CTA._V327346943_
Source: chromecache_304.5.dr	String found in binary or memory: https://images-na.ssl-images-amazon.com/images/I/01mI9NDJJTL._RC
Source: chromecache_304.5.dr	String found in binary or memory: https://images-na.ssl-images-amazon.com/images/I/11EIQ5IGqaL._RC
Source: chromecache_304.5.dr	String found in binary or memory: https://images-na.ssl-images-amazon.com/images/I/11XMgK3X1EL._RC
Source: chromecache_304.5.dr	String found in binary or memory: https://images-na.ssl-images-amazon.com/images/I/11mVszy8FIL.js?AUIClients/AmazonRushAssetLoader
Source: chromecache_304.5.dr	String found in binary or memory: https://images-na.ssl-images-amazon.com/images/I/11oNqlOaNXL._RC
Source: chromecache_304.5.dr	String found in binary or memory: https://images-na.ssl-images-amazon.com/images/I/21RZgaOpsqL._RC
Source: chromecache_304.5.dr	String found in binary or memory: https://images-na.ssl-images-amazon.com/images/I/21cuxCuJB9L.js?AUIClients/AmazonRushRouter
Source: chromecache_304.5.dr	String found in binary or memory: https://images-na.ssl-images-amazon.com/images/I/31YT4iYOlWL.js?AUIClients/AllOffersDisplayIngressAs
Source: chromecache_304.5.dr	String found in binary or memory: https://images-na.ssl-images-amazon.com/images/I/31bJewCvY-L.js
Source: chromecache_304.5.dr	String found in binary or memory: https://images-na.ssl-images-amazon.com/images/I/31fNEss5igL.css?AUIClients/DetailPageAllOffersDispl
Source: chromecache_304.5.dr	String found in binary or memory: https://images-na.ssl-images-amazon.com/images/I/41-WpIOxHtL._RC
Source: chromecache_304.5.dr	String found in binary or memory: https://images-na.ssl-images-amazon.com/images/I/411x8BHUrFL._RC
Source: chromecache_304.5.dr	String found in binary or memory: https://images-na.ssl-images-amazon.com/images/I/41k9TQrnHzL.js?AUIClients/AmazonRushFramework
Source: chromecache_304.5.dr	String found in binary or memory: https://images-na.ssl-images-amazon.com/images/I/51GRfnCRJBL._RC
Source: chromecache_304.5.dr	String found in binary or memory: https://images-na.ssl-images-amazon.com/images/I/51HA46bPoTL.js?xcp
Source: chromecache_304.5.dr	String found in binary or memory: https://images-na.ssl-images-amazon.com/images/I/61PQY25
Source: chromecache_304.5.dr	String found in binary or memory: https://images-na.ssl-images-amazon.com/images/I/61fUW7mrhuL.js?AUIClients/DetailPageAllOffersDispla
Source: chromecache_304.5.dr	String found in binary or memory: https://kdp.amazon.com
Source: chromecache_286.5.dr, chromecache_351.5.dr	String found in binary or memory: https://livedoor.blogcms.jp
Source: chromecache_304.5.dr	String found in binary or memory: https://logistics.amazon.com/marketing?utm_source=amzn&utm_medium=footer&utm_campaign=home
Source: chromecache_303.5.dr, chromecache_304.5.dr, chromecache_448.5.dr	String found in binary or memory: https://m.media-amazon.com
Source: chromecache_209.5.dr, chromecache_392.5.dr	String found in binary or memory: https://m.media-amazon.com/images/G/01/AppFirst/ConsultAFriend/caf-education-no-audio.mp4
Source: chromecache_209.5.dr, chromecache_392.5.dr	String found in binary or memory: https://m.media-amazon.com/images/G/01/AppFirst/ConsultAFriend/information-default.png
Source: chromecache_346.5.dr, chromecache_261.5.dr	String found in binary or memory: https://m.media-amazon.com/images/G/01/VisualSearch/VisualIndicator/AmazonAR_icon1.svg
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/G/01/ad-feedback/default_info_icon_3x.png);background-size:contain
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/G/01/ad-feedback/info_icon_1Xsprite.png)
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/G/01/ad-feedback/info_icon_1Xsprite.png);background-position:0
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/G/01/ad-feedback/new_info_icon_3x.png);background-size:contain;wid
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/G/01/ad-feedback/new_info_icon_sprite_1x.png);background-position:
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/G/01/csm/showads.v2.js?category=ad&adstype=-ad-column-&ad_size=-ho
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/G/01/digital/video/merch/Other/TNFL_24_SWM_700x78_POST_Final_noLoc
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/G/01/gno/sprites/nav-sprite-global-1x-reorg-privacy._CB587940754_.
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/G/01/gno/sprites/nav-sprite-global-2x-reorg-privacy._CB587940754_.
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/G/01/gno/sprites/timeline_sprite_1x._CB485945973_.png);
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/G/01/gno/sprites/timeline_sprite_2x._CB443581191_.png
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/G/01/javascripts/lib/popover/images/snake._CB485935611_.gif);
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/G/01/personalization/ybh/loading-4x-gray._CB485916920_.gif
Source: chromecache_392.5.dr	String found in binary or memory: https://m.media-amazon.com/images/G/01/share-icons/
Source: chromecache_392.5.dr	String found in binary or memory: https://m.media-amazon.com/images/G/01/share-icons/arrow-left.svg
Source: chromecache_209.5.dr, chromecache_392.5.dr	String found in binary or memory: https://m.media-amazon.com/images/G/01/share-icons/share-android.svg
Source: chromecache_209.5.dr, chromecache_392.5.dr	String found in binary or memory: https://m.media-amazon.com/images/G/01/share-icons/share-icon-experiment.svg
Source: chromecache_209.5.dr, chromecache_392.5.dr	String found in binary or memory: https://m.media-amazon.com/images/G/01/share-icons/share-std.svg
Source: chromecache_351.5.dr	String found in binary or memory: https://m.media-amazon.com/images/G/01/shopbylook/shoppable-images/next_tab_control._CB416468320_.sv
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/G/01/x-locale/common/transparent-pixel._CB485935036_.gif
Source: chromecache_346.5.dr, chromecache_261.5.dr	String found in binary or memory: https://m.media-amazon.com/images/I/
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/I/01HCjmNENyL._RC
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/I/01mbLYIbb6L._RC
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/I/11
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/I/11EIQ5IGqaL._RC
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/I/11oNqlOaNXL._RC
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/I/21vARlfe4pL._RC
Source: chromecache_209.5.dr, chromecache_392.5.dr	String found in binary or memory: https://m.media-amazon.com/images/I/417kcYISTOL.jpg
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/I/41JGxdrbFrL.js?AUIClients/AmazonLightsaberPageAssets
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/I/51BqsgbDI7L.js?AUIClients/CardJsRuntimeBuzzCopyBuild
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/I/51gsV34BhEL._AC_UL320_.jpg
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/I/51gsV34BhEL._AC_UL480_FMwebp_QL65_.jpg
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/I/51gsV34BhEL._AC_UL640_FMwebp_QL65_.jpg
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/I/51gsV34BhEL._AC_UL800_FMwebp_QL65_.jpg
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/I/51gsV34BhEL._AC_UL960_FMwebp_QL65_.jpg
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/I/61xJcNKKLXL.js?AUIClients/AmazonUIjQuery
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/I/71kvz9PSYkL._AC_UL1280_FMwebp_QL65_.jpg
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/I/71kvz9PSYkL._AC_UL1600_FMwebp_QL65_.jpg
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/I/71kvz9PSYkL._AC_UL1920_FMwebp_QL65_.jpg
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/I/71kvz9PSYkL._AC_UL640_QL65_.jpg
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/I/71kvz9PSYkL._AC_UL960_FMwebp_QL65_.jpg
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/I/71t2OGXp3pL._AC_UL320_.jpg
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/I/71t2OGXp3pL._AC_UL480_FMwebp_QL65_.jpg
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/I/71t2OGXp3pL._AC_UL640_FMwebp_QL65_.jpg
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/I/71t2OGXp3pL._AC_UL800_FMwebp_QL65_.jpg
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/I/71t2OGXp3pL._AC_UL960_FMwebp_QL65_.jpg
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/I/81LmaXL9x7L.js?AUIClients/FWCIMAssets
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/al-na-9d5791cf-3faf/e038edb4-31bc-4d39-ab1a-a4a7bcee0b7a.mp4/pro
Source: chromecache_304.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/al-na-9d5791cf-3faf/e038edb4-31bc-4d39-ab1a-a4a7bcee0b7a.mp4/r/T
Source: chromecache_427.5.dr, chromecache_452.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/-0k$2FlUkg9tyD3.png)
Source: chromecache_452.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/-NcRiM84u1IwoUa.gif)
Source: chromecache_194.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/16Ce0wZkrsCr$en.png)
Source: chromecache_452.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/2KViI4b7ZZCNtr3.png);-webkit-background-size:512px
Source: chromecache_427.5.dr, chromecache_452.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/2SazJx$EeTHfhMN.woff2)
Source: chromecache_194.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/5uJUWEszo9hoRiT.png);background-size:contain
Source: chromecache_459.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/5wejH04P3ogfQ-4.svg)
Source: chromecache_194.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/7Nf$80pr8M8iP8U.png)
Source: chromecache_194.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/8uNxVlqodB$rBWP.png)
Source: chromecache_427.5.dr, chromecache_452.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/CKWYNOHAO2meoCm.png)
Source: chromecache_427.5.dr, chromecache_452.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/CjbL$jCCegyfqZ7.woff)
Source: chromecache_427.5.dr, chromecache_452.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/Dv1WQ5DdeMS5qP7.woff2)
Source: chromecache_461.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/FkkRBKErRGCzxiA.png);background-size:13px
Source: chromecache_194.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/GfikJ0xvVSRQIzY.png)
Source: chromecache_461.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/Ims3b9USHEcxIvV.png)
Source: chromecache_427.5.dr, chromecache_452.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/JJsp0ZvgpfwzJM6.woff)
Source: chromecache_452.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/JT89MwO$JunoYts.png)
Source: chromecache_427.5.dr, chromecache_452.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/KFPk-9IF4FqAqY-.woff2)
Source: chromecache_427.5.dr, chromecache_452.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/KwhNPG8Jz-Vz2X7.woff2)
Source: chromecache_427.5.dr, chromecache_452.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/McBZv0ZvnbehkIx.png);background-repeat:no-repeat;background
Source: chromecache_194.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/MzBlK1UBudXJetO.png)
Source: chromecache_461.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/OMJ6YLPcVKydtJQ.png);background-size:11px
Source: chromecache_194.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/SbbH9mh-ksh0n4E.png)
Source: chromecache_194.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/UaGigx0ilLZ9PDE.png);background-size:contain;background-rep
Source: chromecache_427.5.dr, chromecache_452.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/VjTR4RqBzY0mUYx.woff2)
Source: chromecache_427.5.dr, chromecache_452.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/WOnTLzkiaEccV7F.woff2)
Source: chromecache_427.5.dr, chromecache_452.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/XIvhNCZAsrT80Wz.woff)
Source: chromecache_194.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/XbXEZE76MQS35vU.png)
Source: chromecache_427.5.dr, chromecache_452.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/YAEPfuhs1l-argd.woff)
Source: chromecache_427.5.dr, chromecache_452.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/e0LnMbFWJC-TMQz.woff)
Source: chromecache_194.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/hmVNTQDah1G18pL.png)
Source: chromecache_194.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/jkRuHu16eujI0WC.png)
Source: chromecache_427.5.dr, chromecache_452.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/kfKKBuoqcD$AUKL.woff)
Source: chromecache_427.5.dr, chromecache_452.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/mzVbGSgvdBfRLX9.woff)
Source: chromecache_427.5.dr, chromecache_452.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/ozb5-CLHQWI6Soc.woff2)
Source: chromecache_427.5.dr, chromecache_452.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/pDxWAF1pBB0dzGB.woff2)
Source: chromecache_452.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/prp2-N9d2Q$gDX5.gif)
Source: chromecache_452.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/rYl2U4vajeeRGLE.png)
Source: chromecache_427.5.dr, chromecache_452.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/twzZHebXjCHBb6v.woff)
Source: chromecache_259.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/yRAPHyT6B5LA-kG.png);width:11px;height:10px
Source: chromecache_427.5.dr, chromecache_452.5.dr	String found in binary or memory: https://m.media-amazon.com/images/S/sash/ydDD9hnRfziI$y7.png)
Source: chromecache_304.5.dr	String found in binary or memory: https://music.amazon.com?ref=dm_aff_amz_com
Source: chromecache_393.5.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_393.5.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=plmetrics
Source: chromecache_209.5.dr, chromecache_392.5.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?_
Source: chromecache_303.5.dr, chromecache_448.5.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?_=1607460946161
Source: chromecache_393.5.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/err_rep.js
Source: chromecache_393.5.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/logging_library.js
Source: chromecache_393.5.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/managed/js/adsense/$
Source: chromecache_393.5.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping?e=1
Source: chromecache_304.5.dr	String found in binary or memory: https://pharmacy.amazon.com/?nodl=0&ref_=nav_cs_pharmacy
Source: chromecache_304.5.dr	String found in binary or memory: https://pro.imdb.com?ref_=amzn_nav_ftr
Source: chromecache_304.5.dr	String found in binary or memory: https://ring.com
Source: chromecache_304.5.dr	String found in binary or memory: https://sell.amazon.com/?ld=AZFSSOA_FTSELL-C&ref_=footer_soa
Source: chromecache_304.5.dr	String found in binary or memory: https://sell.amazon.com/?ld=AZUSSOA-footer-aff&ref_=footer_sell
Source: chromecache_304.5.dr	String found in binary or memory: https://shop.ring.com/pages/neighbors-app
Source: chromecache_304.5.dr	String found in binary or memory: https://sketch.com
Source: chromecache_392.5.dr	String found in binary or memory: https://social-plugins.line.me/lineit/share
Source: chromecache_304.5.dr	String found in binary or memory: https://supply.amazon.com
Source: chromecache_304.5.dr	String found in binary or memory: https://sustainability.aboutamazon.com/?utm_source=gateway&utm_medium=footer&ref_=susty_footer
Source: chromecache_186.5.dr	String found in binary or memory: https://tiny.amazon.com/171he0ngb
Source: chromecache_479.5.dr, chromecache_491.5.dr, chromecache_325.5.dr	String found in binary or memory: https://tiny.amazon.com/aok2pdnt/auiamazdevepopopopo
Source: chromecache_286.5.dr, chromecache_351.5.dr	String found in binary or memory: https://twitter.com
Source: chromecache_392.5.dr	String found in binary or memory: https://twitter.com/intent/tweet
Source: chromecache_303.5.dr, chromecache_448.5.dr	String found in binary or memory: https://unagi-eu.amazon.com/1/events/com.amazon.eel.sbv.client.
Source: chromecache_303.5.dr, chromecache_448.5.dr	String found in binary or memory: https://unagi-fe.amazon.com/1/events/com.amazon.eel.sbv.client.
Source: chromecache_304.5.dr	String found in binary or memory: https://unagi-na.amazon.com/1/events/com.amazon.csm.nexusclient.gamma
Source: chromecache_304.5.dr	String found in binary or memory: https://unagi-na.amazon.com/1/events/com.amazon.csm.nexusclient.prod
Source: chromecache_209.5.dr, chromecache_392.5.dr	String found in binary or memory: https://unagi-na.amazon.com/1/events/com.amazon.eel.BrandFollowButtonMetrics.Gamma.ClientEvents
Source: chromecache_209.5.dr, chromecache_392.5.dr	String found in binary or memory: https://unagi-na.amazon.com/1/events/com.amazon.eel.BrandFollowButtonMetrics.Prod.ClientEvents
Source: chromecache_303.5.dr, chromecache_448.5.dr	String found in binary or memory: https://unagi-na.amazon.com/1/events/com.amazon.eel.sbv.client.
Source: chromecache_392.5.dr	String found in binary or memory: https://unagi-na.amazon.com/1/events/com.amazon.eel.sbv.client.prod.events
Source: chromecache_304.5.dr	String found in binary or memory: https://unagi-na.amazon.com/1/events/com.amazon.eel.sbv.client.prod.events"
Source: chromecache_304.5.dr, chromecache_186.5.dr	String found in binary or memory: https://unagi.amazon.com/1/events/com.amazon.csm.csa.prod
Source: chromecache_304.5.dr	String found in binary or memory: https://videodirect.amazon.com/home/landing
Source: chromecache_304.5.dr	String found in binary or memory: https://www.6pm.com
Source: chromecache_304.5.dr	String found in binary or memory: https://www.abebooks.com
Source: chromecache_304.5.dr	String found in binary or memory: https://www.aboutamazon.com/?utm_source=gateway&utm_medium=footer&token=about
Source: chromecache_304.5.dr	String found in binary or memory: https://www.acx.com/
Source: chromecache_304.5.dr	String found in binary or memory: https://www.amazon.com/ap/register?openid.pape.max_auth_age=0&openid.return_to=https%3A%2F%2Fwww.ama
Source: chromecache_304.5.dr	String found in binary or memory: https://www.amazon.com/ap/signin?openid.pape.max_auth_age=0&openid.return_to=https%3A%2F%2Fwww.amazo
Source: chromecache_304.5.dr	String found in binary or memory: https://www.amazon.com/b/?node=120788043011
Source: chromecache_304.5.dr	String found in binary or memory: https://www.amazon.com/b/?node=2238192011&ref=shop_footer_payments_gc_desktop
Source: chromecache_304.5.dr	String found in binary or memory: https://www.amazon.com/b/ref=s9_acss_bw_cg_sbp22c_1e1_w/ref=SBE_navbar_5?pf_rd_r=6W5X52VNZRB7GK1E1VX
Source: chromecache_304.5.dr	String found in binary or memory: https://www.amazon.com/b?node=15701038011&ie=UTF8
Source: chromecache_304.5.dr	String found in binary or memory: https://www.amazon.com/gp/css/homepage.html?ref_=footer_ya
Source: chromecache_304.5.dr	String found in binary or memory: https://www.amazon.com/gp/css/order-history?ref_=footer_yo
Source: chromecache_304.5.dr	String found in binary or memory: https://www.amazon.com/ir
Source: chromecache_304.5.dr	String found in binary or memory: https://www.amazon.com/pr
Source: chromecache_304.5.dr	String found in binary or memory: https://www.amazon.com/product-safety-alerts?ref_=footer_bsx_ypsa
Source: chromecache_304.5.dr	String found in binary or memory: https://www.amazon.jobs
Source: chromecache_304.5.dr	String found in binary or memory: https://www.amazon.science
Source: chromecache_304.5.dr	String found in binary or memory: https://www.audible.com
Source: chromecache_304.5.dr	String found in binary or memory: https://www.boxofficemojo.com/?ref_=amzn_nav_ftr
Source: chromecache_304.5.dr	String found in binary or memory: https://www.fountain.com/jobs/amazon-delivery-service-partner?utm_source=amazon.com&utm_medium=foote
Source: chromecache_304.5.dr	String found in binary or memory: https://www.goodreads.com
Source: chromecache_393.5.dr	String found in binary or memory: https://www.google.com/adsense
Source: chromecache_304.5.dr	String found in binary or memory: https://www.imdb.com
Source: chromecache_304.5.dr	String found in binary or memory: https://www.pillpack.com
Source: chromecache_209.5.dr, chromecache_392.5.dr	String found in binary or memory: https://www.pinterest.com/pin/create/button
Source: chromecache_209.5.dr, chromecache_392.5.dr	String found in binary or memory: https://www.pinterest.com/pin/create/button/
Source: chromecache_304.5.dr	String found in binary or memory: https://www.shopbop.com
Source: chromecache_304.5.dr	String found in binary or memory: https://www.veeqo.com/?utm_source=amazon&utm_medium=website&utm_campaign=footer
Source: chromecache_304.5.dr	String found in binary or memory: https://www.wholefoodsmarket.com
Source: chromecache_304.5.dr	String found in binary or memory: https://www.woot.com/
Source: chromecache_304.5.dr	String found in binary or memory: https://www.zappos.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 50440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50358
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 50419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50370
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 50444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 50394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50481 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 50456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50468 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50283
Source: unknown	Network traffic detected: HTTP traffic on port 50412 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50282
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50286
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50288
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50290
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50292
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50291
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50294
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50293
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50357 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50345 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50436 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50509 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50321 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50333 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 50222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50428 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50416 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50403
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50402
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50405
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50407
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50406
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50409
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50408
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50401
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50400
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50348 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50485 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50324 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 50209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 50497 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 50336 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 50441 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50506 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 50397 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50511 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 50381 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443

Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.7:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.7:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.7:50058 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.7:50342 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@20/503@190/70

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2004,i,6961824384990481302,3734602455398645056,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://frothylattestudio.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4392 --field-trial-handle=2004,i,6961824384990481302,3734602455398645056,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2004,i,6961824384990481302,3734602455398645056,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4392 --field-trial-handle=2004,i,6961824384990481302,3734602455398645056,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Name	IP	Active	Malicious	Reputation
d1f0esyb34c1g2.cloudfront.net	13.33.158.190	true	false	unknown
spl.zeotap.com	104.22.51.98	true	false	unknown
eu-eb2.3lift.com	76.223.111.18	true	false	unknown
1376624012.rsc.cdn77.org	37.19.194.80	true	false	unknown
crb.kargo.com	35.156.174.96	true	false	unknown
mwzeom.zeotap.com	104.22.50.98	true	false	unknown
rtb-csync-euw1.smartadserver.com	81.17.55.117	true	false	unknown
cm.g.doubleclick.net	216.58.206.66	true	false	unknown
www.google.com	142.250.186.36	true	false	unknown
delivery.consentmanager.net	87.230.98.78	true	false	unknown
dcs-ups.g03.yahoodns.net	87.248.119.251	true	false	unknown
health.amazon.com	52.222.214.117	true	false	unknown
star-mini.c10r.facebook.com	157.240.252.35	true	false	unknown
us-u.openx.net	34.98.64.218	true	false	unknown
uip.semasio.net	77.243.51.121	true	false	unknown
frothylattestudio.com	192.157.56.139	true	false	unknown
edge-prebid-cdn.g03.yahoodns.net	87.248.119.252	true	false	unknown
pug-lhr-bc.pubmnet.com	185.64.191.210	true	false	unknown
sync.rfp.fout.jp	35.186.196.148	true	false	unknown
d2bytcopxu066p.cloudfront.net	18.245.39.216	true	false	unknown
adserver-logmodule-prod-nlb-v18-0c4f9d0d3a18a66d.elb.eu-central-1.amazonaws.com	3.65.151.29	true	false	unknown
euw-ice.360yield.com	52.17.18.217	true	false	unknown
sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com	99.80.210.41	true	false	unknown
d1ykf07e75w7ss.cloudfront.net	108.138.6.136	true	false	unknown
lciapi.ninthdecimal.com	35.241.62.124	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
ssum-sec.casalemedia.com	104.18.36.155	true	false	unknown
ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com	34.248.126.201	true	false	unknown
googleads.g.doubleclick.net	216.58.206.66	true	false	unknown
unagi-na.amazon.com	44.199.181.5	true	false	unknown
sb.scorecardresearch.com	18.244.18.122	true	false	unknown
d3ag4hukkh62yn.cloudfront.net	99.86.8.42	true	false	unknown
usersync.samplicio.us	18.197.217.70	true	false	unknown
ms-cookie-sync.prod.cloud.ogury.io	99.80.128.60	true	false	unknown
tagr-pixel-nginx-odr-euw4.mookie1.com	34.160.236.64	true	false	unknown
public-prod-dspcookiematching.dmxleo.com	13.32.121.111	true	false	unknown
pugm-amsfpairbc.pubmnet.com	198.47.127.19	true	false	unknown
i1.cdn-image.com	208.91.196.253	true	false	unknown
user-data-eu.bidswitch.net	35.214.136.108	true	false	unknown
ds-global3.l7.search.ystg1.b.yahoo.com	212.82.100.137	true	false	unknown
usersync.gumgum.com	34.247.233.198	true	false	unknown
a.delivery.consentmanager.net	87.230.98.78	true	false	unknown
ara.paa-reporting-advertising.amazon	18.245.46.47	true	false	unknown
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	52.213.88.80	true	false	unknown
am-vip001.taboola.com	141.226.228.48	true	false	unknown
rtb-csync-euw2.smartadserver.com	178.32.197.56	true	false	unknown
s.amazon-adsystem.com	98.82.156.207	true	false	unknown
media.amazon.map.fastly.net	151.101.1.16	true	false	unknown
completion.amazon.com	44.215.134.156	true	false	unknown
i3.cdn-image.com	208.91.196.253	true	false	unknown
dsum-sec.casalemedia.com	104.18.36.155	true	false	unknown
pixelapi-east.cs.mysamba.tv	3.232.144.122	true	false	unknown
9145.searchmagnified.com	208.91.196.145	true	false	unknown
adserver-prod-alb-2056226458.eu-central-1.elb.amazonaws.com	52.58.254.85	true	false	unknown
lb.mediarithmics.com	54.36.150.186	true	false	unknown
ib.anycast.adnxs.com	185.89.211.84	true	false	unknown
envoy-hl.envoy-csync.core-002-ew4.ov1o.com	35.214.216.122	true	false	unknown
load-euw1.exelator.com	34.254.143.3	true	false	unknown
aax-us-iad.amazon.com	54.239.17.248	true	false	unknown
endpoint.prod.us-east-1.forester.a2z.com	34.194.74.255	true	false	unknown
match-eu-central-1-ecs.sharethrough.com	18.195.234.25	true	false	unknown
uipus.semasio.net	50.57.31.206	true	false	unknown
ww1.frothylattestudio.com	unknown	unknown	false	unknown
images-na.ssl-images-amazon.com	unknown	unknown	false	unknown
ads.stickyadstv.com	unknown	unknown	false	unknown
pi.ispot.tv	unknown	unknown	false	unknown
unagi.amazon.com	unknown	unknown	false	unknown
r.search.yahoo.com	unknown	unknown	false	unknown
csync.loopme.me	unknown	unknown	false	unknown
lm.serving-sys.com	unknown	unknown	false	unknown
odr.mookie1.com	unknown	unknown	false	unknown
cookie-matching.mediarithmics.com	unknown	unknown	false	unknown
pixel.rubiconproject.com	unknown	unknown	false	unknown
c1.adform.net	unknown	unknown	false	unknown
sync-amazon.ads.yieldmo.com	unknown	unknown	false	unknown
usermatch.krxd.net	unknown	unknown	false	unknown
uipglob.semasio.net	unknown	unknown	false	unknown
cms.analytics.yahoo.com	unknown	unknown	false	unknown
m.media-amazon.com	unknown	unknown	false	unknown
image6.pubmatic.com	unknown	unknown	false	unknown
ups.analytics.yahoo.com	unknown	unknown	false	unknown
match.sharethrough.com	unknown	unknown	false	unknown
loadus.exelator.com	unknown	unknown	false	unknown
rtb-csync.smartadserver.com	unknown	unknown	false	unknown
image2.pubmatic.com	unknown	unknown	false	unknown
capi.connatix.com	unknown	unknown	false	unknown
ms-cookie-sync.presage.io	unknown	unknown	false	unknown
fls-na.amazon.com	unknown	unknown	false	unknown
dpm.demdex.net	unknown	unknown	false	unknown
aa.agkn.com	unknown	unknown	false	unknown
sync.taboola.com	unknown	unknown	false	unknown
x.bidswitch.net	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
cdn.consentmanager.net	unknown	unknown	false	unknown
c.amazon-adsystem.com	unknown	unknown	false	unknown
beacon.krxd.net	unknown	unknown	false	unknown
www.amazon.com	unknown	unknown	false	unknown
tags.bluekai.com	unknown	unknown	false	unknown
ads.samba.tv	unknown	unknown	false	unknown
pbs.yahoo.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://s.amazon-adsystem.com/ecm3?ex=openxHMT&id=YuUsW3vQRjiLYw8wdtu2sA&gdpr_consent=	false	unknown
https://m.media-amazon.com/images/G/01/HST/AHI/Desktop/WebpImages/OM_M2_PrimaryTile_Desktop4x.webp	false	unknown
https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fld%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26ctb%3D1%26sc0%3DTimeToFirstSuggestion%3Adesktop%26bb0%3D15379%26be0%3D17749%26pc0%3D17749%26ld0%3D17749%26t0%3D1729723017248%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:17749	false	unknown
https://m.media-amazon.com/images/I/710OEdZRHIL._AC_UL320_.jpg	false	unknown
https://images-na.ssl-images-amazon.com/images/G/01/x-locale/common/grey-pixel.gif	false	unknown
https://m.media-amazon.com/images/I/71y2IJlwKtL._AC_UL320_.jpg	false	unknown
https://m.media-amazon.com/images/S/sash/Z8YwjOjqIHxqujG.png	false	unknown
https://m.media-amazon.com/images/I/61YexlHDlfL._AC_UL320_.jpg	false	unknown
http://ww1.frothylattestudio.com/favicon.ico	false	unknown
https://images-na.ssl-images-amazon.com/images/I/21RZgaOpsqL._RC%7C01LNhrqAZmL.css,11mqgJVSK9L.css,01+6LDwsu8L.css,01ixfc-7StL.css,11ahlU8GWXL.css,01+neHskhqL.css,01U2pA95KSL.css,01fn6WRzO6L.css,21BUT35X5SL.css,01Sqn3dOuBL.css,01KrVAe0PrL.css,31wUat9O8SL.css,31gMGQBDl3L.css,01mP5ZKi0aL.css,01mEWw4285L.css,11OSAsJXa3L.css,01zG4X6TtRL.css,31FHXBkYr7L.css,11VKiAMd89L.css,11TWIoQuuIL.css,01K0fSFz6eL.css,014eilLW+IL.css,01MU0Cb7yFL.css,01UfLPWOEOL.css,01Gjv7o0taL.css,019L5P4oPhL.css_.css?AUIClients/SearchPartnerAssets	false	unknown
https://usersync.gumgum.com/usersync?b=amz&i=H_zpnKuaR22IPyaDMlUBzQ&n=y&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DgumgumHMT&id=%5BUID%5D&gdpr_consent=	false	unknown
https://m.media-amazon.com/images/G/01/ad-feedback/new_info_icon_sprite_1x.png	false	unknown
https://ms-cookie-sync.presage.io/user-sync?amazondsp_id=EXDb-VtzSPuiGP9yoNbsQw&redirect=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DoguryHMT&id=&gdpr_consent=	false	unknown
https://m.media-amazon.com/images/I/111mHoVK0kL._SS200_.png	false	unknown
https://image6.pubmatic.com/AdServer/UCookieSetPug?rd=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dpubmatic.com%26id%3D%23PM_USER_ID&gdpr_consent=	false	unknown
http://i3.cdn-image.com/__media__/pics/28905/arrrow.png	false	unknown
https://sync-amazon.ads.yieldmo.com/sync?pn_id=amazon&id=CfF3VCdUTKyM6vHLwjLPkQ&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DyieldmoHMT%26id%3D%7B%7Buserid%7D%7D&gdpr_consent=	false	unknown
https://s.amazon-adsystem.com/ecm3?ex=gumgumHMT	false	unknown
https://aax-us-iad.amazon.com/x/px/RF0GLQ99JfDA0gbEg1BkC34AAAGSu4ZmggEAAAH2AQBvbm9fdHhuX2JpZDUgICBvbm9fdHhuX2ltcDEgICDNkJse/v/%7B%22v%22:%7B%22def%22:%22iab%22,%22event%22:%22PROGRESS_5_SEC%22%7D,%22programType%22:%22SBV%22%7D	false	unknown
https://s.amazon-adsystem.com/ecm3?ex=yieldmoHMT&id=CfF3VCdUTKyM6vHLwjLPkQ	false	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2	false	unknown
https://s.amazon-adsystem.com/ecm3?ex=adform.net&id=6122576981423639662	false	unknown
https://x.bidswitch.net/sync_a9/val=gGclQHb6QriUb0FSc9l3XQ&redirect=https://s.amazon-adsystem.com/ecm3?ex=bidswitch.com&id=${UUID}&gdpr_consent=	false	unknown
https://m.media-amazon.com/images/I/81gtUiCXv5L._AC_UL320_.jpg	false	unknown
https://s.amazon-adsystem.com/ecm3?ex=xandrHMT&id=MERT_qtGRiiFW3uBJN6djw	false	unknown
https://m.media-amazon.com/images/G/01/gno/sprites/nav-sprite-global-1x-reorg-privacy._CB587940754_.png	false	unknown
http://i3.cdn-image.com/__media__/pics/29590/bg1.png	false	unknown
https://cookie-matching.mediarithmics.com/v1/get_or_create?gdpr=0&gdpr_consent=&domid=1109	false	unknown
https://m.media-amazon.com/images/I/71iBD3KxLjL._AC_UL320_.jpg	false	unknown
https://cm.g.doubleclick.net/pixel?google_nid=medr&google_cm&key=GOO&gdpr_consent=&gdpr=0&action=GET_ID&opid=goo&etid=&domid=1109&ops=apx	false	unknown
https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fs-on-search-route%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26ctb%3D1%26m%3D1%26sc0%3Ds-on-search-route%26pc0%3D15202%26s-on-search-route0%3D15202%26t0%3D1729723014701%26rt%3Dcf%3A22-0-6-14-5-0-1_af%3A24-0-6-16-5-0-1_%26csmtags%3Daui%7Caui%3Aaui_build_date%3A3.24.8-2024-10-17%7CmutObsYes%7Cewc%3Aunpersist%7Cewc%3Aunpersist%3Aemptycart%7Cewc%3Abview%7Cewc%7Cewc%3Aunrec%7Cewc%3Acartsize%3A0%7Cewc%3Aaui%7Cnavbar%7Caui%3Asw%3Apage_proxy%3Ano_ctrl%7CmutObsActive%7CFWCIMEnabled%7Cfls-na-amazon-com%7CperfYes%7Cfy_cdn_fr%7Cfy_cdn_mp%7Cadblk_no%7Csupports%3Amutationobserver%3Atrue%7Csupports%3Agetelementsbyclassname%3Atrue%7Csupports%3Amap%3Atrue%7Ccsm-feature-touch-enabled%3Afalse%7Caui%3Acss%3Anetwork%7Caui%3Ajs%3Anetwork%26viz%3Dvisible%3A3%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:15203	false	unknown
https://sb.scorecardresearch.com/p?c1=9&c2=27552257&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dcomscore.com%26id%3D%25AX_UUID%25	false	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2	false	unknown
https://m.media-amazon.com/images/I/61vCWYbKKXL._AC_UL320_.jpg	false	unknown
https://m.media-amazon.com/images/I/71BfHrjAeqL._AC_UL320_.jpg	false	unknown
https://sync.taboola.com/sg/amazon-a9-network/1/rtb	false	unknown
https://s.amazon-adsystem.com/ecm3?ex=openx.com&id=fd0edbd6-39f4-c030-327b-40aed543d1ed&gdpr_consent=	false	unknown
https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26m%3D1%26sc%3Dcsa%3Alcp%26lcp%3D3950%26pc%3D19220%26at%3D19220%26t%3D1729723018719%26csmtags%3Daui%3Asw%3Abrowser%3Aregister%3Asupported%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:19221	false	unknown
https://unagi.amazon.com/1/events/com.amazon.eel.SearchAutocompleteUIServiceMetrics.nexus	false	unknown
https://unagi.amazon.com/1/events/com.amazon.csm.csa.prod	false	unknown
https://m.media-amazon.com/images/I/71EszgPo1TL._AC_UL320_.jpg	false	unknown
https://s.amazon-adsystem.com/ecm3?ex=improvedigitalHMT&id=5defc0d7-51a5-49f6-ba40-348753d9d715&gdpr_consent=	false	unknown
https://us-u.openx.net/w/1.0/sd?id=537072986&val=YuUsW3vQRjiLYw8wdtu2sA&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DopenxHMT%26id%3D%7BOPENX_RTB_USERID%7D&gdpr_consent=	false	unknown
https://ib.adnxs.com/setuid/a9?entity=188&code=MERT_qtGRiiFW3uBJN6djw&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DxandrHMT%26id%3D%24UID&gdpr_consent=	false	unknown
https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26ctb%3D1%26m%3D1%26sc%3DYT8YJ4B94N98J9DNZQCH%26pc%3D25213%26at%3D25213%26t%3D1729723024712%26ec%3D1%26ecf%3D0%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:25214	false	unknown
https://cm.g.doubleclick.net/pixel?google_nid=a9&google_cm&ex=doubleclick.net&gdpr_consent=	false	unknown
https://s.amazon-adsystem.com/ecm3?ex=samba.tv&id=13dc1b4f6d5877204	false	unknown
https://public-prod-dspcookiematching.dmxleo.com/dspreply?dspId=1868&dspUserId=d-xoiv88SW6zakFvBXi4hA&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DdailymotionHMT2&id=&gdpr_consent=	false	unknown
https://uipus.semasio.net/amazon/1/get2?_url=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsemasio%26id%3D%24%7BUIPID%28%29%7D	false	unknown
https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fld%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26ctb%3D1%26sc0%3Daod-ingress-assets-load-time%26bb0%3D16556%26pc0%3D16556%26ld0%3D16556%26t0%3D1729723016055%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:16556	false	unknown
https://www.amazon.com/rd/uedata?ld&v=0.299560.0&id=YT8YJ4B94N98J9DNZQCH&sw=1280&sh=1024&vw=1263&vh=907&m=1&sc=YT8YJ4B94N98J9DNZQCH&ue=3&bb=2213&ns=2254&ne=2927&be=4954&fp=2307&fcp=2307&cf=5080&af=5129&fn=5129&pc=19088&tc=-5574&na_=-5574&ul_=-1729722999499&_ul=-1729722999499&rd_=-1729722999499&_rd=-1729722999499&fe_=-1348&lk_=-1345&_lk=-1336&co_=-1336&_co=-476&sc_=-1334&rq_=-476&rs_=-46&_rs=2152&dl_=-25&di_=5043&de_=5043&_de=5044&_dc=19087&ld_=19087&_ld=-1729722999499&ntd=0&ty=0&rc=0&hob=2&hoe=4&ld=19089&t=1729723018588&ctb=1&pty=Search&spty=List&pti=undefined&tid=YT8YJ4B94N98J9DNZQCH&aftb=1&ui=2&lob=1	false	unknown
https://m.media-amazon.com/images/I/71Vr3kC5pBL._AC_UL320_.jpg	false	unknown
https://m.media-amazon.com/images/I/81ZybcAzHyL._AC_UL320_.jpg	false	unknown
https://m.media-amazon.com/images/I/71EVTIdOTuL._AC_UL320_.jpg	false	unknown
https://www.amazon.com/s?k=bloat+relief&language=en_US&adgrpid=1231453333089814&hvadid=76965999836122&hvbmt=bp&hvdev=c&hvlocphy=65300&hvnetw=s&hvqmt=p&hvtargid=kwd-76966067111871%3Aloc-190&hydadcr=9392_13640345&msclkid=5151cc87ffec1574cf49ab9e858f8c61&tag=txtstdbgdt-20&ref=pd_sl_9k7yfey2e4_p	false	unknown
https://m.media-amazon.com/images/G/01/digital/video/merch/Other/TNFL_24_SWM_700x78_POST_Final_noLocale_GSS00014519_GraphicalCountdown._CB544626030_.gif	false	unknown
https://s.amazon-adsystem.com/ecm3?ex=ispot.tv&id=a13c1e78b9ab873207f7d35c5af4b767487d9d72265f57e6b2d56f41ee9bb774	false	unknown
https://m.media-amazon.com/images/I/81-c+8W5VSL._AC_UL320_.jpg	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://i1.cdn-image.com/__media__/pics/29590/bg1.png)	chromecache_485.5.dr	false	unknown
https://advertising.amazon.com/?ref=ext_amzn_ftr	chromecache_304.5.dr	false	unknown
https://m.media-amazon.com/images/I/71kvz9PSYkL._AC_UL1920_FMwebp_QL65_.jpg	chromecache_304.5.dr	false	unknown
https://images-na.ssl-images-amazon.com/images/I/11XMgK3X1EL._RC	chromecache_304.5.dr	false	unknown
https://m.media-amazon.com/images/S/al-na-9d5791cf-3faf/e038edb4-31bc-4d39-ab1a-a4a7bcee0b7a.mp4/pro	chromecache_304.5.dr	false	unknown
https://www.amazon.com/gp/css/homepage.html?ref_=footer_ya	chromecache_304.5.dr	false	unknown
https://www.amazon.com/gp/css/order-history?ref_=footer_yo	chromecache_304.5.dr	false	unknown
https://www.amazon.com/product-safety-alerts?ref_=footer_bsx_ypsa	chromecache_304.5.dr	false	unknown
https://unagi-na.amazon.com/1/events/com.amazon.csm.nexusclient.gamma	chromecache_304.5.dr	false	unknown
https://m.media-amazon.com/images/G/01/share-icons/	chromecache_392.5.dr	false	unknown
https://health.amazon.com/prime?ref_=nav_cs_all_health_ingress_onem_h	chromecache_304.5.dr	false	unknown
https://developer.amazon.com	chromecache_304.5.dr	false	unknown
https://m.media-amazon.com/images/I/11EIQ5IGqaL._RC	chromecache_304.5.dr	false	unknown
http://i3.cdn-image.com/__media__/pics/29590/bg1.png)	chromecache_437.5.dr	false	unknown
https://www.6pm.com	chromecache_304.5.dr	false	unknown
https://data.amazon.com/api/marketplaces/ATVPDKIKX0DER/cart/carts/retail/items?ref=sr_atc_rt_add_45&	chromecache_304.5.dr	false	unknown
https://m.media-amazon.com/images/G/01/shopbylook/shoppable-images/next_tab_control._CB416468320_.sv	chromecache_351.5.dr	false	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf	chromecache_437.5.dr	false	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf	chromecache_437.5.dr	false	unknown
https://amazon.com/view-in-your-room?	chromecache_346.5.dr, chromecache_261.5.dr	false	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf	chromecache_485.5.dr	false	unknown
https://m.media-amazon.com/images/S/sash/kfKKBuoqcD$AUKL.woff)	chromecache_427.5.dr, chromecache_452.5.dr	false	unknown
https://www.pillpack.com	chromecache_304.5.dr	false	unknown
https://m.media-amazon.com/images/G/01/gno/sprites/nav-sprite-global-1x-reorg-privacy._CB587940754_.	chromecache_304.5.dr	false	unknown
https://m.media-amazon.com/images/S/sash/e0LnMbFWJC-TMQz.woff)	chromecache_427.5.dr, chromecache_452.5.dr	false	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf	chromecache_485.5.dr	false	unknown
https://m.media-amazon.com/images/I/71kvz9PSYkL._AC_UL1600_FMwebp_QL65_.jpg	chromecache_304.5.dr	false	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot?#iefix	chromecache_485.5.dr	false	unknown
https://www.shopbop.com	chromecache_304.5.dr	false	unknown
http://ww1.frothylattestudio.com/trf?q=Frothy	chromecache_485.5.dr	false	unknown
https://cdn.consentmanager.net	chromecache_485.5.dr, chromecache_437.5.dr	false	unknown
http://ww1.frothylattestudio.com/Frothy_Coffee.cfm?fp=2qoqDYI%2B0iJZGtPstQqccvV6mj3sWtCwuxlIlildqdnt	chromecache_437.5.dr	false	unknown
https://m.media-amazon.com/images/S/sash/prp2-N9d2Q$gDX5.gif)	chromecache_452.5.dr	false	unknown
https://blog.ameba.jp	chromecache_286.5.dr, chromecache_351.5.dr	false	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix	chromecache_485.5.dr	false	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix	chromecache_437.5.dr	false	unknown
https://completion.amazon.com	chromecache_304.5.dr	false	unknown
https://m.media-amazon.com/images/S/sash/5uJUWEszo9hoRiT.png);background-size:contain	chromecache_194.5.dr	false	unknown
https://www.amazon.jobs	chromecache_304.5.dr	false	unknown
https://beta-ara.paa-reporting-advertising.amazon	chromecache_203.5.dr, chromecache_482.5.dr	false	unknown
https://gamma-ara.paa-reporting-advertising.amazon	chromecache_203.5.dr, chromecache_482.5.dr	false	unknown
https://m.media-amazon.com/images/S/sash/GfikJ0xvVSRQIzY.png)	chromecache_194.5.dr	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
35.214.216.122	envoy-hl.envoy-csync.core-002-ew4.ov1o.com	United States	19527	GOOGLE-2US	false
35.241.62.124	lciapi.ninthdecimal.com	United States	15169	GOOGLEUS	false
151.101.193.16	unknown	United States	54113	FASTLYUS	false
151.101.1.16	media.amazon.map.fastly.net	United States	54113	FASTLYUS	false
99.80.128.60	ms-cookie-sync.prod.cloud.ogury.io	United States	16509	AMAZON-02US	false
44.215.134.156	completion.amazon.com	United States	14618	AMAZON-AESUS	false
52.17.18.217	euw-ice.360yield.com	United States	16509	AMAZON-02US	false
98.82.156.207	s.amazon-adsystem.com	United States	11351	TWC-11351-NORTHEASTUS	false
34.160.236.64	tagr-pixel-nginx-odr-euw4.mookie1.com	United States	2686	ATGS-MMD-ASUS	false
52.58.254.85	adserver-prod-alb-2056226458.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
3.65.151.29	adserver-logmodule-prod-nlb-v18-0c4f9d0d3a18a66d.elb.eu-central-1.amazonaws.com	United States	16509	AMAZON-02US	false
77.243.51.121	uip.semasio.net	Denmark	42697	NETIC-ASDK	false
87.230.98.78	delivery.consentmanager.net	Germany	61157	PLUSSERVER-ASN1DE	false
18.245.39.216	d2bytcopxu066p.cloudfront.net	United States	16509	AMAZON-02US	false
212.82.100.137	ds-global3.l7.search.ystg1.b.yahoo.com	United Kingdom	34010	YAHOO-IRDGB	false
18.245.46.47	ara.paa-reporting-advertising.amazon	United States	16509	AMAZON-02US	false
13.33.158.190	d1f0esyb34c1g2.cloudfront.net	United States	16509	AMAZON-02US	false
34.248.126.201	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
34.254.143.3	load-euw1.exelator.com	United States	16509	AMAZON-02US	false
52.201.171.121	unknown	United States	14618	AMAZON-AESUS	false
44.215.116.37	unknown	United States	14618	AMAZON-AESUS	false
54.36.150.186	lb.mediarithmics.com	France	16276	OVHFR	false
44.199.181.5	unagi-na.amazon.com	United States	14618	AMAZON-AESUS	false
13.32.121.111	public-prod-dspcookiematching.dmxleo.com	United States	16509	AMAZON-02US	false
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
99.86.8.42	d3ag4hukkh62yn.cloudfront.net	United States	16509	AMAZON-02US	false
18.197.217.70	usersync.samplicio.us	United States	16509	AMAZON-02US	false
52.46.132.119	unknown	United States	16509	AMAZON-02US	false
18.195.234.25	match-eu-central-1-ecs.sharethrough.com	United States	16509	AMAZON-02US	false
104.18.36.155	ssum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
108.138.6.136	d1ykf07e75w7ss.cloudfront.net	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
185.89.211.84	ib.anycast.adnxs.com	Germany	29990	ASN-APPNEXUS	false
198.47.127.19	pugm-amsfpairbc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
34.247.233.198	usersync.gumgum.com	United States	16509	AMAZON-02US	false
54.239.17.248	aax-us-iad.amazon.com	United States	16509	AMAZON-02US	false
37.19.194.80	1376624012.rsc.cdn77.org	Ukraine	31343	INTERTELECOMUA	false
81.17.55.117	rtb-csync-euw1.smartadserver.com	Netherlands	24588	NETPROVODOV-ASRU	false
35.214.136.108	user-data-eu.bidswitch.net	United States	19527	GOOGLE-2US	false
185.64.191.210	pug-lhr-bc.pubmnet.com	United Kingdom	62713	AS-PUBMATICUS	false
13.33.158.219	unknown	United States	16509	AMAZON-02US	false
192.157.56.139	frothylattestudio.com	Canada	55286	SERVER-MANIACA	false
44.215.137.192	unknown	United States	14618	AMAZON-AESUS	false
87.248.119.251	dcs-ups.g03.yahoodns.net	United Kingdom	203220	YAHOO-DEBDE	false
104.22.51.98	spl.zeotap.com	United States	13335	CLOUDFLARENETUS	false
87.248.119.252	edge-prebid-cdn.g03.yahoodns.net	United Kingdom	203220	YAHOO-DEBDE	false
35.186.196.148	sync.rfp.fout.jp	United States	15169	GOOGLEUS	false
13.32.121.23	unknown	United States	16509	AMAZON-02US	false
208.91.196.145	9145.searchmagnified.com	Virgin Islands (BRITISH)	40034	CONFLUENCE-NETWORK-INCVG	false
141.226.228.48	am-vip001.taboola.com	Israel	200478	TABOOLA-ASIL	false
98.82.154.76	unknown	United States	11351	TWC-11351-NORTHEASTUS	false
52.213.88.80	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
157.240.252.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
76.223.111.18	eu-eb2.3lift.com	United States	16509	AMAZON-02US	false
18.244.18.122	sb.scorecardresearch.com	United States	16509	AMAZON-02US	false
18.185.147.174	unknown	United States	16509	AMAZON-02US	false
195.181.170.18	unknown	United Kingdom	60068	CDN77GB	false
216.58.206.66	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
208.91.196.253	i1.cdn-image.com	Virgin Islands (BRITISH)	40034	CONFLUENCE-NETWORK-INCVG	false
35.156.174.96	crb.kargo.com	United States	16509	AMAZON-02US	false
34.194.74.255	endpoint.prod.us-east-1.forester.a2z.com	United States	14618	AMAZON-AESUS	false
44.199.181.222	unknown	United States	14618	AMAZON-AESUS	false
99.80.210.41	sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
34.98.64.218	us-u.openx.net	United States	15169	GOOGLEUS	false
50.57.31.206	uipus.semasio.net	United States	19994	RACKSPACEUS	false
104.22.50.98	mwzeom.zeotap.com	United States	13335	CLOUDFLARENETUS	false
3.232.144.122	pixelapi-east.cs.mysamba.tv	United States	14618	AMAZON-AESUS	false
178.32.197.56	rtb-csync-euw2.smartadserver.com	France	16276	OVHFR	false

Private

IP
192.168.2.7
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1540646
Start date and time:	2024-10-24 00:35:11 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://frothylattestudio.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@20/503@190/70
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.195, 142.250.185.174, 142.250.110.84, 34.104.35.123, 199.232.214.172, 52.165.164.15, 2.23.209.149, 2.23.209.189, 2.23.209.187, 2.23.209.133, 2.23.209.140, 2.23.209.176, 2.23.209.130, 2.23.209.179, 2.23.209.182, 93.184.221.240, 20.242.39.171, 142.250.185.74, 142.250.181.234, 216.58.212.170, 142.250.185.234, 216.58.206.42, 142.250.185.202, 216.58.212.138, 216.58.206.74, 142.250.186.106, 172.217.16.202, 142.250.186.170, 142.250.184.234, 142.250.185.106, 172.217.18.10, 142.250.184.202, 142.250.185.138, 142.250.186.162, 142.250.185.226, 172.64.146.152, 104.18.41.104, 69.173.144.138, 69.173.144.165, 69.173.144.139, 37.157.6.254, 37.157.6.243, 37.157.6.232, 37.157.6.233, 37.157.6.231, 37.157.6.237, 2.23.197.190, 154.54.250.81, 154.57.158.115, 151.101.130.132, 151.101.66.132, 151.101.194.132, 151.101.2.132, 142.250.184.195
Excluded domains from analysis (whitelisted): tags.bluekai.com.edgekey.net, uipglob.trafficmanager.net, pixel.rubiconproject.net.akadns.net, lm.eyeblaster.akadns.net, j.sni.global.fastly.net, slscr.update.microsoft.com, clientservices.googleapis.com, time.windows.com, track.adformnet.akadns.net, wu.azureedge.net, e9126.x.akamaiedge.net, clients2.google.com, e86303.dscx.akamaiedge.net, www.bing.com.edgekey.net, lm-fr.eyeblaster.akadns.net, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, rtb-csync-geo.usersync-prod-sas.akadns.net, wu-b-net.trafficmanager.net, www.bing.com, ip2.ads.stickyadstv.com.akadns.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, www.amazon.com.edgekey.net, ctldl.windowsupdate.com, pagead2.googlesyndication.com, capi.connatix.com.cdn.cloudflare.net, www-www.bing.com.
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://frothylattestudio.com/

Input	Output
URL: http://ww1.frothylattestudio.com/ Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Frothy Coffee", "prominent_button_name": "Frothy Urine", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: http://ww1.frothylattestudio.com/Frothy_Bloat.cfm?fp=2qoqDYI%2B0iJZGtPstQqccvV6mj3sWtCwuxlIlildqdntAr9vCYTVvHWakr2mYgOXvaI2w1lxQwNvQXQ9geMJWXl76t3S5yB%2BiBy%2BZCGz7fRNEfPfmlAL%2B069aOrJirw2FJnjwcPzaE3aWg0OVkAGQTIcS1usl4qXiQIt0xrHb3yncYN7pI0iAXPRcPni8exSan Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "SHOP BLOAT RELIEF - AMAZON.COM OFFICIAL SITE", "prominent_button_name": "SEE IT", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://www.amazon.com/s/?ie=UTF8&keywords=bloat+relief&index=aps&tag=txtstdbgdt-20&ref=pd_sl_9k7yfey2e4_p&adgrpid=1231453333089814&hvadid=76965999836122&hvnetw=s&hvqmt=p&hvbmt=bp&hvdev=c&hvlocint=&hvlocphy=65300&hvtargid=kwd-76966067111871:loc-190&hydadc Model: claude-3-haiku-20240307	```json { "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: http://ww1.frothylattestudio.com/ Model: claude-3-haiku-20240307	```json { "brands": [ "Frothy Coffee", "Frothy Urine", "Frothy Bloat" ] }

URL: https://www.amazon.com/s?k=bloat+relief&language=en_US&adgrpid=1231453333089814&hvadid=76965999836122&hvbmt=bp&hvdev=c&hvlocphy=65300&hvnetw=s&hvqmt=p&hvtargid=kwd-76966067111871%3Aloc-190&hydadcr=9392_13640345&msclkid=5151cc87ffec1574cf49ab9e858f8c61&tag Model: claude-3-haiku-20240307	```json { "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: http://ww1.frothylattestudio.com/Frothy_Bloat.cfm?fp=2qoqDYI%2B0iJZGtPstQqccvV6mj3sWtCwuxlIlildqdntAr9vCYTVvHWakr2mYgOXvaI2w1lxQwNvQXQ9geMJWXl76t3S5yB%2BiBy%2BZCGz7fRNEfPfmlAL%2B069aOrJirw2FJnjwcPzaE3aWg0OVkAGQTIcS1usl4qXiQIt0xrHb3yncYN7pI0iAXPRcPni8exSan Model: claude-3-haiku-20240307	```json { "brands": [ "Frothylattestudio.com" ] }
	```json { "brands": [ "Frothylattestudio.com" ] }
URL: https://www.amazon.com/s/?ie=UTF8&keywords=bloat+relief&index=aps&tag=txtstdbgdt-20&ref=pd_sl_9k7yfey2e4_p&adgrpid=1231453333089814&hvadid=76965999836122&hvnetw=s&hvqmt=p&hvbmt=bp&hvdev=c&hvlocint=&hvlocphy=65300&hvtargid=kwd-76966067111871:loc-190&hydadc Model: claude-3-haiku-20240307	```json { "brands": [ "Amazon", "Life Extension", "Midol", "Phazyme", "Love Wellness" ] }

URL: https://www.amazon.com/s?k=bloat+relief&language=en_US&adgrpid=1231453333089814&hvadid=76965999836122&hvbmt=bp&hvdev=c&hvlocphy=65300&hvnetw=s&hvqmt=p&hvtargid=kwd-76966067111871%3Aloc-190&hydadcr=9392_13640345&msclkid=5151cc87ffec1574cf49ab9e858f8c61&tag Model: claude-3-haiku-20240307	```json { "brands": [ "Amazon", "Life Extension", "Midol", "Phazyme", "Love Wellness" ] }

URL: https://www.amazon.com/s?k=bloat+relief&language=en_US&adgrpid=1231453333089814&hvadid=76965999836122&hvbmt=bp&hvdev=c&hvlocphy=65300&hvnetw=s&hvqmt=p&hvtargid=kwd-76966067111871%3Aloc-190&hydadcr=9392_13640345&msclkid=5151cc87ffec1574cf49ab9e858f8c61&tag Model: claude-3-haiku-20240307	```json { "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://www.amazon.com/s?k=bloat+relief&language=en_US&adgrpid=1231453333089814&hvadid=76965999836122&hvbmt=bp&hvdev=c&hvlocphy=65300&hvnetw=s&hvqmt=p&hvtargid=kwd-76966067111871%3Aloc-190&hydadcr=9392_13640345&msclkid=5151cc87ffec1574cf49ab9e858f8c61&tag Model: claude-3-haiku-20240307	```json { "brands": [ "Amazon", "Life Extension", "Midol", "Phazyme", "Love Wellness" ] }

URL: https://www.amazon.com/s?k=bloat+relief&language=en_US&adgrpid=1231453333089814&hvadid=76965999836122&hvbmt=bp&hvdev=c&hvlocphy=65300&hvnetw=s&hvqmt=p&hvtargid=kwd-76966067111871%3Aloc-190&hydadcr=9392_13640345&msclkid=5151cc87ffec1574cf49ab9e858f8c61&tag Model: claude-3-haiku-20240307	```json { "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://www.amazon.com/s?k=bloat+relief&language=en_US&adgrpid=1231453333089814&hvadid=76965999836122&hvbmt=bp&hvdev=c&hvlocphy=65300&hvnetw=s&hvqmt=p&hvtargid=kwd-76966067111871%3Aloc-190&hydadcr=9392_13640345&msclkid=5151cc87ffec1574cf49ab9e858f8c61&tag Model: claude-3-haiku-20240307	```json { "brands": [ "Amazon", "Life Extension", "Midol", "Phazyme", "Love Wellness" ] }

URL: https://www.amazon.com/s?k=bloat+relief&language=en_US&adgrpid=1231453333089814&hvadid=76965999836122&hvbmt=bp&hvdev=c&hvlocphy=65300&hvnetw=s&hvqmt=p&hvtargid=kwd-76966067111871%3Aloc-190&hydadcr=9392_13640345&msclkid=5151cc87ffec1574cf49ab9e858f8c61&tag Model: claude-3-haiku-20240307	```json { "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://www.amazon.com/s?k=bloat+relief&language=en_US&adgrpid=1231453333089814&hvadid=76965999836122&hvbmt=bp&hvdev=c&hvlocphy=65300&hvnetw=s&hvqmt=p&hvtargid=kwd-76966067111871%3Aloc-190&hydadcr=9392_13640345&msclkid=5151cc87ffec1574cf49ab9e858f8c61&tag Model: claude-3-haiku-20240307	```json { "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://www.amazon.com/s?k=bloat+relief&language=en_US&adgrpid=1231453333089814&hvadid=76965999836122&hvbmt=bp&hvdev=c&hvlocphy=65300&hvnetw=s&hvqmt=p&hvtargid=kwd-76966067111871%3Aloc-190&hydadcr=9392_13640345&msclkid=5151cc87ffec1574cf49ab9e858f8c61&tag Model: claude-3-haiku-20240307	```json { "brands": [ "Amazon", "Life Extension", "Midol", "Phazyme", "Love Wellness" ] }

URL: https://www.amazon.com/s?k=bloat+relief&language=en_US&adgrpid=1231453333089814&hvadid=76965999836122&hvbmt=bp&hvdev=c&hvlocphy=65300&hvnetw=s&hvqmt=p&hvtargid=kwd-76966067111871%3Aloc-190&hydadcr=9392_13640345&msclkid=5151cc87ffec1574cf49ab9e858f8c61&tag Model: claude-3-haiku-20240307	```json { "brands": [ "Amazon", "Life Extension", "Midol", "Phazyme", "Love Wellness" ] }

URL: https://www.amazon.com/s?k=bloat+relief&language=en_US&adgrpid=1231453333089814&hvadid=76965999836122&hvbmt=bp&hvdev=c&hvlocphy=65300&hvnetw=s&hvqmt=p&hvtargid=kwd-76966067111871%3Aloc-190&hydadcr=9392_13640345&msclkid=5151cc87ffec1574cf49ab9e858f8c61&tag Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "that this is normal.", "prominent_button_name": "Overall Pack", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://www.amazon.com/s?k=bloat+relief&language=en_US&adgrpid=1231453333089814&hvadid=76965999836122&hvbmt=bp&hvdev=c&hvlocphy=65300&hvnetw=s&hvqmt=p&hvtargid=kwd-76966067111871%3Aloc-190&hydadcr=9392_13640345&msclkid=5151cc87ffec1574cf49ab9e858f8c61&tag Model: claude-3-haiku-20240307	```json { "brands": [ "Amazon", "Love Wellness" ] }
	```json { "brands": [ "Amazon", "Love Wellness" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 350 x 450, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	14256
Entropy (8bit):	7.935047719221589
Encrypted:	false
SSDEEP:	384:lxTA3vdo5DGwFf8U5JHP0gRUTKDrbymGanXyR5LdY/JBO:lxTAcGS0g6gRU+DK2nX02/JE
MD5:	64224EC939AC0B3487645C4E109030D5
SHA1:	B5AC2A7BC2AF1C9226987439F34BA8D4A79FBF0B
SHA-256:	2818F0BCCC7DDAA8E893C4655473D82589146DCC6E7AA6F78CEB9B3D4440C809
SHA-512:	9E2F8F391CA83B4DBD4170F91B30268F81D7F570E042699BD73135EA60BF3AE5AAA343F5BAE91430879DCF305914646499A6EF24C2E3CA604460585C3CCA7E31
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/G/01/gno/sprites/nav-sprite-global-1x-reorg-privacy._CB587940754_.png
Preview:	.PNG........IHDR...^..........QQ.....gAMA......a.....sRGB.........PLTEGpL...........................................................................................I..C..............................................................3..........................2...........-...............................................2........2.............3..2.....2...........1..2..........................2w.............2...w........v.......2.....-.....2............w....2.....2w........w....2..2..2.....3...$$$.....2...........2......w....2...w..222..2........2............w.......2.........333..........g.......8...........?R ...v..**...333v..v..............v..................f..e....222...................n....v.....222.f..e.......222.e.....g..d.........3......w.."/?.f....333.............r....~..1=L[..s.....mu.......Q[h...[eqdmx;GT\\|......tRNS........@..........'`..<.F.Q......c.pD...+..0.#3wJ.........m.^[...7_..V.....N.....s....fA...../...{..\|N....j..l..-Mv&i.9#..~..$...6i...e9...D.y0xy/...zG..

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 265x320, components 3
Category:	dropped
Size (bytes):	9902
Entropy (8bit):	7.925476515492132
Encrypted:	false
SSDEEP:	192:iLFgsa6nFDEeCyD3fCJLZ3FdntcR8tp1nJGzDdM8UUUf8+IZspzx7E9HxMP2:iLFgSFEetzQ5vntgKhsCBbj7am2
MD5:	986CB12FFA1D408ADF3E73A529B964AD
SHA1:	E77BB25B111AA2EDBBD24295343F222FE28E25F5
SHA-256:	68AF730DF3BCCDFB7B3F1FC2E5AE8F251BD4DB39E1CF959DE9B51B073D15BAE4
SHA-512:	3D4E254B3DB6F39066711346C289B121D73197EA141A6384036A3248F94028FBE44E72FE72052E913BF5F98313E7CEA3DCABBCABD5528A77F71FB13EC2EB7304
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."..........4.................................................................-$$...9uK.....8.7.r8??..=..^.n.Cu........#..\.[...N..u.lt.....Twvz..HI!y.8...K....WUV...e&./...>P.....w..$~-/..s..g..\..k]gQF.z..-..g..tt..{.w..a~~....Io)$$..l.>b...O.N......gu.=...M..Xp.g].=..>.$\.V[..u..,..6kn.w...v.s...~o.L.n...+.HI!/9i.....]..".w..........C.YM...>Z..6...;n....9._...W.?C....:..gV......k....H...\...+..-y..mt..w....A.l+3....uB...G.......w/F.........j.../.nu...M.NI$$..K.Ib....s.P..lq....3........<P.z....I_qUl.n.......KgY5.e.66?..... .A..........F...`.a..V+..%.]...i.{pII ....QDQcy.s....\..vfM.S..g........Y.g.c.UROHw..m....1.l.^......i.{qII"=M.T.Q....v...]f.}uG..n.8o[.}r....S.B\|.7.b$..$t..F.k.+...mWigT.....$...MqM5.&.61.qM&s..........L..B.W...3..B.....Z.Al.-l.V.......@.ni...........`. b(`!8...P

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	67661
Entropy (8bit):	5.2141683588701335
Encrypted:	false
SSDEEP:	768:dYSS5BmhQcdCxZSM30hoho6l6reP2cSY7g8+:WoQ30hoho6l6reOcSj
MD5:	515085444B67B66E9C621C11E571E451
SHA1:	C94A2805D903B75AA78CA7BBF1ACF8A0412F0958
SHA-256:	DF3A920270B4F89F44385A0832B1800BCB3F0C7DF1F2A1611079F65CF4DC98C4
SHA-512:	3694AA15A0F3F0BAD3458ECB80DE934ACFCE467C5730E62521302E87F7669BC476AF4222C7DAC457C924741891911B673B7584F4D6AB70AC543168133E0E3019
Malicious:	false
Reputation:	low
Preview:	{"data":"\n<ul class=\"hmenu hmenu-translateX-right\" data-menu-id=\"2\" data-parent-menu-id=\"1\">\n <li><a href=\"/\" class=\"hmenu-item hmenu-back-button\" aria-label=\"Back to main menu\" data-ref-tag=\"nav_em_1_2_BT_0_main_menu\"><div style=\"align-items: center;\"><i class=\"nav-sprite hmenu-arrow-prev\"></i>main menu</div></a></li>\n <li><div class=\"hmenu-item hmenu-title \" role=\"heading\" aria-level=\"6\">Prime Video</div></li><li><a href=\"/gp/video/storefront?ref_=nav_em_aiv_0_2_2_2\" class=\"hmenu-item\">Prime Video</a></li><li><a href=\"/gp/video/categories?ref_=nav_em_aiv_ca_0_2_2_3\" class=\"hmenu-item\">Categories</a></li><li><a href=\"/gp/video/mystuff?ref_=nav_em_aiv_ms_0_2_2_4\" class=\"hmenu-item\">My Stuff</a></li><li><a href=\"/gp/feature.html?docId=1001423601&ref_=nav_em_aiv_wtv_0_2_2_5\" class=\"hmenu-item\">Watch Anywhere</a></li><li><a href=\"/gp/video/getstarted?ref_=nav_em_aiv_gs_0_2_2_6\" class=\"hmenu-item\">Getting Started</a></li><li class=\"hmenu-se

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x301, components 3
Category:	downloaded
Size (bytes):	26429
Entropy (8bit):	7.971302227472727
Encrypted:	false
SSDEEP:	384:smQ0oqM1epcjQ/K1n7UW8P+F1C0jcO8dnoS6flNJNLw0BGET96LS+i:sv0oqM1OQTnAR+DJYLdKTbU0AETMLSr
MD5:	E721893A13ED15C12FA136E1DDEC60DD
SHA1:	BEF32D5CDCD65F2D2089F259ADFC9450B7996756
SHA-256:	C25A054DB459783A375641DE5276E819CF0A1673AC2E3D346FAE6717AC3BB1B2
SHA-512:	8638915518DEBF472050EF414995F7A33274F0A9E5B81BDF20A5FE44FB33EB11F177DBE4C96CCF97CB754FCD9BACF7E7C2EDBA0C277B38ABFC50D9DE5A142684
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/8138bYOBVdL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......-.@.."..........5................................................................../3.....O.........`.a...cS...w....e...F.0.(O......I..zK..I<./...C....fjC.O..............:.f........7..C.Y...d.+..V....r..>i..dp.u.cV.=i'...xt..b[ynL<q..Y...L....Sc.\|..S...vRe.........+.O0..=!......N.V....?.........5m.ci.9+s.I..Z........3.?P.]..I4"..U...;{c4...o..0P....W8....A...W....Ey..9..A&.... M..c-.jC1D..A..oq4..xm.f.i.4.f.s...n.eSb...K.J.....C....I=.9y....#...!.......}...\.\|\|..b../.P....V[&.t}...V...q..=.7.xW...w...A.......[z@.C...}A..p..9G..]..1..0../.V.{.B...P.e].O..R....4.nP.....\|....Q.z.k..Ff...<.."..h.Z...S.+...z3z..h.:.U...7w.._....A......8.E..]A..M.r......5./}.."..._]i....).5......8'...4...D...N.).....{.Q.P.Qb.~...;.]u..g.1........A...F..6pE....}7.V........[q.$..).M...K.[h{...ah.....'<..

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 17448, version 1.655
Category:	downloaded
Size (bytes):	17448
Entropy (8bit):	7.988215424387779
Encrypted:	false
SSDEEP:	384:nWARfBAmbn4a/03ipMctUBgZYByNtBtqKm+sO6nnkofowobaa1FKymG:h9DV/LMM6SNtmdO6nnkof9opKymG
MD5:	48B83F7B9CF25C402AC0946A957F74BA
SHA1:	80FF7ABA37DD1FF5A6B90233A19E3A780A96DC2F
SHA-256:	E27466D19D5B9459F659FACA4609650719F1AA6E9ABCD5BAB91E1A3BA63AC2F0
SHA-512:	43CF9FB0EDFAECE5D3B3ED390C18383D7126D3551B2008FF6ACC8D37887603FAB5011DB63117496D275417C1C5326FF537011F97468ECDE2CA1973AEBB209343
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/S/sash/2SazJx$EeTHfhMN.woff2
Preview:	wOF2......D(..........C.........................?FFTM..8.....@.`..~.....<....6.$..F..<.. ..N..a?webf......6m....{w..V...=...f.B.8`...f...........5..1.)4(R.+..$C..t.1......OP..{......"e...OrB.t<.d..0H....V[ "PL.%C.+.x. .,....p..Z2fd..w%Q..........,..BG^...;.......Jl...[.E:......?.?D..y.m...Q.......'./VD+;I..b.:.U.-..y~n..[0....9.H.....'.lt.(..F...#E...&..&....+1>.....5..\.Y..l...8..5.5...t..P......j#....i."...Z....s't..{px.......:.R!..Kk.e...8+... ....s.sJ.......&\..........3{..j.i.u{....(..h.Z6.9[5.M....T..........$2..6.\|.={....)[,.7_..gC.""b..1.a:..." -&..$.}?.v.!.&.!.U..J&E..zs.....Y?..a.....HZ.x.....Ud.;3....X.....V...Mc&..~.n%...2........]GL...Nzea...S.hDCzH..o...\\|...q..\|.N.h@Z.[...c..X..... @.r.. ..B4..9........x..(9%.....rN..s..\|.;..[7.]y....~u.7..E.zc..../1..M.1..b~..........I.[c.pXyC._KJ..ry.Y....a..._....j.JQ...'..9E..M..4.g......@6... 0..8.<mo..S.....`o.ED.....r...Iut...(!... A$.....""-....T.....;..( (^......_=..+..8mQ..o.S............

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 286x320, components 3
Category:	downloaded
Size (bytes):	11767
Entropy (8bit):	7.936659981789356
Encrypted:	false
SSDEEP:	192:BejtQ9ALgYIjPIjkf+NSE3ee/ST43CntmoB6zXSgUH7hjO+8oivE5mKfg2Uiu:BeQ+LAykmNxODhtmooTOdjOMGEoKPUiu
MD5:	7F6337BC426D35CBE2F2512AE94F719E
SHA1:	A87285820E674B41FDECB8ED75F66E617A45401D
SHA-256:	E18233FDF3EA4A1BD98FD733A009616E1D72D3443EEDB0137D9DCFF922A784D8
SHA-512:	783B0A2DB9C6C7148651DEC82C37D6578E635174D080E26CB153CBB967EA69B5C24CD7AAFE19F91EA465F2601A8C393E8BBFDF07204706883B0C297794606FC9
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/71vI67XaZDL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."..........2...............................................................X.4}..R..l.d.]2..4.[..(..H....9A.`M [5X.{1.S.K%t.S..x.....9'[..)l+q..Bb..W..f.J..y..y^.Y.Y?...a8..............c...Y...:E6....l.G..`.V0....^.O~.I)...D..]_.uL\.........JU[.....d.$....k....G.d..L!.A^...~b.C.~..e.Rv.A..g......$.\|.H.K..<.Am.\....pS2^........M^1P..N..>(.b^..;.8.o.`.........u...{i..Q.+.r,..`.].pjl...7......'?7.F..rx....N]..6.7z..3 b....i{..i..o....8...'.U.5=..+.V..2.........Y.)..U..Wj...0......H..v.......<....$..g..<....ANyU.b....6;t.().7.Dgpi4...0..A...~.........j.....M.L.........S.O.X.;.....L...C..OEd...r...N..aI..o......@........eK.5....>0.;.>\|...Fv9.x..T.$.S...L./s.FL.?......:~......k[..r..ZRd.8.7..Hw.~...xr.;.......Gc......D.Y...&T...k.y_T.. .....j.....j..x...m.....zlw.....t+.Zm......t.;`

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8349), with CRLF line terminators
Category:	downloaded
Size (bytes):	8435
Entropy (8bit):	5.369353534036235
Encrypted:	false
SSDEEP:	192:+w5t7czLxuBQJprSnxviE/h8BQrFVzQUT98xjBt2Lh015uwHxM+FzopqRdcGSiHy:35t7czKqSxRHzPTouh0LlHxLd0qR6n
MD5:	C16C3A4C0FAD29106F34D00E89F6886E
SHA1:	6E11811AB8A98BB295B0916CDEE68B302C33403D
SHA-256:	097786D677A859B7BC87E285377B083B76D66A2FC2832A16BCD50B0E99DF77FF
SHA-512:	154BAF532DBEDBA258B2AC12AA16463A66098B9F149DECE93AB337072976EB2CCCEAEDFBFAACE25606CCDB48F795803FCE1BFE5ECA197325743E8DD7C849F6E3
Malicious:	false
Reputation:	low
URL:	http://i3.cdn-image.com/__media__/js/min.js?v2.3
Preview:	/.. Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved.. */..var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function changeStatus(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	29
Entropy (8bit):	4.017824858003425
Encrypted:	false
SSDEEP:	3:kY4L4NKbvn:kY4EIn
MD5:	734930DCDBA2810CE73FE5069CC19669
SHA1:	81CAF1CBA98DBEAF1A9E7640B0B85071D099254C
SHA-256:	38956056E9E4D8C6798025989C602B9287F3B4477754CEBD04A48520E9490377
SHA-512:	DD2B4AF207BE550370A4B6E1780AF00C78BA68318F30C4DA5AF1F231B7E045DFF62CDDFD5FDA63C716A70CD6EEFE0C5C012262DA0AACD2E8E6718DECBB6C3A5E
Malicious:	false
Reputation:	low
Preview:	<UnknownOperationException/>.

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	1698
Entropy (8bit):	7.006892209710628
Encrypted:	false
SSDEEP:	48:94rEdD1QAx/4HaRKBFRlUUyUOg1X9Bevnkj3hfZ9iOy:9kEfQe/mac5lHyUOg1tovnoRBoOy
MD5:	B6865A5842DAE8A773056B0335F901E1
SHA1:	BE3EF410749C7817F5469E7B57AEC884446A801F
SHA-256:	67BCC900DBA12D5DF3E836531821A46C55E5C4FB0DB1D1B99A8B7880918B6896
SHA-512:	39E4B4D35D2060AFE4BDE32E86B5ED26BAEFFAC77B79E34CB8B5CBD949F5D1036D65AF7CB3108F417B9FFC1B21607EDDA07596E4DA2FDD5F2D5E697D7A1AE0EC
Malicious:	false
Reputation:	low
Preview:	GIF89a....................f..G..K..s.........,..0..8..=..E..o....$..w.............V..d........A.........b............m....k....M.........!...........}......................................................................S..X..`..h..I..C.....{..:.....2....^..4..&....T.......j..;...................\....Q..O.........................?..y..6.....u..(..Z..q...........!.......!..NETSCAPE2.0.....,...................#)-....$..6:7....%+/.70=6......6.........=?=.....3@?......;E.....7A>......B;.....>CD......;+.F... &.03.8.<..!'.14.,<.."P...F.`.....!.......,..................;.WX.[]...<.U.Y-\$_&.JOSH..TJ^*\.G.P..2...#..7.HKQ..:6..L=.FF.'M.....NA.:b..I...T@..?.R../.D..924I.::/E`..A&V,Z.JCaT.T9Ij...........!.......,.....................i.^,...C.K.....jl.8^ghQ..CRk..."dN<.h-P..c.f...m].,.>.Jnj.2H0.T.-..43..5.G.`eC.6:...f..:=.G5.AT770./.6.@C(CBA;@/.F..r. ..Z.@.!.......,..................?(..N!lG..9..'.g[jNJ.A#Hl.F=B].O<.T&28.f_L;.9V(..H...J,...kW.lf:...U.ol.T.r

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 22 x 44, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	538
Entropy (8bit):	7.4475760232899155
Encrypted:	false
SSDEEP:	12:6v/77GLBx7cIa7DgXBei/VFkqG3INPT1Rd+ml9v5l4FwGeVBGeUuDd+eY:jTrAUXUi/zkRINPTFfVl4FwlXGpu5y
MD5:	11C9E0E212BC7CFD6FE2442CD5E185D1
SHA1:	ADE313F5CA61D2799F437EE911A65CA94160609B
SHA-256:	FA9D39FC627570DFDC4B630BAA47D0AC5DBA5C22370233D8B14C77A65D5A1689
SHA-512:	011589F29D7195A2348D13BF85BE599724C59FB7CBA90C258E67C2A4508708509DC68AA30F8102725A61AEE94BF1A3A1855CAF90011652539B209C02BA6420C1
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/S/sash/OMJ6YLPcVKydtJQ.png
Preview:	.PNG........IHDR.......,.....aUH.....sRGB.........IDATH..1.@..........S..^.Fo!Z.O.A...t..p.\|.,..vg......\|....Uj.^.A.........\|...I.du..Np....D........z..#..k........z.....[.........-.0O..r...=Y..W."I#n.+P.m\.w...^+...J.i....2..j......\..P..P.........SQ....v...L.....H{..#-.B..l0..c3A$......\t./z5-z....x.v.....).c]S\.?~.....^.....j..hK.+..k.).....Z.9"...g......."=....E....WZLN....S.d..o-.G..~..m..0.}iez..Sd..s.seN..i.Pp...k)8.uD(..S....BX<_pj...B...'....H{..#-.B..l0.mc.J..BD...\t./z5.y....b.....?....IEND.B`.

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x274, components 3
Category:	downloaded
Size (bytes):	18100
Entropy (8bit):	7.965666408022176
Encrypted:	false
SSDEEP:	384:Qn+BJ+pH2ycr2D4QSAUC/41XJX/X8GtGkuM2SSdcUw84thcVgCX:QnK+pWDbQ9UY4t2Gt4cUqhce2
MD5:	3729594BE68AD14998041DA02E7C7477
SHA1:	B38CC1D08F0F058F7067913FFB6537BB6D0FA05E
SHA-256:	9E18266A99DC626FF27E5D760C652D058275A951F0D7FDC3CB600B9183E0D888
SHA-512:	D18F6B733320FC7AF25C5E786595B81DB11FF26DB236DA198C7AD7610117E15D126020966B7E5EE048C9DA85340691383269E0C13B90EB6090729401CD7C2594
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/71IYzVYpsGL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$........@.."..........5..................................................................XNs.f...vQ.{..;.Q.a..9U.N........H..6.N)..:..S...o<l.4.g..G0wv.q..;Zl........1.L...F.]'P..p.KyC&...X.K!$.....i...&..Ntt.....#.{......h.L.Pxd'..y.s.-.'...Rz`..0.Jai.u.{d.."\C.0!.2........-!..VP...........l.<...f4....J.c...W\|;...Eg.A..qHw^WJ.H.d.9..._....<.sz..'6.K...&.....s.t...Kl.{.;.V!..k8....$..C<a...a.&.o}.=....q..t.[z...t.....aIF.<..z....{a.+dIF.'..#...u...)M.N...a..T.j;.FO.^. c..m]...X9..MF.....2.=...lS.2..i...x..}%...k.[LV.i.{...5..a.J..V!....A.Z4m##....;....._.35.#.-...Q^)wK.!0..:.T..Qq......<..f.+.1...%[..<..O:.E.....C....r.l.B...B.%r~..}.Z+n##.9.:.j.X.v?!.\Wu..\.E.S....K.....+....Os.m...:..fGsF.....T..y.8.=.F/m..!H..l.....F..Tr.u[...?.B.x...S..*.s....rM;.....u3v<....zi..\|.FXzt.^....[7.fQ

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1], baseline, precision 8, 640x360, components 3
Category:	dropped
Size (bytes):	25569
Entropy (8bit):	7.812967835441862
Encrypted:	false
SSDEEP:	384:PYXYGx9LojB4MgkjDwbEtCoTBMbLFYHf3vvwE6Ax5ZCIskXzF726qD6:P09UjxgkB3TBMbBY/3vvK9AB66qD6
MD5:	3698657B3C2DC5A9C4D5FCE3238EFF23
SHA1:	70D75E6C3D0A476D22324B22647C2E0DB0D64295
SHA-256:	11E0A5B47BCA165C2EFCFD7F0166210752BD43035C97CA992789D75B3E7C0954
SHA-512:	C95ACC2286A07E670586694A6228658CA2BB2052084EB01F9A730A0FAA839AA7D1DFE26E8078919847637C35A7903C992EF286754E41942EB739E584A5131556
Malicious:	false
Reputation:	low
Preview:	......JFIF.............JExif..II.......i.........................,...............Version 1.0.0..........................................%...#... ,!#&'))..-1-(0%))(...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......h...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..(....(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(......m-......7..........Kx.S....I(.?....%5.=~.^....F.&...s~C5.'..6.$....y@H.k.u(.>TFF........W:...c_O.?.5...c.C..C...G..I....D..

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (528)
Category:	downloaded
Size (bytes):	4823
Entropy (8bit):	5.3519488745769435
Encrypted:	false
SSDEEP:	96:33qZ8ZYxGhDfr2hZnt3b/ZCWZ4eBuTZhhREIWMUiyr2UpljeJEtBVMZYhZV+6x5D:H8ohOV3bNCTyrljjyWH3ggD3
MD5:	B8F0148A13CD20BA79C167E180F68153
SHA1:	1ABCDC6833021DC58784B7ED9FCDE8BF550E7A85
SHA-256:	9A1DA7FBA4EAC875624D392CB95BA078E0870F97A398A2AF3A6CF726F6D4D418
SHA-512:	58B9135347E92721B7BD066BE96BD8C6A6B468D7F44DA45016C9C00FFA38BF55DB9F55EBFD8121C5D329C09AAB4059A28C20114C0C09E14A0B01688BD1CE4377
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/bao-csm/forensics/a9-tq-forensics-incremental.min.js
Preview:	(function(p,n,w,l){var r={EX:{}};(function(){return"object"===typeof performance&&"function"===typeof performance.now?function(){return performance.now()}:"function"===typeof Date.now?Date.now:function(){return(new Date).getTime()}})();var u=function(a,b,c,e){var f={};try{if(5<=e)return{};b=b\|\|n;c=c\|\|a;for(var k,g=Object.keys(c),d,h=0;h<g.length;h++)d=g[h],k=c[d],"object"!==typeof k\|\|Array.isArray(k)?f[d]=b[d]:f[d]=null==b[d]?null:u(a,b[d],c[d],e+1)}catch(l){m(l,"ex in collecting-")}return f},v=function(a,.b){var c="";try{var e=b.toString(),e=e.replace(/\n/g,"").replace(/\s\s+/g," ");c=e==="function "+a+"() { [native code] }"\|\|e==="function "+a+"() { [native code]}"?"0x6":e=e.replace(/function/,"fx").replace(/\[native code\]/,"nc")}catch(f){c="ex"}return c},s=function(a,b,c,e){var f=[];try{if(5<=e)return[];c=c\|\|b;for(var k=Object.keys(c),g=0;g<k.length;g++){var d=k[g];if("object"!=typeof c[d]\|\|null==c[d]\|\|Array.isArray(c[d]))switch(!0){case !0===a[d]:f[g]=1;break;case !1===a[d]:f[g]=0;

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	3.0241026136709444
Encrypted:	false
SSDEEP:	3:CUXPQEsJ+q:1QEsJ+q
MD5:	32023BB33CFB2A1990A4EF2D85B6AC16
SHA1:	23DCC6D4B5BFE00357FD0248BB5955B8E36BB8F1
SHA-256:	99C2917EE5B2A01459A923BDD1C676F15EE73B62B87F696E6735312D26F51E12
SHA-512:	D052ECEC2839340876EB57247CFC2E777DD7F2E868DC37CD3F3F740C8DEB94917A0C9F2A4FC8229987A0B91B04726DE2D1E9F6BCBE3F9BEF0E4B7E0D7F65EA12
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L.;

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x360, components 3
Category:	dropped
Size (bytes):	21262
Entropy (8bit):	7.93640482254628
Encrypted:	false
SSDEEP:	384:HzHQumMDBFQaM047tH5a9dZ95ehNNr02NCblp0QUn1wEz2GVKXjWaXYF5jLGq:H7Qumc4pUN/ox7NCxqQUn1wJGcIiq
MD5:	DB6AA13EDD3BA3BA664FC54CB471AA9A
SHA1:	13D7597FEC3DD6A46AD91402566431326CD113ED
SHA-256:	217BE4FC56775CB1131BAB593D02E6B457AE8B57073FDB8F9AC2A7CA87388645
SHA-512:	2ADE8496A8EBFD13EBEF9ED2E6178D05877F748D65E410AC396AF6AE686D3FA9D6651195D3D1279FAF63657323598B154ED1BFF3713A81076B1CC9DF9717A2F3
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................................%...#... ,!#&'))..-1-(0%))(...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......h...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....N.^.....6....u6.@.).P..j......4....#..<..s.p...c..+.......Zg.{.^+..........\..8...8.xH.\.......Zw... ...{.QjZ.#..[..n........#b.w...?...Za#j..-.z.?.)...{....RS...R..jJ.p.j.P............Q-;..#.8...wS..Y...%F.I.c.j$.c.j#O=3Z.X.CKEX.Sx...;..)..M4-D0.O4.M...84..E.J){RS.....(...B?.))...Ji.SM+..IN4.E.JJZCJ..4....Sx...p.]....W...<.\|..J.....F.S..*I.\|.].Wp.p..".....

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	22428
Entropy (8bit):	7.910842269862625
Encrypted:	false
SSDEEP:	384:qlbGl6f7R7T7rLr3s96g/W1BapndUdH6Qu3pDm+RaHHhKTOl1uk5xs:Lm7R7r/3pWW6pnudH6Qu5CZhKTA0+i
MD5:	BE418CBD22D8CD432FD8F3F6AE2ABD76
SHA1:	8A1EB36BDA141942C27CE5F2586CCB5EE17A2DA3
SHA-256:	F95648CD95B78DE088904519725C67FFF220F589DC045F19FFBA21550450409F
SHA-512:	85A442470444250A639C86753F1E9D3DC8C308D9F173C250CFEDACD8A1E16F4E3419DA0C7A6F19695CF6D1C25964B54E4FEE4193EED183B41C9E6043BDB827E8
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/S/sash/ZpbG74laklgnz-i.png
Preview:	.PNG........IHDR..............N>U....PLTEGpL................79.78....... ;.(=..........+m.2I..;..$.qI.4:....%<. ;hjjcdehkkfiifiifhh.....@2?..?T..gjj...H.l.O..>...O./;.2...ARB..............>N....>............:..D.).......................T..U$..(../.. ..$..$..................,...........$..#..#..#..#..$..#..#..#........#..$..&............)}.)}.)}.)}.)}.)}.)}.)}.)}.)}.JI..H..K..K...<..vH..H...<...$/......@@@...)1<......BGL...RUX...mxx.........`..K...<.E...%..C..X.D..w........<....uR.-<>A#/>:?C"$';>A;?C...-8D<?C8>C>@C$..............:>B;@D......&{..p.;...........$........................i......@?._I..W.....Q.G6.G6.G6.H6..-.ul.`.6d...........................................?@A?@A...3>H......V........#...vg.8!."....'..7.....@.....D..%.f%.f....^..]..].;........(......].......g...hV....tRNS.....sy..V....!1d..L...;.\v..D.....o.yo.N..o..'\.<{3...5..a..?...X(.......H.7P..h.........w....t....[..B...........................h...............*.`...@.....qQ......1.I..we..\....

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 34 x 29, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	346
Entropy (8bit):	6.229840441641423
Encrypted:	false
SSDEEP:	6:6v/lhPwtz4nDLl9W0y37CpH0xVc4kSbOaWdgR38C+ogSM4bXBxqy3ytDdp:6v/7SML/rp627SbVcoXrbXnqzH
MD5:	FF018650CBB4B192CCD337C6C9478D1E
SHA1:	D6409B6DF8F0B929E8D5C7F9F49F4FBABACDC0DC
SHA-256:	C5EA92061AA96E1E5AEBFE0714F3383A02BEF2ED7A584D0493841573B653E8C6
SHA-512:	2C88089E0AC3EA8AA93AD5E643AC01F77A727DFA2E28843ED436ADC2E96E32F0F0BA5EB17F70F4D039B70C4A1E106D2AE24A2BA1D4E5ADAEFB90E4B456E944F1
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/pics/28905/res-arw.png
Preview:	.PNG........IHDR..."...........N....EPLTEGpL..................................................................W.4.....tRNS.Q...!0....r..>~.._...O#.....IDAT(..... ...A..j..Q7..N...w..4Q.~..+.0443.......&A.?.X..<.b.Q..h.....Fb]0..\..u!....M#.2......~L.H.v.c.7.N....n......@.......7...m...$\.K'..M\..TjG.%G.._...\XjU..cP .{4......IEND.B`.

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	71
Entropy (8bit):	4.19644707821733
Encrypted:	false
SSDEEP:	3:PouVIZxgRO5ZB1XbZ6iFi:haxUkZ3X96x
MD5:	6AAEF67381946BFC1DDACCA8CF7F6C36
SHA1:	E441BBA8B691AD0FFF0BCCB75974880018AB41D6
SHA-256:	73F8AE8C11DAA6AD905107970E55C3C64CD7133561E9E91E650AAB092BA7245E
SHA-512:	99039B90D4F3819EFB0A395D0DC810DEE1A56265D443D24D1C9BDF832EF9F95887E3C417253698A4F76EF176D0ACE6334905F4B7B4E6A8421D2F650B84255EC2
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html><head><title>x</title></head><body></body></html>.

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1921)
Category:	downloaded
Size (bytes):	456875
Entropy (8bit):	5.722510589172293
Encrypted:	false
SSDEEP:	6144:agnsYOSiDyGOAlgGr2VlyL1SlKb2K01Um:agnyPLQMb2R
MD5:	88F1441B6B22281A70CD8A24E69C367E
SHA1:	FBE37E5BEF2E94C933FE9D76459CCB1FBC47328D
SHA-256:	679AAF54FE4422666544073C8BE65DA10420E48FD5B7F044CB0DF11E5A455623
SHA-512:	6ABA874584083B27DFB9E9118DC329B3CD7624A74D3B2E4D7BA18CF18C7E049D989DE9B5595C35330485AFE9E455053AE853543401688FF26BD52C5F28090C8E
Malicious:	false
Reputation:	low
URL:	https://www.amazon.com/service-worker.js
Preview:	(function(){self.getServiceWorkerGlobalClientConfigData=function(){try{return JSON.parse(decodeURIComponent("%7B%22deviceProperties%22:%7B%22appType%22:%22web%22,%22deviceType%22:%22desktop%22%7D,%22marketplaceProperties%22:%7B%22countryCode%22:%22us%22,%22marketplaceName%22:%22Amazon.com%22,%22obfuscatedMarketplaceId%22:%22ATVPDKIKX0DER%22%7D,%22namespaces%22:%7B%22in-latency%22:%7B%22lightsaber-web%22:%7B%22data%22:%7B%22clientEnabled%22:true%7D%7D,%22lightsaber-mshop%22:%7B%22data%22:%7B%22clientEnabled%22:true%7D%7D%7D,%22lightsaber-rule-levers%22:%7B%22bazaar-gateway-mshop-web%22:%7B%22data%22:%7B%22ruleEnabled%22:true%7D%7D,%22buyagain-mshop-android%22:%7B%22data%22:%7B%22ruleEnabled%22:true%7D%7D,%22cart-mobile-web%22:%7B%22data%22:%7B%22ruleEnabled%22:true%7D%7D,%22browsepage-mobile-web%22:%7B%22data%22:%7B%22ruleEnabled%22:true%7D%7D,%22search-mshop-android%22:%7B%22data%22:%7B%22ruleEnabled%22:true%7D%7D,%22detail-mobile-web%22:%7B%22data%22:%7B%22ruleEnabled%22:true%7D%7D,%2

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1730 x 988, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	17986
Entropy (8bit):	7.930640185402301
Encrypted:	false
SSDEEP:	384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N
MD5:	825CCD29AC102FCADAF92B2343D5917B
SHA1:	24472E766CFAC5B82A73B219796556A0A3702BD6
SHA-256:	0878FB2875C0AD852DE8FB3E8F443AFDF3064890F1443B3FECCC274382F913CD
SHA-512:	71B8E7C0813227F5EFA4B4E0561978B13672F46EE441BC222AD77AA46A32F0F44A5DAB3EF038BB3418190E69DCED597A79E77566DA01A259F1CD6B5298A08662
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/pics/29590/bg1.png
Preview:	.PNG........IHDR..............N.7....PLTE.#A..,&/M:CaMVs2..J.. .IDATx...Qz......0..,..,7.....)..;.%......z...\|.N....(.........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0P.%........@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@aPea..Lt......[=u..l....=.H.h.O..nN.c...=..e.{l......[,lu.._c...nk,n.....;~..'......^a...$..sb..V...&..aqc.m.3...T.s....*l...#.z........Xt...H+..8c/BH..1...>...CX...Ha.y/.A.Il.2...g.}..s../.Q..8{.;R.9.1.o......eG...o..-.V.:.......;..u...$...5'..lW.:..Q\......v_.:z....4'.,l].2z....4'.e,.~O]..%>\|..v_.2....U}.8..u=.hL4$..7a....j.....;..eM.hL....\.>.......',./.].I,..{}a.......91\|J.z.....s...[C.1...S.V.. ...r..K. .....\|ea.......sb...?j....3.U.U9#..c..T.?......4.......J..

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 151x320, components 3
Category:	dropped
Size (bytes):	11935
Entropy (8bit):	7.96903949639539
Encrypted:	false
SSDEEP:	192:DQsfE6y1Wal3d8za5Ma2pYkM7Jj3FEd8ul4oxA3t3Ki9O1pqXzLmG+XlTGzt1+N:ksHyEan8jtYkyDNuliQ0XzK/lqb+N
MD5:	382349F69857293ADECCE23B62EE9568
SHA1:	21D67E05D5B345E73617F45CC65760FA559D5680
SHA-256:	5D7CF18918AB31CE1C39D102994FAC16B372A573A4B7ED631AB05880FF9B2154
SHA-512:	27E9178F8C7E8A41B0E1DE2EE5A145D62BA75467422BD7C3760417C61D1E6D281FF2832D70E55D4B5DAA88CF95FB35C2D45A7EFED2AF1C73F9B532C176DC22A2
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."................................................................!1..A."2Qq...3Bars.......#4RU.........5CSTtu...%6D....$d...c....................................................!12AQ.."BR....3Sq.#a...CDr..............?..t(P..i.q....q.\.o....0}....hjMG.,.....CK..RR7,+...NL.@@xj.B.4........J....,.d. '..(.G`.-f=..,...........pR..G.%F8.K.n..--.....p.._.+....~./......+..?......of...2i.pD..C.=..9..] .+....e.]..^.W.\|.;cZiZ....f....>...7...L.....$...j-....~.....f.b.>.F.uF....$....V...F.z....rV.O.7....Z..k......K.....^.'..}.dn~w.[`..2A"...x....O,\..AMk......l....=..E.]..!Z.......`.......M........Mc......p....j....(..I.#.G.....S~[...zp?TV_.";...r.Y..&..KT.a..bP...4O.........^\..'....N...^`.-q.\=.....?.C.r.i..G(SK.l...K.c..I.....S.+...IMv.t.h.B...P.B....._..\|.._.=....D..<....*.\..y.J....$....

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
URL:	https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fld%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26ctb%3D1%26sc0%3DTimeToFirstSuggestion%3Adesktop%26bb0%3D15379%26be0%3D17749%26pc0%3D17749%26ld0%3D17749%26t0%3D1729723017248%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:17749
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 246x320, components 3
Category:	dropped
Size (bytes):	14005
Entropy (8bit):	7.950916489143395
Encrypted:	false
SSDEEP:	192:ToNYck+bWHc1gQwhtqRkc9I5alLV3Sj9Djnkn530KQQ/SNGhIqLQZdJ:kNYQWK8qKoMat1SjJC5wHNG+jfJ
MD5:	FF3F63227D98D4D92931C0AEC02E796E
SHA1:	8F88D3258BBB0663A55703626F2B79A7F007E7AA
SHA-256:	A8159A2CDAB2DCC1BF214B8B643F868CA62FE545BC926CE368C6FE02DE38BB4E
SHA-512:	16C5BEC8EB3817202F5D0094E7A11CE278818A8CD6407CD24E0B49E0EB223ECD73D8FEAFD200CD9F281AD19620F2A3FD0B1F519E2C5A7CB9039F512B2CF3F2A3
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."..........4.................................................................,.....9............S...........S.._2.n3...J..P......Y...................?.d.m$?$.).4_cn#....7.?..tS.D3..........E-:.-.v.,T.P.[F...........?D.=?3U...........".....{5...M.Vt>Ah....Y.6.^...N.3.........7...G.:..U....~...GZg..UjQ..n.....rd............#.[<O.D.xF.U...d.S.....;...,.{X....0.......Gu....Z....'8d7.Y..F..[...9..3.+af.'#PHf..W.z.........p..q..ex.....1bYP...i..i...!).E.s...6Y.60..H...0......../.H6.o....[L$.clk.E..UV.S.!.5{...+...o.c..."e. ......tc.k..y....2r.r..l./'..21.".SU'.h."X9.........A...y8.3K.=.k?...G..<......>.2rt...J.."V9....\.KJcz\...m.....:WW..1.u...@.jb...h._>.>..X.s..lkD..Y.....[.?j...X.....om>.?..\l\......-mlb.kTla..v...-..z..s...K.=b"3....3Ynp....}........y.......:...........\"yU.

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 295x320, components 3
Category:	downloaded
Size (bytes):	27867
Entropy (8bit):	7.977340498489052
Encrypted:	false
SSDEEP:	768:46FO+ZZFFf05nXGIsy28jObaygOqUWwe3S:427BIsyYbaoqG
MD5:	75E259EF31C5EA8F0E078E765B7965ED
SHA1:	22DBE883824369C4F2BACF38B47F44F10FEE7BF4
SHA-256:	695C43896312B354C81C835CEF485D729A2CA9AEEEF06C37134C07A8771E584D
SHA-512:	5BF642F4DA37C32E1289990F590A56C0912368ACCF36E7C8EFE2F7F7496EF506D0A7DE03E07B2E2E4A948BD644B24BE309495DBEB7A7D9A618F1372466856420
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/81ZybcAzHyL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@.'.."..........6...................................................................`........d5=..._..Sg%1..ek.,c.0.z....fUu.]~.. ............\|..,*.1...9G....}KMXU9..]u.O.i....{...Vvn.4..\...............a......J.=m...4.."V[...SM.....U.I]................>.T.......L;\|G...J...y...gA>.....V>.S6;k....I~[...j.............../......:._.z.@........."s...LBu..l.;.kk...b....7T.5iY..............0....>.N^;.9.M./...e...%.V.S..5.....t..JO..Z.A........\|.T..co.....H<....?s...U.j.....dY.W9.e......9.X.ygni..Em.....;..........k...=....{.N...)..FSe.`..]....py..I.......X+.J.....?..6X...6..._./.Wn..s...i.......Fn..'v.g.....9.w.....P.\|.H...M......}..'....1<.Gd.=..rR<9.:...tV_..A..-.2.=._.....eF...){F..o...\|...;....3........W..5.D.......vE.k.o.\|....!..g.Co..q.......[.........7.g...p.~-K..PxQv.\..[.o.......J...jBm.

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	3432
Entropy (8bit):	7.873442285184957
Encrypted:	false
SSDEEP:	48:uFX2ZFVFtvYlgLn5N4TCCcTWJCNbb+Q51AidECbzF7+uKJKEKDaQFlONG/Gp69Uy:egVj2G5NnN+QvxvF7+3KjTAN7py
MD5:	3402BB82E4431782883E1D0391864B91
SHA1:	AFD761BCAA287732490BA7AF527767116251791F
SHA-256:	4933C9FFCE2B529E3737C7BFDE2D72C3F34A59FE4F7D1F79729C5D8499D8A9EC
SHA-512:	AA5C6A43400C248B84BDD995A4DAEC9E67FA113C50390E0109B2824426B18C78D7EA5E9049D41C6B526E87CDF2AC25D68D999A497B87ACD5010B30DA881F0C7B
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/G/01/HST/AHI/Desktop/WebpImages/Toucan_Desktop.webp
Preview:	RIFF`...WEBPVP8X..............ALPH......T.v..Jx.".."!.Z.......A...4........g.....o.......l...\...v.A...W...or.6.../[........3.\.N.8....N.:.N.:.N.:.N.:..J..g...x...'..................:......,x&<.G......x..\..AG..v<.CG..nx.......AG.:......p.r8....G.;.)....d.\|.....VP8 .....:..........%.....F).O.....?...:....?._....o........'i.0..O................?.{......?......._@....%.....+....._...G.O....@.U~..".M.K......c.X.C.\|....E.q.......Mp/....3.i......,..^......w._..W..? <L..>..9.........=....&.......?.......^........?..,..}....G.[......?.<\|~.{.~.}.h2x.h..h..h..h..h..h..h..4yq...1.b.&...{..p.?..a{..)U.....D.6.I-.Y...<a.6.}..B9.w+]....N>.....T.....D.2.D.w.3....p._....6R..j.d.....C.`)T/(...-zpP..Q(....Li.Li.Li.Li.Li.Li.H.3t.&4........?..L........K....I2......M....>.h.;t..........w[iH.h...P.y.{1$D.Y.ij.>...%N.7..s@ ..n.Q.c.K....).q8........{..\|...eEo.4.#..~...v.(.0$iO.V......LP......S..[..q..#....].. .D..L.@.K'..A!,....P.Ovs+..&RKS..qZ....V.pW."7f..c....I.

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37608)
Category:	downloaded
Size (bytes):	394332
Entropy (8bit):	5.052370941958846
Encrypted:	false
SSDEEP:	1536:Y+Dhae/RAVHXnY22z8iS22f2PyFrm+/0dUORBf4TCP6QnO4TevP2huujRdU9PN+k:3aAdUORBf4TCPABuNPIvIvFjtfVl6
MD5:	7CCD8F4C5135BE54B93D50FCB4BBD531
SHA1:	330023ADB96FB4B3233547F5095404D26B5382E7
SHA-256:	5A237580BB5AEFF26EBFF126BD51083585466DA8A6ECACAB196A664208404469
SHA-512:	768DF32FF63EA45A3AE525D28AEF34CCD895685201A0F1944B3027269FDC6887A1EDD621C9748C7445E6129BDEB2846F094447B06613CDCC980A31C1BD5246BB
Malicious:	false
Reputation:	low
URL:	"https://images-na.ssl-images-amazon.com/images/I/41-WpIOxHtL._RC%7C71hATdwg7nL.css,51dhHsnDssL.css,110cRm1b1WL.css,119KcSi-BAL.css,31-P1-9TebL.css,31YZpDCYJPL.css,21pkK7OQMnL.css,41EtvNY2OrL.css,110Nj+wUGYL.css,31K0jc2KvHL.css,01R53xsjpjL.css,11EKggV-DlL.css,415g7iDx4VL.css_.css?AUIClients/NavDesktopUberAsset&0BRhfZ9s"
Preview:	#accountMenu-container,#hmenu-container{position:fixed;top:0;left:0;right:0;bottom:0;visibility:hidden;z-index:100000}#accountMenu-container div,#hmenu-container div{display:flex}#accountMenu-container.hmenu-visible,#hmenu-container.hmenu-visible{visibility:visible}#accountMenu-container a,#accountMenu-container a:hover,#accountMenu-container a:link,#accountMenu-container a:visited,#hmenu-container a,#hmenu-container a:hover,#hmenu-container a:link,#hmenu-container a:visited{font-family:inherit}#accountMenu-container #accountMenu-canvas-background,#accountMenu-container #hmenu-canvas-background,#hmenu-container #accountMenu-canvas-background,#hmenu-container #hmenu-canvas-background{position:absolute;will-change:opacity;height:100%;width:100%;-webkit-tap-highlight-color:transparent}#accountMenu-container #accountMenu-canvas-background.hmenu-bkg-color,#accountMenu-container #hmenu-canvas-background.hmenu-bkg-color,#hmenu-container #accountMenu-canvas-background.hmenu-bkg-color,#hmenu-co

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 194x320, components 3
Category:	downloaded
Size (bytes):	16246
Entropy (8bit):	7.973168088990893
Encrypted:	false
SSDEEP:	384:BLIknhxmtcJGs6L1ALTXT5567/DMbDB3c7A9eJP:BLlXmuJzHT5AIfN8ieJP
MD5:	08662B4A7902CB6C8CF0A5A6861463CF
SHA1:	6F83008E84EFA416864CEFEE8412F45411353671
SHA-256:	1F53C0E42DF235D380DEFB0184ECF6634B16EA3F50BCA78FDDE2433DE2DBFD9F
SHA-512:	0971ECC5B59D256AFE8FF50D0887A56AF46184882448A89D24218682A936BFC544CD3E7B9D71893B52F9C9B115BB7ADAA883F2B5A4E58F88764FA4DE5D0FFDB8
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/71zbsUXaR5L._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."................................................................!1.AQ."T....#2BRaq..6brst.......3S...$45Cu.DU.....&c....................................................!1.AQ.."2a.Rbq.34....#B.S.............?..).F.....R..v....U.M.....8.6......h.t..E...m..).!O7;s.......aT.....s......?.4.^....j..^..3\[O..x......q.C.s.j....).1A".'.A.q.f....J.8I.q<..s.......h...9..Ahz....W.;=..n....z.j..>t...\|y.1.i...v..t.....0r....6+._..M..4.Sq.....k3.[...C.&Et.U.#.. .Fym.I..v].h....2<....L`.\...'O..]^B~3..O#.....F.z>.5...ja...f2..m=.....S..V.S.or...6.UrJ.md.M....F.^[...;.?)....1.?......dh.#..c.>4.................T..2.y.........39{}...V..4..r.....a.Gs.\..pa\..C.....I...E_k....v..a..L........K..&...R..)...b...~S}.L.W.\|..f..7b..{.o..q.....*...{.^{cn.... py.......V.".....S.Z...5..y'.......j.4..6..I..Un...g.j..#......l

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 282x320, components 3
Category:	dropped
Size (bytes):	16617
Entropy (8bit):	7.962906762239031
Encrypted:	false
SSDEEP:	384:hEmbj9ZDlFg0GWc5dQP8Drx7KmliOS/YL90gDYmlwdvYYlBPCqW:Ombj9ZDNGndfR7K4iOTRM0wdvYYlBPCR
MD5:	4226C8FFB44B9EFE0F267522084CB660
SHA1:	1DBC54640CCE776D2273D47FB2629B570FC420B7
SHA-256:	921022E3725065184694D22CD12F32910927760C5B8F2925D14ED2F8A7C175BB
SHA-512:	23E09B60221505418128115EEBB68FD166E764B6CF4B2FC15F9023F9D7C9C2649500D72FBA4DD091E497011B480F9140F9F54042BC3459720E51553A02E288E4
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."..........4.................................................................S&4.i.&...........^q...G.H%.D.1..$.$$...U...1..nMi..i.GH.........3YNE.Kc......2=r.`.7jM.9.......#$.. Dd.%%.HZ.IRAP..5..7L....k.3^.3..\z#.bg...Z2..A..}..~..E.\.5..B...r...U.... ...H.)".....D...M...z....\.FJ..N3..qo....i..\8........Z.I.."....Ut}c.A.P`R ".T.%2....HA"y..Sd.R...p..6\.Hq.....$...@D.K..p....z.l....tc}U...".am.%....-..Aoy2.T..........<.R.{dx.....=...$=...H.jp.z..-<{..D....-.....w.Tdb...$..$.......JHb...\|.:,6.JZ.u..w.t.%95K....bVy...?..7(..X..=U...Y....Q....+...um....#...^...b;x!H....0..d....%D.J...u..Y.f5l8..m....=E..~...j2=9:x... .>..n....]i..={.=.-U.x{..z.I.....q..x{{.\|.#..O..c=OY...."(..w>]y!.7........[.V....q.X...;.{..=.....<.f.....~uR^3.........s].ta>........~.Dgk.v...~.../dy..rS....PS....v...

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 196x320, components 3
Category:	downloaded
Size (bytes):	18187
Entropy (8bit):	7.968925634155733
Encrypted:	false
SSDEEP:	384:Z5lGE0sQW7XrZu5E8YxZP6PihQkaTGumC3rsaWeaiPa36tG6yaZUwR:8bWvY5sZyaSrGJCRPjykUA
MD5:	573958B2432DCDC4C51D7828777253AC
SHA1:	8B075D537587BE3ABABD9293A2A51461BBD010F8
SHA-256:	2C4AF93DC33214DC9A5F4975E0806982A13638A51DFEA54534841E930ACC41B6
SHA-512:	1DB3FF0AFC24615BB620610D3CEDA18AF31F8D37E00F20155AC48E242D508A563C13D5F743885D2BC41DDCAEAE16065131E2D610BAB75BF48FB1F00CC6F449BB
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/71d1-v3l78L._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."................................................................!..1."2AQRq..s....#3Ba...6STru...$t...Cbd...'45c...7U....................................................!.1.2Q.."Aq#Ra.....B..3..C.............?..[k~..fw.....f V.$_y..~4Yz2}d.1...}Ou.....g..$tm.I..U..I...s.p3-.$_y..~4y".....[S....ZK....q;.......S...J..j.=. .......A.L...!.D:..q[.7%...7.7.>.E....G./...}...^...SU.L..N..w..8........w~....g.5....L`x&3.O.tp......}..z.5.p7J..2%...?.o.$_y..~5.......f..o..2...... .m4!gX.".H...R\|..o.......KI`Wg..M..16.!."..&..U7c.N.......$_y..~4y".....m....b{.....L..8.Ws.SY.q....r.I).*nytRzJ..m...<.}.....<.}.....h.K..E....G./...}....$..E....G./...}....$..E....G......o.EI&<.}..#~4y.......RI.#_y.....H.....i.P....=....G..\|.j..k.A;.H...Qm..=..._;.'..Z..U...........}I...}.....\|.}.......?m..n..RG...J......

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (523)
Category:	dropped
Size (bytes):	9763
Entropy (8bit):	5.5576256209320105
Encrypted:	false
SSDEEP:	192:6U7KggJdFc65eODBRWPWVJfZZ4CD7N1bNa+AqDWzEF7jTwT8U:6U7Knz5eiBRhVjvriYlU
MD5:	6EED3151A81957F00C3AA5AD97F78CAB
SHA1:	6C0E9AD0ACB70ECB40B78B05CC7273D5FF882C97
SHA-256:	8A1CA9608771693D06B0109E1E442D495DA603F32182A6527F9F1026C84780E9
SHA-512:	92462B00575FE2B761D3159F7ACE5D5FF4C56B71228925B187FEF8E164D5F8C4354215AC2BEF26F0532AA162257AEF285C8EEB902F4EFF187FD9DA8FCCBBE98A
Malicious:	false
Reputation:	low
Preview:	(function(c,m){function y(a){if(a)return a.replace(/^\s+\|\s+$/g,"")}function x(a,g){if(!a)return{};var b="INFO"===g.logLevel;a.m&&a.m.message&&(a=a.m);var f=g.m\|\|g.message\|\|"";f=a.m&&a.m.message?f+a.m.message:a.m&&a.m.target&&a.m.target.tagName?f+("Error handler invoked by "+a.m.target.tagName+" tag"):a.m?f+a.m:a.message?f+a.message:f+"Unknown error";f={m:f,name:a.name,type:a.type,csm:N+" "+(a.fromOnError?"onerror":"ueLogError")};var h,l=0;f.logLevel=g.logLevel\|\|A;g.adb&&(f.adb=g.adb);if(h=g.attribution)f.attribution=.""+h;if(!b){f.pageURL=g.pageURL\|\|""+(window.location?window.location.href:"")\|\|"missing";f.f=a.f\|\|a.sourceURL\|\|a.fileName\|\|a.filename\|\|a.m&&a.m.target&&a.m.target.src;f.l=a.l\|\|a.line\|\|a.lineno\|\|a.lineNumber;f.c=a.c?""+a.c:a.c;f.s=[];f.t=c.ue.d();if((b=a.stack\|\|(a.err?a.err.stack:""))&&b.split)for(f.csm+=" stack",h=b.split("\n");l<h.length&&f.s.length<F;)(b=h[l++])&&f.s.push(y(b));else{f.csm+=" callee";var m=z(a.args\|\|arguments,"callee");for(h=l=0;m&&l<F;){var v=G;m.skipTr

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 194x320, components 3
Category:	downloaded
Size (bytes):	18100
Entropy (8bit):	7.973576556939328
Encrypted:	false
SSDEEP:	384:HeCocazpz7FMxXGTrAzTnfDrXUQGi7bz2QuGcJiAHZUG:+pt3ypGToTfDYQPnHcsoZz
MD5:	4A5FE6C18223EDF4A69207CAB16FFB0C
SHA1:	C5375505AE4C465925F2D8CA603A4CC4B5F2EDC1
SHA-256:	433CBBFBF1CB50C82A8734DE012C4EEDFC541BA3DDFCC22167A3967FD8334A6B
SHA-512:	3E18CC4BF93A3EA8E13EEC3AEF16200B37CBF1F517BDF72588812E01EB45BC09EDFB2926D3809FB4D1119891F8FBA779AA69368205CEC85FB02B4A2815969C04
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/71Qh6EgiGJL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."................................................................!1..A."2QRa.qr.....#35t......BDScs..Ubu...$%46C...E...................................................!1.A.."2Qaq.R...#3B....C...b.............?...x..>...Y.h.8d7...4u.B.@4n8..x.[..(-..!n.'.g.cp=.sj.e.ou.z;j..$..UEBq....o...3.......f.}B...;]...-J\.;.[n......4......!.....5..4..O.a..w.._..2iz...y...#8..gB..K.]R......X&.$..s...eb........".a...uX.5.J/%..&..B....d.....8.!!.O',....].{#2.hUl.e.Z.p.L x..9.Q.w{..Eh...,{..b...+...........\|lG...Gq...\|!}.L...H`p...O.P.LJ...8..'....~AB.0p......TT.....c..-..A.O..db...Kr+.....Xn.G2.x..(......dc.Lc...HJ.9.ef.{D..$`..A.....V...O9..v.l.V..)..p....-....F.~F.&..z=....cE....0...b..p.B.".w.v.t2\.H..f>......S{..E......?`.?ISO}.r........A.py.%T\|...E.."...C..X,D{..;Q.,..6..0....j.3..vP-...j**^..v

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 700 x 78
Category:	downloaded
Size (bytes):	47368
Entropy (8bit):	7.923745138809189
Encrypted:	false
SSDEEP:	768:l7rHsnb3iQgO6J0+sux3IixcLi0yzsVaV4LTqz/Jp5YK+r8zq+:1sbiQgO6DfGKzsaz/1YK+r8zq+
MD5:	F5060F1A0E40D82BD5F1FF3F24485F88
SHA1:	090868DF63C2D90414AB9FCC11E76DC336A6D3CB
SHA-256:	A65574C9F796C8553593E53C3E94E8479B34CF25E0367C6EB70C5F9CC0E2028D
SHA-512:	11D5C11D5425212EEFBDC6E2279F4DAA628B92016430256414E43DFFB5F85149682DB48E2647B47685F9A8E28A04523D0758157B98DCC751F7BECA88AB8319CB
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/G/01/digital/video/merch/Other/TNFL_24_SWM_700x78_POST_Final_noLocale_GSS00014519_GraphicalCountdown._CB544626030_.gif
Preview:	GIF89a..N.....J........r..........s...v....e.k`..Q...n....g....p...2K`....V...__m)U........I..........#.u...d....Vg..q.!.W..k'R...0w..ny.....?....\8.LJR..4.............>..`.........4?..qQv.......{z\|...<P.........j....`(..$yY..$f..>-......:.+..I.T=P:c...}rL2&..@.....\...:.........&S.M..8....]8....uKMu....B[.....S9]{....e....@...~[.\|....]..u...1.i.1...\~A(#D...n.x....#/>...!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:d00e5055-199e-40bd-9a64-13fa4b47d7c1" xmpMM:DocumentID="xmp.did:AE695F3372DE11EFAF45EBD2419A4EBE" xmpMM:InstanceID="xmp.iid:A

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	23
Entropy (8bit):	4.175735869100492
Encrypted:	false
SSDEEP:	3:VXciJ:hD
MD5:	C7D3355DDAC8D35912F6CB56C4BE6ECA
SHA1:	4ECB85CA8A4B633FE7DB11B2B7591AF83A89D406
SHA-256:	88EA58255D4CD82340F7ACAABE0E6A99F195A4DC2CA6EF56EC503D03B331BEE5
SHA-512:	8164D943F11F6559A8AB31869676FD4801E6E8C18DF05B53EF2F5CE5EC23BD632E66018EC134DA658289B6FA4C2BA15EF47DCF6210866457CFA7DEDB45994272
Malicious:	false
Reputation:	low
Preview:	window.ue_adb_chk = 1;.

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (580)
Category:	downloaded
Size (bytes):	6543
Entropy (8bit):	5.272859629056633
Encrypted:	false
SSDEEP:	192:gyzz5hktnOYGuj5gVFiarjquEGDQozjl5PBpPKP3:DAOuArnbBY
MD5:	79F933EE5EFC2BA80689FCED8E266CF4
SHA1:	46A21BEC44C54D66958ED362B3914B6817EE8EF1
SHA-256:	F1341B3B228311FE2428A92B1051A82E963A45873314722AD9CB83ABE2FFF35D
SHA-512:	97A2AEF175BDFEDD932B433C75357482B1F3177C237CD0DC04A2B33D2F014F57560E5D5ADACF9E86C8E71F1983A56289A64F0C8B02959D0954293F63D2EB46C6
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/21vARlfe4pL._RC%7C11s0wiXngEL.js_.js?AUIClients/ARARegisterTriggerSubAssets-search
Preview:	(function(b){var a=window.AmazonUIPageJS\|\|window.P,d=a._namespace\|\|a.attributeErrors,c=d?d("ARARegisterTriggerSubAssets@utils",""):a;c.guardFatal?c.guardFatal(b)(c,window):c.execute(function(){b(c,window)})})(function(b,a,d){b.now("ARAConfiguration").execute(function(a){a\|\|b.register("ARAConfiguration",function(){return{getRoboticSessionId:function(){return"000-0000000-0000000"},getUserAgent:function(){return navigator.userAgent}}})});"use strict";b.now("ARAAddMetric").execute(function(c){c\|\|b.register("ARAAddMetric",.function(){return{addMetric:function(b,c){a.ue&&a.ue.count&&a.ue.count(b,c)}}})});"use strict";b.now("ARALogError").execute(function(c){c\|\|b.register("ARALogError",function(){return{logError:function(b){var c={logLevel:2<arguments.length&&arguments[2]!==d?arguments[2]:"ERROR",attribution:"ARARegisterTrigger",message:1<arguments.length&&arguments[1]!==d?arguments[1]:""};a.ueLogError&&a.ueLogError(b,c);return[b,c]}}})});"use strict";b.now("ARAUtils").execute(function(c){c\|\|

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 11 x 23, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	307
Entropy (8bit):	6.834709088323208
Encrypted:	false
SSDEEP:	6:6v/lhP8fTtHV5pDf3i5Jvc/kVIrZrvGPnm+V5jaWqarfVLWzZ/CNV7ljp:6v/7kvS5JSkVKZjB+VVaWhrfVaz8T7lN
MD5:	BFF2CEC62E448B5EF3F44573B64F0297
SHA1:	2E0C40F548BE68CFF7BDC4631AE16E6C391EA0DE
SHA-256:	F7A0332C6FF3E56DF56A15334B5CECECCAEB81E179E002BD27A24983C522C248
SHA-512:	48EDA35811CBB3658CDED635BEA40E8AAECC6232DDC9729B9736AE9F08FE03467324042814FDC6D3B08B3C6B2D9ACF163FCCC3AD5FAB890711AAD28F4F5DC664
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............fE....ZPLTE......jjj......___......UUU...................```..............uuu........................IDAT..E.Y.. .C.....}...5'Tm...d. {...=..#...D.FC.......:.../e.R`P.ur@....N.....d.J....s.b]n<x...8.Y11i.p"r{.......\|.k;.8..E....}....?...R%.t...K.......IEND.B`.

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 26368, version 7.13107
Category:	downloaded
Size (bytes):	26368
Entropy (8bit):	7.990131530252601
Encrypted:	true
SSDEEP:	384:v7wWZru4iKpB/JE6AVUYJH+lxn5AELk74XW7VnTrMyX3ELRA1xt5q7R1uU4tuNbv:vEWPiIXc455AEw7jZTrMy/xDK4uNRZ
MD5:	120E9C9433CCBAE4D3C66849B05BDDCA
SHA1:	1C8B974BCE114D152D4F3EB7B08DFDC9FB1C7556
SHA-256:	FC377FD9BA35873E42CE41967D17800BA048244FABF49620893ADE6872CE3DFE
SHA-512:	82E7CB1CC117AC7575685E0D8EF4E9256525F1807762DF8B266B13A00423465F6BF29B87E5D62FE9C1D6E9FD4421B40933E7C4DFAA609DA9F8AE949412F6EDDC
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff2
Preview:	wOF2......g.......&...f...33....................?FFTM..h...6..$.`..b.<..e.....(..g.6.$..$..T.. .....R..o?webf.[(.Q..5.;......&....'...D..a....{...........V. XR.s.0..N8..f...Uo.6....a.W.q=.K..M.CM..onL\Pu`ag.42....~4j...?N.H..<&h.b.e.....2`<{R..(.y..c...5K....i[.?3..P.H:.i....}.Ub.f.z]!A..=........s....B!.+O2...\t.x.x=..;.W}.u.:....."R".$..eG..Xi... b.X%b.F.....h..:.8.1/.X.....V..=A..6........p.....1?..5.k..{_...~.m.Z..eo..R..4.JWIW.Ri.....PR..P..!.PB.r.p..Bj..o.U.q.....\h.F..!....>=..b"..@k..)......q...%.A..0A.I......X......5....h...f.1F.>.Y.h..h.pkCsx..Z~.F....4!$....6...sn..2.....iq.....;..$o.......Q./..........t..`.8...y.9!A......i@....k..rr.H..x..l.].7.T.p1....i....XP.........V..]...M.q.\...7.l..ytH....}.MsE..i.....A..cE.\A2.R4...o....B.t)..9B8.2.C.R.ryE.Pu.+......W.Zi..H..3..?rA...Yd93.....5... u.....w.H....Z.K>..(.2.{c-AJw.x....t.3...S........B...',.....j.".\..X./.l.-Y.h..}~..g...Iz.l]H&6.4.m&P..\|..H....B.I.0.8..1.sv..o.

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 196x320, components 3
Category:	downloaded
Size (bytes):	18468
Entropy (8bit):	7.976097277303291
Encrypted:	false
SSDEEP:	384:c33fCqwjL27p8rXRIbeojdXAzCm67De4lK4a9zgWLnT5nLAWDXjzgwauPmG0K:0cjLpRKeAB137DpK4yb5LJcI0K
MD5:	131CF639AD8DB5B200D86AB60A51069E
SHA1:	98ED7221D79BC0B78D3DAD4F830F49F95B5D21E5
SHA-256:	102A219BBC0E4C9825F3D533AA7658BA50CF6FF1260BA010E066719C6E39CFFE
SHA-512:	DDE0B869442FB6D4144B8515845C1AFDD1A35272936AD6ECF0641D9A6E565CAD11C41E3741D6A9486AE975132602EE760B15412374F8BBA157B51B81ADDB2D1E
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/71foO-CpROL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."...............................................................!.1.."AQ.2aq..#BRS.......5Trt...$%C.....34DUbs..6Ed..c...................................................!1.Q..2ARaq.."....$3#B..C4S...............?....wM...[R.b.n.....w.;.fL..AfR....S.[...QE...(..J...{.<.G.E...dy..z..)#.....T.+U.z{...?....."..O......q..o.Y.T..........?../OY.y..O.....k..M7.(.R.Z&..s...}.. .6k....b._..(....p.o.U>Y....lJ...[........}X.S.MZ.du.@....:u...6{fV....J...\|b..;X.AU..S;F.^.&.?.\|.?...)..g..:..........7.q,....i.d>(C.a.....p...........V..:..o.F<.P....F!t.CASm.....z>..7"....a{%a....Z........P........x./...Rs)....O.}.....*}.....5....D=t.....42.3.I...?..Hs..."M.T....>..c...\|.{....=.$.......`.7.y.".....5.2......h....\.....v..;Y}..4......h.+c..j.Y.....av.e.....$..`.Y.ts...o..Rguy\..p....[.=K...j68..=.s....3...<

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8349), with CRLF line terminators
Category:	downloaded
Size (bytes):	8435
Entropy (8bit):	5.369353534036235
Encrypted:	false
SSDEEP:	192:+w5t7czLxuBQJprSnxviE/h8BQrFVzQUT98xjBt2Lh015uwHxM+FzopqRdcGSiHy:35t7czKqSxRHzPTouh0LlHxLd0qR6n
MD5:	C16C3A4C0FAD29106F34D00E89F6886E
SHA1:	6E11811AB8A98BB295B0916CDEE68B302C33403D
SHA-256:	097786D677A859B7BC87E285377B083B76D66A2FC2832A16BCD50B0E99DF77FF
SHA-512:	154BAF532DBEDBA258B2AC12AA16463A66098B9F149DECE93AB337072976EB2CCCEAEDFBFAACE25606CCDB48F795803FCE1BFE5ECA197325743E8DD7C849F6E3
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/js/min.js?v2.3
Preview:	/.. Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved.. */..var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function changeStatus(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13959), with no line terminators
Category:	downloaded
Size (bytes):	13959
Entropy (8bit):	4.858274335382957
Encrypted:	false
SSDEEP:	96:XWOl3c960gt3JO2Xs61xWKAr/HXQIQKLKrs3k06RdlIxo2Eru3ra/I7xAfRgQoMv:XWwBCQYYAeu6A7ifHsQ9NXyptgYUX
MD5:	6139BD4550416E4ED64680A58EF8E43A
SHA1:	3FFF87F0A65C684ADDB1762DD91D84DC09AE2384
SHA-256:	67D41A4FFFBB712D314314AFA8DAA1D443898DE585C494FE23EB3E76073ACB4A
SHA-512:	8C4F115F856A1A43CA31FF94787F78E55168E073B878E432252E5B0A00FAE786635A02F8536E0B90C49812A7C441B3BA624F3F05ABB2FDFABE10EABC95669DE3
Malicious:	false
Reputation:	low
URL:	https://images-na.ssl-images-amazon.com/images/I/31fNEss5igL.css?AUIClients/DetailPageAllOffersDisplayAssets
Preview:	#all-offers-display{overflow:visible!important;position:fixed;right:-620px;width:602px;bottom:0;z-index:290;margin:0;background-color:#f9fbfb;border-width:0;top:0;box-shadow:-4px 0 5px rgba(0,0,0,.25);-webkit-overflow-scrolling:touch;text-align:initial;font-size:13px;color:#111}#all-offers-display #aod-offer-list{background-color:#fff}#all-offers-display .aod-delivery-promise-column{margin-right:0!important}#all-offers-display .aod-delivery-promise-column .aod-unified-delivery .a-spacing-base{margin-bottom:0!important}#all-offers-display .aod-delivery-promise-column .aod-scheduled-delivery #sd_buybox_root{margin:0!important;padding:0!important}#all-offers-display .aod-delivery-promise-column .aod-scheduled-delivery #afn_content,#all-offers-display .aod-delivery-promise-column .aod-scheduled-delivery .sd_bb_centered{display:none}#all-offers-display .aod-delivery-promise-column .aod-scheduled-delivery .a-row{margin-bottom:0!important;margin-top:0!important}#all-offers-display .aod-delive

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (570)
Category:	downloaded
Size (bytes):	454771
Entropy (8bit):	5.5646901373772915
Encrypted:	false
SSDEEP:	6144:1egUGJLlclm0qb6eNStuxMX2VQ5PUZAHuIOuH:yUclm0qeH2KHn
MD5:	770117A8C253A8649CDF30CFECAE4E3D
SHA1:	EEA65FEC2DE2C250AB28FF8A9C057EAD2A7DBD91
SHA-256:	61DCB4F972716E50566F516FCA0E7DB600AFCF2223726EAB58C170AA5A22CD09
SHA-512:	DF4E406EF663F3938E92E0286FA49567521328B9AE7204734E1C6C0769DB6C94249A476FF4C843145B4F2BCB943920CBF36A9A60B23833A43B1C305C03E072BB
Malicious:	false
Reputation:	low
URL:	"https://images-na.ssl-images-amazon.com/images/I/51GRfnCRJBL._RC%7C31CuRA-rQfL.js,51YRyCQgcDL.js,01KTtrmeR5L.js,21RoFlDNKHL.js,41fFmJrK7zL.js,01N0G7oHRlL.js,31-hnA-p85L.js,118u4l1lw0L.js,01KVpvQDfZL.js,21XkditqCiL.js,0175nbnAD4L.js,41n8B+HM0VL.js,013F47KhYmL.js,21-qzi7P9VL.js,31qUHWTq-2L.js,21JVz3Jj7-L.js,01gkl49RM3L.js,31quKQWA5aL.js,01qtTpqN9TL.js,010atgkqRqL.js,11HK5yarA+L.js,010dZST96oL.js,01UY0Z7k19L.js,11c8N2Qbr7L.js,215jXa7j8AL.js,51toJYvD5nL.js,31jzxcc0Q6L.js,01ly-sHeg8L.js,018v226z-QL.js,21z34K3nOVL.js,31M8YAO7NgL.js,01993rJ5roL.js,01SiFpsoIzL.js,011gqdvx+zL.js,01sH1H-anWL.js,01gkFPx1YZL.js,01dfGSDqqiL.js,01v8HNSpzuL.js,01GsEhoWBNL.js,01n9shjbBjL.js,012USBOk43L.js,21ZDIxQB3qL.js,61jBrtcEeiL.js_.js?AUIClients/SearchPartnerAssets&73Qy/lVb"
Preview:	(function(q){var x=window.AmazonUIPageJS\|\|window.P,F=x._namespace\|\|x.attributeErrors,A=F?F("QuantitySelectorAssets",""):x;A.guardFatal?A.guardFatal(q)(A,window):A.execute(function(){q(A,window)})})(function(q,x,F){function A(n){var f=!1;q.now(n).execute("qsAssetDuplicationGuard",function(a){f=!!a});return f}function L(n,f){if(!A(n))try{q.register(n,f)}catch(a){if(!a.message.includes("reregistered by QuantitySelectorAssets"))throw a;}}function Da(){var n=arguments;return{register:function(f,a){if(!A(f))try{q.when.apply(q,.n).register(f,a)}catch(c){if(!c.message.includes("reregistered by QuantitySelectorAssets"))throw c;}},execute:function(f,a){q.when.apply(q,n).execute(f,a)}}}L("QSAssetDuplicationGuard",function(){return{register:L,when:Da}});"use strict";q.when("QSAssetDuplicationGuard").execute("qsAUIDeps-main-duplication-guard",function(n){n.when("A","QuantitySelectorConstants","a-util").execute("qsAUIDeps-main",function(f,a,c){function h(){w&&w.enableCheckoutCompatibility&&g()}funct

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (574)
Category:	downloaded
Size (bytes):	23492
Entropy (8bit):	5.443529336172174
Encrypted:	false
SSDEEP:	384:AgyFPIA67yBIPYdd3mGPIIn0uQVl4um7pn+ugmPQ+0YKTxeXYCTY+3wRUsG1MgCZ:HyFPd4yBIPKmGPXJumdPgmP9wxeXlnCZ
MD5:	FDF102D2B032AFE87B9DA1508C04CD0B
SHA1:	1E27BCFF6B3F49901A0318076FC05C426A381511
SHA-256:	26B2213ECD0031FDD4EF13E745166C7D63284D04D6B73896E497241F0AAE729E
SHA-512:	5A677C8FD435A853F8E22FEF0DA7FD1822A4F7C980D3E7E63B519B0D1947AD85E1DDDEF78A6F1D9B1EFBD1FFC388BC898B8DB0C2989BE1BE57E2BBC4862FF5B0
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/41JGxdrbFrL.js?AUIClients/AmazonLightsaberPageAssets
Preview:	(function(v){var w=window.AmazonUIPageJS\|\|window.P,n=w._namespace\|\|w.attributeErrors,p=n?n("AmazonLightsaberPageAssets",""):w;p.guardFatal?p.guardFatal(v)(p,window):p.execute(function(){v(p,window)})})(function(v,w,n){(function(){var p;(function(e){e.deep=function(b){return JSON.parse(JSON.stringify(b))}})(p\|\|(p={}));var x;(function(e){e.log=function(b){for(var a=1;a<arguments.length;a++);}})(x\|\|(x={}));var H=this&&this.__awaiter\|\|function(e,b,a,g){function c(b){return b instanceof a?b:new a(function(a){a(b)})}.return new (a\|\|(a=Promise))(function(a,f){function d(b){try{l(g.next(b))}catch(m){f(m)}}function h(b){try{l(g["throw"](b))}catch(m){f(m)}}function l(b){b.done?a(b.value):c(b.value).then(d,h)}l((g=g.apply(e,b\|\|[])).next())})},I=this&&this.__generator\|\|function(e,b){function a(b){return function(a){return g([b,a])}}function g(a){if(h)throw new TypeError("Generator is already executing.");for(;c;)try{if(h=1,f&&(d=a[0]&2?f["return"]:a[0]?f["throw"]\|\|((d=f["return"])&&d.call(f),0):f.

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 177x320, components 3
Category:	dropped
Size (bytes):	12615
Entropy (8bit):	7.97436467769746
Encrypted:	false
SSDEEP:	384:KlBfyxgX4+1DFd8Eoa5c+iubO5yWKACKn2Ez4L+48o25:oBfMgX4OhOEoN1ubO5yDk2mPxP
MD5:	7EA4ECF38C6195A30DD60DC3F774C64E
SHA1:	969D91E4A144635DD114FEBE88A7BE8899614B7E
SHA-256:	FCCFA4E48526EE007206555EA55C2E8FC8E63FFB19C4D60BB9D767707ACF39E0
SHA-512:	610865C616450D6367AA54B10A85029C6475F20757EC6798584D90DD963CAE0DD13102AE0405C6726BDFE5C4B4E91D1FB1F27B9333169303926BDFF9DC84CA2C
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."..................................................................!1.4AQ...."#$2TUaqrst........35BCRb....%DS..V.....6.................................................!1.AQa.."2.......q..............?..S..0TE%....RiTW..0.o.\.A...F(..^.{.....4.Bs...........j..[)j...4..q.m.\|j..ILy.y.ky.xUM....\|.E.<......M$.cl#..k ..f.*..49.....[....h.J..#....O.+d.vY...v}L....\|.L$.".S...O..{]iP....nVrG...8.............}...Q.."..Y..{!\|..S3h..9.........(z...U>.R.....^....o..j.....7y..t.^....r.~../>r..n..(...z...?.UoY..#..e..).5..[.J...I?...Ej....;-)]H.:j.JU.J....E.yo..NvK..;.hjJ...v.vi:...Fb:.B....>t...j/.....+..T.k.Rx{;.z....S :..R:.4.~FN.O..\|.E."....i.N.1R.J."..6:a2.....K.?..d.\|R..4c. =....x......rn'MJ.@.]A...g.ydyX.3.X..k_..8....I..5.s .yh+=;.......OM..@.......0.[..^e:.Zo^...+.4..;[....)...H..te.. ..#....wE9.......

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 250x320, components 3
Category:	downloaded
Size (bytes):	13488
Entropy (8bit):	7.944522120515515
Encrypted:	false
SSDEEP:	192:IN5TduTyiS+YC2usjKJFVD9J4344TxI7LmkXr6odt06wGSAulISIS1fEUOlZO:IN6ymajaTJluwTrTBjSAaxISVEUP
MD5:	5A114F4F47476744799C344A202BE26E
SHA1:	FE83ADE1D979C993EE313ED9A5B9C90B3A6014B8
SHA-256:	42EC79E0DFDCFE740D744171EE514812562795C8D2F4144D4E2CB0E825488D70
SHA-512:	C006C10638716F35B1AFCCA756F95563554C2C393AD8D4E134826D3AA2AB2A11B3C5B0FE3F4D438F854999D4DE55022D54F3228617C0DE96B3B541AEAB73007F
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/71eIkoJufjL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."..........6......................................................................0.X..T......._R.S.1.c.c............).h.T..Y....#...<....S..o..E.X.........q..V.nM...C`{@.{A......B..FL.2.;6Z...........k.m.....{....$...d..1p..............y. ...q.W$.../E..,@.%.#...eL.............y...h..[J....~.O<....3I..f9.W./.......k..d...{\|B${[..~'t.......7p.Vn.F.6...6.L?.o.Z..k.:-2z.K.H.]5.M....q.i..u.S.6.........7P."....r.O.f...x~.rR......-.l..=..._.}#..W.....2..I..l........[.k...ANi{.rU."/-...\|y..eqU'.n..\...4....G._...dwx.AqQ,..0z................sL.#.t.jn]..2Wy.l.J..<.5.94..e...Y.4..5..........q+k.pe.=..Z..+.s..k.[...-....d..sP.^.......>......Ou..#]l.......J.....\|.....U._>...f...w.o....\.s.,t.1..e..P..7..<..g.......Q._^.e..n....\..u...EEHk.^....".z..*..<bl.N.......y.]l.........Re.d.u...

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8349), with CRLF line terminators
Category:	dropped
Size (bytes):	8435
Entropy (8bit):	5.369353534036235
Encrypted:	false
SSDEEP:	192:+w5t7czLxuBQJprSnxviE/h8BQrFVzQUT98xjBt2Lh015uwHxM+FzopqRdcGSiHy:35t7czKqSxRHzPTouh0LlHxLd0qR6n
MD5:	C16C3A4C0FAD29106F34D00E89F6886E
SHA1:	6E11811AB8A98BB295B0916CDEE68B302C33403D
SHA-256:	097786D677A859B7BC87E285377B083B76D66A2FC2832A16BCD50B0E99DF77FF
SHA-512:	154BAF532DBEDBA258B2AC12AA16463A66098B9F149DECE93AB337072976EB2CCCEAEDFBFAACE25606CCDB48F795803FCE1BFE5ECA197325743E8DD7C849F6E3
Malicious:	false
Reputation:	low
Preview:	/.. Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved.. */..var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function changeStatus(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (574)
Category:	downloaded
Size (bytes):	5749
Entropy (8bit):	5.235668032462024
Encrypted:	false
SSDEEP:	96:dqUhTMvW3qbDkvUaTyTwsN7N7PWX0zmei2NeNeYzeie1eGnUYtVwJVKx:dqmMvWankvUUyTws7N7e2TiFYY6vwGnT
MD5:	41619C38B3C06B8A6C0F3D86CF64CEF5
SHA1:	4B655456A08C148B46F8FD29517D595F2F720320
SHA-256:	0A46C96881D5886EC3F902A00750F6F28A8262FFA2A16C43EB67D8F5D2683C57
SHA-512:	EF42075340710D7B37FA4C4F9019EF1912AF412CE4398AE010B573B9AA1D42C2EA634AF96628C9F0FDB90082418DA556DAAD8CEF8FFE18B4794DC52D222B48DF
Malicious:	false
Reputation:	low
URL:	https://images-na.ssl-images-amazon.com/images/I/21cuxCuJB9L.js?AUIClients/AmazonRushRouter
Preview:	(function(g){var f=window.AmazonUIPageJS\|\|window.P,r=f._namespace\|\|f.attributeErrors,e=r?r("AmazonRushRouter",""):f;e.guardFatal?e.guardFatal(g)(e,window):e.execute(function(){g(e,window)})})(function(g,f,r){g.when("A").register("rush-routable-application-base",function(e){return e.createClass({init:function(c){this.applicationName=c},name:function(){return this.applicationName},unload:function(){return{}},load:function(){return!0}})});"use strict";g.when("A").register("rush-router-html5-history-support",.function(e){var c=e.$.extend,n=/OS ([0-9]+)(?:_([0-9]+))?/,g=/Android ([0-9]+)(?:\.([0-9]+))?/,h=/iPhone\|iPad\|iPod/;return function(e){function b(a,b,d){b=d.match(b);return{major:a&&b&&b[1]?parseInt(b[1],10):-1,minor:a&&b&&b[2]?parseInt(b[2],10):-1}}function p(a){if(!a\|\|!a.url&&!a.state)return!1;d.replaceState(c({},d.state(),a.state),d.title(),a.url);return!0}var d=e\|\|{userAgent:f.navigator.userAgent,pushState:function(a,b,d){f.history.pushState(a,b,d)},replaceState:function(a,b,d){f.

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	22344
Entropy (8bit):	7.982903411103414
Encrypted:	false
SSDEEP:	384:OeJnNoOMVkPKttNYLyie7aszw2MSAcmZGi6WNlNSMP+QsC9L7+1NAcpXYk5lRAHu:JNo3UKtrYLvn2MRdGCTNx+QsCN7/SVDr
MD5:	03F87E86398270CA9B43E26591E09A89
SHA1:	671F9161E9B9AE7884B5A78E5B9E56D55B82BC27
SHA-256:	F055967677B0A71B6A0C83644F713B56E145576A2D58D5F1462E4EBB99421CFD
SHA-512:	66498E3F2B8F30060C68476CE0F22171FF4BC8B67B6F2CD52EC5E34A239587F2C3ECA017B7C283BD692DCD7E84DC319C8D4A600DC4FA0FA8C7DB8203D52793E5
Malicious:	false
Reputation:	low
Preview:	RIFF@W..WEBPVP8X..............ALPH.......i.0...;."".n.Vm...EB$D.....t..Z.......wo.w..8h.....c].=..I.F...m.......!..!.b.....3.b.....#.f.\|..n~#b......\|.........OOO..........w......~......?.....>.7.?.....EK.H.................hI...9.._.......B..Y..."...........bK.,.F.......\._.......3C....xC....)3.hI.....?=..>>.....b...m....<._....=/4{f<......5.%.z!k........"........Oo..O.Hf..^H........)Z...%....<}zK\|~.I.!..GhAQEO.....C.F.$/<k...O........-.[..%k.......%...6...Df..^... .#r.f.P.O.^.....6.rc..O......!.s+#.B%Z......m.Z".6R"$d.zxu...C#....1.m\|y]..k.5....t1..T......?..1....Y...Z..u...-.\M...Uxx....^.P!4..O.....QR....[...B.^....}.9B$.9w..(.....v..J#.^.H.F/.J..=....=<E...S^.D. ...p.><....5D...e.b.zz.Q..X#jD.Y#...m.."~.v.>).PQQD.... ..>./D(d...r.S#...I\|.9_2+"4zF.n...%r....e&h......-.Z.R..\|iqmVB.Hn.R..9..../.l.,3bPy...Zfe.._n..#.g.y-,.s..}.._d...-.. .f.mk...r.~G.Q..b^....%.9....G.5.Z..^.B.F..-.._..?r..h"Y.j&......\|xa.OF-D${.Hy5...F...~xQ.OT..!.B2CR.A...YKJH<....

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	22428
Entropy (8bit):	7.910842269862625
Encrypted:	false
SSDEEP:	384:qlbGl6f7R7T7rLr3s96g/W1BapndUdH6Qu3pDm+RaHHhKTOl1uk5xs:Lm7R7r/3pWW6pnudH6Qu5CZhKTA0+i
MD5:	BE418CBD22D8CD432FD8F3F6AE2ABD76
SHA1:	8A1EB36BDA141942C27CE5F2586CCB5EE17A2DA3
SHA-256:	F95648CD95B78DE088904519725C67FFF220F589DC045F19FFBA21550450409F
SHA-512:	85A442470444250A639C86753F1E9D3DC8C308D9F173C250CFEDACD8A1E16F4E3419DA0C7A6F19695CF6D1C25964B54E4FEE4193EED183B41C9E6043BDB827E8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............N>U....PLTEGpL................79.78....... ;.(=..........+m.2I..;..$.qI.4:....%<. ;hjjcdehkkfiifiifhh.....@2?..?T..gjj...H.l.O..>...O./;.2...ARB..............>N....>............:..D.).......................T..U$..(../.. ..$..$..................,...........$..#..#..#..#..$..#..#..#........#..$..&............)}.)}.)}.)}.)}.)}.)}.)}.)}.)}.JI..H..K..K...<..vH..H...<...$/......@@@...)1<......BGL...RUX...mxx.........`..K...<.E...%..C..X.D..w........<....uR.-<>A#/>:?C"$';>A;?C...-8D<?C8>C>@C$..............:>B;@D......&{..p.;...........$........................i......@?._I..W.....Q.G6.G6.G6.H6..-.ul.`.6d...........................................?@A?@A...3>H......V........#...vg.8!."....'..7.....@.....D..%.f%.f....^..]..].;........(......].......g...hV....tRNS.....sy..V....!1d..L...;.\v..D.....o.yo.N..o..'\.<{3...5..a..?...X(.......H.7P..h.........w....t....[..B...........................h...............*.`...@.....qQ......1.I..we..\....

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 198x320, components 3
Category:	downloaded
Size (bytes):	11450
Entropy (8bit):	7.957717967378887
Encrypted:	false
SSDEEP:	192:b4t4f7UWrbeLK5MflrQYP27+fz8zUKbpF5rpdRg3p0xM0Z:8WjBrZelrQTOz8oKnNpdRQp0W4
MD5:	0EEDBD4D1404E71EBB12C54D958693F3
SHA1:	C6DFCCEE7943EEA4D0C38D0495CDA8FEF2CE0A44
SHA-256:	D05D7064F7409C5D1003D8485FC467F3ABCF9B886E7F0FF1D4C9233E4D74568D
SHA-512:	7804E997D77D777E79868E5841483AB5927A3F83FE581AF5DBE5161337304C5C86854D671F98FE0D8433CEBCE3B54CAA192A31A87310E0F746DC3BE618B94975
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/71dblGDOzSL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."................................................................!1."A.2Qa..#qrs.....3BR......$46CESU.........bdtu..ce...&DTV....................................................!1AQ."2Rq.B............?..].Q@QE...Q@Uk.o.c.g..&.\.......n`+.Rv.^3.I;.$.FN...s...%..L.....M.H..-.@9..F../.kdw..:...N.3.GY:........."... ..x....f..<{...u.....-M..P5.E..wYw.]N2j.........6..y._....A<..N#$.Z..^.o;..+q..(.:..p..g.Pe...f_6...N[.x.;L..Y.2G..qo.........?5...}..'..F^?.S.P]V.s\|#^.[.,c/.v.....v~J..mO..v..!..EP.c>.....M]../..Z....2q.....R.g..\.\.........'.l...j.........2.y0....'....p5ibp".6....}F...Q...I..hba".U.(9..]*..:~...y?...t..QE.E.P.QE.E.P.QE.^..G....Yz.m?....^".E>x......V....?...$b...T.....Q.&#o."..C.R......E.D..g..l.Y..6..t..r~JWf3..[Ni-..c.N....V$.n~0}f..f8.8.e...3....t.....Wn=./]...&.....W.i].;X=v....6

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 27, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	283
Entropy (8bit):	5.627839973207706
Encrypted:	false
SSDEEP:	6:6v/lhP6VILzlMbNqG1DB/9w2ZCGErnTyBmgHaTeBJ5cdTp:6v/7uILJMndKPGEbTdg6sG9
MD5:	80D42C82A6C37DA90210FD60A2F36128
SHA1:	554BA7C84D2A27ECF3B1F29D03E62101936B54D8
SHA-256:	A1626E2D9160A0890A0A8D6E3AF9E7095D68A24F9FB5AC8A166000C9A2581E10
SHA-512:	8ECB032C38176996EE637009833F3399F773B325E4F574FBBD26F93CDB82892C4143C5816543052B3A5123B89EF4B1AACA0407315AAB879968085E61A20786B6
Malicious:	false
Reputation:	low
URL:	http://i3.cdn-image.com/__media__/pics/28905/arrrow.png
Preview:	.PNG........IHDR..............(.....HPLTEGpL......................................................................z......tRNS.t..@....fU...2'...dg.......kIDAT..}.... ..P...{..O5...$....v....a.W..J.....I.ih^JF5P.z..H.Lz..F./..h.:.....{t.....i.....;.h...E.....B.6....IEND.B`.

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	71
Entropy (8bit):	4.19644707821733
Encrypted:	false
SSDEEP:	3:PouVIZxgRO5ZB1XbZ6iFi:haxUkZ3X96x
MD5:	6AAEF67381946BFC1DDACCA8CF7F6C36
SHA1:	E441BBA8B691AD0FFF0BCCB75974880018AB41D6
SHA-256:	73F8AE8C11DAA6AD905107970E55C3C64CD7133561E9E91E650AAB092BA7245E
SHA-512:	99039B90D4F3819EFB0A395D0DC810DEE1A56265D443D24D1C9BDF832EF9F95887E3C417253698A4F76EF176D0ACE6334905F4B7B4E6A8421D2F650B84255EC2
Malicious:	false
Reputation:	low
URL:	https://www.amazon.com/rd/uedata?s-on-search-route&v=0.299560.0&id=YT8YJ4B94N98J9DNZQCH&ctb=1&m=1&sc0=s-on-search-route&pc0=15202&s-on-search-route0=15202&t0=1729723014701&rt=cf:22-0-6-14-5-0-1_af:24-0-6-16-5-0-1_&csmtags=aui\|aui:aui_build_date:3.24.8-2024-10-17\|mutObsYes\|ewc:unpersist\|ewc:unpersist:emptycart\|ewc:bview\|ewc\|ewc:unrec\|ewc:cartsize:0\|ewc:aui\|navbar\|aui:sw:page_proxy:no_ctrl\|mutObsActive\|FWCIMEnabled\|fls-na-amazon-com\|perfYes\|fy_cdn_fr\|fy_cdn_mp\|adblk_no\|supports:mutationobserver:true\|supports:getelementsbyclassname:true\|supports:map:true\|csm-feature-touch-enabled:false\|aui:css:network\|aui:js:network&viz=visible:3&pty=Search&spty=List&pti=undefined&tid=YT8YJ4B94N98J9DNZQCH&aftb=1&lob=1
Preview:	<!DOCTYPE html><html><head><title>x</title></head><body></body></html>.

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 209x320, components 3
Category:	dropped
Size (bytes):	14660
Entropy (8bit):	7.964510524471363
Encrypted:	false
SSDEEP:	384:nhejHj6RPCudT4dFUx8Tr2eZWgQn4TZuw+:IjD6Rldcdux8We9FtO
MD5:	8D56A84329080ABF32D24F22C0C0D3BD
SHA1:	25B21125780889ED82DCBC8D8ACC77AF91560958
SHA-256:	799967BB0FB2B76AE3C2BBFE91BCFA46A551F5CE4686A67003CBCA7665F464B5
SHA-512:	7A5902FE3DA0CEE8004C941D0E41AB9AB05EDF83BB8D07F63F6C28BC7AF47DE74FA3699554BC748E61D09B839746AF643C2F500FB2B79EF331A244935CF8B711
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@....".................................................................!1A.."2Qqr.3BR..#a.........5T.....DESU..7b.....st......................................................!1.A."2Qaq....3..r......BR..#S.............?..(...(......v5..E.g".i...9S...4E..o.^.c....4...'B.......&.....8....}....Q6....E.'a...{K.x5.)Ub(.u..Z.Y...kn5.............%(.(.".(.".(.".(.".(.".(.!..ojpn...".A...d.....%ksh.W.TxQ..JTF}..;t.h.......`Q...P..R.(.J.V"..D....Y...Ex....QE..QE..QE..QE..QE......".V...pq.Uyukb.:..g.Gv..!C.\|[....[..8..$.FA..d..Q`.6./..*.$...".4.OF...@.....Q#.............ev........n[....x..F....3.t_{.}.V&.Q..#..?.'.yx{Y....s\|..W...V..R>...........W.h.i.....?.q....{...(......Y.O....../......D.5.Hw._.v...MZ..i......L..Tx...Y.u......g..D.....KM....O..#.1G..I.r>..M...P^...._.5.k.0.^.?.......\|W....X.Eh..`).....4R+.j.o..C..

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x284, components 3
Category:	dropped
Size (bytes):	26001
Entropy (8bit):	7.9774743024069545
Encrypted:	false
SSDEEP:	384:1yFou+CiWZubVVdjJA3UeofGIER7qF8AuYd6eHrVKZTSFME78clnM3SIwsP:1yFN+C2XNAUPGIERWF3dLLVyu7rnrsP
MD5:	07D83B229F27145F6A4908F13A9F5608
SHA1:	85455A3DBDD2A190CEF7964A92CE25EF06AAE18C
SHA-256:	BF43D1B15C721196376783085B25D8F17C546AB6479F51577666350E0A939A9F
SHA-512:	8BE89ED50DEBB8C15D633FE85CB4E3369F87D778BF3632917F6266AE4D0577A12CDC790B2C0341AFEB121D6B26E45CEE48F46145015273A5736BCB2B95A57592
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$........@.."..........5..................................................................-$$..BI.$$..BI.$/=.5.5.{...y'.MQ.....q.?..=...3K.to-...7...8..s..G..g.w..Ia.I!$...HI!$...HC...?..3;..'.p.....mN..H.&A.?U........`...,...y...e..d&.x.A.m..>...UY....T.-j..d.<E..i.i....Mk..?\.E.....e.1\|7h@.S-.H1..i.+...X$..4.9......e{.=s.....$.5..1%.,yq.n...]G....}.x..y.t\|..nuo..F._._.gg%h..q..W...._....4xC.....Q.M..P.I...s..{..bT!x.r..#.G.q.m.E.!#%.2......=.-....nR......Y......k.as...(#...zOa8./.}:.T.$\..Hgd....B..0...H.V.@f...76$...KT@cp.OL..;,<.&.<......B$...,.H..$>L...j.u..R.k.=V....GcW.!.[rjd..-.>...N...6..Gny.i....5k.G...o.+..mc.......-.p.3,..m..f}.L..........y..r..-....o...K..i...p-&..Z.H.....8?..1zW.......... %.-.q.......&_.2..>..}._.F.M.U`.,.[N.....o."{.o.{..Ur.......?/...U.T.s.{../Ov.z..3..<...BB.

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 27920, version 1.19661
Category:	downloaded
Size (bytes):	27920
Entropy (8bit):	7.99242211313595
Encrypted:	true
SSDEEP:	768:GryBBofu4XbxijaWE4xQAs9XX+s1jXWp9AegvUXaV1HN:Zo2osDu+s1s9AegvtzHN
MD5:	0F85A003B4D8AFBFEDD8118278061C34
SHA1:	245045FA7DE5DF027437F47209A5ADD3B48108A1
SHA-256:	AFF8DAE3B2DD2A0FD5C5CE60670CBBCA15A1F5BFAFCD70D13AD002EF920920F3
SHA-512:	69206330B785407D74A86D2916A13BC1311DC52218BE3B9F4629971E540D9C2FA6ECE1B2AF82404858242728B6F4079677187D3DED6524C550B2B4F8FD42E8B4
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/S/sash/Dv1WQ5DdeMS5qP7.woff2
Preview:	wOF2......m.......C...l...L.......................z......\.`..J.........4..-.6.$..<..`.. ..8. ..[T#...G..L......p.....t..9M.~.yVJ.../.n.U%.L......r..c...PU....7... ......P.F.c.),..b..Z.[m..f.B....}...x,..I..Fe.....n..;......Jv+......7......^.[%;...N.........)......1@..........&.....t.].1....B.}.>.}8Y.\|...../.....n.M......$....k5.K.....Ju+isv........b.$.q.`...EF.IV.'O....z....+0..-....}.......8.c...8D.1C....%...Hlb.X61s..m..f,.6....s..)%.cD...6..`.d......Q... ..(....xr..66.z.z6.J=..._{.>7.]..`.$....R..91C.lBC.....M....V.../q..D....c:...FP..X.$."xP.;........ .F..I.kNm...."T..O.M.u...M/....}...,..-O..@)Pt.(....g{dO..1..o.L...<...Mx..v...F.H...L.........f\H_..}....M.6.BN........3}.X9..s...w.N..b#......:w...`...".=.......i0....7S.......T?...s.J.'...UN.{Fr..5...^....4.k..#L>V.'.s..;6.]........x..q..\|\|\|...D.J...r.y8..O....$....>.?.q...A.?..\|jn$5.". .K9.?....1.1T"..=0Y..CS...]..O_.L-.m...8.....eW.w>H.Lfs...v.b0;;...8......!.g......%..P....

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (574)
Category:	dropped
Size (bytes):	23492
Entropy (8bit):	5.443529336172174
Encrypted:	false
SSDEEP:	384:AgyFPIA67yBIPYdd3mGPIIn0uQVl4um7pn+ugmPQ+0YKTxeXYCTY+3wRUsG1MgCZ:HyFPd4yBIPKmGPXJumdPgmP9wxeXlnCZ
MD5:	FDF102D2B032AFE87B9DA1508C04CD0B
SHA1:	1E27BCFF6B3F49901A0318076FC05C426A381511
SHA-256:	26B2213ECD0031FDD4EF13E745166C7D63284D04D6B73896E497241F0AAE729E
SHA-512:	5A677C8FD435A853F8E22FEF0DA7FD1822A4F7C980D3E7E63B519B0D1947AD85E1DDDEF78A6F1D9B1EFBD1FFC388BC898B8DB0C2989BE1BE57E2BBC4862FF5B0
Malicious:	false
Reputation:	low
Preview:	(function(v){var w=window.AmazonUIPageJS\|\|window.P,n=w._namespace\|\|w.attributeErrors,p=n?n("AmazonLightsaberPageAssets",""):w;p.guardFatal?p.guardFatal(v)(p,window):p.execute(function(){v(p,window)})})(function(v,w,n){(function(){var p;(function(e){e.deep=function(b){return JSON.parse(JSON.stringify(b))}})(p\|\|(p={}));var x;(function(e){e.log=function(b){for(var a=1;a<arguments.length;a++);}})(x\|\|(x={}));var H=this&&this.__awaiter\|\|function(e,b,a,g){function c(b){return b instanceof a?b:new a(function(a){a(b)})}.return new (a\|\|(a=Promise))(function(a,f){function d(b){try{l(g.next(b))}catch(m){f(m)}}function h(b){try{l(g["throw"](b))}catch(m){f(m)}}function l(b){b.done?a(b.value):c(b.value).then(d,h)}l((g=g.apply(e,b\|\|[])).next())})},I=this&&this.__generator\|\|function(e,b){function a(b){return function(a){return g([b,a])}}function g(a){if(h)throw new TypeError("Generator is already executing.");for(;c;)try{if(h=1,f&&(d=a[0]&2?f["return"]:a[0]?f["throw"]\|\|((d=f["return"])&&d.call(f),0):f.

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x301, components 3
Category:	downloaded
Size (bytes):	29587
Entropy (8bit):	7.984465865692982
Encrypted:	false
SSDEEP:	768:m5Vb9L5qg6KFf6bUCAfkdoatgHEQQk5JYsZtAtKTBlIWO9gtcauB:mTZLOKCUXAR6Ok0sjAtM1OTB
MD5:	5013C54F0BB0AB42318EB12CDA8CDB49
SHA1:	E13DAFF5E919555BF642D01022E546ACA54DA8DD
SHA-256:	6DFD710211E306050034FFFAC8185F72DCC4852BAEC5CF4B218DEDB4505E14E3
SHA-512:	A7572C0C8CD5CF1D6E6BF80922890E5FAC4E1F393B59C77A0223E5FCC59D4AEB39C0E520414400C4A0B03ABB5395001D8D2725E0C1D0A6882B21975047B03A90
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/81JcE4L82NL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......-.@.."..........5..................................................................{..Bo.^.w....@2.c`...-...X...E.[.Jy..Cv.Ne.sJ.-.........d.=6[......_.>......kxrEs.././\|......\xH.R.%tV..b..,.>N8A..c..8..v.r.:.........E......Z.....w...Z...h....\|.Aq.o..V...Y..........F..K..cF...5.....6..h.5..x.s7.....^.~._.mM.6..".)..4b_A.Uv.l........t....q.......s..I...{.H...c$5.,...a..s..6n.J.N..l.l.n>v<b........O...zxg./...1.ia.{.Q..D.(IUcor..cmU..1...y.3.'c{...W...wxV..FZ-...x...:.p.5... .;.....O$D5#;t0.m'.)..l...8.......f.Ca.1.1...=.C..........7KeZ.I..q..!lC}f...D.\)R....6c*............v.rZX...l.VG..w.....j_Wp.9.CMy.!....H.;.@.Wm...\&.../Y.S..5..P](.."l....g:J.......q..c.....EzAj..^.SRV..M.O.T\|.q..t.t.uWp.-.\|.LA.5.Y<d.&Am....U......b.5+P..d$..A.2. .4.bm.H.N]....Ho..0h.....y.ty.,.yte\..:.87...

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3
Category:	downloaded
Size (bytes):	5681
Entropy (8bit):	7.911303038558684
Encrypted:	false
SSDEEP:	96:1r0xgECuPiOP5og6U217BDjWqV0y2yMgWqrdN/sY4AHnhYMKNFhqMlPem+vPh3Y1:1fI217BDjyy2yNrvsMhj+FhqMlPuh6
MD5:	AB50E5A3EF4824B09955EDE97BEEC3D3
SHA1:	2269C9406426BB4D54DCED0F2D8C8151AF82F4CF
SHA-256:	3A3C23F46AFCDBA9DDA43D2AE220CF9D5CAFD52CA06147CFC07CDF56D388E449
SHA-512:	9F9962431F8380E97A6ED68BA28FABE25AA4D7263A11132D999052BDCB0089A66323EDE4445F25DF83D1B84528CF670378539000AA96F20AB45911CBB25F0AC4
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/111mHoVK0kL._SS200_.png
Preview:	......JFIF........................................................... ....+!.$...2"37%"0....................".........................."..............#............."...................................................................16Urst.....!234ABQTq....."Ra...#D.$.............................................1!2aAQ.............?..Q..DD....D@...DD....D@...DD....D@...DD.V.B......1.y..eg~.n5..\.....d.W.G.]$.;....}.e...K...N.W..7..?....LNi5_...\-u..u.......3..I0..~#......B..o.....=..!L;WA....^.nS...\-u..u.......3..Z....yz..\.I..lVi...I..1.Ba.d.;.(..Bv..p...e.&.........V..&...KS=.H%..L.D ...vo...=d...\-u..u.......3..Z....yz..\..N..k+..IM,..Fa......E.._..X.{..Z..2..![6\|..r........[1.B5...Nj...E.._..X.{..Z..2.............R[..`.I<.B......h...R....oq..]~f]bm.".k...\.f..K}.C^.rB....;...Mx...;{..Z..2..oq..]~f]b.;WA....^....yz..K.&...\-u..u....&..:{m.s<.R.....{.......S.TER.&y.G.l6..o.....6K....%ty.[....c.{}..g.9..2$2.41.....7........q...D@A.w.+.hbvi.$..s....

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21508, version 1.0
Category:	downloaded
Size (bytes):	21508
Entropy (8bit):	7.989562036604764
Encrypted:	false
SSDEEP:	384:VT8sk2CrUtyPG647W54JZlzcX4PQmhjsBmehETek9Tw7EtYQtRiLqyHKrD:+sk2CrUoOtJvwbaQSTw2ZfiLqyqP
MD5:	49A8476C4C1CBBE861D58EE73146477F
SHA1:	FAC44C6A6EB11604F6CB0A9901566FAFC93080E3
SHA-256:	5D2E0937AFADFE093EB3FFDB36AC561DA423F81A9DFBC0A875CE29D32584B6F4
SHA-512:	485419C61167DE6851CC9D9A73B5F9691F6D01465AE81670F7C82A0F97D5C60F67F7A174A1C0094BD51411E00E6D3AC0A69D9ED7DDFBB959E09F46491945D915
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/S/sash/VjTR4RqBzY0mUYx.woff2
Preview:	wOF2......T...........S.........................?FFTM......Z..^.`..j...e.....P..:..X..6.$..,. .."..`..6...'..v.$.......`...An..T..@.....z;.....t.Q.>.U..nD......!M...pY..5.>kL.L....d..........D..v g..= O.."......+...B..2._.h;..:......./.F/.>=.....~...<%..Na..p.6..e.x..jY.'..\`......T?.#..#PJ..-...V.U5-...1....Z...c~V..E..Y.QF...C.y...}y..h..E.N...tc..d.j_D.u..l....d...=...R.mRv!.....{.\..W!G...b....c..2..Eg.IqS>>....S=...$..(.k....Bu2T@>._....\|....jl..\|.._.tq...; s.~.x.!.dD..+.P..p...v2;..Z...D=.0eE...$.........o...]...T..''z;..61.S=.1.p./j.T....;qw\q..C.+...Qp.......e.v..G..M.8e..h....%....v.t..z....k; E....._>.&.../..?{..P("%w...!...vB._S....Z..X......'...n.kU.}.....J..<..2..........0..^....F.... u.:D..W/...3@.,..U.:s...w..lU.][...TO.....GB..%..........c..j.......%...0..<.W....d).z0.7L.&..1eJ.'K...Y.~...{vW.(K):c..\.l.^....3....C.1.J$...@..]R..j..u...}._].._:..}......6\..O.o.:.t$.....2$\....;@....>..J.*].\|..S.._... .NY..(...k..

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	453394
Entropy (8bit):	5.373221359661549
Encrypted:	false
SSDEEP:	6144:TV/9KwI51nTbhjuAwiiol25GZiyTXOVYmD4sp7SJs5g92+b//sFrDfEOxO9qi7v:8IctDOVYS7SJs5XFr7iv
MD5:	2E254E8EDD69FC5E6628A6DDA86C05CF
SHA1:	44327E00888FBFC92284F6CF9BCA5F8130E89848
SHA-256:	ED8909E15E1F2E9D0BA9694BC5BD3CF04F19AA3A40B1F8536AD0F675450B5991
SHA-512:	10DD9F51CF71088EF30331E1B8389B17F13392C001641B10C3E458DBC63807386CAECCF3932DA915CF81FB85ABD7C2E1805D43F6D6915B3D90D091CEA517E8B0
Malicious:	false
Reputation:	low
Preview:	window.cmpccsversionbuild="2024-10-12.17.59";if(!("rpl" in String.prototype)){Object.defineProperty(String.prototype,"rpl",{value:function(a,b){var c=this;return c.split(a).join(b)},enumerable:false})}if(!("cmp_unq" in window)){window.cmp_unq=function(a){return a.filter(function(c,d,b){return b&&b.indexOf(c)===d})}}if(!("replaceAll" in String.prototype)){Object.defineProperty(String.prototype,"replaceAll",{value:function(a,b){var c=this;return c.split(a).join(b)},enumerable:false})}if(!("fnd" in Array.prototype)){Object.defineProperty(Array.prototype,"fnd",{value:function(b){var c=this;b=String(b);for(var a=0;a<c.length;a++){if(String(c[a])==b){return a}}return -1},enumerable:false})}window.cmp_fnd=function(a,c){var d=a;c=String(c);for(var b=0;b<d.length;b++){if(String(d[b])==c){return b}}return -1};window.cmpccsversion=20220717;(function(){var b="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",a=/^(?:[A-Za-z\d+\/]{4})*?(?:[A-Za-z\d+\/]{2}(?:==)?\|[A-Za-z\d+\/]{3}=?)?

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
URL:	https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26m%3D1%26sc%3Dcsa%3AbrowserQuiteFn%26pc%3D19097%26at%3D19097%26t%3D1729723018596%26csmtags%3DbrowserQuiteFn%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:19098
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0666130806898115
Encrypted:	false
SSDEEP:	3:CUUX/ExltxlHh/:SXMb/
MD5:	6851DBF491AE442DA3314F19E8AFF085
SHA1:	ECFEC27263608C4AE7CD4F8E0CEBB1B061DF2AC3
SHA-256:	C21E2C1246FE45A6750AE6208DB2B5965FF6ED63EB80D2ECEC3BE9C83813428E
SHA-512:	89DFC38EC77CF258362E4DB7C8203CAE8A02C0FE4F99265B0539EC4F810C84F8451E22C9BEF1EBC59B4089AF7E93E378E053C542A5967EC4912D4C1FC5DE22F0
Malicious:	false
Reputation:	low
URL:	https://www.amazon.com/empty.gif?1729730153354
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 148x320, components 3
Category:	downloaded
Size (bytes):	14717
Entropy (8bit):	7.974215284116661
Encrypted:	false
SSDEEP:	384:wmYsFmPCD5xNme2q6GAHyUvR7F7KSVAKNorbvzOcvAjfdErF:wmYRSme2HSuR7F7LVAGorbiiAs
MD5:	7EA8A5B994B83C00F12459766AA63A71
SHA1:	AB98892E5B6DD895DB8079EF72EA0B568E161FE2
SHA-256:	A160F6A4500105191E34DD47F5D49EF6B9BB6D240B9A15F17D5094295BD58ADA
SHA-512:	1D393C6885C2AC0B1B2558F76A1CA6D44A1B31097223ED45FE4DE14307F27C50067DF3ECF839F2CF7A1D083A0000368773E3AA83262C811325B6757217A147C3
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/81gtUiCXv5L._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@....".................................................................!1.Q."2Aaq......#6Brt...3Rs....$4S..5c......CTbd......................................................!1.A.2Qaq..."3.....4B..#R.$cr...............?..t(P......;..?.....2%........z....y.../..n.......Ok...{.]....N...Ui...S..S.x..V....u8..'.E.T...U.+G......s.wZ...+....Jjs.x....:...Z..Q..R8U..WF..L.s.A...O.lX.m..U.'.>......o.9.q..k$Z...P...D$.....?_..J.....2.;......&Z<R...f\|....PC...m.O..}.N...l}...............2{y....\.E.-G..m.k...R..#aL...B.5...S...}..K..........G..B.(.s.u$..:..c.....\..a..7.}..O.xq....jq..n......e.+X......4...17).II...q.b@>..fx...3/..#$g....U..Vw..a .L.-.9..Y....-....[.<C...A......<..n.)..u.#t.p...r2.u.Q.H.3..L.{.B~+4N,..(...I.......j...L.<....C...........r9......=...A{.9U.B..*..O..s.....>.+)p......iyu-.I6.-S..I...$..

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 11 x 23, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	307
Entropy (8bit):	6.834709088323208
Encrypted:	false
SSDEEP:	6:6v/lhP8fTtHV5pDf3i5Jvc/kVIrZrvGPnm+V5jaWqarfVLWzZ/CNV7ljp:6v/7kvS5JSkVKZjB+VVaWhrfVaz8T7lN
MD5:	BFF2CEC62E448B5EF3F44573B64F0297
SHA1:	2E0C40F548BE68CFF7BDC4631AE16E6C391EA0DE
SHA-256:	F7A0332C6FF3E56DF56A15334B5CECECCAEB81E179E002BD27A24983C522C248
SHA-512:	48EDA35811CBB3658CDED635BEA40E8AAECC6232DDC9729B9736AE9F08FE03467324042814FDC6D3B08B3C6B2D9ACF163FCCC3AD5FAB890711AAD28F4F5DC664
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/G/01/ad-feedback/new_info_icon_sprite_1x.png
Preview:	.PNG........IHDR..............fE....ZPLTE......jjj......___......UUU...................```..............uuu........................IDAT..E.Y.. .C.....}...5'Tm...d. {...=..#...D.FC.......:.../e.R`P.ur@....N.....d.J....s.b]n<x...8.Y11i.p"r{.......\|.k;.8..E....}....?...R%.t...K.......IEND.B`.

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x360, components 3
Category:	downloaded
Size (bytes):	23895
Entropy (8bit):	7.943420512662733
Encrypted:	false
SSDEEP:	384:HnWZTclGkfl5xEemgprzy77UesUKEyzhtu+IFKmg0n0ZPlzwr8kKR+PYe:HZAkdrEIzy7MEazIgh0+tzwrrKRLe
MD5:	1720A5EFD72244CDB18DF6135796B18B
SHA1:	0A8F551DD8CD654A24FDF2F56E4BE5BFA4B7429F
SHA-256:	16656A0732CCB98629BD10E925827B4A5ED2DFAA011C3E8C0B403026DCDD8B46
SHA-512:	E796785294003D5D32CE6B3AE845A72FC48DFB995A79D26948C455DCF9694296EBC43F93D662846973D0D1F0E4DD815FCCFA371688943745BFC0296CA366EA8B
Malicious:	false
Reputation:	low
URL:	https://d1f0esyb34c1g2.cloudfront.net/transcode/storyTeller/ABFMOV4MO9GW4/0caeb388-53d0-4863-9a19-241f502f2c06-SBV_291884-T1/507239c7-4f15-4689-a8d1-f57fb521c41d/1601577022423.0000000.jpg
Preview:	......JFIF...................................................%...#... ,!#&'))..-1-(0%))(...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......h...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..N...).(.GJ`....1..@).......1C.v).CHejZAN.l...)..+-...h?{...RF>Z.q.....Kr..[..!.T...[....G.......6g.i.6..`.M..iE..1%..I.1......qRc#.cs.EX...8.Y.......b.5.'.2...h..c..9E..%.....Y.TWY..".P.Y4k.t.X...1(....%...#.:...b.u%-.&....Z..?.j.....ei.........._.j..%M./.4...T?....1......ej..W##x...l._B..\|....*...q...._A.(#`..B..'....r.s.`TG.H.y...Vrv....;.$2..d.[.....0N....+>

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	26138
Entropy (8bit):	7.986480454146733
Encrypted:	false
SSDEEP:	768:KaU5LjBi8wA1AUrebEADPi57Bu5CAD13eFbJTMLG4lq:/yjBiDA1libk57Bu5CApMVUq
MD5:	285408C3C1A2C4E22CC7C22FABE086C1
SHA1:	5CC22303BADB2F55DE2C29FA99432360F9CA9E49
SHA-256:	C64B2CB468CE96165D7D3DD4735D15DBE1E25073025AB552333D5EF60DCFF692
SHA-512:	50E518B070DF4AF7EF85417236F8CCE86D071368A0FD107FBC7D6B39807922406D14E06EBED7A43FBAA4718E74870E1D71EDCE00B28B4E77242B201EE11C6DD2
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/G/01/HST/AHI/Desktop/WebpImages/HCP_desktop_secondaryTile4x.webp
Preview:	RIFF.f..WEBPVP8X..............ALPH.......m....{.O!"&@..g3..i..G...A...`...l.a.).i...m..`..............o..m{.l. ..!..%.)....@a.0p..Bp..e.....2.l.~.J{..... .}...O._................O......?......7.?....?....O_..Z.h......../O...._.Gh.%EHf......`.....Bf..%A..i..........[.kQD4.y.8{s=>..5.E.!k..y\|xC=~y...Ad&W[....m...#.3S.E....Ar...../Zj..d-B..B..[..OkK$$.Pd-...d....D.r..\L.?...E>..#.eF"5r9..:[..k...Df..7.l..!I!$r..B........^B.F...c5...l../H[.....rEw.<...."A.i.Jf.=...:r.C......c"T)9F......iis-{...k..T?.g..!.#2K...w.gD...h;..]h..,.V.p....E.%..S.?c..]..I..me.A.tw.....:%kr.$....1.......E...=.uC..-"$...\...H....#J.CBd/..U.;.....#D..s...A.}.H....O.F.....Y.r..{....:..5...r....u.. ..n}\|%.9nk.P!k...u.H@}..~X#jD.Y#o.......]....BEE..F.F..PwKf...3..YC....HD...H...<gVDhtC.D..bXr....3...E...]...kQ....s.k...E.....r.C..w.9...eF.3.B4.......l.Xrs.i...n...;.,kHDmQ......=!..x.._.A....^.C.x.s...?.P#.%])HJ..r1Qw..4<5../9g.R4.,.1..d.s3...5.....d..)F....]o.I.o..T".THfH.

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2474
Entropy (8bit):	4.852748537849845
Encrypted:	false
SSDEEP:	48:YlcYEBUDwG867BUF5G867BUBUaG867BUkzG867BUG0G867BUIedG867BUlOG867o:kjEBUDwGJBUF5GJBUBUaGJBUkzGJBUG9
MD5:	852C6D62C5264FACF6846A72BB226817
SHA1:	4324099FBFF4130D327750E1AF00A939C86FEBCE
SHA-256:	872DC971CA5C4EEA9B9D749406604FFB6F48FE97BA9969173C5B61816CAD55B3
SHA-512:	A3912EB4BB0F4D0C421F5D4BC442AF90A6D602E223176FBE50920B63146247F5884A72685F94310FF3D10B3A7443E97C809C84A0085B9BF562607B63A860FFD0
Malicious:	false
Reputation:	low
Preview:	{"alias":"aps","prefix":"bloat relief","suffix":"","suggestions":[{"suggType":"KeywordSuggestion","type":"KEYWORD","value":"bloat relief for men","refTag":"nb_sb_ss_ts-doa-p_1_12","candidateSources":"local","strategyId":"ts-doa-p","strategyApiType":"RANK","prior":0.0,"ghost":false,"help":false},{"suggType":"KeywordSuggestion","type":"KEYWORD","value":"bloat relief for women","refTag":"nb_sb_ss_ts-doa-p_2_12","candidateSources":"local","strategyId":"ts-doa-p","strategyApiType":"RANK","prior":0.0,"ghost":false,"help":false},{"suggType":"KeywordSuggestion","type":"KEYWORD","value":"bloat relief for dogs","refTag":"nb_sb_ss_ts-doa-p_3_12","candidateSources":"local","strategyId":"ts-doa-p","strategyApiType":"RANK","prior":0.0,"ghost":false,"help":false},{"suggType":"KeywordSuggestion","type":"KEYWORD","value":"bloat relief","refTag":"nb_sb_ss_ts-doa-p_4_12","candidateSources":"local","strategyId":"ts-doa-p","strategyApiType":"RANK","prior":0.0,"ghost":false,"help":false},{"suggType":"Keywor

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	67664
Entropy (8bit):	5.21426818134944
Encrypted:	false
SSDEEP:	768:dYSS5BmhQcdCxZSM30hoho6l6reP2cSY1g8+:WoQ30hoho6l6reOcSb
MD5:	83799E30A9F87EA4219C7A2F1F22BC2C
SHA1:	284ADB10637A411124DC8D1ED12DC2B264DA2A5A
SHA-256:	E84CFA529C40644C44771E3FAD8B3F068DFBFC422F24062A20389472CF385A9C
SHA-512:	6698814DD861270ACB71165DDDB656A46B1508608882CF4976B6A5804DAF2EBCDCA13A3260E1E8E2EAB96615B44B99672439B25295E24DA3FBAB9F07F98ECE27
Malicious:	false
Reputation:	low
URL:	https://www.amazon.com/nav/ajax/hamburgerMainContent?ajaxTemplate=hamburgerMainContent&pageType=Search&hmDataAjaxHint=1&navDeviceType=desktop&isSmile=0&RegionalStores%5B%5D=aNHVc2Akvg&RegionalStores%5B%5D=VUZHIFdob2xlIEZvb2Rz&RegionalStores%5B%5D=QW1hem9uIEZyZXNo&isPrime=0&isBackup=false&hashCustomerAndSessionId=5060be85c428ee41c92db4732349695aea71a80c&languageCode=en_US&environmentVFI=AmazonNavigationCards%2Fdevelopment%40B6251171938-AL2_aarch64&secondLayerTreeName=unlimited_instant_videos%2Bprm_digital_music_hawkfire%2Bamazon_echo_alexa%2Bfire_tablets%2Bfire_tv%2Bkindle%2BAudibleAudiobooks%2Bprime_prints%2Bandroid_appstore%2Bclothing_jewelry_44753%2Balm_amazon_fresh_store%2BWholeFoods%2BBooksAudible%2Bmusic_movies_games_44254%2Belectronics%2Bcomputers%2Bsbd_alexa_smart_home%2Bhome__garden__pets%2Bpets_foodsupplies%2Bgrocery_pantry_fresh%2Bbeauty_health_pc%2Bbaby_kids_and_toys_44256%2Bsv_handmade%2Bsports%2Bshop_all_automotive%2BIndustrialScientific%2BHealth%2BAmazonPhysicalStores%2Bmake_money_with_amazon%2Blocal_services%2Bregistry_gifting%2Bgiftcards%2Bcredit%2Bamazon_live%2BAmazon_Global%2BAmazonStorefronts&customerCountryCode=US
Preview:	{"data":"\n<ul class=\"hmenu hmenu-translateX-right\" data-menu-id=\"2\" data-parent-menu-id=\"1\">\n <li><a href=\"/\" class=\"hmenu-item hmenu-back-button\" aria-label=\"Back to main menu\" data-ref-tag=\"nav_em_1_2_BT_0_main_menu\"><div style=\"align-items: center;\"><i class=\"nav-sprite hmenu-arrow-prev\"></i>main menu</div></a></li>\n <li><div class=\"hmenu-item hmenu-title \" role=\"heading\" aria-level=\"6\">Prime Video</div></li><li><a href=\"/gp/video/storefront?ref_=nav_em_aiv_0_2_2_2\" class=\"hmenu-item\">Prime Video</a></li><li><a href=\"/gp/video/categories?ref_=nav_em_aiv_ca_0_2_2_3\" class=\"hmenu-item\">Categories</a></li><li><a href=\"/gp/video/mystuff?ref_=nav_em_aiv_ms_0_2_2_4\" class=\"hmenu-item\">My Stuff</a></li><li><a href=\"/gp/feature.html?docId=1001423601&ref_=nav_em_aiv_wtv_0_2_2_5\" class=\"hmenu-item\">Watch Anywhere</a></li><li><a href=\"/gp/video/getstarted?ref_=nav_em_aiv_gs_0_2_2_6\" class=\"hmenu-item\">Getting Started</a></li><li class=\"hmenu-se

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 900, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	16237
Entropy (8bit):	7.914373477606932
Encrypted:	false
SSDEEP:	192:uZUkQ4lr5sLQMaphjMr2VqWT33ZoXgsICdjyt8bpBXG8OfQwZop96OJ+CTy5:ui4B0arXq8ygCdjTHWfQ8opRpy5
MD5:	52B8D386D2B1D407C71A4AE966B61ADD
SHA1:	B962650FFFC15637F0D9F57C332702459F084B7B
SHA-256:	D47C1E50DB91BB597B75EDC63362CD0C568E4F5F15A3F8BE1B6ADFF24E89E447
SHA-512:	C6B69AF93D0683324A86CBEE5575E42A293C8588267C49034D1CC9AB3635034897838F9D5EA665B694C90D72CFE2B3F462CAD907CC74749E9AF863A90D233998
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................Z....gAMA......a.....sRGB.........PLTE....j..j.....i....fJ.nU.....i.....j..j............._bg[ajD`e.k..j..i.. ..i....\..i."'+.j.......j....................i.&+1otzMT[.i..........NSZbgl.i.jpw..E.... ...HOW.....j....bde...KQY........OTS344^ch....j.........adh............2.....eefZ`f.j.......{..{..ejr..........s.........i...biq`fnOSY....................fff.....f...........w.!!!fff...bhp.u..u..Y.'..PUY.....488.u.588.H.........F..............c.../.....tz.............1.................J.!!!..c.l.......q.m..v;d..D..Vx..../8A......#*1/8@.....\333...`gofffPW`.....%......KR[]dl.u.dkr.....dT[dX_g............kqx................7>A.].......Y..<........+4>.j..................}..UUU......?GP.{.............uK....7.'..rx~..R../~.....y.s.....%....W.........t...Y.{{I...YY...........tRNS.A4............b.H..[eo6..'..Q.......Q....a.w...`....w.a.A.5...q/.{I...e..X.^.......p....q..~......R.w...6........Gc........\|......Z......

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	647845
Entropy (8bit):	7.962854936107787
Encrypted:	false
SSDEEP:	12288:7oWpGC5AI7Vu0GlYQVysctx6V1ewe8ApAkDUT0cG4wYdMc7gS:0uGCz5u0Glxfcm3ewh820cGydNj
MD5:	7FDFDCBF44B345C8D1E6A2CA3782678C
SHA1:	E39D2FA448CD6EED3019F42907849BC08BFB1FAF
SHA-256:	FDA375FBA8AE9C82F980630749792FB85333D035449B640D94A68C53AE612F5F
SHA-512:	54401F9E24D04397A476B2B13A2E45C1D6B92C52CEF4133B5C750FA5218C3386436CAB346E67179598961DE2691916216F1E84D88B18E3520BA97D88E98E6AD9
Malicious:	false
Reputation:	low
URL:	https://d1f0esyb34c1g2.cloudfront.net/transcode/storyTeller/ABFMOV4MO9GW4/0caeb388-53d0-4863-9a19-241f502f2c06-SBV_291884-T1/507239c7-4f15-4689-a8d1-f57fb521c41d/1601577022423sbv.mp4:2f83c2ce8d8335:2
Preview:	u@.?.<..Kfk.X......\|.>.s.tg....._/....K~O.K....(..}f..............Gf.y}V....y .-..J...2..1..s.........:.0...,{..r$..9....Ei..,..N.K.a..r?\|....]$.....p.g..^w...m..fb$.Kv.._...I.~.6I....@=).E"w.}z..i&.N...U].d..9d&x-...m.U_..?..S.U.P..S...y..-.=((.c3(J:.y.g.....K.......W...S.......=.......T.....&..?.?Fow...."e.x.y.'.r...kU.c.3..k..s?^.....k..'......<$z....._.o'.._L..8.]...a.......G.3.e..f.!m.m...@.:."..a(..M...8..:.Qy.......f[1.g.._z...@J...TO.+}..Y.}.y.N..._..5..........L .Dc.R(3..O.........}`.._... .X..6.....M.\|7...y.z..sLj[....^..=.Pf.....G.}.1g..W2...[!...o.S..u.g=@YA.q].w4..S.p.K...n>.p.Hm......vP.se.....F.K.....U..w.^../.sE.g..M.../.o.._i.>C/..f....t.9...GQ.......}...?.^W.U...H......N.%.f.lU..Q....qr.@.0.....x..;.!.@np.1..eGe{..%".}....x.\|w.f......T..I..p.\.w.K. .Y~..\|Q.=.WC..W..\|GkY......\|.1`.p`.o...=..Q....C..5oYGy5.Z..vR~L^..A..#.^m..PQ.H...w....0?).....N.........<=>=.0...T.Us...~...G.....@t..........C..9_s...j..J........U\|..QT...

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (346), with no line terminators
Category:	downloaded
Size (bytes):	346
Entropy (8bit):	5.00818604439199
Encrypted:	false
SSDEEP:	6:qIZmJNsVwbDRWPWG3mV/R7cjTDEG5OQRoYxHSNHbMFKdCuFxXcvH3eVP4SzpF9yc:+JG0DRWZmX7OPrRNwN7MFMCu/cvOVQSl
MD5:	F84F931C0DD37448E03F0DABF4E4CA9F
SHA1:	9C2C50EDCF576453CCC07BF65668BD23C76E8663
SHA-256:	5C1D5FD46A88611C31ECBB8FFC1142A7E74EC7FB7D72BD3891131C880EF3F584
SHA-512:	AFC3089D932FB030E932BF6414AC05681771051DD51D164F09635CA09CBD8525A52879524B6AA24E972E7766DDF529484CC1EC416DE8B61255435A89BA781F8C
Malicious:	false
Reputation:	low
URL:	http://ww1.frothylattestudio.com/px.js?ch=1
Preview:	var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 339x640, components 3
Category:	downloaded
Size (bytes):	21908
Entropy (8bit):	7.963750476269325
Encrypted:	false
SSDEEP:	384:LpxuKDFdqepb+H8rsZp19KFWG/zLsVL7uMngOZoP/7fx119jL:LpxuKxvpIr7ozLs57hXZoHj
MD5:	F2B6C58E161433BCD9CFADFEA754C533
SHA1:	A78163C2DA819B4108AC680C2CFFFD2B6AB8B848
SHA-256:	4F9127E999B7F59A2ACB397633DD953FB71BB4A746CECCF66B8423940B03084B
SHA-512:	A30F24BAECF6BFB1B974E12B2F3B6F0057FC4C73CE3B78790C1C384168618525A2D6F6844706CE99886765003E791D357BB409886D651686F1FFC95738BE54A1
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/61-8yQx4+xL._AC_UL640_QL65_.jpg
Preview:	......JFIF.........................!.....+....'...'.''.#'##,'!!',#');)0+5,)8););::=BC;'BZ..........!8'.,:0.)E:C,:=::+L:C8:#;:,55,,0)0:,==;.+=8'Q+,':8B5'=H........S.."..........4......................................................................9:+_-U....+&zM....xk.pv...2z..u:..pv'.........@..<..../-k/aX.2....../.........p...!...!H..L..n.....i..0`.IGJ......I...3...P..~1.N................D..o.........CM.1.-R..c...%..."...]6....X.....o.@.......p....."%...7.7.p....c.c.l...#X.`6AT...3]v...nXz.!.s.@.......y......N&z....q..dW..f..M..1...Q.!...t.A.i....2...~'..0$........\.y.....%....C:...m...56.kB..W..hE....h.b{.......1...........T8.~....m......L...#.5d1.....3DY..2..h...^...H.........=..z<.r..Vv..p`V.b6...h....@U3&..].(..........i......'.........:X.[J...o]L.$.1..575p9...t7...V.ut.pV....m..(...?.x[.*.k]..?..\x.....)......".I..5...v6...H.3.Ld.....S.V...BR.g..8Js.b.u...LC.......>.5.._3..K...y=!=.z$.@........W.5.UH..k...@.g.....dl....>w=.C^.0.>V!.Ig.5.....w<Q(=w

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (483), with CRLF line terminators
Category:	downloaded
Size (bytes):	2042
Entropy (8bit):	6.124836854599109
Encrypted:	false
SSDEEP:	48:VVqIePZTB6XkiocsnXcVqIePZTzJVqIePZTx:VUZB3iAMUZdUZx
MD5:	4AAF03FC529E6CA166CADBA614FBC77A
SHA1:	B1246539B21D6BA18C68FC585DE27A0F8796844E
SHA-256:	F55AC6F4316EA1FAAF3A3D0F0BCBF26E039E6D091031E70AFECAB0AE7B11AC28
SHA-512:	8CBDCDBCB51082F9A5D81BA02E51EB432DC3B400EB29A4E3BB1EF37F751A721365F2B0AF9F7AC2B5C5A85E7121794896C0ECA03DE23CE89206BDE66B0479ECD6
Malicious:	false
Reputation:	low
URL:	http://ww1.frothylattestudio.com/
Preview:	...top.location="http://ww1.frothylattestudio.com/?fp=2qoqDYI%2B0iJZGtPstQqccpYVxaI6ObJitI3FjXXWfpuGUlRgNWh70labVRMtFUQ5LVzoMsVoCWLxiQoM%2BdHqAmXOoXaKy6JyeBLBtnHKVd%2FGKCsWGnM13tv86SZzSImbUwvUTGR%2FwbvV68cR0%2FelwwHzPZHwooLRpm81LFvUEvjkylyIR3ZT0%2B2EYh1V8Mk1LHsmLJgCnP3oZ1aTXFi%2FizUqz%2BiqR4qxlPDtjH3Rv7mUkC7JKPeRf7k2n5uCk9QpAZKz65a1XlYxqE%2BvpXcQKkjEW4hITPhDocilO%2FelAu0%3D&poru=b%2F8ZxUo4ug61cKbUIWuWZ9hktTN0TXmB5ubOU%2BIkZsWE32eqR80OwRFFQvOBToKB&cifr=1&";.../..-->..<html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_fB2ndJ56riCtU+4LZtMM5aLOfBbFZEPSfwdf9+tOk/5EIF5cMFQcOAU6HwhINmTYBnr20P50+KZ15j4lp+U4nw=="><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8">...... <meta name="viewport" content="width=device-width"><meta http-equiv="X-UA-Compatible" content="IE=EmulateIE7"></head><frameset rows="100%," frameborder="no" border="0" framespacing="0">...<frame src="

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x320, components 3
Category:	dropped
Size (bytes):	20533
Entropy (8bit):	7.973494582531961
Encrypted:	false
SSDEEP:	384:GPU2xtzwGgsSfUv71Z6fAKNWSOD4Jkm4au3JP8h2ufGhug2VEYAoTsx:Gs2xtJtSfiZeN/mAywzOh2EYAd
MD5:	437566C85CF5E56288C2896E52DC3536
SHA1:	0A56EAECED25A43F160263BF051EA260CCBB8A63
SHA-256:	EB2888DA612F5FA36DC8FB435C9BE635C174F43028F4BDEA6C95EB63546D7B21
SHA-512:	A3120CD142334AD710B450A7E021BF02622EEDD409D9BA9437B6E9B8F259BFE2D44F338D30BD9644B75D31D26A2E55C64FE4E27AE6587ECB31931DBE1DFB8626
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."..........6..................................................................n...K.gN...[...7..#J.V./[g.)c(?SC1..H.?.a....a.#.....Oq2..O.....V..>'a..n..V7N.Q....GY..MZ..!..f.$.U.nc{....(F.V...?...b.R.lJ.d.........<L.....4.!\)..xlY."..{<z)....I...R..I9.H Pk.n..:.7.....t..S..i.6t..u,\|....l.Xz.v..._p.eE6..q..T@..A{..t..x.C..5.../i...0.a.g.iG.......9G;......{..i..Pn....?+.>.@.z3K.!..{.........).....N.U..:..Q_=^...@.....Y.".i....k..._?u.\|9......$@......c..~s.m.8.....;..LI..k.....Ua...d%.U.f....KuJ...2.+.Y=....l<..Wm..d..(1.l...I.V..:..9.....iH.;...H.V-...@P..Z.1$n{.0I%v^...Fp~R<...{....i..Xn......5E+..VOS.I..\|..,.:.$./5uzD.c:.H ....%.c...R.....^O]..O.uy.,j....QGNT?....T..SW.C...xc...u...yF......]...:.4c.N?3g.E.l.2I..Y.]fa...f..N.Z.JDr.?.........u..7}..6q.m.2....98....N..v\.....+6.....A.+.a.3

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, Apple iTunes Video (.M4V) Video
Category:	downloaded
Size (bytes):	198670
Entropy (8bit):	7.703185344095933
Encrypted:	false
SSDEEP:	6144:p22xAylN+k9HCDT8UGcZT1JTZcI3xY8toXA:3xRf+iwTxZhJNxxxoXA
MD5:	286A0BA5BDD55FC2275AC1859AE6BCCE
SHA1:	DC40B9F6E20ED8F5A31C240842EAE2DDE856C4AD
SHA-256:	5E3557D94494BFFB1D41B9A9DF26F4C96AE98D2DFE73B75AA36EB049CD10E4C1
SHA-512:	96E9A7D34A0C0B3D57215B59B95AC918B957824D9FF93E17D89BDDB934846E980D2DAFC3652C0B3AC8734746BB99319F861F65560071ADFFCD51BA476C3C58B3
Malicious:	false
Reputation:	low
URL:	https://d1f0esyb34c1g2.cloudfront.net/transcode/storyTeller/A1S3VA65QL41QA/17dcbf81-80a9-4396-9cf4-1b1c0c946446/9019051b-8020-424a-8315-816decaeb23b/1697208577822sbv.mp4:2f83c2ce998a80:0
Preview:	....ftypM4V ....isomavc1mp42..jqmoov...lmvhd.....O...O..........................................................@..................................!iods.......O..)..................trak...\tkhd.....O...O..............................................................@........h.....[mdia... mdhd.....O...O....u0....U......<hdlr........vide............ETI ISO Video Media Handler.....minf....vmhd...............$dinf....dref............url ........stbl....stsd............avc1...........................h.H...H.........Elemental H.264........................pasp...........AavcC.B.....*'B...B.@_..-@@@P.............................(. ....btrt..^H.+..........stts...................@stss...............u...................)......./...u........... cslg...........................(stsc...................................$stsz..............^H...0...............+.......................g...".......'...E......._.......W.......F...............h...........S...........i...........................z.......F....

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34024)
Category:	dropped
Size (bytes):	114093
Entropy (8bit):	5.361990005730743
Encrypted:	false
SSDEEP:	1536:hsQ3sQ1tdSkqUQxLdSrtUFK0RilZMi4B+mVaR8:hsksegIUs0UlZMig
MD5:	AA45E68E1788C46993A50762ED5A778B
SHA1:	D5AEE6F1263EB703F2525A0A3DFA5E36E54A1152
SHA-256:	18C4E980DFEF148652C4195E4CB48BB3238BB328FFD342FF45CA4C0BD05D56ED
SHA-512:	D76E30D5F728B7E6131462E82D177133D0AB6E168303D8300486BEF58701F6C12945A9668E0C288A169467F603878007086CDCE1BE0774767B81F9C073B31866
Malicious:	false
Reputation:	low
Preview:	if(!("cmp_config_data" in window)){window.cmp_config_data={};}window.cmp_svg_no=function(){return new cmp_html("svg",{"xmlns":"http:\/\/www.w3.org\/2000\/svg","xmlns:svg":"http:\/\/www.w3.org\/2000\/svg","viewBox":"0 0 148 63"}, "", function (x){x.child("defs", {}, "", true, function (x){x.child("linearGradient", {"id":"btn32nsvg_1","x2":"1","y2":"0"}, "", true, function (x){x.child("stop", {"offset":"0","stop-color":"#B60C0E"}).child("stop", {"offset":"1","stop-color":"#F64C4E"})})}).child("g", {}, "", true, function (x){x.child("circle", {"cx":"32","cy":"32","r":"30","fill":"white","class":"cmpsvgwhitefill"}).child("rect", {"width":"65","height":"50","x":"65","y":"5","fill":"white","class":"cmpsvgwhitefill"}).child("path", {"d":"m28.90442,62.922199c-12.321716,-1.16146 -22.643665,-9.0477 -27.01971,-20.64376c-1.042079,-2.76141 -1.669305,-5.98013 -1.845309,-9.46955c-0.776353,-15.39183 10.106961,-29.20519 25.47518,-32.3337c2.189536,-0.44573 5.142902,-0.47463 48.501299,-0.47463c43.358399,

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 226x320, components 3
Category:	downloaded
Size (bytes):	11568
Entropy (8bit):	7.928793703382498
Encrypted:	false
SSDEEP:	192:Mf8cBBxwXWs4dDVqx1+Bj8sLdkGE/F8ZKTQXVgC9IdWBstRVq:MfFX2XkdDVq6Bj8sBI/F8ZeQFgGIWEPq
MD5:	97B94995F77A7C000B87E57A6B39A926
SHA1:	A8F9BFAFF17B66DFFCB6A7C2EF2069CD67856489
SHA-256:	9B627F3662281D9E220581C0A275678A4982931C302107CC45ED3A34458B49EB
SHA-512:	6CA132C71FE080C7F9BFBA054A4CE6E862961C521A22F0EE8F9E17CD9EF204B09724117886D3AFCA37A9F2971EA700A5C177013DACA9F32F94C20B9B1F58FD82
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/617lv+7zWTL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."..........3................................................................,.......b..glk.....jYj...R.!..V,..y...>.8.F...........<....6.v.h..Z.Y7...Q.:a!. .=...LZ@3.............q../...epUu..tU!.;.<.....>w.ZK..K?OY.;`............').L......Im^.c`.Z....}9...........E............Z.f.l.....l.0.~...Z..-T..j....K...(..e.^..........)...b.r&...yR).^..w.Uy....Tm..YV.~j.,.....I...z.- ........-7..1j.=...;&g.#u.....U)}...../%.x..0.M........t<Z@#P......bN'.b...J\|-.ow.r~.}w..jF=....#.m\|:.n...\.[.\|.c.t.\|+.....C.}..`..............>P....v_.}}..?.5.....}..!.}@.'..}Z...IO.5..?C..y=.9.D.........R.m?C..'RW....>.T.v&tUn...aV../<...K`.&.v}{.s..H.j......JI.=.J'7......).)-..\|.Zq..J..Y.[.0....I.....LZ@#P......R...bZ...lsu....S.XB..,.]V..(.J.4a....Gw.s...H.j......K....1I...vg(.gIM1.w..SM..u.^d..s.1.7..$.{.s...@.j..

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	26138
Entropy (8bit):	7.986480454146733
Encrypted:	false
SSDEEP:	768:KaU5LjBi8wA1AUrebEADPi57Bu5CAD13eFbJTMLG4lq:/yjBiDA1libk57Bu5CApMVUq
MD5:	285408C3C1A2C4E22CC7C22FABE086C1
SHA1:	5CC22303BADB2F55DE2C29FA99432360F9CA9E49
SHA-256:	C64B2CB468CE96165D7D3DD4735D15DBE1E25073025AB552333D5EF60DCFF692
SHA-512:	50E518B070DF4AF7EF85417236F8CCE86D071368A0FD107FBC7D6B39807922406D14E06EBED7A43FBAA4718E74870E1D71EDCE00B28B4E77242B201EE11C6DD2
Malicious:	false
Reputation:	low
Preview:	RIFF.f..WEBPVP8X..............ALPH.......m....{.O!"&@..g3..i..G...A...`...l.a.).i...m..`..............o..m{.l. ..!..%.)....@a.0p..Bp..e.....2.l.~.J{..... .}...O._................O......?......7.?....?....O_..Z.h......../O...._.Gh.%EHf......`.....Bf..%A..i..........[.kQD4.y.8{s=>..5.E.!k..y\|xC=~y...Ad&W[....m...#.3S.E....Ar...../Zj..d-B..B..[..OkK$$.Pd-...d....D.r..\L.?...E>..#.eF"5r9..:[..k...Df..7.l..!I!$r..B........^B.F...c5...l../H[.....rEw.<...."A.i.Jf.=...:r.C......c"T)9F......iis-{...k..T?.g..!.#2K...w.gD...h;..]h..,.V.p....E.%..S.?c..]..I..me.A.tw.....:%kr.$....1.......E...=.uC..-"$...\...H....#J.CBd/..U.;.....#D..s...A.}.H....O.F.....Y.r..{....:..5...r....u.. ..n}\|%.9nk.P!k...u.H@}..~X#jD.Y#o.......]....BEE..F.F..PwKf...3..YC....HD...H...<gVDhtC.D..bXr....3...E...]...kQ....s.k...E.....r.C..w.9...eF.3.B4.......l.Xrs.i...n...;.,kHDmQ......=!..x.._.A....^.C.x.s...?.P#.%])HJ..r1Qw..4<5../9g.R4.,.1..d.s3...5.....d..)F....]o.I.o..T".THfH.

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 196x320, components 3
Category:	dropped
Size (bytes):	18187
Entropy (8bit):	7.968925634155733
Encrypted:	false
SSDEEP:	384:Z5lGE0sQW7XrZu5E8YxZP6PihQkaTGumC3rsaWeaiPa36tG6yaZUwR:8bWvY5sZyaSrGJCRPjykUA
MD5:	573958B2432DCDC4C51D7828777253AC
SHA1:	8B075D537587BE3ABABD9293A2A51461BBD010F8
SHA-256:	2C4AF93DC33214DC9A5F4975E0806982A13638A51DFEA54534841E930ACC41B6
SHA-512:	1DB3FF0AFC24615BB620610D3CEDA18AF31F8D37E00F20155AC48E242D508A563C13D5F743885D2BC41DDCAEAE16065131E2D610BAB75BF48FB1F00CC6F449BB
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."................................................................!..1."2AQRq..s....#3Ba...6STru...$t...Cbd...'45c...7U....................................................!.1.2Q.."Aq#Ra.....B..3..C.............?..[k~..fw.....f V.$_y..~4Yz2}d.1...}Ou.....g..$tm.I..U..I...s.p3-.$_y..~4y".....[S....ZK....q;.......S...J..j.=. .......A.L...!.D:..q[.7%...7.7.>.E....G./...}...^...SU.L..N..w..8........w~....g.5....L`x&3.O.tp......}..z.5.p7J..2%...?.o.$_y..~5.......f..o..2...... .m4!gX.".H...R\|..o.......KI`Wg..M..16.!."..&..U7c.N.......$_y..~4y".....m....b{.....L..8.Ws.SY.q....r.I).*nytRzJ..m...<.}.....<.}.....h.K..E....G./...}....$..E....G./...}....$..E....G......o.EI&<.}..#~4y.......RI.#_y.....H.....i.P....=....G..\|.j..k.A;.H...Qm..=..._;.'..Z..U...........}I...}.....\|.}.......?m..n..RG...J......

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 420 x 68, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3706
Entropy (8bit):	7.793291010216675
Encrypted:	false
SSDEEP:	48:PvpATrhCupQrhEO/KMYi/AlKdQdd0KLbIs8eOSrqcKyNJgmvw0xBCLLb+tAmJqgf:3STwupQVE+oacKOH5bwebXwycythrIs
MD5:	41BAB80437B25A1A16A24E619510118F
SHA1:	5AA317A599EE131CA8CCF9740F36014DA18E5396
SHA-256:	3D22700EFC67B3DED0B3A3E514996BA0F036645605114DA4003B27617BC71974
SHA-512:	150E692F6CE81B6BEFD163E8882BED9244D3281570A81B99342AE7BEC4DCC4B6E1016C7C8D3678194E8AC9D401919BD1FF7B960DC4621AFA00E5022C013DACB0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......D........1....gAMA......a.....sRGB........ePLTEGpL....)3....)1..........)2.(0..........(4....(2. 0....)1....(2.(0....2.......)2.............(1....(2.)1....)2.)2.)1.)3....0.1.)2....(0....2....)2.......(2.)0.%0.......2.2.......(8.(0.2.00..........1.......)0.%5....(3....&3.......(1..........&0.3....2.......)1....)3.)2.0................)3....'0.5.+2...........................................)20.@L...utRNS......... . .@@..@.`.@ .`....p.. `._.p.o.0.o`....0..P0....P _......!qo0O_.PAa.0..P.Q.1.. ..O.A...P1p0...0..o^.NQP.M$....2IDATx..YC.H...S.e#....3..ll....I @..I&.If73.w.>..:..j..-.!;.z..R...U]].BQ~..t.KFI...5....H!..BJ!..BJ%..BJ.C..Y(4V.9.y.q1....r..es>J.{C.QTf,4.......r......;..u.uu~.{._.....-.Xv...j.V.&.E5Xt..H.)...w.%?.d....fp..@*e...S.........l.W...0xp..U.(+.e........^6./..O.M.w.+.Ub...'.\=r..u....._....u.F{..`..`l.%oV.#.J.{....ib.E..,.3DH%`.`..s.E=..d..U..v..=.).M.\|....M.x.._{...+....c..+..w.u-.&o..k..P....s .)Wm,..h.%x..G@R

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	3432
Entropy (8bit):	7.873442285184957
Encrypted:	false
SSDEEP:	48:uFX2ZFVFtvYlgLn5N4TCCcTWJCNbb+Q51AidECbzF7+uKJKEKDaQFlONG/Gp69Uy:egVj2G5NnN+QvxvF7+3KjTAN7py
MD5:	3402BB82E4431782883E1D0391864B91
SHA1:	AFD761BCAA287732490BA7AF527767116251791F
SHA-256:	4933C9FFCE2B529E3737C7BFDE2D72C3F34A59FE4F7D1F79729C5D8499D8A9EC
SHA-512:	AA5C6A43400C248B84BDD995A4DAEC9E67FA113C50390E0109B2824426B18C78D7EA5E9049D41C6B526E87CDF2AC25D68D999A497B87ACD5010B30DA881F0C7B
Malicious:	false
Reputation:	low
Preview:	RIFF`...WEBPVP8X..............ALPH......T.v..Jx.".."!.Z.......A...4........g.....o.......l...\...v.A...W...or.6.../[........3.\.N.8....N.:.N.:.N.:.N.:..J..g...x...'..................:......,x&<.G......x..\..AG..v<.CG..nx.......AG.:......p.r8....G.;.)....d.\|.....VP8 .....:..........%.....F).O.....?...:....?._....o........'i.0..O................?.{......?......._@....%.....+....._...G.O....@.U~..".M.K......c.X.C.\|....E.q.......Mp/....3.i......,..^......w._..W..? <L..>..9.........=....&.......?.......^........?..,..}....G.[......?.<\|~.{.~.}.h2x.h..h..h..h..h..h..h..4yq...1.b.&...{..p.?..a{..)U.....D.6.I-.Y...<a.6.}..B9.w+]....N>.....T.....D.2.D.w.3....p._....6R..j.d.....C.`)T/(...-zpP..Q(....Li.Li.Li.Li.Li.Li.H.3t.&4........?..L........K....I2......M....>.h.;t..........w[iH.h...P.y.{1$D.Y.ij.>...%N.7..s@ ..n.Q.c.K....).q8........{..\|...eEo.4.#..~...v.(.0$iO.V......LP......S..[..q..#....].. .D..L.@.K'..A!,....P.Ovs+..&RKS..qZ....V.pW."7f..c....I.

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x320, components 3
Category:	dropped
Size (bytes):	13277
Entropy (8bit):	7.96561877943228
Encrypted:	false
SSDEEP:	384:F9fztl7x73Sp3u/oC8qJ6Gb/NkRwbOfalNBB1bXi:Pztl1TS5uAC2GDigOyxTO
MD5:	10D7591CE9E382EDB03322421C1CD351
SHA1:	40D2E0701E5F9E5A2BEC53F2D54EEE323844AEA5
SHA-256:	13CE4F28E89B7C58660AACB802A86CE1988F22FCD51506F01390D9AABBB81CB4
SHA-512:	1D120795D54BBAE3D530EBE0397FFA9F1C5FCCA3F38D72E554645F90D78F8BBC1324B3C81AD3E39C53B6166B1D0E427A017F69ECB295E1F0DAFE399C9ED94E29
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."..............................................................!1.."AQa..2q.Rrs.....4BCb...#$35...DSt......Tc.6....................................................!1.Qaq"2A.....3br...#4R...%BC..c............?....T!T..........e.%.f...qf...T.s.;H......n...W9..j.K.`..V.....G..U95.O..V..-..rk....<in.5S.^d.o...<j.....!^o.w...A...IB...?...........B.3...k.Z#..E.p.`.Q....z.a.`b.,'.=.....J..J..c+.Nc,..q\daI.....<...!.$........c..\|.g..HU.8.......5g.!B.{.....\.>?e=\P.....W.>4.sB..\|.m.P...:l...N...(....)......S&..6y.........!s...K...iP.....$..h...U.':..A.h.>..3V.H......>.....E.....B..T.P..K.?../...B.J.F.".U...8.....+...%!Dc...B.&........<.....L. .O.....z..../&Bw.....VO.Z8..{. .sB.].I"..S...M..O.y.>y.tL.....Y.......\|Rd.y....}.tOQk....^.Q...~.+B....E..Yx......n....R....-/)=.[4?.C.i.E.T....U..T.C..N..

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
URL:	https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26m%3D1%26sc%3Dcsa%3Avl100%26vl100%3D17754%26pc%3D19242%26at%3D19242%26t%3D1729723018741%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:19242
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2474
Entropy (8bit):	4.86447868135755
Encrypted:	false
SSDEEP:	48:YlcYEBUDwG867BUF5G867BUBUaG867BUkzG867BUG0G867BUIedG867BUlOG867R:kjEBUDwGJBUF5GJBUBUaGJBUkzGJBUGs
MD5:	A19F4CDD809D19001A79BFA9B3367832
SHA1:	8855111C794F54A2F9F0B6675E41497AEC721450
SHA-256:	81AD9FF9ED70D247199D7FD0E1512D94C3F881F4027AC24A2323AA8B7167BFD3
SHA-512:	7F7C47E61001EEC137A98C00B5D780835F2ADDD24C7A4C50B82DF7B4C2410FABCF92658AB509B77699B585CF499E5A02D041FE8B3B26A4C237E1CC465BF55399
Malicious:	false
Reputation:	low
Preview:	{"alias":"aps","prefix":"bloat relief","suffix":"","suggestions":[{"suggType":"KeywordSuggestion","type":"KEYWORD","value":"bloat relief for men","refTag":"nb_sb_ss_ts-doa-p_1_12","candidateSources":"local","strategyId":"ts-doa-p","strategyApiType":"RANK","prior":0.0,"ghost":false,"help":false},{"suggType":"KeywordSuggestion","type":"KEYWORD","value":"bloat relief for women","refTag":"nb_sb_ss_ts-doa-p_2_12","candidateSources":"local","strategyId":"ts-doa-p","strategyApiType":"RANK","prior":0.0,"ghost":false,"help":false},{"suggType":"KeywordSuggestion","type":"KEYWORD","value":"bloat relief for dogs","refTag":"nb_sb_ss_ts-doa-p_3_12","candidateSources":"local","strategyId":"ts-doa-p","strategyApiType":"RANK","prior":0.0,"ghost":false,"help":false},{"suggType":"KeywordSuggestion","type":"KEYWORD","value":"bloat relief","refTag":"nb_sb_ss_ts-doa-p_4_12","candidateSources":"local","strategyId":"ts-doa-p","strategyApiType":"RANK","prior":0.0,"ghost":false,"help":false},{"suggType":"Keywor

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	16412
Entropy (8bit):	7.8921634305031105
Encrypted:	false
SSDEEP:	384:+MPKJXJ8oq1Q3euHBYIqO09gohSb+6gOU58ZhGkzDE:kZ8oq1juHBYIt0/hXbUbg
MD5:	926F5A0236D8D496F258E38FE776C4EB
SHA1:	13EE19C3DEC8201EF1D89B5C477B84B14E2C114A
SHA-256:	8C1690474DFCB3F28EA147CED458BC83A78B5505A9CA24143F499AFA367172CE
SHA-512:	B76DF38951E0214738F3C0799C43CF6024EEF7086133F62B88C947F35BF76917C7F851B4E87DCEAEC93E64D81B5949337C68A90C3E00E2C7453F1840F038E0AF
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/S/sash/2KViI4b7ZZCNtr3.png
Preview:	.PNG........IHDR..............$.....PLTEGpL.z!.z!.z!.z_....t..r..q..z!.y!.1.=E\`.........D............)...........~.....z".z"....].L....y ......K..................y!....z!......oss.y!...ptt..........oss.z!EIIHPQJNNIMMWZ[JNNKOOJOOKOOJNNJNNJNNKOOJNN`cdgkkJNNIMM~..FJJ.........JMMJNN.y!.......\|$.~!.........z".........v".{#SZb.{!.z"=......................w.X..n..n..m..=...y!.\|".z!.s...8..9..:. >..9..._.L6.....}bU!.)....tRNS.>...c......................o........@.......`...........Q'7.....Jo.........]...w..9)...zw...E..0K.#....{O.{...........$........UU..=.IDATx....B.:...Y.P..\|M.P.]...N.....y.....af..A...Lx.....am.?....H..n..,.. M7.6.......C.m.{.U.G..=U.....[...#sU..rP..B.w.DS.Wf.wO#.......4.......3.O.[m#.B6.+y..Y-..0"..%Bv.2...pd.....1+t...q..Y.D1..y.N.w.T4..B....dO.......'.T....q.n8....a...$k$1.....B...h.!{.....dx.t\|..../.......l~...C.$dY..8[.C.V../...............x..._k.M.u...V.0x2G...o.'$....2....}..Nxd..^5...'W*<......F_.h...o~s..........v..Gx.(.

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 286x320, components 3
Category:	dropped
Size (bytes):	11767
Entropy (8bit):	7.936659981789356
Encrypted:	false
SSDEEP:	192:BejtQ9ALgYIjPIjkf+NSE3ee/ST43CntmoB6zXSgUH7hjO+8oivE5mKfg2Uiu:BeQ+LAykmNxODhtmooTOdjOMGEoKPUiu
MD5:	7F6337BC426D35CBE2F2512AE94F719E
SHA1:	A87285820E674B41FDECB8ED75F66E617A45401D
SHA-256:	E18233FDF3EA4A1BD98FD733A009616E1D72D3443EEDB0137D9DCFF922A784D8
SHA-512:	783B0A2DB9C6C7148651DEC82C37D6578E635174D080E26CB153CBB967EA69B5C24CD7AAFE19F91EA465F2601A8C393E8BBFDF07204706883B0C297794606FC9
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."..........2...............................................................X.4}..R..l.d.]2..4.[..(..H....9A.`M [5X.{1.S.K%t.S..x.....9'[..)l+q..Bb..W..f.J..y..y^.Y.Y?...a8..............c...Y...:E6....l.G..`.V0....^.O~.I)...D..]_.uL\.........JU[.....d.$....k....G.d..L!.A^...~b.C.~..e.Rv.A..g......$.\|.H.K..<.Am.\....pS2^........M^1P..N..>(.b^..;.8.o.`.........u...{i..Q.+.r,..`.].pjl...7......'?7.F..rx....N]..6.7z..3 b....i{..i..o....8...'.U.5=..+.V..2.........Y.)..U..Wj...0......H..v.......<....$..g..<....ANyU.b....6;t.().7.Dgpi4...0..A...~.........j.....M.L.........S.O.X.;.....L...C..OEd...r...N..aI..o......@........eK.5....>0.;.>\|...Fv9.x..T.$.S...L./s.FL.?......:~......k[..r..ZRd.8.7..Hw.~...xr.;.......Gc......D.Y...&T...k.y_T.. .....j.....j..x...m.....zlw.....t+.Zm......t.;`

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	71
Entropy (8bit):	4.19644707821733
Encrypted:	false
SSDEEP:	3:PouVIZxgRO5ZB1XbZ6iFi:haxUkZ3X96x
MD5:	6AAEF67381946BFC1DDACCA8CF7F6C36
SHA1:	E441BBA8B691AD0FFF0BCCB75974880018AB41D6
SHA-256:	73F8AE8C11DAA6AD905107970E55C3C64CD7133561E9E91E650AAB092BA7245E
SHA-512:	99039B90D4F3819EFB0A395D0DC810DEE1A56265D443D24D1C9BDF832EF9F95887E3C417253698A4F76EF176D0ACE6334905F4B7B4E6A8421D2F650B84255EC2
Malicious:	false
Reputation:	low
URL:	https://www.amazon.com/rd/uedata?ld&v=0.299560.0&id=YT8YJ4B94N98J9DNZQCH&sw=1280&sh=1024&vw=1263&vh=907&m=1&sc=YT8YJ4B94N98J9DNZQCH&ue=3&bb=2213&ns=2254&ne=2927&be=4954&fp=2307&fcp=2307&cf=5080&af=5129&fn=5129&pc=19088&tc=-5574&na_=-5574&ul_=-1729722999499&_ul=-1729722999499&rd_=-1729722999499&_rd=-1729722999499&fe_=-1348&lk_=-1345&_lk=-1336&co_=-1336&_co=-476&sc_=-1334&rq_=-476&rs_=-46&_rs=2152&dl_=-25&di_=5043&de_=5043&_de=5044&_dc=19087&ld_=19087&_ld=-1729722999499&ntd=0&ty=0&rc=0&hob=2&hoe=4&ld=19089&t=1729723018588&ctb=1&pty=Search&spty=List&pti=undefined&tid=YT8YJ4B94N98J9DNZQCH&aftb=1&ui=2&lob=1
Preview:	<!DOCTYPE html><html><head><title>x</title></head><body></body></html>.

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2474
Entropy (8bit):	4.853874419483205
Encrypted:	false
SSDEEP:	48:YlcYEBUDwG867BUF5G867BUBUaG867BUkzG867BUG0G867BUIedG867BUlOG867n:kjEBUDwGJBUF5GJBUBUaGJBUkzGJBUG+
MD5:	3FBEEAF50C77C92AE7269654440AFD3E
SHA1:	25780F3C2F88C6AB67C4884F172FC4C7D67F8CCD
SHA-256:	620B5E41B331071E51D617F5787A5E6EB384F2DAB75C2FA13B772F6C9B2972C6
SHA-512:	ABE033CB1642CB3A4BD0DA872D962848A35D639B95EC90A1914E9723CDD0B6CB6A0CFACCFD332BBD8B62BDC72E0FEF95BE662A2CD420C23CE6A7ED5C1575B0EC
Malicious:	false
Reputation:	low
URL:	https://completion.amazon.com/api/2017/suggestions?limit=11&prefix=bloat%20relief&suggestion-type=WIDGET&suggestion-type=KEYWORD&page-type=Search&alias=aps&site-variant=desktop&version=3&event=onfocuswithsearchterm&wc=&lop=en_US&last-prefix=bloat%20relief&avg-ks-time=3567975&fb=1&predicted_text_accepted=&session-id=146-5727277-4453238&request-id=YT8YJ4B94N98J9DNZQCH&mid=ATVPDKIKX0DER&plain-mid=1&client-info=search-ui
Preview:	{"alias":"aps","prefix":"bloat relief","suffix":"","suggestions":[{"suggType":"KeywordSuggestion","type":"KEYWORD","value":"bloat relief for men","refTag":"nb_sb_ss_ts-doa-p_1_12","candidateSources":"local","strategyId":"ts-doa-p","strategyApiType":"RANK","prior":0.0,"ghost":false,"help":false},{"suggType":"KeywordSuggestion","type":"KEYWORD","value":"bloat relief for women","refTag":"nb_sb_ss_ts-doa-p_2_12","candidateSources":"local","strategyId":"ts-doa-p","strategyApiType":"RANK","prior":0.0,"ghost":false,"help":false},{"suggType":"KeywordSuggestion","type":"KEYWORD","value":"bloat relief for dogs","refTag":"nb_sb_ss_ts-doa-p_3_12","candidateSources":"local","strategyId":"ts-doa-p","strategyApiType":"RANK","prior":0.0,"ghost":false,"help":false},{"suggType":"KeywordSuggestion","type":"KEYWORD","value":"bloat relief","refTag":"nb_sb_ss_ts-doa-p_4_12","candidateSources":"local","strategyId":"ts-doa-p","strategyApiType":"RANK","prior":0.0,"ghost":false,"help":false},{"suggType":"Keywor

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12824)
Category:	downloaded
Size (bytes):	79229
Entropy (8bit):	5.0337755562983375
Encrypted:	false
SSDEEP:	768:yWZ/m2NCN9UfMBG0lIVdFYFOFLznVbFuFQFbWMjVYFtFlF1pVXFiFaFpaxJ09k5f:yWwfU0BG0lQo+II
MD5:	4780EBF9CC86065A51C9958756161EA1
SHA1:	5FC248FFE37C4E9AE341124604AE0AF12AFCB4B2
SHA-256:	5019002FAD240C20422C3790C8705C9B70E08F3A0553B12A4498A9919489416E
SHA-512:	3812595AEC7C74902247E4DC9343787B2A4C03FA1A333617069418FF355410C1A7E33DA8892BE38157CF634338CF812E3D085771D5A45A73662B724452F1705C
Malicious:	false
Reputation:	low
URL:	"https://images-na.ssl-images-amazon.com/images/I/21RZgaOpsqL._RC%7C01LNhrqAZmL.css,11mqgJVSK9L.css,01+6LDwsu8L.css,01ixfc-7StL.css,11ahlU8GWXL.css,01+neHskhqL.css,01U2pA95KSL.css,01fn6WRzO6L.css,21BUT35X5SL.css,01Sqn3dOuBL.css,01KrVAe0PrL.css,31wUat9O8SL.css,31gMGQBDl3L.css,01mP5ZKi0aL.css,01mEWw4285L.css,11OSAsJXa3L.css,01zG4X6TtRL.css,31FHXBkYr7L.css,11VKiAMd89L.css,11TWIoQuuIL.css,01K0fSFz6eL.css,014eilLW+IL.css,01MU0Cb7yFL.css,01UfLPWOEOL.css,01Gjv7o0taL.css,019L5P4oPhL.css_.css?AUIClients/SearchPartnerAssets"
Preview:	.qs-widget-container{font-family:"Amazon Ember",Arial,sans-serif!important;line-height:19px!important}.qs-widget-checkbox-hidden:active+.qs-widget-container{visibility:hidden}.qs-widget-checkbox-hidden:active+.qs-widget-container>.qs-widget-spinner{visibility:visible}.qs-widget-hidden{visibility:hidden}.qs-widget-visible{visibility:visible}.qs-widget-disable{opacity:.33;overflow:hidden!important}.qs-widget-spinner{position:absolute}.qs-widget-table{border-collapse:collapse;table-layout:auto;margin:0!important;border:0;width:auto}.qs-widget-footer-container{border:0;padding:0;text-align:left}.qs-widget-price{font-weight:700}.qs-widget-dropdown-container{z-index:16777271}.dropdown-ux-refresh.qs-widget-quantity-container{padding:12px;border:1px #d5d9d9 solid;border-radius:4px 4px 0 0;background-color:#fff}.dropdown-ux-refresh.qs-widget-summary-container{padding:8px 12px 12px;border:1px #d5d9d9 solid;border-top:0;border-radius:0 0 4px 4px;background-color:#f0f2f2}.dropdown-ux-refresh .qs-w

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	71
Entropy (8bit):	4.19644707821733
Encrypted:	false
SSDEEP:	3:PouVIZxgRO5ZB1XbZ6iFi:haxUkZ3X96x
MD5:	6AAEF67381946BFC1DDACCA8CF7F6C36
SHA1:	E441BBA8B691AD0FFF0BCCB75974880018AB41D6
SHA-256:	73F8AE8C11DAA6AD905107970E55C3C64CD7133561E9E91E650AAB092BA7245E
SHA-512:	99039B90D4F3819EFB0A395D0DC810DEE1A56265D443D24D1C9BDF832EF9F95887E3C417253698A4F76EF176D0ACE6334905F4B7B4E6A8421D2F650B84255EC2
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html><head><title>x</title></head><body></body></html>.

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (580)
Category:	downloaded
Size (bytes):	429306
Entropy (8bit):	5.571720596824836
Encrypted:	false
SSDEEP:	6144:8qmh0RX+C9TEHwrZvfh8B96HFWO0uc03cp0c/zrViaOdwC7D1ap49c:8OX+C9TE23apN
MD5:	95ADB4E11441543133AE111F393AE44B
SHA1:	F067FF744EDB16413AA15B033E662F6799D8E3C0
SHA-256:	4864C59DC440686BE4906C810035516A36B25E6393C9A32D369DCA5214A17C83
SHA-512:	AF097BF2DCA9BFCDF772A9A5F99FB60D2951FC74BF2A0BD30C7E8D8C6B38EF1162D87EE7E860E6D4D67AB44AC844C9FC0FB08FC81B2EBC17E12CF63EC81EE460
Malicious:	false
Reputation:	low
URL:	"https://m.media-amazon.com/images/I/01mbLYIbb6L._RC%7C415toge-ueL.js,01N-o5jCVWL.js,01F-TY9qDSL.js,01ZGDvAkjhL.js,11nc0DGmmiL.js,11YjwIBhUdL.js,21KEJRTMewL.js,019k1pYapEL.js,61bDcPQyFIL.js,11lXpvEc6zL.js,01SSs1udVFL.js,21V7U-031dL.js,11-ul7kZXDL.js,21mrN3iFaIL.js,313cqxMIEWL.js,11ASqgD+bXL.js,21Bdz26YXsL.js,310qnMx0yEL.js,01GT6fWw-jL.js,01QAD-zPWTL.js,21YrDdMzY2L.js,01SAg9vFH-L.js,01iboNcfS7L.js,01sN19mMRBL.js,41K0h6nhmAL.js,31dIl7-WDvL.js,01XEI6RsRiL.js,11AB+FWvxEL.js,01TGSsSgNIL.js,010BPdY0+dL.js,21XYmj0EpSL.js,21b88sJRXRL.js,41WzYnzOwRL.js,21UTchkGPvL.js,718iq7w16kL.js,016hXeI-9GL.js,31GHnH2dCML.js,31cmdux7V1L.js_.js?AUIClients/ProductUIServiceAssets-v1ozh2963o9b4124htsthvwpiwi"
Preview:	(function(c){var b=window.AmazonUIPageJS\|\|window.P,d=b._namespace\|\|b.attributeErrors,a=d?d("ProductUIAssets@addToCart",""):b;a.guardFatal?a.guardFatal(c)(a,window):a.execute(function(){c(a,window)})})(function(c,b,d){});./* ******** */.(function(v){var g=window.AmazonUIPageJS\|\|window.P,w=g._namespace\|\|g.attributeErrors,c=w?w("ProductUIAssets@digitalBundleSubscriptionTerms",""):g;c.guardFatal?c.guardFatal(v)(c,window):c.execute(function(){v(c,window)})})(function(v,g,w){!function(c){function d(a){a.when("A","jQuery","upsell-container-side-sheet","upsell-container-events","puis-upsell-metric-utils","ready").register("mou-sidesheet-event-handler",function(b,a,c,f,e){b.declarative("puis-upsell-sidesheet-action","click",function(a){var h=.a.data.preloadDomId;a.$event&&(a.$event.stopPropagation(),a.$event.preventDefault());c.showSheet(h);e.registerMetric(f.SIDE_SHEET_CLICKED,1);b.trigger(f.SIDE_SHEET_CLICKED,a)});b.declarative("puis-upsell-sidesheet-overlay","click",function(b){c.hideSheet(b

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, Apple iTunes Video (.M4V) Video
Category:	downloaded
Size (bytes):	98304
Entropy (8bit):	7.443789815245195
Encrypted:	false
SSDEEP:	1536:q0QEpm3jQ+lE9UTBsf2k/6tscZ/kHNIQbNfOkfr95I2wV2R7MNx88aByG5d:q0e3tlfq2m6t/kt9Okfr7I28Y8a7d
MD5:	E4335D23840C0FE0790D8ACCC0B23357
SHA1:	98519252B306B5C425083EAF433842A8B76D718D
SHA-256:	A14A59E298F2825355B51EFC0457121370F2066F9FFB8930D6A50B7F8AD40905
SHA-512:	79F52DAE214D579D19A644EA745C3F10BE33BB084882CFDDF6B9D6549D0C87A381CE829A6F802EBB91728FA59F7C94632C696C96A8BD473B2F5FBD033387B79E
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/S/al-na-9d5791cf-3faf/e038edb4-31bc-4d39-ab1a-a4a7bcee0b7a.mp4/productVideoOptimized.mp4:2f83c2ce959231:0
Preview:	....ftypM4V ....isomavc1mp42..X.moov...lmvhd.....a...a........H.................................................@..................................!iods.......O..)................"}trak...\tkhd.....a...a............H.................................................@........h....".mdia... mdhd.....a...a....].....U......<hdlr........vide............ETI ISO Video Media Handler...!.minf....vmhd...............$dinf....dref............url ......!ustbl....stsd............avc1...........................h.H...H.........Elemental H.264........................pasp...........?avcC.B.....('B...B.@_..-@@@P..>........................(. ....btrt..\...5P........stts................... stss........................... cslg...........................(stsc....................................stsz..............\....6...0...$...t...)...q...........~...........Y...........]...1...............................................y.......B.......@...&...(...............J.......\...........................\|..........

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	14
Entropy (8bit):	2.950212064914747
Encrypted:	false
SSDEEP:	3:YIzY:YIU
MD5:	0946F66B45FEA7506F8D7434E22F3AFC
SHA1:	2563AA4B01ACEA58512625197BF9956FA32E6BBE
SHA-256:	15C53B41755B7DBBF631697798B043B1EB429674AFB2580B605D468C7F8593B7
SHA-512:	8E817B7D7DCB69E42DCC2C1530A8C70091A207926E5202FB7DE63EAB67E9E0697E263DC52C672DE77553CA9205051A3B145A69B71D7118A6700631B07107A688
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/conversion?eventType=searchConversion&debugKey=&obfuscatedMarketplaceId=ATVPDKIKX0DER&requestId=YT8YJ4B94N98J9DNZQCH&trackedItem=bloat%20relief&trackedItemType=Keyword&asins=B08M9JP6C3&asins=B08W3JHG19&asins=B0105YYALK&asins=B07TCQS4QJ&asins=B08R7TCX2J
Preview:	{"message":""}

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 193x320, components 3
Category:	dropped
Size (bytes):	13214
Entropy (8bit):	7.968114036445932
Encrypted:	false
SSDEEP:	384:D1IoRJNCZeKBiu/YbEceDR1q4dhqCfX3g:9LoutyBvo
MD5:	88253A9D625758BFDD3CA1B5BA49095F
SHA1:	55F85257A2942202C3179B9EA1F8E3E897400C3E
SHA-256:	48EA1F73CE8E3E168D4A65CE7D40D01714998F82605851088026FB37080DEA06
SHA-512:	05AAE9A876ADBF3FCC56FBCB83D3CB14861FCEF3C196F4136CE8628F33EA09A830A2CF79B24816998F81DF8F0F04A2D94D67A9AA5D84B9731440939B34702F7A
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."...............................................................!1..Q."2Aaqr...#3BRs.......CS.....DTt......$Vbc...4.....................................................!1..."2AQa..#3Rq..4....Bb..$%...............?....(..c/H....2...W..).........#..Q.H..Um.....J.i.......<.a}t...n2....O..%.".qzP...Oz.B..RA......6.<c.....r.v..tq..a.7...qz.........Fb7ng;;d~9........x....^K..:..v...%.t...f.~:.......m..9r.O.....-.L......3.z....8......T..n}...#?o.NO.o....%.?..@t..Ws...2>...v{.......;I.....N?.\|..P.........n..5...t.....qL...S....Xz.f...E.P.W\.\|(....O.A..}~.I3...H6..`Jy.j.9/...vT:.`.>"2...Yh..y..?.....}...!E.P..Q@.QE..>.....Y.K....f...C..V~..C.%I.6.....5s..~.~....C.j.=.......Nr.q~....;....9....k....'.:...}B........}B...o..:.......).....>.......>.."..oL....O.o....%.....\I........1......8..5.'..

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x301, components 3
Category:	dropped
Size (bytes):	27489
Entropy (8bit):	7.980525227353786
Encrypted:	false
SSDEEP:	768:+4eRcRg5ldlQMdQt3r8WQK2cA7JCnAGY5bDwcDIQT:+48c2ld9eWcAV9ntT
MD5:	FB2D46D1C03C2A7BD5987B8B2F463174
SHA1:	26BE8E2EF59027FAF246003A4CE82FBCAACF7256
SHA-256:	6DAF133794E2F7404862C3F9E6402A9AB5EE98498B00CB25E21499240020A32E
SHA-512:	471D4F1DAECAC7398BF8C0BB450AAE438FE069F6E016AE71DE88F5C9CEFE6A91C1071586745E06B393BF94FE0007FC602ADD44D44B8E17CBEE8D3AA514A6AC4B
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......-.@.."..........5.................................................................../..<..@..GE.AH=.>J...AT....I&...o{...0....f..;.>+....#d...$..I I I I I I I Ix..{.]..5x..z.s"........+..."...#.7Uo..6U.$ZJ..l..pV...(.4.<..I I I I I I I I ..z..!.o...(.F.L....D..Mqx..:.........#.g...CP...K....Z.;.DP....zG...8..T.....tF7E.#....$..I....^.....r...S..v.c,k...P{.]1.a...!.-..[9..g.......].M...Q..3..x.1D@fE./......&..wh.x...-...).O*Ih.y........4....p.B...Rj^.@.,...JUr:.u.9..r....s.M...;...n..yV....l'.A...".e(.YR..3.9l.y=.E5.q.A.m.......Z.^z..!..y.P.Wn5...Y.q.k.....E....'U.b-......Y).eK@..Oj.....&.V.YyC..}.7....Y.l...V.XW......\].Q..[(^z...8O..w+....#Dr2B..@....'.m..9.:qA.+..7.!7.5...m;..{J.g.\|..#=....{.d...d.....8.(.....Io.$.s..$....'......JMFW.jK...pj.......UE..c...Y..u....j....\|.r...

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 226x320, components 3
Category:	dropped
Size (bytes):	11568
Entropy (8bit):	7.928793703382498
Encrypted:	false
SSDEEP:	192:Mf8cBBxwXWs4dDVqx1+Bj8sLdkGE/F8ZKTQXVgC9IdWBstRVq:MfFX2XkdDVq6Bj8sBI/F8ZeQFgGIWEPq
MD5:	97B94995F77A7C000B87E57A6B39A926
SHA1:	A8F9BFAFF17B66DFFCB6A7C2EF2069CD67856489
SHA-256:	9B627F3662281D9E220581C0A275678A4982931C302107CC45ED3A34458B49EB
SHA-512:	6CA132C71FE080C7F9BFBA054A4CE6E862961C521A22F0EE8F9E17CD9EF204B09724117886D3AFCA37A9F2971EA700A5C177013DACA9F32F94C20B9B1F58FD82
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."..........3................................................................,.......b..glk.....jYj...R.!..V,..y...>.8.F...........<....6.v.h..Z.Y7...Q.:a!. .=...LZ@3.............q../...epUu..tU!.;.<.....>w.ZK..K?OY.;`............').L......Im^.c`.Z....}9...........E............Z.f.l.....l.0.~...Z..-T..j....K...(..e.^..........)...b.r&...yR).^..w.Uy....Tm..YV.~j.,.....I...z.- ........-7..1j.=...;&g.#u.....U)}...../%.x..0.M........t<Z@#P......bN'.b...J\|-.ow.r~.}w..jF=....#.m\|:.n...\.[.\|.c.t.\|+.....C.}..`..............>P....v_.}}..?.5.....}..!.}@.'..}Z...IO.5..?C..y=.9.D.........R.m?C..'RW....>.T.v&tUn...aV../<...K`.&.v}{.s..H.j......JI.=.J'7......).)-..\|.Zq..J..Y.[.0....I.....LZ@#P......R...bZ...lsu....S.XB..,.]V..(.J.4a....Gw.s...H.j......K....1I...vg(.gIM1.w..SM..u.^d..s.1.7..$.{.s...@.j..

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x360, components 3
Category:	downloaded
Size (bytes):	21262
Entropy (8bit):	7.93640482254628
Encrypted:	false
SSDEEP:	384:HzHQumMDBFQaM047tH5a9dZ95ehNNr02NCblp0QUn1wEz2GVKXjWaXYF5jLGq:H7Qumc4pUN/ox7NCxqQUn1wJGcIiq
MD5:	DB6AA13EDD3BA3BA664FC54CB471AA9A
SHA1:	13D7597FEC3DD6A46AD91402566431326CD113ED
SHA-256:	217BE4FC56775CB1131BAB593D02E6B457AE8B57073FDB8F9AC2A7CA87388645
SHA-512:	2ADE8496A8EBFD13EBEF9ED2E6178D05877F748D65E410AC396AF6AE686D3FA9D6651195D3D1279FAF63657323598B154ED1BFF3713A81076B1CC9DF9717A2F3
Malicious:	false
Reputation:	low
URL:	https://d1f0esyb34c1g2.cloudfront.net/transcode/storyTeller/A1S3VA65QL41QA/17dcbf81-80a9-4396-9cf4-1b1c0c946446/9019051b-8020-424a-8315-816decaeb23b/1697208577822.0000000.jpg
Preview:	......JFIF...................................................%...#... ,!#&'))..-1-(0%))(...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......h...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....N.^.....6....u6.@.).P..j......4....#..<..s.p...c..+.......Zg.{.^+..........\..8...8.xH.\.......Zw... ...{.QjZ.#..[..n........#b.w...?...Za#j..-.z.?.)...{....RS...R..jJ.p.j.P............Q-;..#.8...wS..Y...%F.I.c.j$.c.j#O=3Z.X.CKEX.Sx...;..)..M4-D0.O4.M...84..E.J){RS.....(...B?.))...Ji.SM+..IN4.E.JJZCJ..4....Sx...p.]....W...<.\|..J.....F.S..*I.\|.].Wp.p..".....

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4128
Entropy (8bit):	5.059123416280363
Encrypted:	false
SSDEEP:	96:dSr7aKxX/CE/k1JgquvFzuq8O2vBienZ6pQoMEHwvDZkaH:W7aNE81JuvFzu02vUIZ6pQodH4FxH
MD5:	FF56A9432764CD2F26FDB1FE681536D6
SHA1:	C2716D9898DC9A15C3266763E2FF5155D576A9A4
SHA-256:	E81CAC831BE2F05FF6D9435F57E763D0C18CA48516BAC5208B89F4452BD6B677
SHA-512:	DA94620764A5D1D2D59095D4B1BE8188FF8BBEA246C0ECD9E823C287C1C9EF9FBB08D1B6D443BA576C74A77E965479C04D259463124373F20F1E0CFFE4B3A26B
Malicious:	false
Reputation:	low
URL:	https://cdn.consentmanager.net/delivery/recall/logos/68884
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>..<svg viewBox="0 0 258 258" version="1.1" width="258" height="258" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns="http://www.w3.org/2000/svg".. xmlns:svg="http://www.w3.org/2000/svg">.. <defs>.. <style.. id="style2">.cls-1{fill:#0a3a67;}.cls-2{fill:#1e9cd7;}.cls-3{fill:url(#verlauf);}.cls-4{fill:url(#verlauf-2);}.cls-5{fill:#0075be;}.cls-6{fill:url(#verlauf-3);}.cls-7{fill:url(#verlauf-4);}.cls-8{fill:#bbd5f1;}.. </style>.. <linearGradient id="verlauf" x1="107.41" y1="233.11" x2="108.2" y2="233.11" gradientUnits="userSpaceOnUse">.. <stop offset="0" stop-color="#bbd5f1" id="stop4" />.. <stop offset="0.07" stop-color="#b2d2ef" id="stop6" />.. <stop offset="0.18" stop-color="#98c8eb" id="stop8" />.. <stop offset="0.33" stop-color="#6fb9e4" id="stop10" />.. <stop offset="0.5" stop-color="#36a5db" id="stop12" />.. <stop offset="0.57" stop-color="#1e9cd7" id="stop14" />.. <stop offset="0.87" stop-color="#0075be"

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	downloaded
Size (bytes):	1698
Entropy (8bit):	7.006892209710628
Encrypted:	false
SSDEEP:	48:94rEdD1QAx/4HaRKBFRlUUyUOg1X9Bevnkj3hfZ9iOy:9kEfQe/mac5lHyUOg1tovnoRBoOy
MD5:	B6865A5842DAE8A773056B0335F901E1
SHA1:	BE3EF410749C7817F5469E7B57AEC884446A801F
SHA-256:	67BCC900DBA12D5DF3E836531821A46C55E5C4FB0DB1D1B99A8B7880918B6896
SHA-512:	39E4B4D35D2060AFE4BDE32E86B5ED26BAEFFAC77B79E34CB8B5CBD949F5D1036D65AF7CB3108F417B9FFC1B21607EDDA07596E4DA2FDD5F2D5E697D7A1AE0EC
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/G/01/javascripts/lib/popover/images/snake._CB485935611_.gif
Preview:	GIF89a....................f..G..K..s.........,..0..8..=..E..o....$..w.............V..d........A.........b............m....k....M.........!...........}......................................................................S..X..`..h..I..C.....{..:.....2....^..4..&....T.......j..;...................\....Q..O.........................?..y..6.....u..(..Z..q...........!.......!..NETSCAPE2.0.....,...................#)-....$..6:7....%+/.70=6......6.........=?=.....3@?......;E.....7A>......B;.....>CD......;+.F... &.03.8.<..!'.14.,<.."P...F.`.....!.......,..................;.WX.[]...<.U.Y-\$_&.JOSH..TJ^*\.G.P..2...#..7.HKQ..:6..L=.FF.'M.....NA.:b..I...T@..?.R../.D..924I.::/E`..A&V,Z.JCaT.T9Ij...........!.......,.....................i.^,...C.K.....jl.8^ghQ..CRk..."dN<.h-P..c.f...m].,.>.Jnj.2H0.T.-..43..5.G.`eC.6:...f..:=.G5.AT770./.6.@C(CBA;@/.F..r. ..Z.@.!.......,..................?(..N!lG..9..'.g[jNJ.A#Hl.F=B].O<.T&28.f_L;.9V(..H...J,...kW.lf:...U.ol.T.r

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (346), with no line terminators
Category:	dropped
Size (bytes):	346
Entropy (8bit):	5.00818604439199
Encrypted:	false
SSDEEP:	6:qIZmJNsVwbDRWPWG3mV/R7cjTDEG5OQRoYxHSNHbMFKdCuFxXcvH3eVP4SzpF9yc:+JG0DRWZmX7OPrRNwN7MFMCu/cvOVQSl
MD5:	F84F931C0DD37448E03F0DABF4E4CA9F
SHA1:	9C2C50EDCF576453CCC07BF65668BD23C76E8663
SHA-256:	5C1D5FD46A88611C31ECBB8FFC1142A7E74EC7FB7D72BD3891131C880EF3F584
SHA-512:	AFC3089D932FB030E932BF6414AC05681771051DD51D164F09635CA09CBD8525A52879524B6AA24E972E7766DDF529484CC1EC416DE8B61255435A89BA781F8C
Malicious:	false
Reputation:	low
Preview:	var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x320, components 3
Category:	downloaded
Size (bytes):	13277
Entropy (8bit):	7.96561877943228
Encrypted:	false
SSDEEP:	384:F9fztl7x73Sp3u/oC8qJ6Gb/NkRwbOfalNBB1bXi:Pztl1TS5uAC2GDigOyxTO
MD5:	10D7591CE9E382EDB03322421C1CD351
SHA1:	40D2E0701E5F9E5A2BEC53F2D54EEE323844AEA5
SHA-256:	13CE4F28E89B7C58660AACB802A86CE1988F22FCD51506F01390D9AABBB81CB4
SHA-512:	1D120795D54BBAE3D530EBE0397FFA9F1C5FCCA3F38D72E554645F90D78F8BBC1324B3C81AD3E39C53B6166B1D0E427A017F69ECB295E1F0DAFE399C9ED94E29
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/61xYZl60gZL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."..............................................................!1.."AQa..2q.Rrs.....4BCb...#$35...DSt......Tc.6....................................................!1.Qaq"2A.....3br...#4R...%BC..c............?....T!T..........e.%.f...qf...T.s.;H......n...W9..j.K.`..V.....G..U95.O..V..-..rk....<in.5S.^d.o...<j.....!^o.w...A...IB...?...........B.3...k.Z#..E.p.`.Q....z.a.`b.,'.=.....J..J..c+.Nc,..q\daI.....<...!.$........c..\|.g..HU.8.......5g.!B.{.....\.>?e=\P.....W.>4.sB..\|.m.P...:l...N...(....)......S&..6y.........!s...K...iP.....$..h...U.':..A.h.>..3V.H......>.....E.....B..T.P..K.?../...B.J.F.".U...8.....+...%!Dc...B.&........<.....L. .O.....z..../&Bw.....VO.Z8..{. .sB.].I"..S...M..O.y.>y.tL.....Y.......\|Rd.y....}.tOQk....^.Q...~.+B....E..Yx......n....R....-/)=.[4?.C.i.E.T....U..T.C..N..

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1349)
Category:	dropped
Size (bytes):	34306
Entropy (8bit):	5.449807814939637
Encrypted:	false
SSDEEP:	768:IauWB2R6JfzUeQfAtvvtc3c197laJKIYyYkFtt1BBT+m/oqVrIIxGRezyMstWQGZ:HH/iFtt1BJvr09bPnffzQ
MD5:	DBF0E869B1D54869994278F568A1A418
SHA1:	B29572031B75E79C3EC7DA5D56F433EEE498C16C
SHA-256:	53205662F2BD49EB5DC275BB05C22F51A6FDB3CDB7E027662C9DB9224C4E50C1
SHA-512:	CC4F7C7CC8B773CA88FDC4D23345604EE2107113750BAE1119F72609F436CC70F739A120C26C4EB1EF6967E41C90A205A2CBB7BF1813402A48556AFB3B5A0A00
Malicious:	false
Reputation:	low
Preview:	'use strict';mix_d("SBXGwentCards__multi-brand-creative-desktop:multi-brand-creative-desktop__CsUehojL","exports tslib @c/dom @c/aui-utils @c/remote-operations @c/scoped-dom @c/logger @c/pagemarker @c/metrics @c/aui-feature-detect @c/browser-operations @p/a-ajax @c/aui-modal @p/A @c/aui-untrusted-ajax".split(" "),function(ra,w,ab,sa,bb,cb,db,eb,E,fb,ta,gb,hb,ib,jb){function H(a){return a&&"object"===typeof a&&"default"in a?a:{"default":a}}function I(a,b){return function(c){c=x(a,c);return b?b(c):.c}}function ua(a,b,c,d){b?(y("Send"+a+"Success"),c&&y("Send"+a+"Success_"+c),d&&y("Send"+a+"Success_"+d)):(y("Send"+a+"Failure"),c&&y("Send"+a+"Failure_"+c),d&&y("Send"+a+"Failure_"+d))}function va(a){return Array.isArray(a)?a.map(function(b){return w.__assign(w.__assign({},b),{width:0,height:0})}):{url:a.url,width:0,height:0}}var C=H(ab),wa=H(sa),xa=H(cb),Q=H(db),kb=H(eb),ya=H(E),lb=H(fb),da=H(ta),mb=H(gb),za=H(hb),R=H(ib),nb=H(jb),J,V;(function(a){a.Cornerstone="CSTONE";a.Axiom="AXIOM"})(V\|\|

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1349)
Category:	downloaded
Size (bytes):	34306
Entropy (8bit):	5.449807814939637
Encrypted:	false
SSDEEP:	768:IauWB2R6JfzUeQfAtvvtc3c197laJKIYyYkFtt1BBT+m/oqVrIIxGRezyMstWQGZ:HH/iFtt1BJvr09bPnffzQ
MD5:	DBF0E869B1D54869994278F568A1A418
SHA1:	B29572031B75E79C3EC7DA5D56F433EEE498C16C
SHA-256:	53205662F2BD49EB5DC275BB05C22F51A6FDB3CDB7E027662C9DB9224C4E50C1
SHA-512:	CC4F7C7CC8B773CA88FDC4D23345604EE2107113750BAE1119F72609F436CC70F739A120C26C4EB1EF6967E41C90A205A2CBB7BF1813402A48556AFB3B5A0A00
Malicious:	false
Reputation:	low
URL:	https://images-na.ssl-images-amazon.com/images/I/51HA46bPoTL.js?xcp
Preview:	'use strict';mix_d("SBXGwentCards__multi-brand-creative-desktop:multi-brand-creative-desktop__CsUehojL","exports tslib @c/dom @c/aui-utils @c/remote-operations @c/scoped-dom @c/logger @c/pagemarker @c/metrics @c/aui-feature-detect @c/browser-operations @p/a-ajax @c/aui-modal @p/A @c/aui-untrusted-ajax".split(" "),function(ra,w,ab,sa,bb,cb,db,eb,E,fb,ta,gb,hb,ib,jb){function H(a){return a&&"object"===typeof a&&"default"in a?a:{"default":a}}function I(a,b){return function(c){c=x(a,c);return b?b(c):.c}}function ua(a,b,c,d){b?(y("Send"+a+"Success"),c&&y("Send"+a+"Success_"+c),d&&y("Send"+a+"Success_"+d)):(y("Send"+a+"Failure"),c&&y("Send"+a+"Failure_"+c),d&&y("Send"+a+"Failure_"+d))}function va(a){return Array.isArray(a)?a.map(function(b){return w.__assign(w.__assign({},b),{width:0,height:0})}):{url:a.url,width:0,height:0}}var C=H(ab),wa=H(sa),xa=H(cb),Q=H(db),kb=H(eb),ya=H(E),lb=H(fb),da=H(ta),mb=H(gb),za=H(hb),R=H(ib),nb=H(jb),J,V;(function(a){a.Cornerstone="CSTONE";a.Axiom="AXIOM"})(V\|\|

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 170x320, components 3
Category:	downloaded
Size (bytes):	15385
Entropy (8bit):	7.975623933279634
Encrypted:	false
SSDEEP:	384:6VD5RlcZ04Dqhg4Ydt8uT90kZZ/XqONr110BFLP/:6HHcUg4SKuJ//dqBln
MD5:	25AB0BF5C4A53EE79168BFB921E6856A
SHA1:	7F745FDA0B6531A01E1323050546C25DB61240F1
SHA-256:	0C51735CBAD7F2AAB68FB89EA9DB3349869E11AC3526F1043ADF7330B6B92521
SHA-512:	73894A9E13B5A077261E140B53FE82A34A7086DE36548C9E47ADB79876CD41BBAE5BB62744D1AFB530FD61D2977E732922D27A3D38210DAFE05F056431CEFBE4
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/71JHU57JRuL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."................................................................!1.A..."2Qaqr#4R....3B.....5Ebs.......$CDSt......%c.&....................................................!1Aq.."2Q..B....3a..R...4#br............?..t.R.%J.d..{..e.4v!.G.lPJ.+.f.g.:....$.TOZ......s9i.g.....E=.H0...).2.b.^(...B7+->W..........8T,h...0M.q..,.....'h%>@..'....Eo..^v.wF?._`.x.Q....>....v.X.....T..._p.u,{..x.:........\~I..z.t...T...._..5....tO.-....p.8.c...0:.2.-...._.;..6.W.\.k;4........Y.i.s.z...U'..Y.$.yh.IF..G]j...d..i......Tu6...j..!.eq...5....U........u....b<...b..._#/Q.n_z.KEx..oS.1L?......\,Z.7Q..r.P.Q.......zQ#..b.7..(.s/%q....O1...3.s.....b...g.p.;.c...A.:..4....G.+.^./..M..{c...D=.OP7US....k....).....7W5....y\G,.....X..Q...m..km.I.0....+...E..9G."q..:2....U.v.K.3n....K.Qp....]tk.m...E;..2...f

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	71
Entropy (8bit):	4.19644707821733
Encrypted:	false
SSDEEP:	3:PouVIZxgRO5ZB1XbZ6iFi:haxUkZ3X96x
MD5:	6AAEF67381946BFC1DDACCA8CF7F6C36
SHA1:	E441BBA8B691AD0FFF0BCCB75974880018AB41D6
SHA-256:	73F8AE8C11DAA6AD905107970E55C3C64CD7133561E9E91E650AAB092BA7245E
SHA-512:	99039B90D4F3819EFB0A395D0DC810DEE1A56265D443D24D1C9BDF832EF9F95887E3C417253698A4F76EF176D0ACE6334905F4B7B4E6A8421D2F650B84255EC2
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html><head><title>x</title></head><body></body></html>.

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 180x320, components 3
Category:	downloaded
Size (bytes):	14678
Entropy (8bit):	7.973321429747529
Encrypted:	false
SSDEEP:	384:4GbHdX0UtLb40xy55vbQjRT66dG16U3+ETpQHDKT06Ea:4GGUV40x+5vbQjo6yuEFKDKT9D
MD5:	FBC9CF9FD3B595FDF453D1888746F794
SHA1:	ADE809B82817ADD4358573E5CDEBF2DD5DF54BF1
SHA-256:	1BAFBD725C87240C4F91AACFA168A9F680C7CA4462FD8B51E5B2CBD99402E4D3
SHA-512:	82FE4A6846C5DAE678642648EFF20A15D43692D0E4BDACE43E8AB4AEB13BC2A7ECFE1B86BFBC065B5E6BC894EAB6BCBFB1E3DDFCB335E167AC351FA57990D396
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/71EVTIdOTuL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."................................................................!1.Aq.."2Q.#3ar....45BSTt.........CR...$Dbs..%E......................................................!1AQ."2q....Ra.....#34b.....B..............?..t(P.!B.E<.qq.M).Uy..!F.B....P\.Y...xh.;n.\....Uy{..O=..h2.;.E....U..A.%`y..wA.e..m....-...kS..Jw....9T....... g.&...St........a]W^Z....B.....H.zd>Qx....A.zvp..].U\|...4^5.~9T..kN..{Jk..=...T..........9.j....Ri.........Z........2L....w.\.E..F"..qm..c.....D.;\|rK.....5a..`t.u....V 3.!..>..q.z...Z.C.F......4.4yX.5X\....BV$RHQ......USV.G....FT..J.....p.t/.?...4~%.....l.)....^.?j..v.s...).....~R..\|.v7.....%...Go.krOv9.R..?.O-..1.N .?.....t....Zwg`.Ok.]G.Z....a.....uk^.pN.. h..VU..R...VS..`...nh.BvlO.^x.........qud..hf..5...V...G......v_..3...t..4.G#84..u-6u..Y.....-..y...x...t;.K`..\J..=U.....D

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (562)
Category:	dropped
Size (bytes):	93236
Entropy (8bit):	5.397125859693619
Encrypted:	false
SSDEEP:	1536:eEIiqW8dnB13P6Av59IWb7lIdGd0NQ1X0L7SjR9dgl/aaRZfLRnChZhpHju90u13:xYcQZMuZ7q9P1+pKbaM
MD5:	7DBD0AF1B1B4C7BE16180F86EF947E6B
SHA1:	A4332F3C2B25B2294A446EE8F9A7CAAE8236201A
SHA-256:	30711CA94E9E52400EC9262D2948EC5CD91230C43EFE4E414A39682ED4782F99
SHA-512:	EA05B2825411E1ADE46877378F01186813B4DC07A8F1E787D51A37CE977D4A0776A46AC49CD4FFE0BA22D2010E104D53397649D097A1FDD369E626F06B2701AC
Malicious:	false
Reputation:	low
Preview:	/. jQuery JavaScript Library v1.6.4. http://jquery.com/.. Copyright 2011, John Resig. Dual licensed under the MIT or GPL Version 2 licenses.. http://jquery.org/license.. Includes Sizzle.js. http://sizzlejs.com/. Copyright 2011, The Dojo Foundation. Released under the MIT, BSD, and GPL Licenses... Amazon elects to use jQuery and Sizzle under the MIT license... Date: Mon Sep 12 18:54:48 2011 -0400. Sizzle CSS Selector Engine. Copyright 2011, The Dojo Foundation. Released under the MIT, BSD, and GPL Licenses.. More information: http://sizzlejs.com/./.(function(H){var r=window.AmazonUIPageJS\|\|window.P,p=r._namespace\|\|r.attributeErrors,J=p?p("AmazonUIjQuery","AmazonUI"):r;J.guardFatal?J.guardFatal(H)(J,window):J.execute(function(){H(J,window)})})(function(H,r,p){r.navigator&&r.navigator.userAgent&&H.declare("jQuery",function(){function J(a,b,d){if(d===p&&1===a.nodeType)if(d="data-"+b.replace(gb,"-$1").toLowerCase(),d=a.getAttribute(d),"string"===typeof d){try{d="true"===d?!0:"false"===

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 177x320, components 3
Category:	downloaded
Size (bytes):	12615
Entropy (8bit):	7.97436467769746
Encrypted:	false
SSDEEP:	384:KlBfyxgX4+1DFd8Eoa5c+iubO5yWKACKn2Ez4L+48o25:oBfMgX4OhOEoN1ubO5yDk2mPxP
MD5:	7EA4ECF38C6195A30DD60DC3F774C64E
SHA1:	969D91E4A144635DD114FEBE88A7BE8899614B7E
SHA-256:	FCCFA4E48526EE007206555EA55C2E8FC8E63FFB19C4D60BB9D767707ACF39E0
SHA-512:	610865C616450D6367AA54B10A85029C6475F20757EC6798584D90DD963CAE0DD13102AE0405C6726BDFE5C4B4E91D1FB1F27B9333169303926BDFF9DC84CA2C
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/712T1u4V8bL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."..................................................................!1.4AQ...."#$2TUaqrst........35BCRb....%DS..V.....6.................................................!1.AQa.."2.......q..............?..S..0TE%....RiTW..0.o.\.A...F(..^.{.....4.Bs...........j..[)j...4..q.m.\|j..ILy.y.ky.xUM....\|.E.<......M$.cl#..k ..f.*..49.....[....h.J..#....O.+d.vY...v}L....\|.L$.".S...O..{]iP....nVrG...8.............}...Q.."..Y..{!\|..S3h..9.........(z...U>.R.....^....o..j.....7y..t.^....r.~../>r..n..(...z...?.UoY..#..e..).5..[.J...I?...Ej....;-)]H.:j.JU.J....E.yo..NvK..;.hjJ...v.vi:...Fb:.B....>t...j/.....+..T.k.Rx{;.z....S :..R:.4.~FN.O..\|.E."....i.N.1R.J."..6:a2.....K.?..d.\|R..4c. =....x......rn'MJ.@.]A...g.ydyX.3.X..k_..8....I..5.s .yh+=;.......OM..@.......0.[..^e:.Zo^...+.4..;[....)...H..te.. ..#....wE9.......

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 282x320, components 3
Category:	downloaded
Size (bytes):	16617
Entropy (8bit):	7.962906762239031
Encrypted:	false
SSDEEP:	384:hEmbj9ZDlFg0GWc5dQP8Drx7KmliOS/YL90gDYmlwdvYYlBPCqW:Ombj9ZDNGndfR7K4iOTRM0wdvYYlBPCR
MD5:	4226C8FFB44B9EFE0F267522084CB660
SHA1:	1DBC54640CCE776D2273D47FB2629B570FC420B7
SHA-256:	921022E3725065184694D22CD12F32910927760C5B8F2925D14ED2F8A7C175BB
SHA-512:	23E09B60221505418128115EEBB68FD166E764B6CF4B2FC15F9023F9D7C9C2649500D72FBA4DD091E497011B480F9140F9F54042BC3459720E51553A02E288E4
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/51QwE9fnk4L._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."..........4.................................................................S&4.i.&...........^q...G.H%.D.1..$.$$...U...1..nMi..i.GH.........3YNE.Kc......2=r.`.7jM.9.......#$.. Dd.%%.HZ.IRAP..5..7L....k.3^.3..\z#.bg...Z2..A..}..~..E.\.5..B...r...U.... ...H.)".....D...M...z....\.FJ..N3..qo....i..\8........Z.I.."....Ut}c.A.P`R ".T.%2....HA"y..Sd.R...p..6\.Hq.....$...@D.K..p....z.l....tc}U...".am.%....-..Aoy2.T..........<.R.{dx.....=...$=...H.jp.z..-<{..D....-.....w.Tdb...$..$.......JHb...\|.:,6.JZ.u..w.t.%95K....bVy...?..7(..X..=U...Y....Q....+...um....#...^...b;x!H....0..d....%D.J...u..Y.f5l8..m....=E..~...j2=9:x... .>..n....]i..={.=.-U.x{..z.I.....q..x{{.\|.#..O..c=OY...."(..w>]y!.7........[.V....q.X...;.{..=.....<.f.....~uR^3.........s].ta>........~.Dgk.v...~.../dy..rS....PS....v...

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
URL:	https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fld%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26sw%3D1280%26sh%3D1024%26vw%3D1263%26vh%3D907%26m%3D1%26sc%3DYT8YJ4B94N98J9DNZQCH%26ue%3D3%26bb%3D2213%26ns%3D2254%26ne%3D2927%26be%3D4954%26fp%3D2307%26fcp%3D2307%26cf%3D5080%26af%3D5129%26fn%3D5129%26pc%3D19088%26tc%3D-5574%26na_%3D-5574%26ul_%3D-1729722999499%26_ul%3D-1729722999499%26rd_%3D-1729722999499%26_rd%3D-1729722999499%26fe_%3D-1348%26lk_%3D-1345%26_lk%3D-1336%26co_%3D-1336%26_co%3D-476%26sc_%3D-1334%26rq_%3D-476%26rs_%3D-46%26_rs%3D2152%26dl_%3D-25%26di_%3D5043%26de_%3D5043%26_de%3D5044%26_dc%3D19087%26ld_%3D19087%26_ld%3D-1729722999499%26ntd%3D0%26ty%3D0%26rc%3D0%26hob%3D2%26hoe%3D4%26ld%3D19089%26t%3D1729723018588%26ctb%3D1%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26ui%3D2%26lob%3D1:19105
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
URL:	https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26m%3D1%26sc%3Dcsa%3Avl50%26vl50%3D4232%26pc%3D19241%26at%3D19241%26t%3D1729723018740%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:19241
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (596)
Category:	dropped
Size (bytes):	546981
Entropy (8bit):	5.466568772829977
Encrypted:	false
SSDEEP:	6144:i0WGc0mCJnbuQF3jcL3vOKgXoa6RSmmDSH9asaiakZGiDEnwGie:iwc0mcbWL3vOKg4a6RSmmmHFGB
MD5:	E06CCAFC9D535D7291B39FDE58FAEADD
SHA1:	A9A3C9672169A3994F089A8A869B292D3976F100
SHA-256:	518343216E60F907B6CAD881E9FE665042A0B291BE9B2B53DE54FCA3AEF19863
SHA-512:	0B5D240C5F28A13230F0689142774A72F9DB600A10CE4B675E76FA4C223C18D0BD9AEDE36B0CB2768E32035D6C4D5B26A2810AB1D12924637CB0C391BE337CEC
Malicious:	false
Reputation:	low
Preview:	(function(y){var f=window.AmazonUIPageJS\|\|window.P,p=f._namespace\|\|f.attributeErrors,d=p?p("NavSharedAssets",""):f;d.guardFatal?d.guardFatal(y)(d,window):d.execute(function(){y(d,window)})})(function(y,f,p){(function(d){if(!d.$Nav\|\|d.$Nav._replay){document.createElement("header");var a=function(){this.data={}},c=function(a){c.manager.add(a)};a.arrayAdder=function(a){return function(){this.data[a]=(this.data[a]\|\|[]).concat([].slice.call(arguments));return this}};a.prototype={build:function(a,b){this.data.name=.a;this.data.value=b;this.data.immediate=!1;this.data.process=!0;c.manager.add(this.data)},run:function(a,b){b&&(this.data.name=a);this.data.value=b\|\|a;this.data.process=!0;c.manager.add(this.data)},publish:function(a,b){this.data.name=a;this.data.value=b;c.manager.publish(this.data)},declare:function(a,b){this.data.name=a;this.data.value=b;c.manager.add(this.data)},when:a.arrayAdder("when"),iff:a.arrayAdder("iff"),filter:a.arrayAdder("filter"),observe:a.arrayAdder("observe")};var

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 169x320, components 3
Category:	downloaded
Size (bytes):	11851
Entropy (8bit):	7.965437259611963
Encrypted:	false
SSDEEP:	192:TkZL74FEdwU7DNV05o17jTVQf7OlSIRO/NfwyNXpa7EM42MzCzDHdbNJDUG4ni9k:IZomU2XVY79sqN5a+mzDpNJ4izse49
MD5:	BFC1A7D3250206D3A4683BFAB768B2FB
SHA1:	51EDE6E29E3E9B1188BC39723CC9CEA063DFFC8A
SHA-256:	A414751A287F3514F4F56CE9037CE5CA1E5083FEA3B7DB410058F4A549904298
SHA-512:	0A37058221DB4F7EB77E5934A5BA8EA43454391D1812711DD849F958AB8325CBA3E58712C7D8B33D119DE96DEE4DBA5FAF04182021EABC2F3D2739AE55A661E6
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/61-8yQx4+xL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."...............................................................!1..".AQaq.2T.......5BRrst........#3D....$S..b..%CU...................................................1!A...2q..."3Qa...4R...#5BCb..............?..t(P..&....}..g.$.8.T.4.QW.q...l..c.}..l]l..c.?...F..e?i.....{RW...#..]...... ...#.a?.../.S.m..._;jz.%...T>...6X...M.a<.vI./{... ......n._.........>.&.t..Esj.H_..k?....8S....i...N.tY.I....I.?O_..O....j......p>[.c.MY.8-..w.. ML.S...'.E_.k.."...;.:.......J..=.4 ..o.a.)..K.O...}"j......%.[Ik3..D..Pq..+.X?.J..E8..../...@(P.@..(P...-'....W...a...O.h.D.nY......:..zc7.oi..V.V.+&...\..3X&......./.D...s..~E(.;......i.9..\|.X...j.....U......-......U../.J.....P..... .(P....(.Qg.-&.R..ZD.l.X<.........jVb..{r.{.e...dc<.@yy......U..6.r...f..4...'s)'.7...Vs.gdm.?{-.R;.T.m...7..U.\.S.O......aY..

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 170x320, components 3
Category:	dropped
Size (bytes):	14406
Entropy (8bit):	7.974608708337998
Encrypted:	false
SSDEEP:	384:fIcqSH1laomdRKEBAkKN1aSJWGMJs05mSX+TKoH4W:gc/Vllmz/6kK5QGUs05mSuTlb
MD5:	708FF1ACDB7E75113841AC41A739BF7D
SHA1:	B2B542637108A702D38504343CE1DAFEB4B2DBCB
SHA-256:	3C314D6757C150E16EC7F55291F458812EC725A05B8A9A4FD681CC8AC7DD1970
SHA-512:	BF94E5D4F1DB664C105B0B29E909087B8BE3EDE6D6A0D447D45969A589DC5DD62519C2DE87FC12A36051B507B71BB6F88DA4BDB291942851AB8C5278682CE788
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."................................................................!1."A.2Qq.BRa.......#35rst......%4ESU......$Cbu......6DT...................................................!1.2AQq.."3..a....#4R...Br$............?.....&...V.SBp...c85O...sk..>=....[\|W....MT.^...U...67.-u...1.yp.?.D.........z...V_.g.......;.z.e-.g..Z.......S..9-.G.o.k.3.K0...?.o...@....iW\/.~...i.I.>....A.a...{v=.5...1.....+iG...DRR.;..F..2^..X4-..9......^E;.;.g..4...}...s_.~cD..2%..d.7f.n{=..8....B.......~..y..~.s.......R.uqY8..8Pw.1..z...&i..d....O.N...{..4..?...^ida.\}J....Mw0....t..p}.'%.....7.....a....+Y..._P....U..r...k..b..i..']..s..8'..J......."}....vl.}..y...T.6w.....X,.......r.~.....y.t....Pl.)..9.uF....Nm.n.d.U.T...a..zA.r"....id.3.I.....lo.s.?....-.g..Z.........&C..\_..P....u^c...........M/.>.."..5...f?..

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 189x320, components 3
Category:	dropped
Size (bytes):	12742
Entropy (8bit):	7.960295048245375
Encrypted:	false
SSDEEP:	192:EMZ2VKWj1G3/cUd+QSNT2DyNS7J5kbtfiUyseElgyPHhkG7AG:EMZ2VR1m/NfoT2WNS7jWqYcyPHhkeF
MD5:	7BF8C200078135845AD549271F1AC351
SHA1:	56F5737760B4FED24EEFDD693F8896DC9B51BF06
SHA-256:	41DBC4C8D66C1B606DD3F45A95920DB2455D41AC8796F748D1D5574A2409BA04
SHA-512:	D5A1471AEAE9F3DE0EC4C46AB5E49F541BD3BDFBF6B644F2349D1B439AE5D120255A3B85B007840FDD256CE3C9BC0C1F6DB46641ACD9147A6D6D2799A6D08F29
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."..............................................................!1.."AQ2aq....#3r...RBb..4...Sc..&6CD...................................................!1.A.Q"..2aq.............?....T..R..V..;.[.......+/n5.h8..(.....I.....f......A......9..A...&....../.........@...."+./O#..~..i..._"....)..k.....M5............_E?Q..L..J.{....L.....q.......&m........r.p...C.#......N.....]V.9Y......a\.....1.}....#.]..x..l.....,........I..F........>.K.....'..U.uYc.N$...........6..TEQ...]gq..O.#.....IF.`....o=......H...9........{..C...A...;.V.... T.R..J..T.R..Y.h...~5..{......vT;...4X...@y.[P.`.X.t!.#>..P%.........v_s.G..4.....~......O.1..Y..u[......:V..".AR.T.2....?.JZtR.Y.ky.]._..^.adT..s....Nk..h....c.R.e.1.)VFB.J..T.P..J..*.C...7...{C.../......j=H....@.T...R.&GS...LJ.K%-HZ..!jY,yi.M-8).pW....#..z..

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 166x320, components 3
Category:	dropped
Size (bytes):	15198
Entropy (8bit):	7.974982010644687
Encrypted:	false
SSDEEP:	384:LtgtxzDkLRW7hwR0HEEuYDVLCUT/jdiVM45KtRzb4JJ:K/n+7R0k4DTbu+jv4JJ
MD5:	42D5D295DF7400E35D1FABED78FE4E46
SHA1:	54524D4CD02631C6CB45370B04D729A0B64A870B
SHA-256:	EE60F1AAA7F4B6BC98F732255DE9D010DA449FE6B4DE32A835AB442AEF37DE94
SHA-512:	4328BAB8329F718745994EAC38D569756A9E8E48C6D12DA5C6A9FF2C60B6618E33AE3108819EF10832927F989A98B58E6D72F54F1B12FA0D83AB2F8DAB7C2B9F
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@....".................................................................!1.Q."Aq#2Ba....r......34ERbst.........$56CSUc.Dd....T..................................................!1..A"Qaq....#23....BRbr.$DS..............?..T.P........k5...h.:.]..p..h.V.xD.e.....]....H.d..0..\V"t...]........[.!.h.Kt.#'j.$<.....1..P.5:.[......O.E5Gp6.ugst.[......W....F$.....i.k.I..8.2...z....J.\|..]..N.M.M......d.W.....}.S..%z...cs..[...k/A.=.?.>......?...&.....l}..~.....?....N.v...}......6.tG..q.H?.h....o..\|Pyt.c.....&...%...._..Z.,.og?3O#....?.Mu..y..s...G@.P.........mAy...g....%q].$J..Z.1._x...h.B......r.0..........)%.(...]..A.........J..hd...<~....jL2....u.....t..\...#.d.q.e+..=u..~Q.u....W....?=Ln0..2.z........H..;././.......$L...)&2....b...= .e..b.%..jL..q.]..K..Z,....pz2......].8.g...q.a.T.WI..R.@..*T......Sw.$..Y.[x.

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 196x320, components 3
Category:	dropped
Size (bytes):	18468
Entropy (8bit):	7.976097277303291
Encrypted:	false
SSDEEP:	384:c33fCqwjL27p8rXRIbeojdXAzCm67De4lK4a9zgWLnT5nLAWDXjzgwauPmG0K:0cjLpRKeAB137DpK4yb5LJcI0K
MD5:	131CF639AD8DB5B200D86AB60A51069E
SHA1:	98ED7221D79BC0B78D3DAD4F830F49F95B5D21E5
SHA-256:	102A219BBC0E4C9825F3D533AA7658BA50CF6FF1260BA010E066719C6E39CFFE
SHA-512:	DDE0B869442FB6D4144B8515845C1AFDD1A35272936AD6ECF0641D9A6E565CAD11C41E3741D6A9486AE975132602EE760B15412374F8BBA157B51B81ADDB2D1E
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."...............................................................!.1.."AQ.2aq..#BRS.......5Trt...$%C.....34DUbs..6Ed..c...................................................!1.Q..2ARaq.."....$3#B..C4S...............?....wM...[R.b.n.....w.;.fL..AfR....S.[...QE...(..J...{.<.G.E...dy..z..)#.....T.+U.z{...?....."..O......q..o.Y.T..........?../OY.y..O.....k..M7.(.R.Z&..s...}.. .6k....b._..(....p.o.U>Y....lJ...[........}X.S.MZ.du.@....:u...6{fV....J...\|b..;X.AU..S;F.^.&.?.\|.?...)..g..:..........7.q,....i.d>(C.a.....p...........V..:..o.F<.P....F!t.CASm.....z>..7"....a{%a....Z........P........x./...Rs)....O.}.....*}.....5....D=t.....42.3.I...?..Hs..."M.T....>..c...\|.{....=.$.......`.7.y.".....5.2......h....\.....v..;Y}..4......h.+c..j.Y.....av.e.....$..`.Y.ts...o..Rguy\..p....[.=K...j68..=.s....3...<

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://aax-us-iad.amazon.com/e/loi/imp?b=JF0GLQ99JfDA0gbEg1BkC34AAAGSu4ZmxgEAAAH2AQBvbm9fdHhuX2JpZDUgICBvbm9fdHhuX2ltcDEgICDNkJse
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 700 x 78
Category:	dropped
Size (bytes):	47368
Entropy (8bit):	7.923745138809189
Encrypted:	false
SSDEEP:	768:l7rHsnb3iQgO6J0+sux3IixcLi0yzsVaV4LTqz/Jp5YK+r8zq+:1sbiQgO6DfGKzsaz/1YK+r8zq+
MD5:	F5060F1A0E40D82BD5F1FF3F24485F88
SHA1:	090868DF63C2D90414AB9FCC11E76DC336A6D3CB
SHA-256:	A65574C9F796C8553593E53C3E94E8479B34CF25E0367C6EB70C5F9CC0E2028D
SHA-512:	11D5C11D5425212EEFBDC6E2279F4DAA628B92016430256414E43DFFB5F85149682DB48E2647B47685F9A8E28A04523D0758157B98DCC751F7BECA88AB8319CB
Malicious:	false
Reputation:	low
Preview:	GIF89a..N.....J........r..........s...v....e.k`..Q...n....g....p...2K`....V...__m)U........I..........#.u...d....Vg..q.!.W..k'R...0w..ny.....?....\8.LJR..4.............>..`.........4?..qQv.......{z\|...<P.........j....`(..$yY..$f..>-......:.+..I.T=P:c...}rL2&..@.....\...:.........&S.M..8....]8....uKMu....B[.....S9]{....e....@...~[.\|....]..u...1.i.1...\~A(#D...n.x....#/>...!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:d00e5055-199e-40bd-9a64-13fa4b47d7c1" xmpMM:DocumentID="xmp.did:AE695F3372DE11EFAF45EBD2419A4EBE" xmpMM:InstanceID="xmp.iid:A

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1730 x 988, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	17986
Entropy (8bit):	7.930640185402301
Encrypted:	false
SSDEEP:	384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N
MD5:	825CCD29AC102FCADAF92B2343D5917B
SHA1:	24472E766CFAC5B82A73B219796556A0A3702BD6
SHA-256:	0878FB2875C0AD852DE8FB3E8F443AFDF3064890F1443B3FECCC274382F913CD
SHA-512:	71B8E7C0813227F5EFA4B4E0561978B13672F46EE441BC222AD77AA46A32F0F44A5DAB3EF038BB3418190E69DCED597A79E77566DA01A259F1CD6B5298A08662
Malicious:	false
Reputation:	low
URL:	http://i3.cdn-image.com/__media__/pics/29590/bg1.png
Preview:	.PNG........IHDR..............N.7....PLTE.#A..,&/M:CaMVs2..J.. .IDATx...Qz......0..,..,7.....)..;.%......z...\|.N....(.........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0P.%........@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@aPea..Lt......[=u..l....=.H.h.O..nN.c...=..e.{l......[,lu.._c...nk,n.....;~..'......^a...$..sb..V...&..aqc.m.3...T.s....*l...#.z........Xt...H+..8c/BH..1...>...CX...Ha.y/.A.Il.2...g.}..s../.Q..8{.;R.9.1.o......eG...o..-.V.:.......;..u...$...5'..lW.:..Q\......v_.:z....4'.,l].2z....4'.e,.~O]..%>\|..v_.2....U}.8..u=.hL4$..7a....j.....;..eM.hL....\.>.......',./.].I,..{}a.......91\|J.z.....s...[C.1...S.V.. ...r..K. .....\|ea.......sb...?j....3.U.U9#..c..T.?......4.......J..

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x301, components 3
Category:	downloaded
Size (bytes):	26981
Entropy (8bit):	7.970935918736941
Encrypted:	false
SSDEEP:	384:zQJCELbzo0Av9bFG6EbA9KZuSe81Qb1cR/cO7UQpGXdbFeCxOnQaKbHwlk5V:MJLvzo0AVb0+KESTab0cOyxxkbw
MD5:	3A48EF26DBBACC99F3E5819141E561DD
SHA1:	614F6E17E86378344624DDE122D98B833FC7AF34
SHA-256:	06E071BF403464C2F9EEFC1FA0170D1F6D8A2CD1FDA64520F4B09EAEB4D5AFD5
SHA-512:	2DAEF5DD441C2281EDB526A360D9531DC003E3C473663703D2DB68FA7A8F81797111A13373E9B0FEFCB5AE29885E55240DB9545FF1F93EF87450EA0443A8E5AC
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/819ZjzPD3EL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......-.@.."..........5................................................................../3.....O...t.p:(w...F+..LSJ...(..i+....K%.7.].....f.I.I\.fx._.....E~...X..gZ.....~h......b.9.Qa.c.>..b.E.#.[.dR...x.....L.....}T"WjY.3.......{.@2u..fN...\|.q.OO}^u7./~.....u..f[.........4.b.Iq.!K.4.q.w...,.&O....s.~\|....... ..cCZKo.......}B.Y..s....QUkY..B.U....s0.B.r.m\..8a...I.R.p.W.....F.n.\|!",..[R._...j].u...r..b...$._.H(..y.>o..YH...X...mk.lg...}a.OoN^v..}H.&sk.b.s,j.Eb[..8K./......O.......m-........!..O..{..o.HU..Tw./...~..5o..>....p..O.#.....G(..q+.[..8_E.T/...[Y...5zA.gKf.kY.A..Q.....\.2.w..{.kwL.Z3.\|V..L..%..:..zZ/..HY.i...>(...*.3F..u....Hg..._.Q..'..l....:..{.........~.O.~....$]QO...N..3.b...&..y.u.........wj..>..0..-G.p.......).......^..]V.$6!.'I..........W..fv.M...:....t.8....J`..t....VY..(m.z..\

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 170x320, components 3
Category:	dropped
Size (bytes):	15385
Entropy (8bit):	7.975623933279634
Encrypted:	false
SSDEEP:	384:6VD5RlcZ04Dqhg4Ydt8uT90kZZ/XqONr110BFLP/:6HHcUg4SKuJ//dqBln
MD5:	25AB0BF5C4A53EE79168BFB921E6856A
SHA1:	7F745FDA0B6531A01E1323050546C25DB61240F1
SHA-256:	0C51735CBAD7F2AAB68FB89EA9DB3349869E11AC3526F1043ADF7330B6B92521
SHA-512:	73894A9E13B5A077261E140B53FE82A34A7086DE36548C9E47ADB79876CD41BBAE5BB62744D1AFB530FD61D2977E732922D27A3D38210DAFE05F056431CEFBE4
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."................................................................!1.A..."2Qaqr#4R....3B.....5Ebs.......$CDSt......%c.&....................................................!1Aq.."2Q..B....3a..R...4#br............?..t.R.%J.d..{..e.4v!.G.lPJ.+.f.g.:....$.TOZ......s9i.g.....E=.H0...).2.b.^(...B7+->W..........8T,h...0M.q..,.....'h%>@..'....Eo..^v.wF?._`.x.Q....>....v.X.....T..._p.u,{..x.:........\~I..z.t...T...._..5....tO.-....p.8.c...0:.2.-...._.;..6.W.\.k;4........Y.i.s.z...U'..Y.$.yh.IF..G]j...d..i......Tu6...j..!.eq...5....U........u....b<...b..._#/Q.n_z.KEx..oS.1L?......\,Z.7Q..r.P.Q.......zQ#..b.7..(.s/%q....O1...3.s.....b...g.p.;.c...A.:..4....G.+.^./..M..{c...D=.OP7US....k....).....7W5....y\G,.....X..Q...m..km.I.0....+...E..9G."q..:2....U.v.K.3n....K.Qp....]tk.m...E;..2...f

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 151x320, components 3
Category:	downloaded
Size (bytes):	11935
Entropy (8bit):	7.96903949639539
Encrypted:	false
SSDEEP:	192:DQsfE6y1Wal3d8za5Ma2pYkM7Jj3FEd8ul4oxA3t3Ki9O1pqXzLmG+XlTGzt1+N:ksHyEan8jtYkyDNuliQ0XzK/lqb+N
MD5:	382349F69857293ADECCE23B62EE9568
SHA1:	21D67E05D5B345E73617F45CC65760FA559D5680
SHA-256:	5D7CF18918AB31CE1C39D102994FAC16B372A573A4B7ED631AB05880FF9B2154
SHA-512:	27E9178F8C7E8A41B0E1DE2EE5A145D62BA75467422BD7C3760417C61D1E6D281FF2832D70E55D4B5DAA88CF95FB35C2D45A7EFED2AF1C73F9B532C176DC22A2
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/71rsi4rgd1L._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."................................................................!1..A."2Qq...3Bars.......#4RU.........5CSTtu...%6D....$d...c....................................................!12AQ.."BR....3Sq.#a...CDr..............?..t(P..i.q....q.\.o....0}....hjMG.,.....CK..RR7,+...NL.@@xj.B.4........J....,.d. '..(.G`.-f=..,...........pR..G.%F8.K.n..--.....p.._.+....~./......+..?......of...2i.pD..C.=..9..] .+....e.]..^.W.\|.;cZiZ....f....>...7...L.....$...j-....~.....f.b.>.F.uF....$....V...F.z....rV.O.7....Z..k......K.....^.'..}.dn~w.[`..2A"...x....O,\..AMk......l....=..E.]..!Z.......`.......M........Mc......p....j....(..I.#.G.....S~[...zp?TV_.";...r.Y..&..KT.a..bP...4O.........^\..'....N...^`.-q.\=.....?.C.r.i..G(SK.l...K.c..I.....S.+...IMv.t.h.B...P.B....._..\|.._.=....D..<....*.\..y.J....$....

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	74620
Entropy (8bit):	7.995790835187294
Encrypted:	true
SSDEEP:	1536:rynsuD+DbR74aH3eyznLNtBNB+PiDj+7avCWy2iX1wqb01hqxQ2f7AZBiN:buSXR04PF9WIyR1wqg2ZEBiN
MD5:	10A20A25D6AFA0A5C975AE7366900FC3
SHA1:	F2666A20E11894AA62B0E44F2E51783A0B8053ED
SHA-256:	A332DFE774EC2D7647B41D27FD780C16879CBC515E82E6C5473E9913E80BDC1E
SHA-512:	8DD92BADA9541CAF770DB0B4AC2B439624E84EF893E5CAED5DDC40118CF97CD8BA27107C4A390A6ACC6E3124BAF0A1C321577FF2A027AB6716B5C8C16ADEEBDB
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/G/01/HST/AHI/Desktop/WebpImages/OM_M2_PrimaryTile_Desktop4x.webp
Preview:	RIFFt#..WEBPVP8X..............ALPH.'.....m#9r.?.+_.D..8.D.3U..C.'.p.,gz..]......z.m[.m... ...A.. ...E.....................r:."..$.v........{I....v$.$....K.(W...B.U.5"dA....i.,....l....m[l.$<..P....8.N... 8(..Ap..\...9'..#..$IJ........................x...^P$D.4..u.@.%@Q.t.4.p...e%....[..V......&c.h3b..y..!_...x..z8.`.,.A)..4...R......&......7i.J.y..G~....0....v1.P$./m.fv..7..ft.+..4n.a..T.......{..1...A..2t......H..7@.[E.v.... ..y....%.%Jn_$.?...;..!l....F.re..#.`C0p..NX.$..p3%.Q..;=\E.&......O....E.].P^...a...P.<.{...(...uv\.[g...........y.....b.u2.....n..;..C!1s].RP...-hVT..A.A..%..5...(!..faV\|......F..O..E.s.............^#........f&v#N.f.A3.3.p'.Q4......*W.& ..t...1.......E..}q....6........T-..x.t..:.!$.....J...\..T.....t.d)l...h...~w....F.I..."I....O.......IW..>?..7....9....X.(..X..1\|..7..U?.k.8Y..kV....fQ\|.w.{$...f....:H.....S..6>..y".....g&..$.FC.u......Un....b;....$d.>..H..G..E....!.... ...Q...5..x..v.o}..a.\c..WxR+=Y.\..z.

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 250x250, components 3
Category:	downloaded
Size (bytes):	6850
Entropy (8bit):	7.870713538166107
Encrypted:	false
SSDEEP:	192:8sepMcDUC/+g/rm9wEaafidpi9Xs/CMubncQRwYVESd:8PN/i9RNido9X4CMOhKYXd
MD5:	09C51C1FFBD6170DF22E6EB1D26FCCC6
SHA1:	EFF848D1729766C660567B3A204A5E54D71A6EC6
SHA-256:	D64C73E297C0ACFFFC3478E7F252B18EC7B8355145993A8E30B0CF4F9E366289
SHA-512:	ADD6B17C9378FD55589DCF2756CE1A20A472539C007F89773673DCE3E7F9AB6033519F4D998CFEF062AE8155DE47E9AE2497C12A7C28C8F756EAD6B6D23FC5F5
Malicious:	false
Reputation:	low
URL:	"https://m.media-amazon.com/images/I/31df7KEHL-L._AC_SR250,250_.jpg"
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$..........."..........3................................................................,....;...OjI..?....uv..u..W;_Z...P_.........._..q..i..m............J.s...... .2?;hW0......T.v...a'nJ..%.......w.q..9W..k..^~.A.........;.Z..~)r\|............tW7....N.,s_.\s.P.........qKz....=.&....b..}.:....R.h.!w4n....uvY..........-.'.SZl.....f...K8...h..o.5-F..:...]..K..{...~(l..k..........+.....f..F....~...>j.....'}GQ.tdM......83............+%~..o...1YrZxc...C..l).X......l.C.......).)..O......9]..v..98......l"...>....N9......{..G.......4]..)....%.B.:.....6}}.S.N9.......z.G......OL.cyNq.../P.8..G....T{..6.q..@.......Q.'@...9.{Swz..NG....xI.3........<........Q.f..../..J....q.;a.<.w....\[..S=.<........Q. X[z..fa...~).6..a>Y.kc.Vf..."...]..N.[4y.....b....e.=gQ..........8.{.[...V-...o._..y.$

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (550)
Category:	downloaded
Size (bytes):	2132
Entropy (8bit):	5.253162542802221
Encrypted:	false
SSDEEP:	48:aZKcOAGKTTi8Hmw7CdQor2AR8hcSNZut/p7CDkzf/3:aZKBITBylR8GRB7/3
MD5:	73F0D0037A99A2E8962C66C536F62BF5
SHA1:	0C45685C722BF71F4DAB5EBE1329DB2FFB29C22C
SHA-256:	69A912BEA7F3832E903C8EC02CE0AB9F3E3B195A49253A4BBDC31D791FA80534
SHA-512:	378CE5BDF6142D18C81D145B06EC9C6EB969D4D870C01A9B8CA46513C9839996ADFF7EE300A1D649439F58A44D6834F60627B9C349AE9C5DF22D68906DD4881F
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/11+zeBoqC-L.js?AUIClients/WebFlowIngressJs
Preview:	(function(d){var b=window.AmazonUIPageJS\|\|window.P,f=b._namespace\|\|b.attributeErrors,a=f?f("WebFlowIngressJs",""):b;a.guardFatal?a.guardFatal(d)(a,window):a.execute(function(){d(a,window)})})(function(d,b,f){d.register("webflow-fetch-experience",function(){return{fetchExperience:function(a){return fetch(a,{headers:{Accept:"application/vnd.com.amazon.xa+html"}}).then(function(a){if(a.ok)return a.text();throw Error("Network response: "+a.status+", "+a.error);}).then(function(a){return{html:a}}).catch(function(a){return{error:a}})}}});.d.when("A","a-modal-framework","a-modal-framework-constants").register("webflow-modal",function(a,d,c){return{presentModal:function(e,b){e={type:"ajax",source:e};b='\x3cdiv class\x3d"'+c.CONTENT_WRAPPER_CLASS+'"\x3e\x3c/div\x3e';b=a.$('\x3cdiv style\x3d"background-color:white" class\x3d"overlay-container"\x3e\x3c/div\x3e').append("",'\x3cbutton class\x3d"overlay-close"\x3e\x3cspan class\x3d"a-icon a-icon-close-white"\x3e\x3c/span\x3e\x3c/button\x3e').append

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 295x320, components 3
Category:	dropped
Size (bytes):	27867
Entropy (8bit):	7.977340498489052
Encrypted:	false
SSDEEP:	768:46FO+ZZFFf05nXGIsy28jObaygOqUWwe3S:427BIsyYbaoqG
MD5:	75E259EF31C5EA8F0E078E765B7965ED
SHA1:	22DBE883824369C4F2BACF38B47F44F10FEE7BF4
SHA-256:	695C43896312B354C81C835CEF485D729A2CA9AEEEF06C37134C07A8771E584D
SHA-512:	5BF642F4DA37C32E1289990F590A56C0912368ACCF36E7C8EFE2F7F7496EF506D0A7DE03E07B2E2E4A948BD644B24BE309495DBEB7A7D9A618F1372466856420
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@.'.."..........6...................................................................`........d5=..._..Sg%1..ek.,c.0.z....fUu.]~.. ............\|..,*.1...9G....}KMXU9..]u.O.i....{...Vvn.4..\...............a......J.=m...4.."V[...SM.....U.I]................>.T.......L;\|G...J...y...gA>.....V>.S6;k....I~[...j.............../......:._.z.@........."s...LBu..l.;.kk...b....7T.5iY..............0....>.N^;.9.M./...e...%.V.S..5.....t..JO..Z.A........\|.T..co.....H<....?s...U.j.....dY.W9.e......9.X.ygni..Em.....;..........k...=....{.N...)..FSe.`..]....py..I.......X+.J.....?..6X...6..._./.Wn..s...i.......Fn..'v.g.....9.w.....P.\|.H...M......}..'....1<.Gd.=..rR<9.:...tV_..A..-.2.=._.....eF...){F..o...\|...;....3........W..5.D.......vE.k.o.\|....!..g.Co..q.......[.........7.g...p.~-K..PxQv.\..[.o.......J...jBm.

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://aax-us-iad.amazon.com/e/loi/imp?b=JJ6U9ScxO1FQgryuKKeNFiQAAAGSu4ZmlwEAAAH2AQBvbm9fdHhuX2JpZDYgICBvbm9fdHhuX2ltcDEgICAoY3tj
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (767)
Category:	downloaded
Size (bytes):	109163
Entropy (8bit):	5.599639707702945
Encrypted:	false
SSDEEP:	1536:aKK8doqULVrpN6YbGH9SWAJ0s7rav6H2M4D2IRMg7DcjktnRf8Qw7OTswdcwmovY:5jCl2PBysUI38L/1NRWU
MD5:	A73CAF55EE43E7D4035B957E75ECF844
SHA1:	D86313127CE020273DEDF3CA6B82E9A8769952A0
SHA-256:	235C300AF8D7A65899CDE7167AA3C4E8D83898A6FE912FF23AA1E12DC7F6D5DA
SHA-512:	9F2D78A9E30906A559CEAC1337FEF2F85E2AB264E45878095D3A3C4B420999A6FBBEF4FE2D44E8845D70508A58C0791685C37F2E0DD63B733BAC2B16B5106A94
Malicious:	false
Reputation:	low
URL:	https://images-na.ssl-images-amazon.com/images/I/61PQY25+gxL.js?xcp
Preview:	'use strict';mix_d("SBVideoCards__sb-video-product-collection-desktop:sb-video-product-collection-desktop__bxSjGeba","exports tslib @c/logger @c/metrics @c/pagemarker @c/scoped-dom @c/dom @p/a-ajax @p/A @c/aui-carousel @p/a-carousel-constants @p/a-carousel-framework @p/a-carousel-strategies @c/aui-utils @c/aui-truncate @c/remote-operations @c/browser-operations @c/aui-modal @c/aui-untrusted-ajax".split(" "),function(jb,m,kb,A,hc,ic,jc,kc,lc,mc,nc,oc,pc,lb,qc,rc,sc,tc,uc){function H(a){return a&&"object"===.typeof a&&"default"in a?a:{"default":a}}function vc(){var a=x["default"].cardRoot.querySelectorAll(".mobileEnergyEfficiencyContainer");(null===a\|\|void 0===a?0:a.length)&&a.forEach(function(f){var g=f.querySelector(".energyEfficiencyContainer"),e=f.querySelector(".energyEfficiencyProductFicheLabel");f=f.querySelector("svg");g&&e&&f?(g.setAttribute("style","min-height:30px;"),e.setAttribute("style","font-size: 12px!important;line-height: 16px!important;"),f.setAttribute("style","height

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (11478)
Category:	downloaded
Size (bytes):	1363879
Entropy (8bit):	5.641798371286207
Encrypted:	false
SSDEEP:	12288:8f2d+36nejZVs9cKeSpj+BN4k6nPoNgUW:skUjZ2beSpj2NAnPoNgR
MD5:	3B975ECC760F022B5D5C1ABE4629B53E
SHA1:	F24194D4EC69502494AED1B30D7FEAA72187E94C
SHA-256:	81E3A466C9D70C3EE80B0F9414CB2285248DED514F216A1F4B2101A251A89C24
SHA-512:	5784B3CC0F634DA2249E0B2B3312751F0B4BB04E518E3B49099B86F75D0158017A5EE36B96D61B5B177628B8A592948652B4814ED3A0D33A6EACF88990C01B35
Malicious:	false
Reputation:	low
URL:	https://www.amazon.com/s/?ie=UTF8&keywords=bloat+relief&index=aps&tag=txtstdbgdt-20&ref=pd_sl_9k7yfey2e4_p&adgrpid=1231453333089814&hvadid=76965999836122&hvnetw=s&hvqmt=p&hvbmt=bp&hvdev=c&hvlocint=&hvlocphy=65300&hvtargid=kwd-76966067111871:loc-190&hydadcr=9392_13640345&language=en_US&msclkid=5151cc87ffec1574cf49ab9e858f8c61
Preview:	<!doctype html><html lang="en-us" class="a-no-js" data-19ax5a9jf="dingo"> sp:feature:head-start -->.<head><script>var aPageStart = (new Date()).getTime();</script><meta charset="utf-8"/>. sp:end-feature:head-start -->. sp:feature:csm:head-open-part1 -->..<script type='text/javascript'>var ue_t0=ue_t0\|\|+new Date();</script>. sp:end-feature:csm:head-open-part1 -->. sp:feature:cs-optimization -->.<meta http-equiv='x-dns-prefetch-control' content='on'>.<link rel="dns-prefetch" href="https://images-na.ssl-images-amazon.com">.<link rel="dns-prefetch" href="https://m.media-amazon.com">.<link rel="dns-prefetch" href="https://completion.amazon.com">. sp:end-feature:cs-optimization -->. sp:feature:csm:head-open-part2 -->.<script type='text/javascript'>.window.ue_ihb = (window.ue_ihb \|\| window.ueinit \|\| 0) + 1;.if (window.ue_ihb === 1) {..var ue_csm = window,. ue_hob = +new Date();.(function(d){var e=d.ue=d.ue\|\|{},f=Date.now\|\|function(){return+new Date};e.d=function

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (582)
Category:	downloaded
Size (bytes):	21859
Entropy (8bit):	5.2813610728948435
Encrypted:	false
SSDEEP:	384:q4lRe4Tkiep43TsqMQCCYnf5NhE7mlkGWJ1vF2cq/cseGp5aBfaZYjMgctFF:3443sqMQCdnf5NW7mnWJ1pq/d5aaYjMf
MD5:	525AAAA44C9029AD136CCF501E7AF292
SHA1:	74DC413F3074E51D29454A3C796825818ADE09AA
SHA-256:	12984FEA3A55815160E8DA89604A431BBB597E577B07594D9F2BBDEEFEB1B760
SHA-512:	0EC4B3850A771420DFC84D6A24EE638C875E6DED21BE21C7372D6D2B4960309D3452A3E845FB13C962ED58B906B063EA310C7B99E804DCC5F81CE297473C8378
Malicious:	false
Reputation:	low
URL:	https://images-na.ssl-images-amazon.com/images/I/41k9TQrnHzL.js?AUIClients/AmazonRushFramework
Preview:	(function(k){var p=window.AmazonUIPageJS\|\|window.P,q=p._namespace\|\|p.attributeErrors,c=q?q("AmazonRushFramework","AmazonRush"):p;c.guardFatal?c.guardFatal(k)(c,window):c.execute(function(){k(c,window)})})(function(k,p,q){k.when("a-ajax","a-util","3p-promise","rush-asset-loader","rush-util","rush-metrics-adapter","rush-dispatcher").register("rush-ajax-controller",function(c,g,e,h,b,f,a){function d(a,d){if(!a)throw Error(d);}function u(){}function l(b,c){var f=b[0];b=b[1]\|\|{};d(v(f),"`dispatch` chunk must have a name");.a.trigger(f,{data:b,memo:c});return e.resolve({name:f,payload:b,memo:c})}function r(a,d,b){var c=a[0];if("title"===c)document.title=a[1];else if("dispatch"===c){var f=l(a.slice(1),b);f.then(function(a){d(a.name,a.payload,a.memo)})}else d(a,b),f=e.resolve();return f}var m=g.extend,x=b.isFunction,v=b.isNotBlank;return function(a,b){var f=[];var g=b&&b.success\|\|u;var l=b&&b.error\|\|u;var n=b&&b.chunk\|\|u;d(x(g),"`success` must be a function");d(x(l),"`error` must be a function

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
URL:	https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fstaticb%26id%3DYT8YJ4B94N98J9DNZQCH:0
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8349), with CRLF line terminators
Category:	dropped
Size (bytes):	8435
Entropy (8bit):	5.369353534036235
Encrypted:	false
SSDEEP:	192:+w5t7czLxuBQJprSnxviE/h8BQrFVzQUT98xjBt2Lh015uwHxM+FzopqRdcGSiHy:35t7czKqSxRHzPTouh0LlHxLd0qR6n
MD5:	C16C3A4C0FAD29106F34D00E89F6886E
SHA1:	6E11811AB8A98BB295B0916CDEE68B302C33403D
SHA-256:	097786D677A859B7BC87E285377B083B76D66A2FC2832A16BCD50B0E99DF77FF
SHA-512:	154BAF532DBEDBA258B2AC12AA16463A66098B9F149DECE93AB337072976EB2CCCEAEDFBFAACE25606CCDB48F795803FCE1BFE5ECA197325743E8DD7C849F6E3
Malicious:	false
Reputation:	low
Preview:	/.. Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved.. */..var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function changeStatus(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6950)
Category:	dropped
Size (bytes):	264984
Entropy (8bit):	5.398297139623805
Encrypted:	false
SSDEEP:	6144:/k0mQvan9IR90rNydViRFtXD3AhjAIPg9Jrsf29v8bcTxYrQDEZHNQ6gpPib3C8m:/k0mQvan95rNydViRFtXD3AhjAIPg9Jp
MD5:	56C00280A43B2B213A37569ECD521E71
SHA1:	7FE6C1377650B74A407E884E33062867A13BE90C
SHA-256:	BC30FE724699A9CEB8FC68C18831A419E478F1F95152D63D4D52C782B6061558
SHA-512:	CEDA6A14BAA19670BB679C6BB2365DAA9F346B54F0C1558BD3AB1CAF02D2C08238CBA81AECFCFD590AF04D6CDAABE9B570F2EC63624917BCBBA8585DD0012C80
Malicious:	false
Reputation:	low
Preview:	////////////////////////////////////////////.;(function (packageFunction) {. /* istanbul ignore next /. var p = window.AmazonUIPageJS \|\| window.P;. / istanbul ignore next /. var attribute = p._namespace \|\| p.attributeErrors;. / istanbul ignore next /. var namespacedP = attribute ? attribute("FWCIMAssets", "") : p;.. / istanbul ignore next /. if (namespacedP.guardFatal) {. namespacedP.guardFatal(packageFunction)(namespacedP, window);. } else {. namespacedP.execute(function () {. packageFunction(namespacedP, window);. });. }.}(function(P, window, undefined){.// BEGIN ASSET FWCIMAssets - 4.0./////////////////////////.// BEGIN FILE src/js/fwcim.js./////////////////////////./...Full source (including license, if applicable) included below.././***/ (function(modules) { // webpackBootstrap./**/ .// The module cache./**/ .var installedModules = {};./**/./**/ .// The require function./**/ .function __webpack_require__(moduleId) {./****/.

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x265, components 3
Category:	downloaded
Size (bytes):	14599
Entropy (8bit):	7.95723966627892
Encrypted:	false
SSDEEP:	384:BcCxf0QiiT7hmpEPy9uccpuUlMyjUexn0L8aawyK7OR:BcuWiT16FlAuUlGu0L0KW
MD5:	5C6E39A750669B5F5EE09F6BD624FF45
SHA1:	6BCDCBC209346EDB6FD87B7CDC7C3DA906F81D6F
SHA-256:	90330F833BB4C4EA375E9AD445C6FB29E071FBADC5B78C6E76D071A5D46055B1
SHA-512:	AB9DAF8D1F2EC015A503033ED23689649DD6F0950DC7D93FFD66894C7DD797D6EBB956235C4C3F624B3D4304C6AB69FE4493FE4814C1B1B6FF669566B309B422
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/714MMaFIpVL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$........@.."..........5....................................................................h.a....b_..l..G...z'..x..x,..W..he.....!.f...X5T.lP3........^..../.;.UES'-.&jb."z[........"..J.%..c....z.d#..,.y.....(7.M.=.vV./..E.....Q........<..p...d....$.:}..Z.sT\. s.......ww....6..[.s..q......../5.xqO.k.J..q ......m..>Wq..o...........7-q.@l.......1..D...........^.....g.r]nl.........f....I..\..H..{q.k...U...L.M..a........D.D.e.e.;{..#m5d......n.Z.V(c..........&.f)..+" ..q.\|.\|EU...;._.x..@....".."....>..^5sN.Ea\...,s.\|....\|0.D.RU8E...n......Z+..V.........9+.y;......t\|...&.Qo.Od./;....7C.An.U.G.._b.O;.'T..i!N...6'.j..3.~.X....cX`g.\@ .....z....L....'.tGNv.m.#x...6%..aU-..#j...k{=gx.../.._^5...5gL........V.....3.....dNA.x..@....*.W+..9x..OG..x......mC..Zb.y9t....W.#:OJn.M..^7...7.F....J....

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 224x320, components 3
Category:	downloaded
Size (bytes):	20022
Entropy (8bit):	7.9755408452904
Encrypted:	false
SSDEEP:	384:x+SEllFQmJHvarPKy0eQfFr0/8bfQEfweurDatjoH9SWaoBghUD:Qr99varcffF4/AIPXatUH/FKSD
MD5:	745800472498B7207AC4531CF21B7DEA
SHA1:	3F038DE82D4AC512208CE8616BC7174F854AF1B4
SHA-256:	5198B35E3952E10195980C4FF477E287F299BEFC815BC3DE9F3DEF5ACE740497
SHA-512:	B499AB741D02EB755D905741A82DC3151278A6E44B1538D79830F726EBB0E066AC397C413D551F9F896EEBCDDB68BB073566D364B4505A25A41C75E0393F65A8
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/81CxfvHxNWL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."..........5..................................................................Ua."..\|.3.HI%x.p.qE.8..?%b.=..3...%.)...E..V..JSY..5..i.w...M......hV...i.....;..2].M2.5.^.k.....qi....j..1...ZJE..E.J.O#z.~...E..J#.L.7.W..<.5..N.>.cV>....{.;..~e.l\|.Y....]a...:.....q...Ol...<..zF.V.9.zi..2...../mn....y.....&.F.j.c....I.{W.+...4..V.J..4.t..f%.y^.#...z4..../.+.0....r..8.4.(>.FX....qq.p...'....q\.e-.H....kt...rv....S.....4...K.<..U.8;....t...S_......;....N-.2Y.o....\|...K....d....;\|...\|....1..o...ij..:.hL...T...d.[K..o.:c....VB(.6G<..(I.@a.............}.t@.(.!(f.)....R.i.K.-..Ub..k.m.sv....#...E.\.<F....h....].0..q......7.".q.V..}....M.......L..i......q}s...`g...2a..5j6.C.._yFU.*+9..xb..Wm.\|........5TV:rS...\.>...g.%`Pc4U....".]R.]..]"Q5....')\...,h.F.L....A........+..h.M.I;...e

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	23558
Entropy (8bit):	7.983014067610615
Encrypted:	false
SSDEEP:	384:MAkEIEthNuzEUJlgvH+hSJm5gLL7tM74iMeLUdizhMDd48LklP+jekh4QHNYI57z:VIENwfWl3Ptu/qizhMDmKmxm4QHNb7z
MD5:	36FFAE39337F582565D1BFEEFAAE5C56
SHA1:	E9317D08264CFE704806DE585C38A71F53A81E48
SHA-256:	5F061889963D90B0F073984DAF7C1C4C73CB5FF8D05A09C0154ECC796501D1FC
SHA-512:	FAFBAD574077BEDA222C91F7BB83E092428419FC5D645A764D53EDDBA4D4124995628A79F669BB128AF485C6C81FD845E60BA6470242F64BD8040DDBC0766917
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/G/01/HST/AHI/Desktop/WebpImages/PPV_desktop_secondaryTile4x.webp
Preview:	RIFF.[..WEBPVP8X..............ALPH.......i.0...;.""Q.H.Vmo.H..C..@0....A.`.`. . ..!..`.@.[....oDL..Z..m.M..A..f.2..$...)......-...T.b....m.!'9O.oDL...9..H.....S:....0.n..qe.x..8..p~=X....1p...^.L....j..~...;....n...w...K../??....~..../O../.s........O.a........5.....{...Dr._..G...#..+Q._..__....._..__C.....~y/\|~....._...^..t."..O...7$(..v92........;.........v.;].}.S...C........o5..dJ......<..C..G.f..\|_..i.5....T..........l.. ......o......S..x..^.E..{..C#...t..\|......~"e/..r.s..I.g.r=......J#.^.o.....x.^.r...J..r...n.WB..vo.2s1A.>....5"..H...)D\|..&}Q.q...... ...g".....D.s$.\|s.3+"4.S..Z".o.3...E..d.dF.z.).-..JHtW4...Bx.!..l.,3b...Zfe...7.......b......,kHDmQ..N.mk..x..?#.(.s.Cr.. ...K.FPK.R..S#.......?.5K.Dro...\..??..^.Z.H......i.I..O...W.P..R!....YKJH.>... 3..b...9.Jr.......97.$....7G#x..\|.=T.(.B..}hd..Z.&..C..D%.2.&U.s.\<.R...O...W..dM.....P.]8.!H...?.B....B.~/..........?.K..*.!D.t/d....$./....X.!..b..]......2.....5..A.%"EW..%.l$..P..o.\.fO9gM

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 193x320, components 3
Category:	downloaded
Size (bytes):	13214
Entropy (8bit):	7.968114036445932
Encrypted:	false
SSDEEP:	384:D1IoRJNCZeKBiu/YbEceDR1q4dhqCfX3g:9LoutyBvo
MD5:	88253A9D625758BFDD3CA1B5BA49095F
SHA1:	55F85257A2942202C3179B9EA1F8E3E897400C3E
SHA-256:	48EA1F73CE8E3E168D4A65CE7D40D01714998F82605851088026FB37080DEA06
SHA-512:	05AAE9A876ADBF3FCC56FBCB83D3CB14861FCEF3C196F4136CE8628F33EA09A830A2CF79B24816998F81DF8F0F04A2D94D67A9AA5D84B9731440939B34702F7A
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/714Yu+YW29L._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."...............................................................!1..Q."2Aaqr...#3BRs.......CS.....DTt......$Vbc...4.....................................................!1..."2AQa..#3Rq..4....Bb..$%...............?....(..c/H....2...W..).........#..Q.H..Um.....J.i.......<.a}t...n2....O..%.".qzP...Oz.B..RA......6.<c.....r.v..tq..a.7...qz.........Fb7ng;;d~9........x....^K..:..v...%.t...f.~:.......m..9r.O.....-.L......3.z....8......T..n}...#?o.NO.o....%.?..@t..Ws...2>...v{.......;I.....N?.\|..P.........n..5...t.....qL...S....Xz.f...E.P.W\.\|(....O.A..}~.I3...H6..`Jy.j.9/...vT:.`.>"2...Yh..y..?.....}...!E.P..Q@.QE..>.....Y.K....f...C..V~..C.%I.6.....5s..~.~....C.j.=.......Nr.q~....;....9....k....'.:...}B........}B...o..:.......).....>.......>.."..oL....O.o....%.....\I........1......8..5.'..

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 175x75, components 3
Category:	dropped
Size (bytes):	3392
Entropy (8bit):	7.872355174965263
Encrypted:	false
SSDEEP:	48:Gef4P6575tgGDxTR2cJY3swRC6+VhHUiOjWMwuWNawugM1JF8riL/mch:Goz7rgwt2cvOjWltzM1Jx7
MD5:	17A71DBC14B0EA2A3216FD38172E7ADB
SHA1:	F1DD604F4974FB326E14F18F6732BF61948605A7
SHA-256:	846B337F034313372A753227D37938F91617DAFBB6C3F3CC0FE7843D886D7154
SHA-512:	58AAD112AF20FED21D5899F5B1BA2C0D0C7D635B71AE6E1C713C6F10596B57FEBDD73E741257403C9E8932CD006F21BAF5A352E0A2DAF948602083474528DD31
Malicious:	false
Reputation:	low
Preview:	......JFIF...............................&....#...#.##..#..'#..#'.#$4$&.'$1$4$4336:<4#:P...........1#.'3.$=3<'3633&C3<13.43'..''$3'664.&61#G&'#31:.#6@......K...."................................................................!1A."Q..245Tqrs....#6Rac...B..CS..................................................1!..2AQq."3a4r...#BR..............?..z.S.-.......U.....Nw.q..\|.\|..j..l.....#.\|....l.{."H[.....s..^l....a......P.r.YQX..F....5......j ..86.j.]...9!.Gp.. 3\.c..6....,..D.].\...}...z}.R0.....yY.V....}.....Uec...WSX...TP..?c^,.H... ....U<,...fC.+.i..DXb..Z...H.Oh.Ex.p.P.>..T/...N}.M~........r...k..9.4..#bU.N.xJ....."N..*......H..V#..Q..+ ....VA......JF.w.U%.KN!c.T..o.....23.XV...(O..a..s..P.RI..aA..Q.....%..O...].l..J..._YX..(.".t..d.e.4....5...F)Y...-..X..P.0..s..R...C$....C_I.>..\|.9..h\|....F..i.{X..D..SW.O.q.v.:.!..Q$P7.k..9.4../...+...qrm....../f....B..........o.]..=N.....$.R9.D.I.R.K9.NC=@....?.Fl..&.&.KE..S.....H.....(..e..k<..q..W../....MK_..

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 229x320, components 3
Category:	downloaded
Size (bytes):	14193
Entropy (8bit):	7.945468676461795
Encrypted:	false
SSDEEP:	384:57/Z9E+O6D3Qdimv0V38VO3wfNaQ6NnsTVYbmh+E0:57BS96q7vxbfNn61KF0
MD5:	FC1F93C2F06C64BB759D22D6A7AC795D
SHA1:	C6A618008F1D39ABAC6FD9CA34FAD4646F2A9A3A
SHA-256:	F4931DAF1D92ACB44E818ECBD03F489F5B9BAAF0021EAA65D13F41DF6DC2A6C7
SHA-512:	46C78580F486428EE445DEF8C71B32FC3B589F78311E07B7037337C2E518DC8C652B72000F80B5E44F736CFEEA0C4DF297EBACCF87C11D1022A771ABBDBAD93A
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/710OEdZRHIL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."..........5..................................................................,..]aW..$...$..%.EI^..Y.Rg...D._.D%y.BO..ds......g......b.B....T.C....Q.Z.@Z...@..X..jU.sjU.jr...4..L.3C..q...]._.L..w6EzE....J..@.m...2.@+.re^..l..DP......p.&4Yo.!.....@..WhW....^.t.....,.?.v.%...X.j+.P4.....h......4..e.L.3C..q...]._.L..w6EzE...<...a^i....<....p.=.=......8.....K..\#I..[..s4:....+....d...sdW.]//....2.....?....6)..G..r...q.~l..p...K..\#I..[..s4:....+....d...sdW.]//.......-.!... ..}.5O....?]..$...)..p."<Yn.!.....@..WhW..*..^.t....ba[d......~....D]]..r.w...........w.^.F..,....hu.. .. \.Ly.p..`4+.. ....._@....e...:.w.....".#(...._........^....m.n.U...~......O_.t..\Z..p.6.v........J.S.._M\|.....3.L...y...v^........................`........N........1...p...9......h.....KRb.....R.Uw.8...o..i.ju ...3l+u.l<

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 29240, version 1.19661
Category:	downloaded
Size (bytes):	29240
Entropy (8bit):	7.993601718527624
Encrypted:	true
SSDEEP:	768:dvnevMz5ECZBDoo0NmEMZAqg5rEwfHnkb:BPZBDoOhZNErECHkb
MD5:	C58D60F633A61A473A746505B4373194
SHA1:	32110B329B0FF64B386960BCEC4E61964EDEAA17
SHA-256:	823E37B5143B1B90333E54B872BDB8D40B9F12AD98547D30874FA6350D09A9F3
SHA-512:	800F34827D7913082944F2F3C58D978CB58042B4C198A0CBD773D676245281D17DC58246BDA9F75504C340C19AA5E5B603BC790184F4FD3655319BAA56720343
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/S/sash/ozb5-CLHQWI6Soc.woff2
Preview:	wOF2......r8......I8..q...L.......................z......x.`..J.........d..L.6.$..4..\.. ..8. ..[.'q...6.D....2u{..9..6...g.h......a..H.=;......2..A....d..d..K..1.t.9.t.D.../r.p...c.n...27.0...&.<H.ye.7.=y..H..2-.../}.S.y..6.&...F.$.o.........Th?.K.o...FB.&...aC...NW.v'...m..e.Y<Sq..I...M..._.}.....+.).F.9KP._R.."aE].ox..E`..G..........>y.I.+J .d..V....4.m%...5.,........{...ED.B.`.1.....NW.9.1.."\T......E.@..bv........H.6i;.@...lS..K..U..j...#.r.f.1.Y.b.0.8.."&....rz...Y.m.:PJRQ...Z.....jf^.@...i...i.O\...^...J.P......l/.?g.a_3...q...a.!h....x./..M&...}.W&..H.I%.@.p......9.`@C...H.P@..QT.\|Q9...7..P......7A,.B^B..'..Z.M..s..N.(b:v...nC.i...E.E..i..iK5.......?.G.O.m..1...W......+m'.0~.o....+.cG..m>..3.!-.LV.S#...l..^oC...>g.s...G........juHE.p.,t...D..........AL@...t.}o..>a...>.j.....%gO\8....($.?...r..t..ILBZ.@'..6...C,...6.v...Hc.#.MP..V.qY..a$....h74;&Rd".e.n.K.K....@....4TM..O.........r.B4fvI.0<....z.....44).$.{....z..9X.AF....A.p

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 194x320, components 3
Category:	dropped
Size (bytes):	16246
Entropy (8bit):	7.973168088990893
Encrypted:	false
SSDEEP:	384:BLIknhxmtcJGs6L1ALTXT5567/DMbDB3c7A9eJP:BLlXmuJzHT5AIfN8ieJP
MD5:	08662B4A7902CB6C8CF0A5A6861463CF
SHA1:	6F83008E84EFA416864CEFEE8412F45411353671
SHA-256:	1F53C0E42DF235D380DEFB0184ECF6634B16EA3F50BCA78FDDE2433DE2DBFD9F
SHA-512:	0971ECC5B59D256AFE8FF50D0887A56AF46184882448A89D24218682A936BFC544CD3E7B9D71893B52F9C9B115BB7ADAA883F2B5A4E58F88764FA4DE5D0FFDB8
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."................................................................!1.AQ."T....#2BRaq..6brst.......3S...$45Cu.DU.....&c....................................................!1.AQ.."2a.Rbq.34....#B.S.............?..).F.....R..v....U.M.....8.6......h.t..E...m..).!O7;s.......aT.....s......?.4.^....j..^..3\[O..x......q.C.s.j....).1A".'.A.q.f....J.8I.q<..s.......h...9..Ahz....W.;=..n....z.j..>t...\|y.1.i...v..t.....0r....6+._..M..4.Sq.....k3.[...C.&Et.U.#.. .Fym.I..v].h....2<....L`.\...'O..]^B~3..O#.....F.z>.5...ja...f2..m=.....S..V.S.or...6.UrJ.md.M....F.^[...;.?)....1.?......dh.#..c.>4.................T..2.y.........39{}...V..4..r.....a.Gs.\..pa\..C.....I...E_k....v..a..L........K..&...R..)...b...~S}.L.W.\|..f..7b..{.o..q.....*...{.^{cn.... py.......V.".....S.Z...5..y'.......j.4..6..I..Un...g.j..#......l

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://aax-us-iad.amazon.com/e/loi/imp?b=JKk5R1QXV0aNqhhv_ppSvdYAAAGSu4ZnhQEAAAH2AQBvbm9fdHhuX2JpZDMgICBvbm9fdHhuX2ltcDEgICCWdXPr
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
URL:	https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26m%3D1%26sc%3Dcsa%3Avl90%26vl90%3D17754%26pc%3D19241%26at%3D19241%26t%3D1729723018740%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:19241
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, Apple iTunes Video (.M4V) Video
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.946050733255826
Encrypted:	false
SSDEEP:	24576:VkqhoRhyiKyAyt00Me1AflmrrzA/nHaUqfD5B:VlDyAyVMe2tmPziHaUqfD5B
MD5:	2A316954FBB49C1E09B81FF4AB75758D
SHA1:	17776BE9204BE337DE9586BA62AB3E47F0FDEFDD
SHA-256:	BECABB9173F83D5EC090CC71FADE6146A41A91A9F3F5859F6F0282CC348616C9
SHA-512:	9AE6666AF170FA2BB3C5375308368C739E7A9E06BFC76D746CECF4C95E6A92EF0CABFE7C7A6228D5296FA1402E15B77AD9512D46A9B5A2A7A937F871DFCBB9E0
Malicious:	false
Reputation:	low
URL:	https://d1f0esyb34c1g2.cloudfront.net/transcode/storyTeller/ABFMOV4MO9GW4/0caeb388-53d0-4863-9a19-241f502f2c06-SBV_291884-T1/507239c7-4f15-4689-a8d1-f57fb521c41d/1601577022423sbv.mp4:2f83c2ce8d8335:0
Preview:	....ftypM4V ....isomavc1mp42..@.moov...lmvhd..................................................................@..................................!iods.......O..)..................trak...\tkhd......................................................................@........h......mdia... mdhd............]....PU......<hdlr........vide............ETI ISO Video Media Handler....-minf....vmhd...............$dinf....dref............url ........stbl....stsd............avc1...........................h.H...H.........Elemental H.264........................pasp...........?avcC.B.....('B...B.@_..-@@@P..>........................(. ....btrt...\...8........stts....................stss................... cslg...........................(stsc...................................Tstsz..............[q.......b.......{.......&...:...............>...]...,...m...............v.......W......./...............w...........m...-..S....9...%............... ...........z.../.......................p...-..............

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 194 x 295, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	45977
Entropy (8bit):	7.985058314720174
Encrypted:	false
SSDEEP:	768:Ox2kO+0B5izHhTPdZVliVcR3+/ku/iUYi09ERbCC4lxOQ3JZT9AlpsyjSB:OAkp45izBXfNR35u/izi2GbHU3X9An8B
MD5:	A824C7A90E2C465DA4C4DB9FD9FC15E4
SHA1:	36F46FBD4D03D1E55BC0B0D4381D351620750532
SHA-256:	6641FF165206F0F54CD94518DED93DFCBFC7436A806B0DE96991CB3DA4032A8B
SHA-512:	AF530AF8E111A8B7DA4C2776253E6BDFD295E2A84A11EBCC020024E6B8364C6D75AC2C8BAE725D6441036BB3F163E74410F87F9C9B031417F16DA330C5C708DC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......'.............gAMA......a....KiCCPsRGB IEC61966-2.1..H..SgTS..=...BK...KoR.. RB..Ti........@...."....q....."..A...y.(..(6T....}..7o....9g..}>.F`.D....dJ....<6..'w..T ...@.-.................m@..n....8..P.....$......B....2r.2..2...t...%..[.....j..;e.O..v.$....(S*.@..@&.......X......`.(..s....`....`....).d....`...S......GE...3.(...x.W\!.S...d..T.n!...\].x.87C.P........ee......3...FvD.....9;.:;.8.:\|...........?........E..............e..../.....B.._......T.B.fg...k+..m.._......_.....................2..r<[&..q.?......wL..'..b.P.GK..i....$.I...H.........k.`.~..B[P..... ..%....w......1...w..0....h....................4P.6h.>....#..;x...P..8X.BH.L.C.,.UP.%...B..Z..F8.-p.........<.^...0.o`.A.2.DX.6b..".#.Ef!~H0...!.H."E..Rd5R..#U.^....9..E.!=.=...F~C>...@..j..\...B...h....G...h%Z..B.......>G.0....3.l0...B.x,..c.b......6.....b#.{..."....;!.0. $,",'..........B.a...$....nD>1..B.%..+.u.c...[.......!..\H..8R.i......D:C.!....d.6..A.%...r.y;...

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 468 x 68, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	3898
Entropy (8bit):	7.81183149797168
Encrypted:	false
SSDEEP:	96:7Aith13ACeIbjK/80sybwmaGsodXtuplXDFnS3Dc:7LtjAC5is1XG1ddQDFSQ
MD5:	006DFB578260AA8F18514AC1FC8EA68A
SHA1:	B587CC2AD856BD21BB7CBEF13B37B1B36C99FCCD
SHA-256:	8170C53C626DA9B25283704C33FC145B384D0E35AE23176C5F9651A8B17DD52F
SHA-512:	8591AC29722FE695D9C7D659AFE4B4405724A3E8C46AE5EAD584FDE4320A6B0295EBE24F30CCE47945E322B5C7E2BFDCC881591F634888D73A123BBD719EEED8
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/G/01/HST/AHI/Desktop/Amazon_OM_RGB4x.png/
Preview:	.PNG........IHDR.......D.......4.....gAMA......a.....sRGB........ePLTEGpL....(0.(2................(0....(2.)1..........(2. 0....)2.(4.)1.)2.......)3.......2..........3..........00....1.)3....)1....)2.)1.......(0.......)2.2.2....(2.0.&3....(0.%0....)0.%5.)2.(1....)2.(3.(1....2....(8.1.)3.............)0.......)2....&0..........)1....'0......................2.0.......)3.2.........................5.+2..........)2..........utRNS..@`..`.@ ...`.....@.. ..p.@.. .0.o.oP..._!`.p..O.0P._0ao0..._.1.. ....0PP...P.A.. p0q.0Q..O..P......1.0.A.p.k>e....IDATx..._........\N.\..H......h..Zz...mw..w......vl.3#.9H.....-k..F.1........}{`F..eKi.'/].z.?].."T...D.cw.[..)..N..oJ..F]{.P.....v.......aPoGPo..W.......GPo.Te.........(..VI......"B=...z.X.....[.......7.3.e.A..O..:v%.N`....1.+.Zv.e...\.f..UyMMZ"W..]P..UC.?.w.j....(zY.....0..p..r..o.?..^.W.c..\|.......(..o..m+..1..i..j.}.f....Qm....XM..TaM..Q..>W.....R..$~.-.s).._{...\.ov..I....U.P...l3D......K.rJv..]

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 12104, version 2.66
Category:	downloaded
Size (bytes):	12104
Entropy (8bit):	7.984061502224077
Encrypted:	false
SSDEEP:	192:OQ/aSNHlshE0sNrOJ6Yu4vnnnATSwie+v0162zZHn6PmhiEvTQm/DhR4Ryb1L4PL:OlAasBOJ84vnATXOvF2dH6eVTQqDh9hs
MD5:	BFFF4535FD0B974200E0946031683574
SHA1:	EB53D32460FE403C1A9A0AB4148BA095777D671C
SHA-256:	89D534A5B9076E8FC139357C741533C9E60CABAACAE8445E2B3182155E036273
SHA-512:	5FAD2172C313ACA59FD389F6D7C9DCD49356616C8B4A8A146B304436DFC66CBAD740C480292C74F916156FD4F7F029647135B89336017FABDF673B03C8087066
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2
Preview:	wOF2....../H......s`.......B....................?FFTM.. ..@. .`........8.!.....6.$.... .....C....]%....R.?..jR.#..b....c..C,...T.@E[..vO.._.r/.v..<:...~..Y5..c.Ha.....j...[)..Y-'%\|..ag<@...w...,d..o..?;o .!..8<t....r....IN^......s....O..-M..l.D]]4..E..%...RU..A..X..^.P....Y..R..n..]..I..a...".aK .....]..Lt..........1........0A.P.='VNp...Z....U..E...J..8..YMEO..;....`[....5C%..C..k....r..:L.....Z...)V6P..G.$..].3J.m;.d....@..}R0-..Q..c..6p..a.{.<.vJ......$...8.........!.`<......T......v.0H.MJo.>..-.A6$.W.n........T...A!.]...R6{.E^..D.\J-.....^:.).L..8....^..3.U8.....[W.&.M.3of..&8.%..$....7.....r...l.XW.j....w....]]U......)9..iJCnL..1....ym.. R...H.v~l..U.].[*bN..@....uP..B... ...Y...{.....?..`..Q..-.....[\..%]..~Qr...k7RNt..Y.....=....f2.{....._.......z..o...:.....nT....3.........j..C.pa.9:=Z.....;&.....1.Xe\|..5i7...l.i.e3k3.....9.V.....\|....3.w,`.c.K..-5-.,[-.-OZ^.2..[.X.:f...R.@.a^"^.K..Z+hR..............u..a.Mu.!CF412A%...f..g.{.9../

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (665)
Category:	dropped
Size (bytes):	275528
Entropy (8bit):	5.350358779455347
Encrypted:	false
SSDEEP:	3072:pROoTQ9iQccc3b+Y6iogYZfBckvITzuK9/oYSidRb:DD+dijYL3K9AYSidRb
MD5:	DB11F23641123A0832E01DF479C895F8
SHA1:	4616EB2F28679FDC138380C2E3ED74D066A82CAD
SHA-256:	6701BD983A64F5237F39D89B3030322A7CF344F0220FF6AC57434EE9AB987559
SHA-512:	EFBC1DEBBB1B133B5306E410EA2D381578D0F8C9766F150ACF05BFA56456BA56EB05474BA00BD286FD9C350C1FC425583EFFB533A1B0E52C482669A15CE7E473
Malicious:	false
Reputation:	low
Preview:	(function(b){var c=window.AmazonUIPageJS\|\|window.P,e=c._namespace\|\|c.attributeErrors,a=e?e("AmazonUIBaseJS@analytics","AmazonUI"):c;a.guardFatal?a.guardFatal(b)(a,window):a.execute(function(){b(a,window)})})(function(b,c,e){"use strict";b.register("a-analytics",function(){function a(a,f){var b=c&&c.ue&&c.ue.count;if(b&&a){var d="aui:"+a;1<arguments.length&&b(d,f);return b(d)}}var b=c&&c.ue&&c.ue.tag;return{increment:function(b,f){if(b){var d=a(b)\|\|0;a(b,d+(f\|\|1))}},count:a,logError:function(b,a,h){c.ueLogError&&.c.ueLogError({message:b},{logLevel:a,attribution:h})},tag:function(a){b&&a&&b("aui:"+a)},logNexus:function(b,a){var f=c&&c.ue&&c.ue.event;f&&b&&a&&f(a,"aui-analytics",b)}}});b.when("a-analytics").register("prv:a-cache-analytics",function(b){function a(b){return(new URL(b.name)).searchParams.has("AUIClients/AmazonUI")}function d(a){var c;"script"===a.initiatorType&&(c="js");"link"===a.initiatorType&&(c=(new URL(a.name)).pathname.split(".").pop());c=["js","css"].includes(c)?c:"un

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	23558
Entropy (8bit):	7.983014067610615
Encrypted:	false
SSDEEP:	384:MAkEIEthNuzEUJlgvH+hSJm5gLL7tM74iMeLUdizhMDd48LklP+jekh4QHNYI57z:VIENwfWl3Ptu/qizhMDmKmxm4QHNb7z
MD5:	36FFAE39337F582565D1BFEEFAAE5C56
SHA1:	E9317D08264CFE704806DE585C38A71F53A81E48
SHA-256:	5F061889963D90B0F073984DAF7C1C4C73CB5FF8D05A09C0154ECC796501D1FC
SHA-512:	FAFBAD574077BEDA222C91F7BB83E092428419FC5D645A764D53EDDBA4D4124995628A79F669BB128AF485C6C81FD845E60BA6470242F64BD8040DDBC0766917
Malicious:	false
Reputation:	low
Preview:	RIFF.[..WEBPVP8X..............ALPH.......i.0...;.""Q.H.Vmo.H..C..@0....A.`.`. . ..!..`.@.[....oDL..Z..m.M..A..f.2..$...)......-...T.b....m.!'9O.oDL...9..H.....S:....0.n..qe.x..8..p~=X....1p...^.L....j..~...;....n...w...K../??....~..../O../.s........O.a........5.....{...Dr._..G...#..+Q._..__....._..__C.....~y/\|~....._...^..t."..O...7$(..v92........;.........v.;].}.S...C........o5..dJ......<..C..G.f..\|_..i.5....T..........l.. ......o......S..x..^.E..{..C#...t..\|......~"e/..r.s..I.g.r=......J#.^.o.....x.^.r...J..r...n.WB..vo.2s1A.>....5"..H...)D\|..&}Q.q...... ...g".....D.s$.\|s.3+"4.S..Z".o.3...E..d.dF.z.).-..JHtW4...Bx.!..l.,3b...Zfe...7.......b......,kHDmQ..N.mk..x..?#.(.s.Cr.. ...K.FPK.R..S#.......?.5K.Dro...\..??..^.Z.H......i.I..O...W.P..R!....YKJH.>... 3..b...9.Jr.......97.$....7G#x..\|.=T.(.B..}hd..Z.&..C..D%.2.&U.s.\<.R...O...W..dM.....P.]8.!H...?.B....B.~/..........?.K..*.!D.t/d....$./....X.!..b..]......2.....5..A.%"EW..%.l$..P..o.\.fO9gM

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 405x640, components 3
Category:	dropped
Size (bytes):	18090
Entropy (8bit):	7.945749863316319
Encrypted:	false
SSDEEP:	384:Lfk2XqAWr/Mcfe6O5mkF5c+kXTesNNQzUMq6HVBHqVSQdsEIH3Uo:LfkMqtHeDQkF5x1tzzq6HuRJo
MD5:	E90BE588814C5D1550C78D6809D1A653
SHA1:	6B4D96D7C1E7129293383090F420FDF558D0A094
SHA-256:	2E274D3BF995DBE4C72394A1A588E7E5F917A8B3690DA12AEF75FEF2E488664C
SHA-512:	8C2EC4241E7DD0190203A62511FF552290B62CFF2E41786C49C707C82ABB620BEF87A8F31A84A8125D46F02EA0F72E056EE60CFB309A50ECD245431B78DB5BB0
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................!.....+....'...'.''.#'##,'!!',#');)0+5,)8););::=BC;'BZ..........!8'.,:0.)E:C,:=::+L:C8:#;:,55,,0)0:,==;.+=8'Q+,':8B5'=H..........."..........3.........................................................................G.O.yL....!l...A.r.........u.$....i..f.g..................../......@...@.@A...0B.....Y2.I.;#.....@.........3.u$...&.YH.."`..P.VR"a.&.GAY\......o.-.J............H.D..B..L......(C,2.......@......yz............"a..........[.He"$!YQa..e..D..$!..o.Yt...................c...4j.S...3`..4..5...C&.e.S^1.5..Fs.45..................<o.....U..L^....hr.R...Dt...5...Y.6.d..[U......................1..9.U..PZU...".QZ5..P.....JB..'IP....]....................N......3.Ed..8#....;..S.;.>;...8.Nb.(^.(:.N...W....x.av.(.............XV....).......).K,.....(..!*...tE2..Ad.%.\|6]{a...........S..l.h.F9n...........N..XtXF..q hH...H.I.g.....V..._Fp....h...........2%d...aE.X...3...}E.ef.Af.%H...`...Y.tq.e.V....8Mt..4.....d.b.evg...U

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	29
Entropy (8bit):	4.017824858003425
Encrypted:	false
SSDEEP:	3:kY4L4NKbvn:kY4EIn
MD5:	734930DCDBA2810CE73FE5069CC19669
SHA1:	81CAF1CBA98DBEAF1A9E7640B0B85071D099254C
SHA-256:	38956056E9E4D8C6798025989C602B9287F3B4477754CEBD04A48520E9490377
SHA-512:	DD2B4AF207BE550370A4B6E1780AF00C78BA68318F30C4DA5AF1F231B7E045DFF62CDDFD5FDA63C716A70CD6EEFE0C5C012262DA0AACD2E8E6718DECBB6C3A5E
Malicious:	false
Reputation:	low
Preview:	<UnknownOperationException/>.

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (560)
Category:	dropped
Size (bytes):	8874
Entropy (8bit):	5.481319733535202
Encrypted:	false
SSDEEP:	192:1tRWM9BVlNUBOiH5MFbHLfDNN/W0NOEAHB26aopvjAwzULV65:37HjahBAyJ
MD5:	754C1446B24C549375A5B3E510B1E36E
SHA1:	CE23F09ADA8D964D2DF64FAA277C750E52F74D75
SHA-256:	E538279AD4FCB10FC3823D7204B869E43CF3D98F1137FABE777DF40AB2E2DF2D
SHA-512:	A06FC44108929C6427132D39C3E2CAD70293C3A72685785092811E1609B43B6B983CF6A981F1BAEF2723CA5BFC0E98F5218D4D384508B75435B07DA6EA75603B
Malicious:	false
Reputation:	low
Preview:	(function(f){var h=window.AmazonUIPageJS\|\|window.P,l=h._namespace\|\|h.attributeErrors,m=l?l("AllOffersDisplayIngressAssets",""):h;m.guardFatal?m.guardFatal(f)(m,window):m.execute(function(){f(m,window)})})(function(f,h,l){f.execute("all-offers-display-ingress-init",function(){var m=h.uet,n=h.uex;"function"===typeof m&&m("bb","aod-ingress-assets-load-time",{wb:1});f.when("A","jQuery","all_offers_display_ingress_utils","all-offers-display-register-state","all_offers_display_ingress_csm_counters").execute("all_offers_display_ingress_load_AOD_assets",.function(a,d,c,g,e){function k(b){f.now().execute(function(c){c!==l\|\|g.isMarkerOverrideRegistered()\|\|("function"===typeof q&&q("bb","aod-main-assets-injection",{wb:1}),f.register("aodIngressClick"),f.register("aodDeclarativeEvent",function(){return b}),g.setMarkerOverrideTriggered())})}var q=h.uet;a.state("aod:assetsLoaded",{isAodAssetsLoaded:!0});e.triggerUnitCounter("aodIngressAssetsLoadCtr");a.declarative("show-all-offers-display","click",f

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34024)
Category:	downloaded
Size (bytes):	114093
Entropy (8bit):	5.361990005730743
Encrypted:	false
SSDEEP:	1536:hsQ3sQ1tdSkqUQxLdSrtUFK0RilZMi4B+mVaR8:hsksegIUs0UlZMig
MD5:	AA45E68E1788C46993A50762ED5A778B
SHA1:	D5AEE6F1263EB703F2525A0A3DFA5E36E54A1152
SHA-256:	18C4E980DFEF148652C4195E4CB48BB3238BB328FFD342FF45CA4C0BD05D56ED
SHA-512:	D76E30D5F728B7E6131462E82D177133D0AB6E168303D8300486BEF58701F6C12945A9668E0C288A169467F603878007086CDCE1BE0774767B81F9C073B31866
Malicious:	false
Reputation:	low
URL:	https://cdn.consentmanager.net/delivery/customdata/bV8xLndfNjg4ODQucl9VU1REUFNBLmxfZW4uZF8zMzY2OC54XzM3LnYucC50XzMzNjY4Lnh0XzMz.js
Preview:	if(!("cmp_config_data" in window)){window.cmp_config_data={};}window.cmp_svg_no=function(){return new cmp_html("svg",{"xmlns":"http:\/\/www.w3.org\/2000\/svg","xmlns:svg":"http:\/\/www.w3.org\/2000\/svg","viewBox":"0 0 148 63"}, "", function (x){x.child("defs", {}, "", true, function (x){x.child("linearGradient", {"id":"btn32nsvg_1","x2":"1","y2":"0"}, "", true, function (x){x.child("stop", {"offset":"0","stop-color":"#B60C0E"}).child("stop", {"offset":"1","stop-color":"#F64C4E"})})}).child("g", {}, "", true, function (x){x.child("circle", {"cx":"32","cy":"32","r":"30","fill":"white","class":"cmpsvgwhitefill"}).child("rect", {"width":"65","height":"50","x":"65","y":"5","fill":"white","class":"cmpsvgwhitefill"}).child("path", {"d":"m28.90442,62.922199c-12.321716,-1.16146 -22.643665,-9.0477 -27.01971,-20.64376c-1.042079,-2.76141 -1.669305,-5.98013 -1.845309,-9.46955c-0.776353,-15.39183 10.106961,-29.20519 25.47518,-32.3337c2.189536,-0.44573 5.142902,-0.47463 48.501299,-0.47463c43.358399,

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 283x320, components 3
Category:	dropped
Size (bytes):	12816
Entropy (8bit):	7.9309929423973315
Encrypted:	false
SSDEEP:	384:URW6XdoVJ6RgEa7XI9BcsXkbiACT/YBrY2R:URlOVJ6uEa7XMbXkbiF/Y+2R
MD5:	D0B5FF2B6DCC4B5D70CFF1A020A1F371
SHA1:	1D103A34EDFC6C853ED2D43B991407210D730B03
SHA-256:	F5700C949E66AB3BBAB34A8B24563C0E7D72FEB9C98F9F952A3C4931A2EFFAAC
SHA-512:	53C9C1F63CA6AAEF8848FCBB5A976F157E5A2F90E6EBB9884605642AA991B7A11173F1A5CC6CD9530EB705616DD660A82E466B58CAEE17BA8D85E49C0668721A
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."..........5..................................................................X.....#'.uzFG8.Y\.=e.........;........f... ....<c.w..$.x...%...=.V.}...........6.H...%...=.V.}...........6.H...%...=.V.}......wj5....[;Sw.M..5..V..l.S-..eS.^Y.D.l?".c....7$...x..O`U..B.$....'.....s.E...\|...T].F.\.u0..D...5+...@.o$../.B^. S..nG.....',..C.#.w?..>.....zS.Z.G..W.oG..=..>v.MJ..).P...#rK........[..+r@....".P.Ko..........}..<.P.7.._......_.\|....Sn....F..!/..)...#.V..Q..D...v.T.wM..:.o.},e.^.T.:..:/_.\|....Sn....F..!/..)...#.V..Q..D...oW3`....t.4.."...8..N....i...F/...D...5+...@.o$.Io.B^.(.....,.h.e.Ae.A..hp;0%.s..%....d...v]j..`.z^..a......6o.'1z.R..y}.......h...&.........{....eL....z.OHR.Z.L......H.Jk.d^U........44.>..:....s.?.=C.m.P..5..S.r.iDY0.....Y.;...8...\|}...&T...e..R.....

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 194x320, components 3
Category:	dropped
Size (bytes):	17760
Entropy (8bit):	7.972440081114767
Encrypted:	false
SSDEEP:	384:9evFEGDB0xYx7J7S5uF0iQwfHajUkrj9o0MsBCoICmsaIZ:9WF5DqxYxN74uFlfHajLv9ofYrmsn
MD5:	A56D2AF3129B99E5C7014209A4072DD7
SHA1:	E44BEA1BE4815FF1E4DD1430AF7BFB5A402F9116
SHA-256:	7AFD93A15430C5CF4BDB667F49FFB620F925F8B86775347F0E8323B9A0350971
SHA-512:	A6ACF3AC022AD358E90D9C4D7EFB1630491C5FCF7FE5C654811B586DFC5F1AB5CBF1250657D83EB980935F4370F71DC49810BD23E1C646672396C48291C2AA95
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."................................................................!1..AQ"2r...aq.....#35BRt.....$STs...4Cb..c.e.....................................................!1.AQ.."2q.a...#B...34CR...............?..8....$y5%.M"....j..g.;.9.h...}........^.+.K...X\.-...].}.b].O.S..#..bl........o...........x.....9..t.ke.....6....BZ{....xFK.'/=.!...2.]C..X....Z..d.k..H..R.7....._.f...K.+.9.i....<.NS...\|...c{m..&...)..O3...5../:&cH.yR1.Q5..2..d,.h=...g'}..WD......W..6.r..7.._..y..L...9w.P.}y.bO..K.^Y..DK3...;.k+N#I...t!.M.#...:....;.w73m..d......w}e..MB.T...2.>.........6.r..7.....g...Ye..Bc.9...y."S$..r..X...c..2..... n.\|.m./.3.]/.m....o...F....m....o.........t....'..%.F.$..P.....Y[..lRumM8h;............V.r..7.....^J.R..mg.4.G....Q.9'V.i....j..w...V..!.N... i.?=,.II\|.m./.3.]/......o.{n.....!.v..oy..b..*..E..EH

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
URL:	https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26m%3D1%26sc%3Dcsa%3Alcp%26lcp%3D3950%26pc%3D19220%26at%3D19220%26t%3D1729723018719%26csmtags%3Daui%3Asw%3Abrowser%3Aregister%3Asupported%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:19221
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 34 x 29, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	346
Entropy (8bit):	6.229840441641423
Encrypted:	false
SSDEEP:	6:6v/lhPwtz4nDLl9W0y37CpH0xVc4kSbOaWdgR38C+ogSM4bXBxqy3ytDdp:6v/7SML/rp627SbVcoXrbXnqzH
MD5:	FF018650CBB4B192CCD337C6C9478D1E
SHA1:	D6409B6DF8F0B929E8D5C7F9F49F4FBABACDC0DC
SHA-256:	C5EA92061AA96E1E5AEBFE0714F3383A02BEF2ED7A584D0493841573B653E8C6
SHA-512:	2C88089E0AC3EA8AA93AD5E643AC01F77A727DFA2E28843ED436ADC2E96E32F0F0BA5EB17F70F4D039B70C4A1E106D2AE24A2BA1D4E5ADAEFB90E4B456E944F1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..."...........N....EPLTEGpL..................................................................W.4.....tRNS.Q...!0....r..>~.._...O#.....IDAT(..... ...A..j..Q7..N...w..4Q.~..+.0443.......&A.?.X..<.b.Q..h.....Fb]0..\..u!....M#.2......~L.H.v.c.7.N....n......@.......7...m...$\.K'..M\..TjG.%G.._...\XjU..cP .{4......IEND.B`.

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 468 x 68, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3898
Entropy (8bit):	7.81183149797168
Encrypted:	false
SSDEEP:	96:7Aith13ACeIbjK/80sybwmaGsodXtuplXDFnS3Dc:7LtjAC5is1XG1ddQDFSQ
MD5:	006DFB578260AA8F18514AC1FC8EA68A
SHA1:	B587CC2AD856BD21BB7CBEF13B37B1B36C99FCCD
SHA-256:	8170C53C626DA9B25283704C33FC145B384D0E35AE23176C5F9651A8B17DD52F
SHA-512:	8591AC29722FE695D9C7D659AFE4B4405724A3E8C46AE5EAD584FDE4320A6B0295EBE24F30CCE47945E322B5C7E2BFDCC881591F634888D73A123BBD719EEED8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......D.......4.....gAMA......a.....sRGB........ePLTEGpL....(0.(2................(0....(2.)1..........(2. 0....)2.(4.)1.)2.......)3.......2..........3..........00....1.)3....)1....)2.)1.......(0.......)2.2.2....(2.0.&3....(0.%0....)0.%5.)2.(1....)2.(3.(1....2....(8.1.)3.............)0.......)2....&0..........)1....'0......................2.0.......)3.2.........................5.+2..........)2..........utRNS..@`..`.@ ...`.....@.. ..p.@.. .0.o.oP..._!`.p..O.0P._0ao0..._.1.. ....0PP...P.A.. p0q.0Q..O..P......1.0.A.p.k>e....IDATx..._........\N.\..H......h..Zz...mw..w......vl.3#.9H.....-k..F.1........}{`F..eKi.'/].z.?].."T...D.cw.[..)..N..oJ..F]{.P.....v.......aPoGPo..W.......GPo.Te.........(..VI......"B=...z.X.....[.......7.3.e.A..O..:v%.N`....1.+.Zv.e...\.f..UyMMZ"W..]P..UC.?.w.j....(zY.....0..p..r..o.?..^.W.c..\|.......(..o..m+..1..i..j.}.f....Qm....XM..TaM..Q..>W.....R..$~.-.s).._{...\.ov..I....U.P...l3D......K.rJv..]

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 209x320, components 3
Category:	downloaded
Size (bytes):	14660
Entropy (8bit):	7.964510524471363
Encrypted:	false
SSDEEP:	384:nhejHj6RPCudT4dFUx8Tr2eZWgQn4TZuw+:IjD6Rldcdux8We9FtO
MD5:	8D56A84329080ABF32D24F22C0C0D3BD
SHA1:	25B21125780889ED82DCBC8D8ACC77AF91560958
SHA-256:	799967BB0FB2B76AE3C2BBFE91BCFA46A551F5CE4686A67003CBCA7665F464B5
SHA-512:	7A5902FE3DA0CEE8004C941D0E41AB9AB05EDF83BB8D07F63F6C28BC7AF47DE74FA3699554BC748E61D09B839746AF643C2F500FB2B79EF331A244935CF8B711
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/61YexlHDlfL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@....".................................................................!1A.."2Qqr.3BR..#a.........5T.....DESU..7b.....st......................................................!1.A."2Qaq....3..r......BR..#S.............?..(...(......v5..E.g".i...9S...4E..o.^.c....4...'B.......&.....8....}....Q6....E.'a...{K.x5.)Ub(.u..Z.Y...kn5.............%(.(.".(.".(.".(.".(.".(.!..ojpn...".A...d.....%ksh.W.TxQ..JTF}..;t.h.......`Q...P..R.(.J.V"..D....Y...Ex....QE..QE..QE..QE..QE......".V...pq.Uyukb.:..g.Gv..!C.\|[....[..8..$.FA..d..Q`.6./..*.$...".4.OF...@.....Q#.............ev........n[....x..F....3.t_{.}.V&.Q..#..?.'.yx{Y....s\|..W...V..R>...........W.h.i.....?.q....{...(......Y.O....../......D.5.Hw._.v...MZ..i......L..Tx...Y.u......g..D.....KM....O..#.1G..I.r>..M...P^...._.5.k.0.^.?.......\|W....X.Eh..`).....4R+.j.o..C..

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 170x320, components 3
Category:	downloaded
Size (bytes):	14406
Entropy (8bit):	7.974608708337998
Encrypted:	false
SSDEEP:	384:fIcqSH1laomdRKEBAkKN1aSJWGMJs05mSX+TKoH4W:gc/Vllmz/6kK5QGUs05mSuTlb
MD5:	708FF1ACDB7E75113841AC41A739BF7D
SHA1:	B2B542637108A702D38504343CE1DAFEB4B2DBCB
SHA-256:	3C314D6757C150E16EC7F55291F458812EC725A05B8A9A4FD681CC8AC7DD1970
SHA-512:	BF94E5D4F1DB664C105B0B29E909087B8BE3EDE6D6A0D447D45969A589DC5DD62519C2DE87FC12A36051B507B71BB6F88DA4BDB291942851AB8C5278682CE788
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/81br4xJUTNL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."................................................................!1."A.2Qq.BRa.......#35rst......%4ESU......$Cbu......6DT...................................................!1.2AQq.."3..a....#4R...Br$............?.....&...V.SBp...c85O...sk..>=....[\|W....MT.^...U...67.-u...1.yp.?.D.........z...V_.g.......;.z.e-.g..Z.......S..9-.G.o.k.3.K0...?.o...@....iW\/.~...i.I.>....A.a...{v=.5...1.....+iG...DRR.;..F..2^..X4-..9......^E;.;.g..4...}...s_.~cD..2%..d.7f.n{=..8....B.......~..y..~.s.......R.uqY8..8Pw.1..z...&i..d....O.N...{..4..?...^ida.\}J....Mw0....t..p}.'%.....7.....a....+Y..._P....U..r...k..b..i..']..s..8'..J......."}....vl.}..y...T.6w.....X,.......r.~.....y.t....Pl.)..9.uF....Nm.n.d.U.T...a..zA.r"....id.3.I.....lo.s.?....-.g..Z.........&C..\_..P....u^c...........M/.>.."..5...f?..

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	23
Entropy (8bit):	3.914866303883101
Encrypted:	false
SSDEEP:	3:YIzLKFjJ4:YI/KZJ4
MD5:	E66A7A6C91E2C26803F3F49FEB7A883F
SHA1:	4AE440FF2BD4594A3CACAEB1EDD29444B781A3ED
SHA-256:	8FD54EEE4277F1327015CC0BCAED8A878BF44D1804364CD5D93DFAB9E2D1A5AF
SHA-512:	9A00E2AA47634A1AA8B4234F7692CA71521929EE31A225A460DD5A7BD46F9196F688467B8303C5EF5D6CFF32D25B85F511BD741CE99A3FDA8D76A66591A1DC2E
Malicious:	false
Reputation:	low
Preview:	{"message":"Not Found"}

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 312x320, components 3
Category:	downloaded
Size (bytes):	13933
Entropy (8bit):	7.958531222524912
Encrypted:	false
SSDEEP:	384:PI7P/H1u+rQp+ZsvtQJcU/3Ed2AtcqAomfcEr5IGhrW:P0Hk+rQvvi3EAAtcqi/9s
MD5:	27A92D7ECE8FBB24A38D8F767123F611
SHA1:	3C274E6640AB085E01325208E52A1D8E134818D1
SHA-256:	1832D6D344F8D781A18F93809326E30288B17F6370EAE53B09A96AB4562C68D8
SHA-512:	5FA387F6D68C874F94F7CBABB459EFEA01AD55E1EB588983ED5D4014656C01099941D5F17A4BC66FFBD94E380CAD47823C54F9C65490ADBB5F45DD7FBAFCAE5A
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/61TLh0HyERL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@.8.."..........3................................................................(>....!".D@.V.a..%....S...\|.J..N.Kh..i.u.5...G..U...i.].F..Q......%.{...Sa.IT....G.sD.4n.q..2K.y.HI!$...7....g..yc.y.IX.BI..r....I\|.BI..6..H ..$x.4MsF...~..$..f.W3.t...d....cP.{..#+...Y....}.i...:..X.z..g3.\|n.%.})$...#.3..B.......in...}.k.q.......W.%..ca\|...y....8..y....-M.p.`.w-....\5j....HK.D.'..-..;r..=...V..$BmENu.\.7.].<.MM..\S...........?L....49..3.v.7N....BI.,D.....b...z.^.>..db.....eA...[C..7S.Y......<U...3..xo_....N.+..y..r...=n.y.h...rx...n]E%.i$qj....TY.M0M....k]...`..`.(.#.X.cTp. ..s\..$.{.=/O#H...5....?;.R_..G .....OZ.t..2...l3..l?.a..1.V.<...4...&.6..... .)....F..+.lk.=....w.4........>..q-...g;..g.......B....Q.y.....h...m....l.k.k&ZW....M.&:V.X.Pw...........8.m.G..{....j...7..[WSy.>e5`..z..

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 166x320, components 3
Category:	downloaded
Size (bytes):	15198
Entropy (8bit):	7.974982010644687
Encrypted:	false
SSDEEP:	384:LtgtxzDkLRW7hwR0HEEuYDVLCUT/jdiVM45KtRzb4JJ:K/n+7R0k4DTbu+jv4JJ
MD5:	42D5D295DF7400E35D1FABED78FE4E46
SHA1:	54524D4CD02631C6CB45370B04D729A0B64A870B
SHA-256:	EE60F1AAA7F4B6BC98F732255DE9D010DA449FE6B4DE32A835AB442AEF37DE94
SHA-512:	4328BAB8329F718745994EAC38D569756A9E8E48C6D12DA5C6A9FF2C60B6618E33AE3108819EF10832927F989A98B58E6D72F54F1B12FA0D83AB2F8DAB7C2B9F
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/714n187WXAL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@....".................................................................!1.Q."Aq#2Ba....r......34ERbst.........$56CSUc.Dd....T..................................................!1..A"Qaq....#23....BRbr.$DS..............?..T.P........k5...h.:.]..p..h.V.xD.e.....]....H.d..0..\V"t...]........[.!.h.Kt.#'j.$<.....1..P.5:.[......O.E5Gp6.ugst.[......W....F$.....i.k.I..8.2...z....J.\|..]..N.M.M......d.W.....}.S..%z...cs..[...k/A.=.?.>......?...&.....l}..~.....?....N.v...}......6.tG..q.H?.h....o..\|Pyt.c.....&...%...._..Z.,.og?3O#....?.Mu..y..s...G@.P.........mAy...g....%q].$J..Z.1._x...h.B......r.0..........)%.(...]..A.........J..hd...<~....jL2....u.....t..\...#.d.q.e+..=u..~Q.u....W....?=Ln0..2.z........H..;././.......$L...)&2....b...= .e..b.%..jL..q.]..K..Z,....pz2......].8.g...q.a.T.WI..R.@..*T......Sw.$..Y.[x.

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (574)
Category:	dropped
Size (bytes):	5749
Entropy (8bit):	5.235668032462024
Encrypted:	false
SSDEEP:	96:dqUhTMvW3qbDkvUaTyTwsN7N7PWX0zmei2NeNeYzeie1eGnUYtVwJVKx:dqmMvWankvUUyTws7N7e2TiFYY6vwGnT
MD5:	41619C38B3C06B8A6C0F3D86CF64CEF5
SHA1:	4B655456A08C148B46F8FD29517D595F2F720320
SHA-256:	0A46C96881D5886EC3F902A00750F6F28A8262FFA2A16C43EB67D8F5D2683C57
SHA-512:	EF42075340710D7B37FA4C4F9019EF1912AF412CE4398AE010B573B9AA1D42C2EA634AF96628C9F0FDB90082418DA556DAAD8CEF8FFE18B4794DC52D222B48DF
Malicious:	false
Reputation:	low
Preview:	(function(g){var f=window.AmazonUIPageJS\|\|window.P,r=f._namespace\|\|f.attributeErrors,e=r?r("AmazonRushRouter",""):f;e.guardFatal?e.guardFatal(g)(e,window):e.execute(function(){g(e,window)})})(function(g,f,r){g.when("A").register("rush-routable-application-base",function(e){return e.createClass({init:function(c){this.applicationName=c},name:function(){return this.applicationName},unload:function(){return{}},load:function(){return!0}})});"use strict";g.when("A").register("rush-router-html5-history-support",.function(e){var c=e.$.extend,n=/OS ([0-9]+)(?:_([0-9]+))?/,g=/Android ([0-9]+)(?:\.([0-9]+))?/,h=/iPhone\|iPad\|iPod/;return function(e){function b(a,b,d){b=d.match(b);return{major:a&&b&&b[1]?parseInt(b[1],10):-1,minor:a&&b&&b[2]?parseInt(b[2],10):-1}}function p(a){if(!a\|\|!a.url&&!a.state)return!1;d.replaceState(c({},d.state(),a.state),d.title(),a.url);return!0}var d=e\|\|{userAgent:f.navigator.userAgent,pushState:function(a,b,d){f.history.pushState(a,b,d)},replaceState:function(a,b,d){f.

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x265, components 3
Category:	dropped
Size (bytes):	14599
Entropy (8bit):	7.95723966627892
Encrypted:	false
SSDEEP:	384:BcCxf0QiiT7hmpEPy9uccpuUlMyjUexn0L8aawyK7OR:BcuWiT16FlAuUlGu0L0KW
MD5:	5C6E39A750669B5F5EE09F6BD624FF45
SHA1:	6BCDCBC209346EDB6FD87B7CDC7C3DA906F81D6F
SHA-256:	90330F833BB4C4EA375E9AD445C6FB29E071FBADC5B78C6E76D071A5D46055B1
SHA-512:	AB9DAF8D1F2EC015A503033ED23689649DD6F0950DC7D93FFD66894C7DD797D6EBB956235C4C3F624B3D4304C6AB69FE4493FE4814C1B1B6FF669566B309B422
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$........@.."..........5....................................................................h.a....b_..l..G...z'..x..x,..W..he.....!.f...X5T.lP3........^..../.;.UES'-.&jb."z[........"..J.%..c....z.d#..,.y.....(7.M.=.vV./..E.....Q........<..p...d....$.:}..Z.sT\. s.......ww....6..[.s..q......../5.xqO.k.J..q ......m..>Wq..o...........7-q.@l.......1..D...........^.....g.r]nl.........f....I..\..H..{q.k...U...L.M..a........D.D.e.e.;{..#m5d......n.Z.V(c..........&.f)..+" ..q.\|.\|EU...;._.x..@....".."....>..^5sN.Ea\...,s.\|....\|0.D.RU8E...n......Z+..V.........9+.y;......t\|...&.Qo.Od./;....7C.An.U.G.._b.O;.'T..i!N...6'.j..3.~.X....cX`g.\@ .....z....L....'.tGNv.m.#x...6%..aU-..#j...k{=gx.../.._^5...5gL........V.....3.....dNA.x..@....*.W+..9x..OG..x......mC..Zb.y9t....W.#:OJn.M..^7...7.F....J....

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
URL:	https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fld%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26ctb%3D1%26sc0%3Dsb-video-product-collection-desktop_loom-desktop-top-slot_1%26bb0%3D2330%26be0%3D2352%26pc0%3D15979%26ld0%3D15979%26t0%3D1729723015478%26csmtags%3DhasInlineWidgets%3Atrue%7Csearch_results%3Ahidden%3Afalse%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:15979
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (580)
Category:	dropped
Size (bytes):	429306
Entropy (8bit):	5.571720596824836
Encrypted:	false
SSDEEP:	6144:8qmh0RX+C9TEHwrZvfh8B96HFWO0uc03cp0c/zrViaOdwC7D1ap49c:8OX+C9TE23apN
MD5:	95ADB4E11441543133AE111F393AE44B
SHA1:	F067FF744EDB16413AA15B033E662F6799D8E3C0
SHA-256:	4864C59DC440686BE4906C810035516A36B25E6393C9A32D369DCA5214A17C83
SHA-512:	AF097BF2DCA9BFCDF772A9A5F99FB60D2951FC74BF2A0BD30C7E8D8C6B38EF1162D87EE7E860E6D4D67AB44AC844C9FC0FB08FC81B2EBC17E12CF63EC81EE460
Malicious:	false
Reputation:	low
Preview:	(function(c){var b=window.AmazonUIPageJS\|\|window.P,d=b._namespace\|\|b.attributeErrors,a=d?d("ProductUIAssets@addToCart",""):b;a.guardFatal?a.guardFatal(c)(a,window):a.execute(function(){c(a,window)})})(function(c,b,d){});./* ******** */.(function(v){var g=window.AmazonUIPageJS\|\|window.P,w=g._namespace\|\|g.attributeErrors,c=w?w("ProductUIAssets@digitalBundleSubscriptionTerms",""):g;c.guardFatal?c.guardFatal(v)(c,window):c.execute(function(){v(c,window)})})(function(v,g,w){!function(c){function d(a){a.when("A","jQuery","upsell-container-side-sheet","upsell-container-events","puis-upsell-metric-utils","ready").register("mou-sidesheet-event-handler",function(b,a,c,f,e){b.declarative("puis-upsell-sidesheet-action","click",function(a){var h=.a.data.preloadDomId;a.$event&&(a.$event.stopPropagation(),a.$event.preventDefault());c.showSheet(h);e.registerMetric(f.SIDE_SHEET_CLICKED,1);b.trigger(f.SIDE_SHEET_CLICKED,a)});b.declarative("puis-upsell-sidesheet-overlay","click",function(b){c.hideSheet(b

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1191
Entropy (8bit):	7.699841050561305
Encrypted:	false
SSDEEP:	24:WUnP0r0sAXTxkCbqR9OX1znnUQFR7bDYiFkHFkkZY+OU2LbmT:xw0sKxk3m1Dt/EMsFkSb6bmT
MD5:	8196E1CDBB2CD561DDE2A4B52D0EE82C
SHA1:	1782ACD89CA7E4421ECE3516082397FDEDC48EAB
SHA-256:	3BCF6404A7B6696853A8F0F3E4572D525F2B018911A37BAF87E2BCC97F1BB3B8
SHA-512:	307E3C004B062422D3C66B274597A184F02DD60EF333CE9CBFB9A66458BDF14453759212A3DCC8D0AC520A4BDA95F62B45F5BFD61EDD50B865FA1014C770EED3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...H...H.....U.G....pHYs..!8..!8.E.1`....sRGB.........gAMA......a....<IDATx..MR.0...vJ.G..Ps..'...Xv...n@XvGO@8............N.2..^....'.,...~3.$Nb.../=..a..a..a.....j......_v=...Y.......4.Z..$Ibh....$..=O.}...,Qe.g..@C8..u.P.....v.Q.^.BY...{.B=0..yD(.n..gM r'....r..KRF...c..d1'Q..t.. .(Ne1..D.t.5`E r)..........GxSI....&.s......~....cZP...0.p.>.._~#P..j.../..N....,.../........R....>u..1..n+V.P..Kw.......8.....Y...rI'.[.+!..<.J;l].qfXR...n..`,...5h...Yu...H40B.6.L..1r1..;...y.u.'..r..E;...YP[..-..h.P#..l....a@....^.S...V...f.,c.ba.$i...?..J\|....u...eC;.H[bX.K9...%.)....7h.7..8.;.=.zN.,.2...S.G.:V...@...?Y.R.A..m.JS....@...Mc...Ze.,..~....'..v.`...&.2..k..8..]..u+..x.$...R...!..Syd5..,.. .a...5.&..5?x.YX 5B..Y/..1m.....,c..q...i....... _..nv..1jw.%....&NM..M5.paq.....Q$.."..\.l50.r...Zu5..Q.#Z.....D..'.?S.}'T.j...B~..%....0.....[...R..-....z#D..F.f..!p...8...s. 6.F;3H.V...._..~..y.aE b..<A.."...8../.........5...f.CB..D$k...}A.=..e]+.

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.966773184756171
Encrypted:	false
SSDEEP:	24576:R9K1NDaMNLycMVBug5PowaEwp8BUKfJRE8zP1y+7ZnP:vo/dycgBFBc8KKfpzTFnP
MD5:	5B4842B649B5E10C9331BB80241D88EB
SHA1:	35797AF59D7EA88924F684BEA57374B34199FA65
SHA-256:	4301DEC917667943B1BA4AA4960F0A938E07841F757F318857C26F9F1EF22E27
SHA-512:	0D243D2E9ED5FC21757676CD1907575D68F3C67D6FE2E2FCA5704180BC0760CE41D7DA7BCCF313B9984C6F329D52D0C2DBBC24FB6053C7668F8AF587CCE503CB
Malicious:	false
Reputation:	low
URL:	https://d1f0esyb34c1g2.cloudfront.net/transcode/storyTeller/ABFMOV4MO9GW4/0caeb388-53d0-4863-9a19-241f502f2c06-SBV_291884-T1/507239c7-4f15-4689-a8d1-f57fb521c41d/1601577022423sbv.mp4:2f83c2ce8d8335:1
Preview:	.w....W..`.W.".Pn>..M6;.3..<...0.Z....?n4....N2j{/...]jh+T.\.Q<..~...."..{.".m}74:..T..... B....XtP.2....]"g.(.........4)W...2.eDt....UEm_..0...1..zk_.7...xZ.{a7:.._.{.ph...ThSB..1.}_.jckW......e.....QY.8......[...C ..........Y......0...(.1>G..].8.v..$...0Y....t.e2T4...1.A...wZ1]./.YwX...+..}..........z...(+.O.^/..?.....n.!.}.<.........(2.X....ylQ.1F+..E..K..5..K.w..U..o...0.sXlh/.^3X...0.S.V.".7..3......B.4...(..m.'y\|..N..I../.o~.],..O.E%.....I.cbf..wO.;...g...........M{..a2Bk5...O...d^Mu{.~..0;..g.v.1N..".C.]x..Pb.F..0..._.....8.M.o..\|.i4.......1....6..1.(iE)M.M...9.][00.7...S...2.c...ZU+K.....r..>.x.......N......\O....b_n.<}.>...L.!.uWf37.n!....M..\|.......=.N9....X;..]M..T#..x..]7_.h...&_3<.(..l.g....\.V....V.+q[..@.me.N...3tf.-_..s~\|`97q].i......{.'v?..M........V+....w.....-.3La..p.b.....G.R+wwwwwww~.8A:...E;qY...w...@.].5fh.>...{...q.U....~...*.V.l^...\|.].._....0W'u....Q......m.~.,.......H...S....4.w.a..a....?...C'..}......Om[..p.)

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
URL:	https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26m%3D1%26sc%3Dcsa%3AendVL%26pc%3D19242%26at%3D19242%26t%3D1729723018741%26csmtags%3DendVL%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:19242
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 17336, version 1.655
Category:	downloaded
Size (bytes):	17336
Entropy (8bit):	7.986832176880709
Encrypted:	false
SSDEEP:	384:e5synBGYXpmI4lCKsduXVgswk7BlSOSEtMoFr2h:usyJXpmDlgex73R1qox2h
MD5:	B39E082C6B983705892045FD87E0B9A8
SHA1:	9CC1BB64EB270135F1ADF3A4881C2EE5E7C37BE5
SHA-256:	CB0F25CA005489D2399434C33762F291BD8746714EAE3AA72DE20ACA08EDC458
SHA-512:	DDBB8B598854DD829BEFB27641B1C56F23FCE55283D3FA33F0BFDA1C3B38CE7DC03A799E84902C580BA8A54361D33A49038368C96D9FCDE6A50FE83514774D17
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/S/sash/WOnTLzkiaEccV7F.woff2
Preview:	wOF2......C...........CS........................?FFTM..8.....@.`..~........!.6.$..F..<.. .....a?webf...5l.......?..`..0p....{..Tj....?%........X.....,..UU.o.J(x...g.HK.I..EW.....<...o.RS.,.D.[Xv.s^SW.<..Y0...@..e...t...J$%?..BGb.axC.....hc.P...z7/.m...=!........LET.K...N....W..DOc.x~..>!...."V...D..v."..tQ.t.?OG..y3.../.F..qB.%..@..\..y.2w.7GKB..7).1..p^u...MJ...O.D......m..3..1....5..,...!..x\|8Xo.y.!..A w.T...'2.M^&/''...V.D.Hl......$..D".JeR.L..d"t...6}.c.2.Zkx.....!A%.q...b....$XJ..SJ...01&..X.../.@..n....o...........ow.......$.RB.7...L.Ip.........dOU.......O.w.....Y.[k[.^MR ...v...6...>.........uYZ[.-k...Y.L.@...j...../r..`g>..C..R.rw%..`...p.&q..)(.......z...-H..N....)rI%.B..C.B..K...u...2.E.t.g.>....?..7._....Z.~....t.'.bj.`.\|M.g..fi.X..D.HU.e.Yz..t....dk.t.0...1r.R.v.E.........}....I.?.....%.T.;.`!,.o....B..^.z....b.!BB$Dd.....a}.j!.+..A.A...4"M#"..9..el......A.j..#?"...}...."..#...8k..._.x..\|...c........5.H...."-..a.p.p?..b..K....~.*..

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (596)
Category:	downloaded
Size (bytes):	546981
Entropy (8bit):	5.466568772829977
Encrypted:	false
SSDEEP:	6144:i0WGc0mCJnbuQF3jcL3vOKgXoa6RSmmDSH9asaiakZGiDEnwGie:iwc0mcbWL3vOKg4a6RSmmmHFGB
MD5:	E06CCAFC9D535D7291B39FDE58FAEADD
SHA1:	A9A3C9672169A3994F089A8A869B292D3976F100
SHA-256:	518343216E60F907B6CAD881E9FE665042A0B291BE9B2B53DE54FCA3AEF19863
SHA-512:	0B5D240C5F28A13230F0689142774A72F9DB600A10CE4B675E76FA4C223C18D0BD9AEDE36B0CB2768E32035D6C4D5B26A2810AB1D12924637CB0C391BE337CEC
Malicious:	false
Reputation:	low
URL:	"https://images-na.ssl-images-amazon.com/images/I/411x8BHUrFL._RC%7C71YNyiX9pNL.js,01QvReFeJyL.js,01phmzCOwJL.js,01eOvPdxG7L.js,71Q5u7109ML.js,41jBieyCvYL.js,01wXnKULArL.js,01+pnQJuQ0L.js,21S7jO9Y-sL.js,41rlAdcznNL.js,51Wf+1TXw2L.js,31J-NEfNY0L.js,11lEMI5MhIL.js,31+UifI0MIL.js,01VYGE8lGhL.js_.js?AUIClients/NavDesktopUberAsset&guVxxPUN"
Preview:	(function(y){var f=window.AmazonUIPageJS\|\|window.P,p=f._namespace\|\|f.attributeErrors,d=p?p("NavSharedAssets",""):f;d.guardFatal?d.guardFatal(y)(d,window):d.execute(function(){y(d,window)})})(function(y,f,p){(function(d){if(!d.$Nav\|\|d.$Nav._replay){document.createElement("header");var a=function(){this.data={}},c=function(a){c.manager.add(a)};a.arrayAdder=function(a){return function(){this.data[a]=(this.data[a]\|\|[]).concat([].slice.call(arguments));return this}};a.prototype={build:function(a,b){this.data.name=.a;this.data.value=b;this.data.immediate=!1;this.data.process=!0;c.manager.add(this.data)},run:function(a,b){b&&(this.data.name=a);this.data.value=b\|\|a;this.data.process=!0;c.manager.add(this.data)},publish:function(a,b){this.data.name=a;this.data.value=b;c.manager.publish(this.data)},declare:function(a,b){this.data.name=a;this.data.value=b;c.manager.add(this.data)},when:a.arrayAdder("when"),iff:a.arrayAdder("iff"),filter:a.arrayAdder("filter"),observe:a.arrayAdder("observe")};var

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1730 x 988, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	17986
Entropy (8bit):	7.930640185402301
Encrypted:	false
SSDEEP:	384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N
MD5:	825CCD29AC102FCADAF92B2343D5917B
SHA1:	24472E766CFAC5B82A73B219796556A0A3702BD6
SHA-256:	0878FB2875C0AD852DE8FB3E8F443AFDF3064890F1443B3FECCC274382F913CD
SHA-512:	71B8E7C0813227F5EFA4B4E0561978B13672F46EE441BC222AD77AA46A32F0F44A5DAB3EF038BB3418190E69DCED597A79E77566DA01A259F1CD6B5298A08662
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............N.7....PLTE.#A..,&/M:CaMVs2..J.. .IDATx...Qz......0..,..,7.....)..;.%......z...\|.N....(.........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0P.%........@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@aPea..Lt......[=u..l....=.H.h.O..nN.c...=..e.{l......[,lu.._c...nk,n.....;~..'......^a...$..sb..V...&..aqc.m.3...T.s....*l...#.z........Xt...H+..8c/BH..1...>...CX...Ha.y/.A.Il.2...g.}..s../.Q..8{.;R.9.1.o......eG...o..-.V.:.......;..u...$...5'..lW.:..Q\......v_.:z....4'.,l].2z....4'.e,.~O]..%>\|..v_.2....U}.8..u=.hL4$..7a....j.....;..eM.hL....\.>.......',./.].I,..{}a.......91\|J.z.....s...[C.1...S.V.. ...r..K. .....\|ea.......sb...?j....3.U.U9#..c..T.?......4.......J..

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1], baseline, precision 8, 640x360, components 3
Category:	downloaded
Size (bytes):	25569
Entropy (8bit):	7.812967835441862
Encrypted:	false
SSDEEP:	384:PYXYGx9LojB4MgkjDwbEtCoTBMbLFYHf3vvwE6Ax5ZCIskXzF726qD6:P09UjxgkB3TBMbBY/3vvK9AB66qD6
MD5:	3698657B3C2DC5A9C4D5FCE3238EFF23
SHA1:	70D75E6C3D0A476D22324B22647C2E0DB0D64295
SHA-256:	11E0A5B47BCA165C2EFCFD7F0166210752BD43035C97CA992789D75B3E7C0954
SHA-512:	C95ACC2286A07E670586694A6228658CA2BB2052084EB01F9A730A0FAA839AA7D1DFE26E8078919847637C35A7903C992EF286754E41942EB739E584A5131556
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/S/al-na-9d5791cf-3faf/e038edb4-31bc-4d39-ab1a-a4a7bcee0b7a.mp4/r/THUMBNAIL_360P_FRAME_3_CAPTURE_2.JPG
Preview:	......JFIF.............JExif..II.......i.........................,...............Version 1.0.0..........................................%...#... ,!#&'))..-1-(0%))(...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......h...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..(....(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(......m-......7..........Kx.S....I(.?....%5.=~.^....F.&...s~C5.'..6.$....y@H.k.u(.>TFF........W:...c_O.?.5...c.C..C...G..I....D..

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	10
Entropy (8bit):	3.1219280948873624
Encrypted:	false
SSDEEP:	3:I6MdLn:Nwn
MD5:	6608DD3E21CA3BEABD4BDFA625A0B221
SHA1:	E926D0F8694A4BC4013308AFACA7AF51E4C9FD9F
SHA-256:	C75EB01138771BFB2A5517AEAE882356733782767C4560CC9601C34D2591CA75
SHA-512:	FB9A38C874CD26E779EAA5ACFFFCCD3835620A41ADBFE9B086C6A213BF0596F4F98823487F9C79B8F02F649B8B2E4D3232FFCB78106147B3FF671ED7809BBD51
Malicious:	false
Reputation:	low
URL:	http://ww1.frothylattestudio.com/favicon.ico
Preview:	No favicon

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
URL:	https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26m%3D1%26sc%3Dcsa%3AstartVL%26pc%3D19241%26at%3D19241%26t%3D1729723018740%26csmtags%3DstartVL%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:19241
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 22 x 44, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	538
Entropy (8bit):	7.4475760232899155
Encrypted:	false
SSDEEP:	12:6v/77GLBx7cIa7DgXBei/VFkqG3INPT1Rd+ml9v5l4FwGeVBGeUuDd+eY:jTrAUXUi/zkRINPTFfVl4FwlXGpu5y
MD5:	11C9E0E212BC7CFD6FE2442CD5E185D1
SHA1:	ADE313F5CA61D2799F437EE911A65CA94160609B
SHA-256:	FA9D39FC627570DFDC4B630BAA47D0AC5DBA5C22370233D8B14C77A65D5A1689
SHA-512:	011589F29D7195A2348D13BF85BE599724C59FB7CBA90C258E67C2A4508708509DC68AA30F8102725A61AEE94BF1A3A1855CAF90011652539B209C02BA6420C1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......,.....aUH.....sRGB.........IDATH..1.@..........S..^.Fo!Z.O.A...t..p.\|.,..vg......\|....Uj.^.A.........\|...I.du..Np....D........z..#..k........z.....[.........-.0O..r...=Y..W."I#n.+P.m\.w...^+...J.i....2..j......\..P..P.........SQ....v...L.....H{..#-.B..l0..c3A$......\t./z5-z....x.v.....).c]S\.?~.....^.....j..hK.+..k.).....Z.9"...g......."=....E....WZLN....S.d..o-.G..~..m..0.}iez..Sd..s.seN..i.Pp...k)8.uD(..S....BX<_pj...B...'....H{..#-.B..l0.mc.J..BD...\t./z5.y....b.....?....IEND.B`.

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
URL:	https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fld%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26ctb%3D1%26sc0%3Daod-ingress-assets-load-time%26bb0%3D16556%26pc0%3D16556%26ld0%3D16556%26t0%3D1729723016055%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:16556
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 191x320, components 3
Category:	dropped
Size (bytes):	16655
Entropy (8bit):	7.965849471353442
Encrypted:	false
SSDEEP:	384:LPLPMUEx1140qsu2bnYQpwSj5598VEGjdMrjNUQ2:Lj5I1l5ueRptj5598v5MrWT
MD5:	191100F69A2FFD11D6369B4C9765BFD1
SHA1:	ECD387C7C124D67C7CAD49D15201C7947AFB9386
SHA-256:	E18A39FA9214C177833BC6A546EA66AD3832B74F1C70707AE8027BAC4F749D00
SHA-512:	B2848F02A9329AE6B3DB4BEAD8D43A2ED79FFE1B0D2543E7110A7395E8BC6C37082FA26EE16DAF51347E68B5B86E3517AF2C41DB9DC07941C848CE9F983CD2E2
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."...............................................................!..1."AQ.2aq...#B...CRr...3s......$St...%4bdu.....&5DEU................................................1.!...AQ.."#2Raq.....SB.................?..x....````......$...`c"q..U.&`......F....9..]............+&...L..P..i....Ge.@,.C.n+..Ac..^g.x..#SG.Y.....f'..l.....9mG..........F..J.r.`..2.5.+.B.J.....i.0..<wlF..T.&.Bj.\|...M.s ......T..._.....}=.x.....}..3;...Z.e......QaN...\|G&..>...-..!.)..us.)...-.;...9.5..........0..,.];.5_6....8.?A.......oX..#.t...%(YFqT...yD._^.:z.b.p.}.I...u..2{2.>sG.p......9...Jjw.J5.....r....l.S..D..../.R....F..N....JoT...T>..p...b..gV~.,......Fj}. a.@....vq....na..{H..NE%bs.Zg"9..}..Mjq.r.......&l@.........h....z.....'iu.s.C.Lf..=4.KJ.n..q....4...i..0000...............1..&....{w.....}Q..@\|9..k8.fPC.Z\|....=/...

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 195x320, components 3
Category:	dropped
Size (bytes):	19467
Entropy (8bit):	7.980375653005753
Encrypted:	false
SSDEEP:	384:h2JVdJ3atRqb3n8JVK20csyt35bymEVGOrXE1UP+i00:h2CtYzn8JVKNOtJBEEwYUWk
MD5:	4B390B24A8A96B1E976F61E266B115B8
SHA1:	524270BD7203D046F08A3EFE044E6B7D58A7A892
SHA-256:	1FDCBF1188D11B717B34495B3E506509E2B2A175BC9C63E08869DB905E4D7D06
SHA-512:	BB5C5A54524A87550F5C66E7C49C5CDC9DAA16A55F011CF79379736F7DD65FC1249F5396F17710E1219E60FACB4E415C66E0F9656AAD125D2732AD2A29E105C0
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."...............................................................!.1.."AQ.2aq..#rt......356BRSTU.....$4bs..Cc...%Dd......................................................!1....2AQq.."3RSa..r..#$B.....4b.....T..............?...q.KES_Rm..X..o...;.cl..!....qJ....}l....3..........BW...C..t..7.......z^.o.O..^.<.[.M.I..^....5:>.py.7.................L.I.A....H[.uat\|....q..U..M..'.o.....n..i?...G.c<j...,......U=.;g..+]e}/U..R...K#\|.n..\N.8........H.M..~......5.>.>.g..J.G..wt2>'.....EN<^..G.....9.Z.....^....'*..0.4...C]>.........j.j.._J.&.....1..z1..74..A..O...hE.7i32.1..~....W.N...9.+J>?.g..O..Z.%..1(..)+......q.....Qr....J.......od.%$.Z.....z..5..1ly.3.j....n......)..iP9Hp.\|3.Y.yL!.o4.m.<CT.1..p.,v\Y.#....R<...gG.E....fU.~.N...k..%Z).2".!.w.\|......_.f.....@......d.(AyE\.$[.R..0+t....o5X.F,..je{.Dw#

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 224x320, components 3
Category:	dropped
Size (bytes):	20022
Entropy (8bit):	7.9755408452904
Encrypted:	false
SSDEEP:	384:x+SEllFQmJHvarPKy0eQfFr0/8bfQEfweurDatjoH9SWaoBghUD:Qr99varcffF4/AIPXatUH/FKSD
MD5:	745800472498B7207AC4531CF21B7DEA
SHA1:	3F038DE82D4AC512208CE8616BC7174F854AF1B4
SHA-256:	5198B35E3952E10195980C4FF477E287F299BEFC815BC3DE9F3DEF5ACE740497
SHA-512:	B499AB741D02EB755D905741A82DC3151278A6E44B1538D79830F726EBB0E066AC397C413D551F9F896EEBCDDB68BB073566D364B4505A25A41C75E0393F65A8
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."..........5..................................................................Ua."..\|.3.HI%x.p.qE.8..?%b.=..3...%.)...E..V..JSY..5..i.w...M......hV...i.....;..2].M2.5.^.k.....qi....j..1...ZJE..E.J.O#z.~...E..J#.L.7.W..<.5..N.>.cV>....{.;..~e.l\|.Y....]a...:.....q...Ol...<..zF.V.9.zi..2...../mn....y.....&.F.j.c....I.{W.+...4..V.J..4.t..f%.y^.#...z4..../.+.0....r..8.4.(>.FX....qq.p...'....q\.e-.H....kt...rv....S.....4...K.<..U.8;....t...S_......;....N-.2Y.o....\|...K....d....;\|...\|....1..o...ij..:.hL...T...d.[K..o.:c....VB(.6G<..(I.@a.............}.t@.(.!(f.)....R.i.K.-..Ub..k.m.sv....#...E.\.<F....h....].0..q......7.".q.V..}....M.......L..i......q}s...`g...2a..5j6.C.._yFU.*+9..xb..Wm.\|........5TV:rS...\.>...g.%`Pc4U....".]R.]..]"Q5....')\...,h.F.L....A........+..h.M.I;...e

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (560)
Category:	downloaded
Size (bytes):	8874
Entropy (8bit):	5.481319733535202
Encrypted:	false
SSDEEP:	192:1tRWM9BVlNUBOiH5MFbHLfDNN/W0NOEAHB26aopvjAwzULV65:37HjahBAyJ
MD5:	754C1446B24C549375A5B3E510B1E36E
SHA1:	CE23F09ADA8D964D2DF64FAA277C750E52F74D75
SHA-256:	E538279AD4FCB10FC3823D7204B869E43CF3D98F1137FABE777DF40AB2E2DF2D
SHA-512:	A06FC44108929C6427132D39C3E2CAD70293C3A72685785092811E1609B43B6B983CF6A981F1BAEF2723CA5BFC0E98F5218D4D384508B75435B07DA6EA75603B
Malicious:	false
Reputation:	low
URL:	https://images-na.ssl-images-amazon.com/images/I/31YT4iYOlWL.js?AUIClients/AllOffersDisplayIngressAssets&P3lk6dwL
Preview:	(function(f){var h=window.AmazonUIPageJS\|\|window.P,l=h._namespace\|\|h.attributeErrors,m=l?l("AllOffersDisplayIngressAssets",""):h;m.guardFatal?m.guardFatal(f)(m,window):m.execute(function(){f(m,window)})})(function(f,h,l){f.execute("all-offers-display-ingress-init",function(){var m=h.uet,n=h.uex;"function"===typeof m&&m("bb","aod-ingress-assets-load-time",{wb:1});f.when("A","jQuery","all_offers_display_ingress_utils","all-offers-display-register-state","all_offers_display_ingress_csm_counters").execute("all_offers_display_ingress_load_AOD_assets",.function(a,d,c,g,e){function k(b){f.now().execute(function(c){c!==l\|\|g.isMarkerOverrideRegistered()\|\|("function"===typeof q&&q("bb","aod-main-assets-injection",{wb:1}),f.register("aodIngressClick"),f.register("aodDeclarativeEvent",function(){return b}),g.setMarkerOverrideTriggered())})}var q=h.uet;a.state("aod:assetsLoaded",{isAodAssetsLoaded:!0});e.triggerUnitCounter("aodIngressAssetsLoadCtr");a.declarative("show-all-offers-display","click",f

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
URL:	https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26ctb%3D1%26m%3D1%26sc%3DYT8YJ4B94N98J9DNZQCH%26pc%3D25213%26at%3D25213%26t%3D1729723024712%26ec%3D1%26ecf%3D0%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:25214
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (596)
Category:	dropped
Size (bytes):	146340
Entropy (8bit):	5.47172992065056
Encrypted:	false
SSDEEP:	1536:F2Pnv3DHGitBzz3hznaL+6OhlXT4/6zrdB:Wnh3r3rP
MD5:	930F32DBB785892A1F5EEDDAC96E67C4
SHA1:	F50FA85980F440725B554FE6CB94204DE89C1F71
SHA-256:	888AF778DCF4C5A49C4A3C9577F8DC248BE827E6FEE3B13600214FA39F9988AD
SHA-512:	0A0CE35D8F5A83B157F3B89CE942EEA4B1CF7C9EA416AAC32F3A722A85ACA41D380255B0CEFDDD7B15818994DA0BA63924B66C4E21469EBB0452F207FBF48DE9
Malicious:	false
Reputation:	low
Preview:	(function(e){var f=window.AmazonUIPageJS\|\|window.P,k=f._namespace\|\|f.attributeErrors,c=k?k("SearchAssets@actions",""):f;c.guardFatal?c.guardFatal(e)(c,window):c.execute(function(){e(c,window)})})(function(e,f,k){e.declare("s-actions",{SUB_RESOURCE_ITEM_READY:"s-web-application-controller:subResourceItemReady",DEBUG_VIEWS_ATF:"s-web-application-controller:debugViewsAtf",DEFERRED_CONTENT_READY:"s-web-application-controller:deferredContentReady",FILTERS_LINK_VIEW_READY:"s-web-application-controller:filtersLinkViewReady",.FILTERS_PANEL_VIEW_COMPLETE:"s-web-application-controller:filtersPanelViewComplete",FILTERS_PANEL_VIEW_READY:"s-web-application-controller:filtersPanelViewReady",LOAD_REFINEMENTS_COMPLETE:"s-web-application-controller:loadSearchRefinementsComplete",LOAD_SEARCH_PAGE:"s-web-application-controller:loadSearchResults",LOAD_SEARCH_PAGE_COMPLETE:"s-web-application-controller:loadSearchResultsComplete",LOAD_SEARCH_PAGE_STARTING:"s-web-application-controller:loadSearchPageStarting

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 27, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	283
Entropy (8bit):	5.627839973207706
Encrypted:	false
SSDEEP:	6:6v/lhP6VILzlMbNqG1DB/9w2ZCGErnTyBmgHaTeBJ5cdTp:6v/7uILJMndKPGEbTdg6sG9
MD5:	80D42C82A6C37DA90210FD60A2F36128
SHA1:	554BA7C84D2A27ECF3B1F29D03E62101936B54D8
SHA-256:	A1626E2D9160A0890A0A8D6E3AF9E7095D68A24F9FB5AC8A166000C9A2581E10
SHA-512:	8ECB032C38176996EE637009833F3399F773B325E4F574FBBD26F93CDB82892C4143C5816543052B3A5123B89EF4B1AACA0407315AAB879968085E61A20786B6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............(.....HPLTEGpL......................................................................z......tRNS.t..@....fU...2'...dg.......kIDAT..}.... ..P...{..O5...$....v....a.W..J.....I.ih^JF5P.z..H.Lz..F./..h.:.....{t.....i.....;.h...E.....B.6....IEND.B`.

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x242, components 3
Category:	dropped
Size (bytes):	11465
Entropy (8bit):	7.9319392828276705
Encrypted:	false
SSDEEP:	192:0K2yoJ/PHPM8Dk7LCHKepzyjKL5VAmTvIIQB+o471ytOS7/v8aYU0X:0SoJ//PMEk7LLZjU5KmTwnB5471yPDv0
MD5:	A85FC4BCDE5D445D70D2CE7C6A0B03E1
SHA1:	81E9320EAD318CAE94B99840DAF84E38C2177C27
SHA-256:	758EF06329DF6C9FC975B882BCB532FB3FB72AB1BB1F15AAE6A060A6FA672741
SHA-512:	1B695AA45E9D437E25020A3912B871FF80C8FBC67F23EB27299723FA9BDCE0EA8DE52B76851A571D7E072BA3B8FE1C7E45A84D122F527FD155F9DE36CD4B34E4
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$........@.."..........3................................................................,......A.....8e.>M.@.8....P...@......@.\|!.l...G...A.n.{...>.0.........s.1.."E'..f..k.<...WS`....\IQ.......+&&..7cn.V.E.........rp.Bc.....2c..l(.....9f.{........<.Y.'(.&9.aX.S...$.(.]M.M..a.`.....k+1..'&^H..K)..0BI"c..@..3...........=T...<.q.NIE.l...s(..o:...,7m.cV..E......."....;\.DCa7.i.(...J$..Y.&.....v...V..g..n...p.....kF_L ........8..j....J.HV.......I.e.u..5.d2...q.L.....z.v.G...N.T[.mn....6.sU.lU.-.W0..<v..;LyH.p.b..4..L.^.@..l@Wh.U.f....8I..K.k3..D...-..j.@..,...[.....m.V..f.^h.V./..5.;7......4.=. .)7:...ztl _X.U.&.........,.EZ9.......W..IZ.F.N.C.V.+....K..-.6.g....[v[...."5..b.:.AW...[..u......V.j.a.hx..........m.q...(....&.Jsv..+{.........XE.~t\.H..)&..9...*6q..x..1r...j.c..........{.G..OH..-$.U%.h...

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	5681
Entropy (8bit):	7.911303038558684
Encrypted:	false
SSDEEP:	96:1r0xgECuPiOP5og6U217BDjWqV0y2yMgWqrdN/sY4AHnhYMKNFhqMlPem+vPh3Y1:1fI217BDjyy2yNrvsMhj+FhqMlPuh6
MD5:	AB50E5A3EF4824B09955EDE97BEEC3D3
SHA1:	2269C9406426BB4D54DCED0F2D8C8151AF82F4CF
SHA-256:	3A3C23F46AFCDBA9DDA43D2AE220CF9D5CAFD52CA06147CFC07CDF56D388E449
SHA-512:	9F9962431F8380E97A6ED68BA28FABE25AA4D7263A11132D999052BDCB0089A66323EDE4445F25DF83D1B84528CF670378539000AA96F20AB45911CBB25F0AC4
Malicious:	false
Reputation:	low
Preview:	......JFIF........................................................... ....+!.$...2"37%"0....................".........................."..............#............."...................................................................16Urst.....!234ABQTq....."Ra...#D.$.............................................1!2aAQ.............?..Q..DD....D@...DD....D@...DD....D@...DD.V.B......1.y..eg~.n5..\.....d.W.G.]$.;....}.e...K...N.W..7..?....LNi5_...\-u..u.......3..I0..~#......B..o.....=..!L;WA....^.nS...\-u..u.......3..Z....yz..\.I..lVi...I..1.Ba.d.;.(..Bv..p...e.&.........V..&...KS=.H%..L.D ...vo...=d...\-u..u.......3..Z....yz..\..N..k+..IM,..Fa......E.._..X.{..Z..2..![6\|..r........[1.B5...Nj...E.._..X.{..Z..2.............R[..`.I<.B......h...R....oq..]~f]bm.".k...\.f..K}.C^.rB....;...Mx...;{..Z..2..oq..]~f]b.;WA....^....yz..K.&...\-u..u....&..:{m.s<.R.....{.......S.TER.&y.G.l6..o.....6K....%ty.[....c.{}..g.9..2$2.41.....7........q...D@A.w.+.hbvi.$..s....

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (523)
Category:	downloaded
Size (bytes):	9763
Entropy (8bit):	5.5576256209320105
Encrypted:	false
SSDEEP:	192:6U7KggJdFc65eODBRWPWVJfZZ4CD7N1bNa+AqDWzEF7jTwT8U:6U7Knz5eiBRhVjvriYlU
MD5:	6EED3151A81957F00C3AA5AD97F78CAB
SHA1:	6C0E9AD0ACB70ECB40B78B05CC7273D5FF882C97
SHA-256:	8A1CA9608771693D06B0109E1E442D495DA603F32182A6527F9F1026C84780E9
SHA-512:	92462B00575FE2B761D3159F7ACE5D5FF4C56B71228925B187FEF8E164D5F8C4354215AC2BEF26F0532AA162257AEF285C8EEB902F4EFF187FD9DA8FCCBBE98A
Malicious:	false
Reputation:	low
URL:	https://images-na.ssl-images-amazon.com/images/I/31bJewCvY-L.js
Preview:	(function(c,m){function y(a){if(a)return a.replace(/^\s+\|\s+$/g,"")}function x(a,g){if(!a)return{};var b="INFO"===g.logLevel;a.m&&a.m.message&&(a=a.m);var f=g.m\|\|g.message\|\|"";f=a.m&&a.m.message?f+a.m.message:a.m&&a.m.target&&a.m.target.tagName?f+("Error handler invoked by "+a.m.target.tagName+" tag"):a.m?f+a.m:a.message?f+a.message:f+"Unknown error";f={m:f,name:a.name,type:a.type,csm:N+" "+(a.fromOnError?"onerror":"ueLogError")};var h,l=0;f.logLevel=g.logLevel\|\|A;g.adb&&(f.adb=g.adb);if(h=g.attribution)f.attribution=.""+h;if(!b){f.pageURL=g.pageURL\|\|""+(window.location?window.location.href:"")\|\|"missing";f.f=a.f\|\|a.sourceURL\|\|a.fileName\|\|a.filename\|\|a.m&&a.m.target&&a.m.target.src;f.l=a.l\|\|a.line\|\|a.lineno\|\|a.lineNumber;f.c=a.c?""+a.c:a.c;f.s=[];f.t=c.ue.d();if((b=a.stack\|\|(a.err?a.err.stack:""))&&b.split)for(f.csm+=" stack",h=b.split("\n");l<h.length&&f.s.length<F;)(b=h[l++])&&f.s.push(y(b));else{f.csm+=" callee";var m=z(a.args\|\|arguments,"callee");for(h=l=0;m&&l<F;){var v=G;m.skipTr

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 87a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:M3UWRtJlllHh/:klJ/
MD5:	EFC4EC590572EDBD9502C40266EAF56B
SHA1:	F4E5AA15E838464E0BDE9D43805B5A5F36EEF6E9
SHA-256:	2BB20425D644D2D75889D1192CC182282F2ED2EFA9C7B98CD6E0D70761DE5907
SHA-512:	490A7E2D5F4EF201625FF9ED34D15F2D88FDFFDF6B7048701F3866ED1131997C7A3A80238A2FA19D919F64D6788087931D2EAC53A06741AE65CBA7BB4B0163C2
Malicious:	false
Reputation:	low
Preview:	GIF87a.............,...........D..;

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x242, components 3
Category:	downloaded
Size (bytes):	11465
Entropy (8bit):	7.9319392828276705
Encrypted:	false
SSDEEP:	192:0K2yoJ/PHPM8Dk7LCHKepzyjKL5VAmTvIIQB+o471ytOS7/v8aYU0X:0SoJ//PMEk7LLZjU5KmTwnB5471yPDv0
MD5:	A85FC4BCDE5D445D70D2CE7C6A0B03E1
SHA1:	81E9320EAD318CAE94B99840DAF84E38C2177C27
SHA-256:	758EF06329DF6C9FC975B882BCB532FB3FB72AB1BB1F15AAE6A060A6FA672741
SHA-512:	1B695AA45E9D437E25020A3912B871FF80C8FBC67F23EB27299723FA9BDCE0EA8DE52B76851A571D7E072BA3B8FE1C7E45A84D122F527FD155F9DE36CD4B34E4
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/51gsV34BhEL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$........@.."..........3................................................................,......A.....8e.>M.@.8....P...@......@.\|!.l...G...A.n.{...>.0.........s.1.."E'..f..k.<...WS`....\IQ.......+&&..7cn.V.E.........rp.Bc.....2c..l(.....9f.{........<.Y.'(.&9.aX.S...$.(.]M.M..a.`.....k+1..'&^H..K)..0BI"c..@..3...........=T...<.q.NIE.l...s(..o:...,7m.cV..E......."....;\.DCa7.i.(...J$..Y.&.....v...V..g..n...p.....kF_L ........8..j....J.HV.......I.e.u..5.d2...q.L.....z.v.G...N.T[.mn....6.sU.lU.-.W0..<v..;LyH.p.b..4..L.^.@..l@Wh.U.f....8I..K.k3..D...-..j.@..,...[.....m.V..f.^h.V./..5.;7......4.=. .)7:...ztl _X.U.&.........,.EZ9.......W..IZ.F.N.C.V.+....K..-.6.g....[v[...."5..b.:.AW...[..u......V.j.a.hx..........m.q...(....&.Jsv..+{.........XE.~t\.H..)&..9...*6q..x..1r...j.c..........{.G..OH..-$.U%.h...

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (562)
Category:	downloaded
Size (bytes):	93236
Entropy (8bit):	5.397125859693619
Encrypted:	false
SSDEEP:	1536:eEIiqW8dnB13P6Av59IWb7lIdGd0NQ1X0L7SjR9dgl/aaRZfLRnChZhpHju90u13:xYcQZMuZ7q9P1+pKbaM
MD5:	7DBD0AF1B1B4C7BE16180F86EF947E6B
SHA1:	A4332F3C2B25B2294A446EE8F9A7CAAE8236201A
SHA-256:	30711CA94E9E52400EC9262D2948EC5CD91230C43EFE4E414A39682ED4782F99
SHA-512:	EA05B2825411E1ADE46877378F01186813B4DC07A8F1E787D51A37CE977D4A0776A46AC49CD4FFE0BA22D2010E104D53397649D097A1FDD369E626F06B2701AC
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/61xJcNKKLXL.js?AUIClients/AmazonUIjQuery
Preview:	/. jQuery JavaScript Library v1.6.4. http://jquery.com/.. Copyright 2011, John Resig. Dual licensed under the MIT or GPL Version 2 licenses.. http://jquery.org/license.. Includes Sizzle.js. http://sizzlejs.com/. Copyright 2011, The Dojo Foundation. Released under the MIT, BSD, and GPL Licenses... Amazon elects to use jQuery and Sizzle under the MIT license... Date: Mon Sep 12 18:54:48 2011 -0400. Sizzle CSS Selector Engine. Copyright 2011, The Dojo Foundation. Released under the MIT, BSD, and GPL Licenses.. More information: http://sizzlejs.com/./.(function(H){var r=window.AmazonUIPageJS\|\|window.P,p=r._namespace\|\|r.attributeErrors,J=p?p("AmazonUIjQuery","AmazonUI"):r;J.guardFatal?J.guardFatal(H)(J,window):J.execute(function(){H(J,window)})})(function(H,r,p){r.navigator&&r.navigator.userAgent&&H.declare("jQuery",function(){function J(a,b,d){if(d===p&&1===a.nodeType)if(d="data-"+b.replace(gb,"-$1").toLowerCase(),d=a.getAttribute(d),"string"===typeof d){try{d="true"===d?!0:"false"===

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (538)
Category:	downloaded
Size (bytes):	2336
Entropy (8bit):	5.325315075451192
Encrypted:	false
SSDEEP:	48:8qaGfCntpCntD7/V8Bd+w6jrHusTGJ0nBfdyziit8ZcHF:3aVcb66jrHuseatdyxtEcHF
MD5:	C9647D6B01E0617025076B05E7BED1EB
SHA1:	39E37C18AD6508723B664C873AFA6F02DA8D6DAE
SHA-256:	7399F4490F05A081B965475317099CCDC6245DC1FAEF8B0BC5E500E5FF5C595A
SHA-512:	C8DFDD9A1ACF05FD06F2C20D3F69B0A224AD95D6CD14B1C769D76C6C5FDAC8E9A345A5C9959DE58C32E52EAB3AF0BAB3B9B8D446A84F7B2147472232A330DC12
Malicious:	false
Reputation:	low
URL:	https://images-na.ssl-images-amazon.com/images/I/11mVszy8FIL.js?AUIClients/AmazonRushAssetLoader
Preview:	(function(d){var g=window.AmazonUIPageJS\|\|window.P,q=g._namespace\|\|g.attributeErrors,f=q?q("AmazonRushAssetLoader","AmazonRush"):g;f.guardFatal?f.guardFatal(d)(f,window):f.execute(function(){d(f,window)})})(function(d,g,q){function f(a){l&&l.count&&l.count(a,(l.count(a)\|\|0)+1)}function m(a){return[].concat(null!==a&&void 0!==a?a:[])}function r(a,c,b){a.addEventListener?a.addEventListener("error",c,!1):a.attachEvent&&a.attachEvent("onerror",c);a.addEventListener?a.addEventListener("load",b,!1):a.attachEvent&&.a.attachEvent("onload",b)}function x(a,c,b,h,e,d){if(a){a=document.createElement("script");r(a,e,d);if(c)a.textContent=b;else{a.async=!0;if(e=h)e=-1!==b.indexOf("images/I")\|\|/AUIClients/.test(b);e&&a.setAttribute("crossorigin","anonymous");a.src=b}b=a}else c?(c=document.createElement("style"),r(c,e,d),c.textContent=b,b=c):(c=document.createElement("link"),r(c,e,d),c.rel="stylesheet",c.href=b,b=c);(e=document.getElementsByTagName("head")[0])&&e.appendChild(b)}function k(a,c,b){retur

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	14230
Entropy (8bit):	5.146529116832934
Encrypted:	false
SSDEEP:	192:B61S+I+WVETIguWTsXMx3ThlHzdgo8TxNZJS1m:+zWVETb9TsX23rHxnM/L
MD5:	0AF28B3B129B2E7A300A1D6304BE42AA
SHA1:	2C9A0C3BC9EF8D6E255EF855E8FF286A580E302F
SHA-256:	1BC6E161956C4D095833D7025511FCF28189AF1CFFFED072693233F882987F02
SHA-512:	13C958FED43C363367607A8EB06B87F3D52A5AC1B703ED90E87E7EA90EB9B9EDC3E62FBF5D431465685A99B17C49B011D2EE3E141474E671FCC0AC9825503317
Malicious:	false
Reputation:	low
Preview:	{"data":" NAVYAAN-HMENU-AJAX-->\n<div id=\"hmenu-container\" cel_widget_id=\"Navigation-desktop-HamburgerMenu\" style=\"display:none;\" class=\"celwidget nav-sprite-v1\">\n <div id=\"hmenu-canvas-background\" class=\"hmenu-transparent hmenu-dark-bkg-color\">\n <div class=\"nav-sprite hmenu-close-icon\"></div>\n </div>\n <div id=\"hmenu-canvas\" class=\"hmenu-translateX-left nav-ignore-pinning\">\n \n<a id=\"hmenu-close-menu\" class=\"hmenu-hidden-link\" href=\"javascript:void(0)\">\n <div>Close menu</div>\n</a>\n<a id=\"hmenu-customer-profile-link\" href=\"javascript:void(0)\" onClick=\"$Nav.getNow('signInRedirect')('nav_em_hd_re_signin', 'https://www.amazon.com/ap/signin?openid.pape.max_auth_age=0&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fgp%2Fyourstore%2Fhome%2F%3Fie%3DUTF8%26ref_%3Dnav_em_hd_re_signin&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=usflex&openid.mode=checkid_setup&openid.claimed_id=http%3A%2F%2Fsp

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 64 x 64
Category:	dropped
Size (bytes):	8865
Entropy (8bit):	7.881132938956866
Encrypted:	false
SSDEEP:	192:Y1cVEDjZAvmuIcq09pk4IYIhmJPjfr+UYN36:Y64jGeMpk4IYDJPjyUYd6
MD5:	B05B81750794CA693E9589C0A171634F
SHA1:	FA91375275E3E1C8FCD8F79BCAE5D85593A33C67
SHA-256:	FF24D4B094AB1896672F4C8D387150C74BBB2493F7D01BEA7C87247AA0AB3BB5
SHA-512:	0C1FBBBD92EAD677C12E4B8CC40239FF66D90A899180C0816A4827F982CB45DD259D24BBC08C34FF737BDE5D3BA3638FF99CA33F77D7C0D640B6970969D3B5EB
Malicious:	false
Reputation:	low
Preview:	GIF89a@.@............................!..NETSCAPE2.0.....!..XMP DataXMPa1a8-9458-1177-8dcc-94086be1eca9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.!.......,....@.@....h..#.@)..1..`.P.v.......p...e..}...7.Zm.[....O&$..#J...HN.4%=...F`H..n..4<+g+....F...I....u.ayn=>.u.K.dTw...Ln..w..u.1c.}...u.~.I...;G`..p....]........j..-....@j.My....R...$$....R.4.p.0..........G..p..!]}....0.vxq...]..(T..`...r.. ."...Z,c.@.....P..%.c.w..t..g`...Q..p.C..+M.."fK^.r..Q.M.6...S..FE.............Uo....J..>.v`..+W.:.,{....i.bl{...j..(.....w=...o1.p=H..vC.]...&....;.8f\.... .T.m.....$..\.....W;F..4h&.Y..3..*.so..-B..#...Z....uB.....KAd...`.w....\|x.....?.\|\|...O..9.w.Y..O..m......x..d.~.R.To.IvI..!.......,....@.@....x....H..8.3...TP[i2Q....g...8..[..-.....+...a.fDj............8....+.....&Ue.....a.e....`.n;t@z.f........jw.\.....v?\f...(z.z........k....H.........~@...G........v.....^...H.....N......e......a..........e.....e.......W......,Pp.A........:\|..2,(..c.

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0666130806898115
Encrypted:	false
SSDEEP:	3:CUUX/ExltxlHh/:SXMb/
MD5:	6851DBF491AE442DA3314F19E8AFF085
SHA1:	ECFEC27263608C4AE7CD4F8E0CEBB1B061DF2AC3
SHA-256:	C21E2C1246FE45A6750AE6208DB2B5965FF6ED63EB80D2ECEC3BE9C83813428E
SHA-512:	89DFC38EC77CF258362E4DB7C8203CAE8A02C0FE4F99265B0539EC4F810C84F8451E22C9BEF1EBC59B4089AF7E93E378E053C542A5967EC4912D4C1FC5DE22F0
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
URL:	https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fld%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26ctb%3D1%26sc0%3Dmulti-brand-creative-desktop_loom-desktop-brand-footer-slot_87%26bb0%3D4765%26be0%3D4770%26pc0%3D15981%26ld0%3D15981%26t0%3D1729723015480%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:15981
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13194
Entropy (8bit):	4.652267717786981
Encrypted:	false
SSDEEP:	192:x86GQc2L4lJUITcDJNiIfHI/NzxYVHb4g0wvwR:xNFo/NWR30V
MD5:	BF66FBA93BDD5A864CF7395B070BD432
SHA1:	F18F0CD37B2009C885D54FA5A1F0541FD12FAD6B
SHA-256:	EE6EB50B6B84E172E18F8F8D32FEB40028CCD08723DB58C6AC1BDD0ADDD0892E
SHA-512:	C2B12CA748360DEC07332D04355ADB201FC279CBF4461880984B8CA4F46DDF77A8A7B371B0C24072FFBBFB6CB6AEFDE63A7BD27C69B2488A737A639B7AB609D3
Malicious:	false
Reputation:	low
URL:	https://www.amazon.com/hst/healthingress/flyout/desktop?healthContent=health&metricKey=healthMetric&rid=YT8YJ4B94N98J9DNZQCH&_=1729730154553
Preview:	{"html":"\n\n\n\n<style>\n .flyout-store-box {\n background-color: #F2F5F7;\n border: #F2F5F7;\n width: 165px;\n height: 165px;\n text-align: center;\n display: inline-block;\n position:relative;\n}\n\n.flyout-store-box:hover {\n background-color: #EBEEF0;\n transition: background-color 250ms ease-in-out;\n}\n\n.flyout-store-box:active {\n background-color: #E3E6E8;\n transition: background-color 250ms ease-in-out;\n}\n\n.ahi-flyout-section {\n width: fit-content;\n margin-top: 0;\n display: grid;\n grid-template-columns: repeat(2, 1fr);\n grid-column-gap: 5px;\n grid-row-gap: 5px;\n}\n\n.grid-full-row {\n grid-column: 1 / -1;\n}\n\n.flyout-section-stores {\n margin-top: 15px;\n margin-bottom: 15px;\n font-size: 0;\n}\n\n.flyout-store-img {\n height: auto;\n width: 130px;\n}\n\n.flyout-store-img-wide {\n height: auto;\n width: 160px;\n}\n\n.flyout-store-box-content {\n left: 50%;\n position: absolute;\n margin: 0 auto;\n top: 50%;\n width: 90%;\n trans

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 163x320, components 3
Category:	dropped
Size (bytes):	11301
Entropy (8bit):	7.969087013665654
Encrypted:	false
SSDEEP:	192:3b4VT6FzkYs39V5LL3nu3ohu1ji1bIpQrTJEZEsGb4CkMKd788KrvFlsWK68Vjij:3b821k7tVtTu3okVmrTJCEsGsPdo8xZq
MD5:	B9CDEC25EECA7AB1DC005017D829CB31
SHA1:	D4A671DBF72C4BD8C0610A179FA8F7618C107827
SHA-256:	3F59348B9D7DD5D9CFE5DCD1C7EC9B6E080062E29D9FA03403D8C90674F9BBD3
SHA-512:	88CAFE7C46620CF0BCB1C68669106F09EA1610113BBD1894276C1BCE145EEB9F7ED549E5C4CB7C8D8AE9AD85EC8A5578BE48C1317CD709D0D5DEC9675D9A18AD
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."..............................................................!1..AQ.."2q....BSar...#3R.......$45CTs.....D....b..%EUc..................................................!1.AQ.a."....2R.Bq..............?......(...yr@..sbx.+......~..rn.]J.4.w.e?\b...o.{.J.x.G.(.....@...s.Q!....=.h.......!....g...f.(.............y..H...$.......{.B.,x.p.-..R.g..{`#&...]..>.b....V@....y....s\.....Sw.M.I.j9?.).-...57.P.....{.4.....W....q.u'.8.F..PX.5s.........B.....0~.......\sH.F....0....x...x.W....O..y.=X..C.[..@..{vG..D...r/..0>......W.G=5?%...^x.Q..,.K....mu9W.c..>u..._......h....5.C..3.I..!..{..`..@\. ...u.v...'.up..)...cC..+.c.u.{7...W.=.y.k.}..\|.KyG.&f...Q.2VQ$X..A$@zX...U.vl..KSU..x..0H.[..p.~lU.c...+.B..E.q'.p.y=...+.Y..T..P.N.It.."..b.YC..#...h..zm...lt.N.....8....w.E....a.Q...]..p9...Ln*..`..0A.#.4

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 169x320, components 3
Category:	dropped
Size (bytes):	11851
Entropy (8bit):	7.965437259611963
Encrypted:	false
SSDEEP:	192:TkZL74FEdwU7DNV05o17jTVQf7OlSIRO/NfwyNXpa7EM42MzCzDHdbNJDUG4ni9k:IZomU2XVY79sqN5a+mzDpNJ4izse49
MD5:	BFC1A7D3250206D3A4683BFAB768B2FB
SHA1:	51EDE6E29E3E9B1188BC39723CC9CEA063DFFC8A
SHA-256:	A414751A287F3514F4F56CE9037CE5CA1E5083FEA3B7DB410058F4A549904298
SHA-512:	0A37058221DB4F7EB77E5934A5BA8EA43454391D1812711DD849F958AB8325CBA3E58712C7D8B33D119DE96DEE4DBA5FAF04182021EABC2F3D2739AE55A661E6
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."...............................................................!1..".AQaq.2T.......5BRrst........#3D....$S..b..%CU...................................................1!A...2q..."3Qa...4R...#5BCb..............?..t(P..&....}..g.$.8.T.4.QW.q...l..c.}..l]l..c.?...F..e?i.....{RW...#..]...... ...#.a?.../.S.m..._;jz.%...T>...6X...M.a<.vI./{... ......n._.........>.&.t..Esj.H_..k?....8S....i...N.tY.I....I.?O_..O....j......p>[.c.MY.8-..w.. ML.S...'.E_.k.."...;.:.......J..=.4 ..o.a.)..K.O...}"j......%.[Ik3..D..Pq..+.X?.J..E8..../...@(P.@..(P...-'....W...a...O.h.D.nY......:..zc7.oi..V.V.+&...\..3X&......./.D...s..~E(.;......i.9..\|.X...j.....U......-......U../.J.....P..... .(P....(.Qg.-&.R..ZD.l.X<.........jVb..{r.{.e...dc<.@yy......U..6.r...f..4...'s)'.7...Vs.gdm.?{-.R;.T.m...7..U.\.S.O......aY..

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	74620
Entropy (8bit):	7.995790835187294
Encrypted:	true
SSDEEP:	1536:rynsuD+DbR74aH3eyznLNtBNB+PiDj+7avCWy2iX1wqb01hqxQ2f7AZBiN:buSXR04PF9WIyR1wqg2ZEBiN
MD5:	10A20A25D6AFA0A5C975AE7366900FC3
SHA1:	F2666A20E11894AA62B0E44F2E51783A0B8053ED
SHA-256:	A332DFE774EC2D7647B41D27FD780C16879CBC515E82E6C5473E9913E80BDC1E
SHA-512:	8DD92BADA9541CAF770DB0B4AC2B439624E84EF893E5CAED5DDC40118CF97CD8BA27107C4A390A6ACC6E3124BAF0A1C321577FF2A027AB6716B5C8C16ADEEBDB
Malicious:	false
Reputation:	low
Preview:	RIFFt#..WEBPVP8X..............ALPH.'.....m#9r.?.+_.D..8.D.3U..C.'.p.,gz..]......z.m[.m... ...A.. ...E.....................r:."..$.v........{I....v$.$....K.(W...B.U.5"dA....i.,....l....m[l.$<..P....8.N... 8(..Ap..\...9'..#..$IJ........................x...^P$D.4..u.@.%@Q.t.4.p...e%....[..V......&c.h3b..y..!_...x..z8.`.,.A)..4...R......&......7i.J.y..G~....0....v1.P$./m.fv..7..ft.+..4n.a..T.......{..1...A..2t......H..7@.[E.v.... ..y....%.%Jn_$.?...;..!l....F.re..#.`C0p..NX.$..p3%.Q..;=\E.&......O....E.].P^...a...P.<.{...(...uv\.[g...........y.....b.u2.....n..;..C!1s].RP...-hVT..A.A..%..5...(!..faV\|......F..O..E.s.............^#........f&v#N.f.A3.3.p'.Q4......*W.& ..t...1.......E..}q....6........T-..x.t..:.!$.....J...\..T.....t.d)l...h...~w....F.I..."I....O.......IW..>?..7....9....X.(..X..1\|..7..U?.k.8Y..kV....fQ\|.w.{$...f....:H.....S..6>..y".....g&..$.FC.u......Un....b;....$d.>..H..G..E....!.... ...Q...5..x..v.o}..a.\c..WxR+=Y.\..z.

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
URL:	https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26m%3D1%26sc%3Dcsa%3Aatfsi%26atfsi%3D7013%26pc%3D19242%26at%3D19242%26t%3D1729723018741%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:19242
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 207x320, components 3
Category:	dropped
Size (bytes):	16551
Entropy (8bit):	7.977297103610288
Encrypted:	false
SSDEEP:	384:5FCFMIE834U2uyI2bd4lGQXuhJmUfVZWj:5FCF1nzdi4LaTyj
MD5:	127D2C7A2B46886463665E6BFAC3329B
SHA1:	19305EB79CC04002511A22FDD96106E0F06F6262
SHA-256:	CE456715408E6A915DD68B7A3CE569A9478D8E8A22B39AE1D450167F2298CB38
SHA-512:	EC949C19A047B7E220FC2746C8BAC3B8068DA9C4A700B1E4F9D42336A824EEA75FB004496FAE6EF9E1A7CCF217455864F4F14890273A1998B487528C4CD6B512
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@....".................................................................!1.A."Qq#23a...4BRrst.......STb......$6C....%ce..DU.....................................................!1..AQq.."2....3Rar...#$B..4CSb.............?..(..(........n&8H..8$.{..O...Q.x.}>.im.@..+.[.!U...So....s...J.-.G..~.:..Z.H...q.......e.....q...n..<.9p...w.s;.aN1....k..7m.....z..H..k_....S=.};.'.\......Y..[(.S..~>...]Nd.&.l.pW..0....b.r.....Ay8.`...F...O_.....'..P....7/.S~S..X}..&[....A\|.x...{.r......I.....~..H.R.xm.... .I...t...n.~N.ZE....U....}.f....:O.]....r..y.__oO[..G.^s.......a.2...H$..1.hk8....../.ju.;..=<r_.m.7.Ghd[..pF}^..p}~..7..0.....oBn$m..H..b..}./.?.4.u..R...UU.O..egE../.....)H.f..L._k..<.v..u.............TV.....=.~...Y...~....e.o.........j[...O6...\|xH$?...\;.7..Gk{...8Y...n.`B..._...H....(..U.....]....O.

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	16412
Entropy (8bit):	7.8921634305031105
Encrypted:	false
SSDEEP:	384:+MPKJXJ8oq1Q3euHBYIqO09gohSb+6gOU58ZhGkzDE:kZ8oq1juHBYIt0/hXbUbg
MD5:	926F5A0236D8D496F258E38FE776C4EB
SHA1:	13EE19C3DEC8201EF1D89B5C477B84B14E2C114A
SHA-256:	8C1690474DFCB3F28EA147CED458BC83A78B5505A9CA24143F499AFA367172CE
SHA-512:	B76DF38951E0214738F3C0799C43CF6024EEF7086133F62B88C947F35BF76917C7F851B4E87DCEAEC93E64D81B5949337C68A90C3E00E2C7453F1840F038E0AF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............$.....PLTEGpL.z!.z!.z!.z_....t..r..q..z!.y!.1.=E\`.........D............)...........~.....z".z"....].L....y ......K..................y!....z!......oss.y!...ptt..........oss.z!EIIHPQJNNIMMWZ[JNNKOOJOOKOOJNNJNNJNNKOOJNN`cdgkkJNNIMM~..FJJ.........JMMJNN.y!.......\|$.~!.........z".........v".{#SZb.{!.z"=......................w.X..n..n..m..=...y!.\|".z!.s...8..9..:. >..9..._.L6.....}bU!.)....tRNS.>...c......................o........@.......`...........Q'7.....Jo.........]...w..9)...zw...E..0K.#....{O.{...........$........UU..=.IDATx....B.:...Y.P..\|M.P.]...N.....y.....af..A...Lx.....am.?....H..n..,.. M7.6.......C.m.{.U.G..=U.....[...#sU..rP..B.w.DS.Wf.wO#.......4.......3.O.[m#.B6.+y..Y-..0"..%Bv.2...pd.....1+t...q..Y.D1..y.N.w.T4..B....dO.......'.T....q.n8....a...$k$1.....B...h.!{.....dx.t\|..../.......l~...C.$dY..8[.C.V../...............x..._k.M.u...V.0x2G...o.'$....2....}..Nxd..^5...'W*<......F_.h...o~s..........v..Gx.(.

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
URL:	https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fld%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26ctb%3D1%26sc0%3Daui%3Asw%3Actrl_changed%26bb0%3D2192%26pc0%3D21469%26ld0%3D21469%26t0%3D1729723020968%26csmtags%3Daui%3Asw%3Actrl_changed%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:21469
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 16616, version 1.655
Category:	downloaded
Size (bytes):	16616
Entropy (8bit):	7.986966282975233
Encrypted:	false
SSDEEP:	384:0qJzQ61qLjMj2JfDC3uq2B/YgduJyovfw4TQRJGL7VGhX8aJl/hObP:x8LHMjGbCeqEFuBwkqJGLhGhVLsP
MD5:	4AFCD3B79B78D33386F497877A29C518
SHA1:	CC7EBAA05A2CD3B02C0929AC0475A44AB30B7EFA
SHA-256:	CDED49F94FC16DC0A14923975E159FBF4B14844593E612C1342C9E34E2F96821
SHA-512:	2DC9FFF1D57D5529C9C7BFF26FA9F3F94ADC47E9CEF51D782E55ECF93045200140706AB5816DFD4A0B49B8DB2263320FA2F0FA31A04E12D0C91FEA79B127255D
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/S/sash/pDxWAF1pBB0dzGB.woff2
Preview:	wOF2......@........l..@.........................?FFTM..8..z..@.`..~.....P..9.6.$..F..<.. ..,..a?webf....5l.F..VU..#7.Q...d......k...r....{.T....2KuI.1.+j...(..kvf8...7.+.&.....t..!Z..C...>..=.....v.9_.% .L.....z..........0.e....;.7>.d..S..[..&/....=.9w.n...=.FH.h$...<....s.s.F..`...c....@...}.MP.@.A`T+..J.,F..XT....@..c......TH....OZ..u.....V..u..g...#..~"...Df.\M..-...n.Cu..{f..@.b{B...x......2..;.B...Ah.).....m...Q`!V.IH.pG...T.mb..p.[.v....Z=..P...I.,....m....;..Hva.*..@..x..:.....=&'G. ..0.....Mi...LC...t6..N5..m.........TH.....mY#..g..#.$...7..}...cS{..!.'..n..3...0......lw..D.,l..x...hH.I..lZ.]...4h/..>-A...wAv....W..KeYj{.V[c..d...d/..1.g.(:..5......h.(;@..........0..]+my.qdQ.>..JGu5.v2.3/.)..h.I2.P.. ....P..l......UU..#.d......R..x...)..d...2.....ov..%'..R5.97jA.._...m#..:.Z..r..5.!1.a.`..o.\<.4..j..._.......+Y)E......."A$..-._........c.C-.\....C../C..>..;T.@K...aB.o}t.>..~...>............uP\|..\\|.....1.. x....-%.....<>.$M..(..e......Un.rf0

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 189x320, components 3
Category:	downloaded
Size (bytes):	12742
Entropy (8bit):	7.960295048245375
Encrypted:	false
SSDEEP:	192:EMZ2VKWj1G3/cUd+QSNT2DyNS7J5kbtfiUyseElgyPHhkG7AG:EMZ2VR1m/NfoT2WNS7jWqYcyPHhkeF
MD5:	7BF8C200078135845AD549271F1AC351
SHA1:	56F5737760B4FED24EEFDD693F8896DC9B51BF06
SHA-256:	41DBC4C8D66C1B606DD3F45A95920DB2455D41AC8796F748D1D5574A2409BA04
SHA-512:	D5A1471AEAE9F3DE0EC4C46AB5E49F541BD3BDFBF6B644F2349D1B439AE5D120255A3B85B007840FDD256CE3C9BC0C1F6DB46641ACD9147A6D6D2799A6D08F29
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/71iBD3KxLjL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."..............................................................!1.."AQ2aq....#3r...RBb..4...Sc..&6CD...................................................!1.A.Q"..2aq.............?....T..R..V..;.[.......+/n5.h8..(.....I.....f......A......9..A...&....../.........@...."+./O#..~..i..._"....)..k.....M5............_E?Q..L..J.{....L.....q.......&m........r.p...C.#......N.....]V.9Y......a\.....1.}....#.]..x..l.....,........I..F........>.K.....'..U.uYc.N$...........6..TEQ...]gq..O.#.....IF.`....o=......H...9........{..C...A...;.V.... T.R..J..T.R..Y.h...~5..{......vT;...4X...@y.[P.`.X.t!.#>..P%.........v_s.G..4.....~......O.1..Y..u[......:V..".AR.T.2....?.JZtR.Y.ky.]._..^.adT..s....Nk..h....c.R.e.1.)VFB.J..T.P..J..*.C...7...{C.../......j=H....@.T...R.&GS...LJ.K%-HZ..!jY,yi.M-8).pW....#..z..

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (570)
Category:	dropped
Size (bytes):	454771
Entropy (8bit):	5.5646901373772915
Encrypted:	false
SSDEEP:	6144:1egUGJLlclm0qb6eNStuxMX2VQ5PUZAHuIOuH:yUclm0qeH2KHn
MD5:	770117A8C253A8649CDF30CFECAE4E3D
SHA1:	EEA65FEC2DE2C250AB28FF8A9C057EAD2A7DBD91
SHA-256:	61DCB4F972716E50566F516FCA0E7DB600AFCF2223726EAB58C170AA5A22CD09
SHA-512:	DF4E406EF663F3938E92E0286FA49567521328B9AE7204734E1C6C0769DB6C94249A476FF4C843145B4F2BCB943920CBF36A9A60B23833A43B1C305C03E072BB
Malicious:	false
Reputation:	low
Preview:	(function(q){var x=window.AmazonUIPageJS\|\|window.P,F=x._namespace\|\|x.attributeErrors,A=F?F("QuantitySelectorAssets",""):x;A.guardFatal?A.guardFatal(q)(A,window):A.execute(function(){q(A,window)})})(function(q,x,F){function A(n){var f=!1;q.now(n).execute("qsAssetDuplicationGuard",function(a){f=!!a});return f}function L(n,f){if(!A(n))try{q.register(n,f)}catch(a){if(!a.message.includes("reregistered by QuantitySelectorAssets"))throw a;}}function Da(){var n=arguments;return{register:function(f,a){if(!A(f))try{q.when.apply(q,.n).register(f,a)}catch(c){if(!c.message.includes("reregistered by QuantitySelectorAssets"))throw c;}},execute:function(f,a){q.when.apply(q,n).execute(f,a)}}}L("QSAssetDuplicationGuard",function(){return{register:L,when:Da}});"use strict";q.when("QSAssetDuplicationGuard").execute("qsAUIDeps-main-duplication-guard",function(n){n.when("A","QuantitySelectorConstants","a-util").execute("qsAUIDeps-main",function(f,a,c){function h(){w&&w.enableCheckoutCompatibility&&g()}funct

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3672)
Category:	dropped
Size (bytes):	157151
Entropy (8bit):	5.598088111431096
Encrypted:	false
SSDEEP:	3072:TRCpABJJ8hNuBHC8jf9Kc9Ot4fqWpikOQMuOgqpBZA7l9YNuiOnENBm7P4REPBw:TRCpABwhNuBHC8jf9Kc904qWpikTMu+1
MD5:	ED1FC0C9D61E4EC64A70A4D4D7A73D02
SHA1:	5880633E9B0B33B206C94BE59C77C344CD398374
SHA-256:	4CD8163981E9AD617E762A4030FC43673E000C4F70B964240AE0A401695F441C
SHA-512:	4517406354113DC77FC95FCB892B05C5B43573E4384D26D4BE8E0705923630212E12AB774AA7693A7FE3D7EA004F6B4BDE9C965BD40C5EB70CEF244E4B96DB6D
Malicious:	false
Reputation:	low
Preview:	(function(sttc){'use strict';var aa,ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",fa={},ha={};function ia(a,b,c){if(!c\|\|a!=null){c=ha[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ja(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in fa?f=fa:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ea&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?ba(fa,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ha[d]===void 0&&(a=Math.random()*1E9>>>0,ha[d]=ea?da.Symbol(d):"$jscp$"+a+

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 13 x 25, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	538
Entropy (8bit):	7.363900406422438
Encrypted:	false
SSDEEP:	12:6v/7r/6TBLr8CzfiF2PuKoSpH/geL6Ou4zlWkqMlMQn9inLjj5N:i/6FLlzu8kSdg3GNqMlGr5N
MD5:	3920E1FFC5AB160D1D7F18D8D6303633
SHA1:	53390E776D482DB9E85814A752276F517523724C
SHA-256:	3F8C75CC2824A1CE825FF2623763046C497B7D06587C14A07FD775F7506BCDA5
SHA-512:	5F368C2EFCA94B7021CC693CE95C9A598EEAAFF83072E2D14FF6A6EFE272A07B9301536237EE263E398D87CBE1E72879D11CC6EB443211C99118FB88E85CF35C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...................pHYs.................tIME.......}.......bKGD..............IDAT8...n.0.E.V....J...@..........f&...'@.[.202..d...$[:"..Vv..Z.z..N.....V.q6....P.X,.r.,;E.....L.S..#.c..y.=.'..h.).....!.....`.........BR....#.)PdP... ....4............:.f.Z.....4...A..<..y.....N.....,..\.!.L..v...1]...d...t....i..5.A....(.......O,..E.o...RM.....h4..j...JU.\/t..j/P.$........z=...C..&y...z-.9b..!B..(...=U...B.J..M..,!n..............!u...x+.u.B'....=...j..O..{.E.*~{...j...?......J.T....IEND.B`.

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 420 x 68, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	3706
Entropy (8bit):	7.793291010216675
Encrypted:	false
SSDEEP:	48:PvpATrhCupQrhEO/KMYi/AlKdQdd0KLbIs8eOSrqcKyNJgmvw0xBCLLb+tAmJqgf:3STwupQVE+oacKOH5bwebXwycythrIs
MD5:	41BAB80437B25A1A16A24E619510118F
SHA1:	5AA317A599EE131CA8CCF9740F36014DA18E5396
SHA-256:	3D22700EFC67B3DED0B3A3E514996BA0F036645605114DA4003B27617BC71974
SHA-512:	150E692F6CE81B6BEFD163E8882BED9244D3281570A81B99342AE7BEC4DCC4B6E1016C7C8D3678194E8AC9D401919BD1FF7B960DC4621AFA00E5022C013DACB0
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/G/01/HST/AHI/Desktop/Amazon_Pharmacy_RGB4x_1.png/
Preview:	.PNG........IHDR.......D........1....gAMA......a.....sRGB........ePLTEGpL....)3....)1..........)2.(0..........(4....(2. 0....)1....(2.(0....2.......)2.............(1....(2.)1....)2.)2.)1.)3....0.1.)2....(0....2....)2.......(2.)0.%0.......2.2.......(8.(0.2.00..........1.......)0.%5....(3....&3.......(1..........&0.3....2.......)1....)3.)2.0................)3....'0.5.+2...........................................)20.@L...utRNS......... . .@@..@.`.@ .`....p.. `._.p.o.0.o`....0..P0....P _......!qo0O_.PAa.0..P.Q.1.. ..O.A...P1p0...0..o^.NQP.M$....2IDATx..YC.H...S.e#....3..ll....I @..I&.If73.w.>..:..j..-.!;.z..R...U]].BQ~..t.KFI...5....H!..BJ!..BJ%..BJ.C..Y(4V.9.y.q1....r..es>J.{C.QTf,4.......r......;..u.uu~.{._.....-.Xv...j.V.&.E5Xt..H.)...w.%?.d....fp..@*e...S.........l.W...0xp..U.(+.e........^6./..O.M.w.+.Ub...'.\=r..u....._....u.F{..`..`l.%oV.#.J.{....ib.E..,.3DH%`.`..s.E=..d..U..v..=.).M.\|....M.x.._{...+....c..+..w.u-.&o..k..P....s .)Wm,..h.%x..G@R

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 339x640, components 3
Category:	dropped
Size (bytes):	21908
Entropy (8bit):	7.963750476269325
Encrypted:	false
SSDEEP:	384:LpxuKDFdqepb+H8rsZp19KFWG/zLsVL7uMngOZoP/7fx119jL:LpxuKxvpIr7ozLs57hXZoHj
MD5:	F2B6C58E161433BCD9CFADFEA754C533
SHA1:	A78163C2DA819B4108AC680C2CFFFD2B6AB8B848
SHA-256:	4F9127E999B7F59A2ACB397633DD953FB71BB4A746CECCF66B8423940B03084B
SHA-512:	A30F24BAECF6BFB1B974E12B2F3B6F0057FC4C73CE3B78790C1C384168618525A2D6F6844706CE99886765003E791D357BB409886D651686F1FFC95738BE54A1
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................!.....+....'...'.''.#'##,'!!',#');)0+5,)8););::=BC;'BZ..........!8'.,:0.)E:C,:=::+L:C8:#;:,55,,0)0:,==;.+=8'Q+,':8B5'=H........S.."..........4......................................................................9:+_-U....+&zM....xk.pv...2z..u:..pv'.........@..<..../-k/aX.2....../.........p...!...!H..L..n.....i..0`.IGJ......I...3...P..~1.N................D..o.........CM.1.-R..c...%..."...]6....X.....o.@.......p....."%...7.7.p....c.c.l...#X.`6AT...3]v...nXz.!.s.@.......y......N&z....q..dW..f..M..1...Q.!...t.A.i....2...~'..0$........\.y.....%....C:...m...56.kB..W..hE....h.b{.......1...........T8.~....m......L...#.5d1.....3DY..2..h...^...H.........=..z<.r..Vv..p`V.b6...h....@U3&..].(..........i......'.........:X.[J...o]L.$.1..575p9...t7...V.ut.pV....m..(...?.x[.*.k]..?..\x.....)......".I..5...v6...H.3.Ld.....S.V...BR.g..8Js.b.u...LC.......>.5.._3..K...y=!=.z$.@........W.5.UH..k...@.g.....dl....>w=.C^.0.>V!.Ig.5.....w<Q(=w

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (528)
Category:	dropped
Size (bytes):	4823
Entropy (8bit):	5.3519488745769435
Encrypted:	false
SSDEEP:	96:33qZ8ZYxGhDfr2hZnt3b/ZCWZ4eBuTZhhREIWMUiyr2UpljeJEtBVMZYhZV+6x5D:H8ohOV3bNCTyrljjyWH3ggD3
MD5:	B8F0148A13CD20BA79C167E180F68153
SHA1:	1ABCDC6833021DC58784B7ED9FCDE8BF550E7A85
SHA-256:	9A1DA7FBA4EAC875624D392CB95BA078E0870F97A398A2AF3A6CF726F6D4D418
SHA-512:	58B9135347E92721B7BD066BE96BD8C6A6B468D7F44DA45016C9C00FFA38BF55DB9F55EBFD8121C5D329C09AAB4059A28C20114C0C09E14A0B01688BD1CE4377
Malicious:	false
Reputation:	low
Preview:	(function(p,n,w,l){var r={EX:{}};(function(){return"object"===typeof performance&&"function"===typeof performance.now?function(){return performance.now()}:"function"===typeof Date.now?Date.now:function(){return(new Date).getTime()}})();var u=function(a,b,c,e){var f={};try{if(5<=e)return{};b=b\|\|n;c=c\|\|a;for(var k,g=Object.keys(c),d,h=0;h<g.length;h++)d=g[h],k=c[d],"object"!==typeof k\|\|Array.isArray(k)?f[d]=b[d]:f[d]=null==b[d]?null:u(a,b[d],c[d],e+1)}catch(l){m(l,"ex in collecting-")}return f},v=function(a,.b){var c="";try{var e=b.toString(),e=e.replace(/\n/g,"").replace(/\s\s+/g," ");c=e==="function "+a+"() { [native code] }"\|\|e==="function "+a+"() { [native code]}"?"0x6":e=e.replace(/function/,"fx").replace(/\[native code\]/,"nc")}catch(f){c="ex"}return c},s=function(a,b,c,e){var f=[];try{if(5<=e)return[];c=c\|\|b;for(var k=Object.keys(c),g=0;g<k.length;g++){var d=k[g];if("object"!=typeof c[d]\|\|null==c[d]\|\|Array.isArray(c[d]))switch(!0){case !0===a[d]:f[g]=1;break;case !1===a[d]:f[g]=0;

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 12132, version 2.66
Category:	downloaded
Size (bytes):	12132
Entropy (8bit):	7.981424668990819
Encrypted:	false
SSDEEP:	192:7RRhX96OozMvZUJV1wvCxem8av4OWmpExtXfmmRLvi0F8WUL21vVQZKsvfntrdz0:7RRB96NYvZUn1eCFWoCtvmmdiGdNVdEs
MD5:	5D1BF65A91FD89E3B989D63EA09D7038
SHA1:	CC80B14C01D3B1EC2B12CDC1D404BAEF079FB9D5
SHA-256:	4D398011FBB20AB18B7EAD0083B71F2A3BD450B4DAB2EE3EBE91181A46ED148B
SHA-512:	81775C89189C34A8D83AE50BEB41DC4A8E68D109605AFB561D7030ECCBD11182B15B2A80CC96F1AC0EB9D0D6CE2C20B3C29E5E6F59651DE26BA619B6496DD91A
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2
Preview:	wOF2....../d......q@../....B....................?FFTM.....F. .`........x.-.....6.$.... ..4..C...L[..\#..@t...OD5....[.H.d.....!..%-.;db.9.J..hb.1C.......l..7.D...L....a[AA..~\|.x.B...0...Q(b.......w...N...C{.D2..t.....#...........&.....JaE....z...6.'9yy..?.yow1.P....U...H....U....^.-...p.....%.......n...F..`!...s.aS)....e..a......QB.`.....Q...J..@/......y..=...6.K...<6.....O1..$K.g63............U.../...F. ?,R1M!.&..bpb..^.......t\;.o...W.?.S.Z~/i...^..<....;...c.c:.${..u4..N6.w..k\..@..@.?:.cu..p...a..6.C.D..P-...y.9....O..f....By...X.....&.O..&.9+..?b.I.j... ...u..t.eH..^...(..E%=Y../yeI.Z..x...y.x}d}iI.x)....8..p.TPQ.dRe.L."].TtU.:E._...I..X.&x,........+......R....S{4v..I:.tk......w.>..U1l.......W...au......;...g@2L8.......,\..6....~..HvnX.\|.m...O...../.m.o.i....:..A...<.g.\|.o.s..B.....w...8c<.}.9...=......Yw...S.&rn....C........x^.......y.._...?J.'{.>.;.jz}......5{.$d.g.,?....< .LlgL...7.r...0........7FjP.4..c...Vc].....$*.....Q....J.....T

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 13 x 25, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	538
Entropy (8bit):	7.363900406422438
Encrypted:	false
SSDEEP:	12:6v/7r/6TBLr8CzfiF2PuKoSpH/geL6Ou4zlWkqMlMQn9inLjj5N:i/6FLlzu8kSdg3GNqMlGr5N
MD5:	3920E1FFC5AB160D1D7F18D8D6303633
SHA1:	53390E776D482DB9E85814A752276F517523724C
SHA-256:	3F8C75CC2824A1CE825FF2623763046C497B7D06587C14A07FD775F7506BCDA5
SHA-512:	5F368C2EFCA94B7021CC693CE95C9A598EEAAFF83072E2D14FF6A6EFE272A07B9301536237EE263E398D87CBE1E72879D11CC6EB443211C99118FB88E85CF35C
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/G/01/ad-feedback/info_icon_1Xsprite.png
Preview:	.PNG........IHDR...................pHYs.................tIME.......}.......bKGD..............IDAT8...n.0.E.V....J...@..........f&...'@.[.202..d...$[:"..Vv..Z.z..N.....V.q6....P.X,.r.,;E.....L.S..#.c..y.=.'..h.).....!.....`.........BR....#.)PdP... ....4............:.f.Z.....4...A..<..y.....N.....,..\.!.L..v...1]...d...t....i..5.A....(.......O,..E.o...RM.....h4..j...JU.\/t..j/P.$........z=...C..&y...z-.9b..!B..(...=U...B.J..M..,!n..............!u...x+.u.B'....=...j..O..{.E.*~{...j...?......J.T....IEND.B`.

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 261x320, components 3
Category:	downloaded
Size (bytes):	12028
Entropy (8bit):	7.945844263336166
Encrypted:	false
SSDEEP:	192:YdWfl/mjRq0tMvx+sdD6Ijq5uMntwCqflzTa8zwBIZfMIKRHkETKGjPRHKTLy3+j:Yd0KRq06vxLDbWtafdwRJr7KfN46UFi
MD5:	2E312FD7853BC29AA348EAF69F43F964
SHA1:	48E9495985D58B80E3F6FD20F969A47FA4ABAFBE
SHA-256:	2700914347288066C43761B89483CBFCF215CF12B12165FD31AC30955322DC53
SHA-512:	43792C5DD91E2C9DEEEC8E5AE9DA4F8D08CF4291268150B4412E550A978D7FCBC5A352109C1F4A87B9E92EC6CD6FEA2F7FF02A16022E4957C8509E3CEA156DB0
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/71Vr3kC5pBL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."..........4.................................................................+..3V...f....J.Q8....j.+.....o.B.\h;.....PZIL.{6u...:I.$.)...r.H....s..."D..... ..1JQ.F...!..m.d'L...5.BZ.$..I.+;.A....U]1. .8...F..f..F# !....;...d...NKK$R...N)$.}QuM......I"1Jq.$8.$ !JQ.HQ...w...........Mi:a.f..pI .Q.Q.....8.$04.@.....'!6;....I.i.8.t....4.{0$..I.".../N.Tti......7.....7.vA7O.!.8...M.{.g.H...#.}.=k.aXu.[I.Pr..5....I8..b....^......b...h...c.y..\|...W.~...2...+<..)i.Bv=...,.!f...Mvo7....w.%....Z1&..3...N)$....=...G].o...N'...lb..k....f`s.hl..mu&..6..$+..>.S.8....3....j]-\|..i$....f....?L.c..z.......;gG..'WS.!..A).G+..=.9...#..........%...M$.c.Z\.n...n'.G..(}G...sn.".wy:...:\|K...".......]..EiN.T."..)m'N$BS.....I&.H2..Fc?F..6.O.M...._LH._.vB.k.....z^........gi........q..y.N.(...j]-\|...I.K/..g...S~w.Q........5..

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x301, components 3
Category:	dropped
Size (bytes):	26429
Entropy (8bit):	7.971302227472727
Encrypted:	false
SSDEEP:	384:smQ0oqM1epcjQ/K1n7UW8P+F1C0jcO8dnoS6flNJNLw0BGET96LS+i:sv0oqM1OQTnAR+DJYLdKTbU0AETMLSr
MD5:	E721893A13ED15C12FA136E1DDEC60DD
SHA1:	BEF32D5CDCD65F2D2089F259ADFC9450B7996756
SHA-256:	C25A054DB459783A375641DE5276E819CF0A1673AC2E3D346FAE6717AC3BB1B2
SHA-512:	8638915518DEBF472050EF414995F7A33274F0A9E5B81BDF20A5FE44FB33EB11F177DBE4C96CCF97CB754FCD9BACF7E7C2EDBA0C277B38ABFC50D9DE5A142684
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......-.@.."..........5................................................................../3.....O.........`.a...cS...w....e...F.0.(O......I..zK..I<./...C....fjC.O..............:.f........7..C.Y...d.+..V....r..>i..dp.u.cV.=i'...xt..b[ynL<q..Y...L....Sc.\|..S...vRe.........+.O0..=!......N.V....?.........5m.ci.9+s.I..Z........3.?P.]..I4"..U...;{c4...o..0P....W8....A...W....Ey..9..A&.... M..c-.jC1D..A..oq4..xm.f.i.4.f.s...n.eSb...K.J.....C....I=.9y....#...!.......}...\.\|\|..b../.P....V[&.t}...V...q..=.7.xW...w...A.......[z@.C...}A..p..9G..]..1..0../.V.{.B...P.e].O..R....4.nP.....\|....Q.z.k..Ff...<.."..h.Z...S.+...z3z..h.:.U...7w.._....A......8.E..]A..M.r......5./}.."..._]i....).5......8'...4...D...N.).....{.Q.P.Qb.~...;.]u..g.1........A...F..6pE....}7.V........[q.$..).M...K.[h{...ah.....'<..

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	22344
Entropy (8bit):	7.982903411103414
Encrypted:	false
SSDEEP:	384:OeJnNoOMVkPKttNYLyie7aszw2MSAcmZGi6WNlNSMP+QsC9L7+1NAcpXYk5lRAHu:JNo3UKtrYLvn2MRdGCTNx+QsCN7/SVDr
MD5:	03F87E86398270CA9B43E26591E09A89
SHA1:	671F9161E9B9AE7884B5A78E5B9E56D55B82BC27
SHA-256:	F055967677B0A71B6A0C83644F713B56E145576A2D58D5F1462E4EBB99421CFD
SHA-512:	66498E3F2B8F30060C68476CE0F22171FF4BC8B67B6F2CD52EC5E34A239587F2C3ECA017B7C283BD692DCD7E84DC319C8D4A600DC4FA0FA8C7DB8203D52793E5
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/G/01/HST/AHI/Desktop/WebpImages/AP_SecondaryTile_Desktop.webp
Preview:	RIFF@W..WEBPVP8X..............ALPH.......i.0...;."".n.Vm...EB$D.....t..Z.......wo.w..8h.....c].=..I.F...m.......!..!.b.....3.b.....#.f.\|..n~#b......\|.........OOO..........w......~......?.....>.7.?.....EK.H.................hI...9.._.......B..Y..."...........bK.,.F.......\._.......3C....xC....)3.hI.....?=..>>.....b...m....<._....=/4{f<......5.%.z!k........"........Oo..O.Hf..^H........)Z...%....<}zK\|~.I.!..GhAQEO.....C.F.$/<k...O........-.[..%k.......%...6...Df..^... .#r.f.P.O.^.....6.rc..O......!.s+#.B%Z......m.Z".6R"$d.zxu...C#....1.m\|y]..k.5....t1..T......?..1....Y...Z..u...-.\M...Uxx....^.P!4..O.....QR....[...B.^....}.9B$.9w..(.....v..J#.^.H.F/.J..=....=<E...S^.D. ...p.><....5D...e.b.zz.Q..X#jD.Y#...m.."~.v.>).PQQD.... ..>./D(d...r.S#...I\|.9_2+"4zF.n...%r....e&h......-.Z.R..\|iqmVB.Hn.R..9..../.l.,3bPy...Zfe.._n..#.g.y-,.s..}.._d...-.. .f.mk...r.~G.Q..b^....%.9....G.5.Z..^.B.F..-.._..?r..h"Y.j&......\|xa.OF-D${.Hy5...F...~xQ.OT..!.B2CR.A...YKJH<....

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1730 x 988, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	17986
Entropy (8bit):	7.930640185402301
Encrypted:	false
SSDEEP:	384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N
MD5:	825CCD29AC102FCADAF92B2343D5917B
SHA1:	24472E766CFAC5B82A73B219796556A0A3702BD6
SHA-256:	0878FB2875C0AD852DE8FB3E8F443AFDF3064890F1443B3FECCC274382F913CD
SHA-512:	71B8E7C0813227F5EFA4B4E0561978B13672F46EE441BC222AD77AA46A32F0F44A5DAB3EF038BB3418190E69DCED597A79E77566DA01A259F1CD6B5298A08662
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............N.7....PLTE.#A..,&/M:CaMVs2..J.. .IDATx...Qz......0..,..,7.....)..;.%......z...\|.N....(.........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0P.%........@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@aPea..Lt......[=u..l....=.H.h.O..nN.c...=..e.{l......[,lu.._c...nk,n.....;~..'......^a...$..sb..V...&..aqc.m.3...T.s....*l...#.z........Xt...H+..8c/BH..1...>...CX...Ha.y/.A.Il.2...g.}..s../.Q..8{.;R.9.1.o......eG...o..-.V.:.......;..u...$...5'..lW.:..Q\......v_.:z....4'.,l].2z....4'.e,.~O]..%>\|..v_.2....U}.8..u=.hL4$..7a....j.....;..eM.hL....\.>.......',./.].I,..{}a.......91\|J.z.....s...[C.1...S.V.. ...r..K. .....\|ea.......sb...?j....3.U.U9#..c..T.?......4.......J..

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 250x250, components 3
Category:	dropped
Size (bytes):	6850
Entropy (8bit):	7.870713538166107
Encrypted:	false
SSDEEP:	192:8sepMcDUC/+g/rm9wEaafidpi9Xs/CMubncQRwYVESd:8PN/i9RNido9X4CMOhKYXd
MD5:	09C51C1FFBD6170DF22E6EB1D26FCCC6
SHA1:	EFF848D1729766C660567B3A204A5E54D71A6EC6
SHA-256:	D64C73E297C0ACFFFC3478E7F252B18EC7B8355145993A8E30B0CF4F9E366289
SHA-512:	ADD6B17C9378FD55589DCF2756CE1A20A472539C007F89773673DCE3E7F9AB6033519F4D998CFEF062AE8155DE47E9AE2497C12A7C28C8F756EAD6B6D23FC5F5
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$..........."..........3................................................................,....;...OjI..?....uv..u..W;_Z...P_.........._..q..i..m............J.s...... .2?;hW0......T.v...a'nJ..%.......w.q..9W..k..^~.A.........;.Z..~)r\|............tW7....N.,s_.\s.P.........qKz....=.&....b..}.:....R.h.!w4n....uvY..........-.'.SZl.....f...K8...h..o.5-F..:...]..K..{...~(l..k..........+.....f..F....~...>j.....'}GQ.tdM......83............+%~..o...1YrZxc...C..l).X......l.C.......).)..O......9]..v..98......l"...>....N9......{..G.......4]..)....%.B.:.....6}}.S.N9.......z.G......OL.cyNq.../P.8..G....T{..6.q..@.......Q.'@...9.{Swz..NG....xI.3........<........Q.f..../..J....q.;a.<.w....\[..S=.<........Q. X[z..fa...~).6..a>Y.kc.Vf..."...]..N.[4y.....b....e.=gQ..........8.{.[...V-...o._..y.$

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	196
Entropy (8bit):	5.098952451791238
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezocKqD:J0+oxBeRmR9etdzRxGez1T
MD5:	62962DAA1B19BBCC2DB10B7BFD531EA6
SHA1:	D64BAE91091EDA6A7532EBEC06AA70893B79E1F8
SHA-256:	80C3FE2AE1062ABF56456F52518BD670F9EC3917B7F85E152B347AC6B6FAF880
SHA-512:	9002A0475FDB38541E78048709006926655C726E93E823B84E2DBF5B53FD539A5342E7266447D23DB0E5528E27A19961B115B180C94F2272FF124C7E5C8304E7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.</body></html>.

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 405x640, components 3
Category:	downloaded
Size (bytes):	18090
Entropy (8bit):	7.945749863316319
Encrypted:	false
SSDEEP:	384:Lfk2XqAWr/Mcfe6O5mkF5c+kXTesNNQzUMq6HVBHqVSQdsEIH3Uo:LfkMqtHeDQkF5x1tzzq6HuRJo
MD5:	E90BE588814C5D1550C78D6809D1A653
SHA1:	6B4D96D7C1E7129293383090F420FDF558D0A094
SHA-256:	2E274D3BF995DBE4C72394A1A588E7E5F917A8B3690DA12AEF75FEF2E488664C
SHA-512:	8C2EC4241E7DD0190203A62511FF552290B62CFF2E41786C49C707C82ABB620BEF87A8F31A84A8125D46F02EA0F72E056EE60CFB309A50ECD245431B78DB5BB0
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/71kvz9PSYkL._AC_UL640_QL65_.jpg
Preview:	......JFIF.........................!.....+....'...'.''.#'##,'!!',#');)0+5,)8););::=BC;'BZ..........!8'.,:0.)E:C,:=::+L:C8:#;:,55,,0)0:,==;.+=8'Q+,':8B5'=H..........."..........3.........................................................................G.O.yL....!l...A.r.........u.$....i..f.g..................../......@...@.@A...0B.....Y2.I.;#.....@.........3.u$...&.YH.."`..P.VR"a.&.GAY\......o.-.J............H.D..B..L......(C,2.......@......yz............"a..........[.He"$!YQa..e..D..$!..o.Yt...................c...4j.S...3`..4..5...C&.e.S^1.5..Fs.45..................<o.....U..L^....hr.R...Dt...5...Y.6.d..[U......................1..9.U..PZU...".QZ5..P.....JB..'IP....]....................N......3.Ed..8#....;..S.;.>;...8.Nb.(^.(:.N...W....x.av.(.............XV....).......).K,.....(..!*...tE2..Ad.%.\|6]{a...........S..l.h.F9n...........N..XtXF..q hH...H.I.g.....V..._Fp....h...........2%d...aE.X...3...}E.ef.Af.%H...`...Y.tq.e.V....8Mt..4.....d.b.evg...U

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 350 x 450, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	14256
Entropy (8bit):	7.935047719221589
Encrypted:	false
SSDEEP:	384:lxTA3vdo5DGwFf8U5JHP0gRUTKDrbymGanXyR5LdY/JBO:lxTAcGS0g6gRU+DK2nX02/JE
MD5:	64224EC939AC0B3487645C4E109030D5
SHA1:	B5AC2A7BC2AF1C9226987439F34BA8D4A79FBF0B
SHA-256:	2818F0BCCC7DDAA8E893C4655473D82589146DCC6E7AA6F78CEB9B3D4440C809
SHA-512:	9E2F8F391CA83B4DBD4170F91B30268F81D7F570E042699BD73135EA60BF3AE5AAA343F5BAE91430879DCF305914646499A6EF24C2E3CA604460585C3CCA7E31
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...^..........QQ.....gAMA......a.....sRGB.........PLTEGpL...........................................................................................I..C..............................................................3..........................2...........-...............................................2........2.............3..2.....2...........1..2..........................2w.............2...w........v.......2.....-.....2............w....2.....2w........w....2..2..2.....3...$$$.....2...........2......w....2...w..222..2........2............w.......2.........333..........g.......8...........?R ...v..**...333v..v..............v..................f..e....222...................n....v.....222.f..e.......222.e.....g..d.........3......w.."/?.f....333.............r....~..1=L[..s.....mu.......Q[h...[eqdmx;GT\\|......tRNS........@..........'`..<.F.Q......c.pD...+..0.#3wJ.........m.^[...7_..V.....N.....s....fA...../...{..\|N....j..l..-Mv&i.9#..~..$...6i...e9...D.y0xy/...zG..

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (595)
Category:	downloaded
Size (bytes):	52976
Entropy (8bit):	5.315043781142496
Encrypted:	false
SSDEEP:	768:/OwplOVh9aGPNItQPtazaikxMXXPB+YQycmcUOzheEfbTAYfnrIulbsksLZHU:Y9kXcmmzhe4vJrPsks6
MD5:	08ADE75238D50BE6B835CB9EB47F77BE
SHA1:	1283D0AD3A738552036F4AC495484DAB0E4F7C24
SHA-256:	D6F8F9D8EEF0165B139120551326140D8693B6309A64E55FC40DE19BE21C614B
SHA-512:	10790BEA14F378A0722FD5D6CF5683C45A3F5DE253CB1BC25126A96BE70D5D83E7BF9029CB974C7F8B8C10A4FA537A3A09B9A5DB97CD69E9A937EFF271F841D6
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/51BqsgbDI7L.js?AUIClients/CardJsRuntimeBuzzCopyBuild
Preview:	(function(V){var f=window.AmazonUIPageJS\|\|window.P,M=f._namespace\|\|f.attributeErrors,a=M?M("CardJsRuntimeBuzzCopyBuild",""):f;a.guardFatal?a.guardFatal(V)(a,window):a.execute(function(){V(a,window)})})(function(V,f,M){mix_d("@c/api-lock",["exports"],function(a){var c={},d=function(a){delete c[a.type]};a["default"]={isLockedFor:function(a){return!a.every(function(a){return!!c[a]})},unlockForEvent:function(a,b){c[a.type]=a;try{var e=b();if(e instanceof Promise)return e.finally?e.finally(function(){return d(a)}):.e.then(function(){return d(a)},function(b){d(a);throw b;});d(a)}catch(k){throw d(a),k;}return Promise.resolve()},unlockForEventOnce:function(a){c[a.type]=a},resetLocks:function(){Object.keys(c).forEach(function(a){return d(c[a])})}};a.initialize=function(a,b,c){};Object.defineProperty(a,"__esModule",{value:!0})});mix_d("@c/aui-untrusted-ajax",["exports","tslib","@p/a-ajax","@c/guard"],function(a,c,d,e){function b(a){return a&&"object"===typeof a&&"default"in a?a:{"default":a}}fun

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 16460, version 1.655
Category:	downloaded
Size (bytes):	16460
Entropy (8bit):	7.987708256804987
Encrypted:	false
SSDEEP:	192:pvO6xEw4Jj9HYfGbtieHqP0l4S7NVXfU3xqJvzJmPnC1LiTNNIb0QAZtcnlclz0n:bWzHqP7S7Na3SJmKNyElcUuMXqGN3v
MD5:	15E17F26C664EE0518F82972282E6FF3
SHA1:	46B91BDA68161C14E554A779643EF4957431987B
SHA-256:	4065B43BA3DB8DA5390BA0708555889F78E86483FE0226EF79EA22D07C306B89
SHA-512:	54EADB53589C5386A724C8EEA2603481EBB23E7062FD7BFAB0EAFE55C9E1344F96320259412FB0DC7A6F5B6E09B32F6907F9AAA66BCA5812D45157E3771C902F
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/S/sash/KFPk-9IF4FqAqY-.woff2
Preview:	wOF2......@L..........?.........................?FFTM..8..j..@.`..~.....h..i.6.$..F..<.. .....a?webf..}...6..........n.......fE.q. ..Y...9.2d.$.}[..0.H....j.k....U..#"-SM.t..."D....+....t.8f...s...g636\|..g._.....EB.T.!.B..!..y...k....Ya..G~.Y.;+....)...k...=it.........k_.^.z.#.).).....Y?....}..&N.s....1..=A.FXSG...`C...00..5l..#6...w....-...hkJ. .-...$D..1j..F.]..ny^..]..:.\...2......^n...5P......_.6..k..2..K..i......y....K...?..6...q>.. .....a9...........4/.c.E.........q...8N..$.$....z.?.d..v.QmY..D....s...:Y...S.\|..\|...[..@...4...V..n..s....t....A....\.v..X...M..O4.!=$..35m1\..wT"..w.c.s(...]t.?....."Q....1(.p..%0<-v..b.^R.)E:$..0<.....R.B.TY...K..n\..{#...kd.-.8..#.........t;..3.....IT[..2.L...........H..$..._.j.....b<B..uN.,*....k....@.k.k.....[.........6....U.1bDDD..Qu....R..+a......^.iS..qb.^..U.uU.sj..-<D....H..Y.J..[......8....V}........}.$^...CE..jc. d`.^..q..Nw.....`...1...S19.u....`H..WT.1.....y...c.A..op`..V..I....

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 191x320, components 3
Category:	downloaded
Size (bytes):	16655
Entropy (8bit):	7.965849471353442
Encrypted:	false
SSDEEP:	384:LPLPMUEx1140qsu2bnYQpwSj5598VEGjdMrjNUQ2:Lj5I1l5ueRptj5598v5MrWT
MD5:	191100F69A2FFD11D6369B4C9765BFD1
SHA1:	ECD387C7C124D67C7CAD49D15201C7947AFB9386
SHA-256:	E18A39FA9214C177833BC6A546EA66AD3832B74F1C70707AE8027BAC4F749D00
SHA-512:	B2848F02A9329AE6B3DB4BEAD8D43A2ED79FFE1B0D2543E7110A7395E8BC6C37082FA26EE16DAF51347E68B5B86E3517AF2C41DB9DC07941C848CE9F983CD2E2
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/71go+3-hUrL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."...............................................................!..1."AQ.2aq...#B...CRr...3s......$St...%4bdu.....&5DEU................................................1.!...AQ.."#2Raq.....SB.................?..x....````......$...`c"q..U.&`......F....9..]............+&...L..P..i....Ge.@,.C.n+..Ac..^g.x..#SG.Y.....f'..l.....9mG..........F..J.r.`..2.5.+.B.J.....i.0..<wlF..T.&.Bj.\|...M.s ......T..._.....}=.x.....}..3;...Z.e......QaN...\|G&..>...-..!.)..us.)...-.;...9.5..........0..,.];.5_6....8.?A.......oX..#.t...%(YFqT...yD._^.:z.b.p.}.I...u..2{2.>sG.p......9...Jjw.J5.....r....l.S..D..../.R....F..N....JoT...T>..p...b..gV~.,......Fj}. a.@....vq....na..{H..NE%bs.Zg"9..}..Mjq.r.......&l@.........h....z.....'iu.s.C.Lf..=4.KJ.n..q....4...i..0000...............1..&....{w.....}Q..@\|9..k8.fPC.Z\|....=/...

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 283x320, components 3
Category:	downloaded
Size (bytes):	12816
Entropy (8bit):	7.9309929423973315
Encrypted:	false
SSDEEP:	384:URW6XdoVJ6RgEa7XI9BcsXkbiACT/YBrY2R:URlOVJ6uEa7XMbXkbiF/Y+2R
MD5:	D0B5FF2B6DCC4B5D70CFF1A020A1F371
SHA1:	1D103A34EDFC6C853ED2D43B991407210D730B03
SHA-256:	F5700C949E66AB3BBAB34A8B24563C0E7D72FEB9C98F9F952A3C4931A2EFFAAC
SHA-512:	53C9C1F63CA6AAEF8848FCBB5A976F157E5A2F90E6EBB9884605642AA991B7A11173F1A5CC6CD9530EB705616DD660A82E466B58CAEE17BA8D85E49C0668721A
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/71BV4t0JvPL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."..........5..................................................................X.....#'.uzFG8.Y\.=e.........;........f... ....<c.w..$.x...%...=.V.}...........6.H...%...=.V.}...........6.H...%...=.V.}......wj5....[;Sw.M..5..V..l.S-..eS.^Y.D.l?".c....7$...x..O`U..B.$....'.....s.E...\|...T].F.\.u0..D...5+...@.o$../.B^. S..nG.....',..C.#.w?..>.....zS.Z.G..W.oG..=..>v.MJ..).P...#rK........[..+r@....".P.Ko..........}..<.P.7.._......_.\|....Sn....F..!/..)...#.V..Q..D...v.T.wM..:.o.},e.^.T.:..:/_.\|....Sn....F..!/..)...#.V..Q..D...oW3`....t.4.."...8..N....i...F/...D...5+...@.o$.Io.B^.(.....,.h.e.Ae.A..hp;0%.s..%....d...v]j..`.z^..a......6o.'1z.R..y}.......h...&.........{....eL....z.OHR.Z.L......H.Jk.d^U........44.>..:....s.?.=C.m.P..5..S.r.iDY0.....Y.;...8...\|}...&T...e..R.....

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 191x320, components 3
Category:	dropped
Size (bytes):	17873
Entropy (8bit):	7.981516795947259
Encrypted:	false
SSDEEP:	384:CRS9aWrb9L3QqNlfhnuVH1Srt7agQMSSwrNRHbZBGfX4WXlsRkPj:OSPb53QqNDuVOFagQMYr7ZUDVsRWj
MD5:	3EA5A40708214AD7918B02D16AF244CC
SHA1:	03AFE7B99367B0DE4E6FA801EFDBD7B642D5F42D
SHA-256:	36A71FB1788FA50A7747B973903552200FC2BEA8E700E794F521306C293A6B05
SHA-512:	50E7A6BBE5275D7715113BE67B6F2B7ABA2A1377B60133156B53A453224F1B3374E76E212CB0D959F0836DFD59106FFBDD94F9E87DDF7D8F2E1F288B0D6053A0
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."................................................................!1."AQ.q..2Ba.......#5ERSbt...$6Urs......3....%4CTu&7Dcde.....................................................!1.Aq.."2Q.#BRa.3..$4r........Cb............?....Q..U.......{.n=...P.W.3?...T<.l..my...j3....'..g...E.[i.u.S.=..;I.X.X0.N......6..8h..,.P..7..0....f.U3P.HZ..)O...........?x.....S.........I.$...+...Tm..%.>...^....QI.\."y.P09.'."`......)..~....>......d..[,.n.~`@.m....(...x.sW:-..}n.3XC..k.Z......gr.Z&...z .H...Y...>Y..V....f.3.[..=f...8..,B......PXU.......h.e.7R%.LK..x.\|x`7J..u....Z..r.~..,......F..".!.k(m.7.<...k.@..q..0y.$.':A...#.@.\..H..X.k..[.....v.!...S..$.~..}.\|.RR..~..u./.]L........[...@.,..~1...m.3j.P?.{4..%e.....R$S.A$...m.b .V..l......\|9..f....."..4F.my...n.70J.XW...j...W.Z..;8'{.....^b..$....y.....r.....

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x301, components 3
Category:	dropped
Size (bytes):	26981
Entropy (8bit):	7.970935918736941
Encrypted:	false
SSDEEP:	384:zQJCELbzo0Av9bFG6EbA9KZuSe81Qb1cR/cO7UQpGXdbFeCxOnQaKbHwlk5V:MJLvzo0AVb0+KESTab0cOyxxkbw
MD5:	3A48EF26DBBACC99F3E5819141E561DD
SHA1:	614F6E17E86378344624DDE122D98B833FC7AF34
SHA-256:	06E071BF403464C2F9EEFC1FA0170D1F6D8A2CD1FDA64520F4B09EAEB4D5AFD5
SHA-512:	2DAEF5DD441C2281EDB526A360D9531DC003E3C473663703D2DB68FA7A8F81797111A13373E9B0FEFCB5AE29885E55240DB9545FF1F93EF87450EA0443A8E5AC
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......-.@.."..........5................................................................../3.....O...t.p:(w...F+..LSJ...(..i+....K%.7.].....f.I.I\.fx._.....E~...X..gZ.....~h......b.9.Qa.c.>..b.E.#.[.dR...x.....L.....}T"WjY.3.......{.@2u..fN...\|.q.OO}^u7./~.....u..f[.........4.b.Iq.!K.4.q.w...,.&O....s.~\|....... ..cCZKo.......}B.Y..s....QUkY..B.U....s0.B.r.m\..8a...I.R.p.W.....F.n.\|!",..[R._...j].u...r..b...$._.H(..y.>o..YH...X...mk.lg...}a.OoN^v..}H.&sk.b.s,j.Eb[..8K./......O.......m-........!..O..{..o.HU..Tw./...~..5o..>....p..O.#.....G(..q+.[..8_E.T/...[Y...5zA.gKf.kY.A..Q.....\.2.w..{.kwL.Z3.\|V..L..%..:..zZ/..HY.i...>(...*.3F..u....Hg..._.Q..'..l....:..{.........~.O.~....$]QO...N..3.b...&..y.u.........wj..>..0..-G.p.......).......^..]V.$6!.'I..........W..fv.M...:....t.8....J`..t....VY..(m.z..\

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://aax-us-iad.amazon.com/e/loi/imp?b=JAVedmlYc8qqblDo18mAwcQAAAGSu4ZmoAEAAAH2AQBvbm9fdHhuX2JpZDMgICBvbm9fdHhuX2ltcDEgICBgfv0P
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
URL:	https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fs-on-search-route%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26ctb%3D1%26sc0%3Daui%3Asw%3Appft%3Acallback_ricb%26bb0%3D2192%26pc0%3D2368%26ld0%3D2368%26t0%3Dundefined%26sc1%3Dportal-bb%26pc1%3D25%26ld1%3D26%26t1%3Dundefined%26sc2%3DhveNavSwmCountdownWidget%26bb2%3D2301%26pc2%3D2320%26ld2%3D2320%26t2%3Dundefined%26sc3%3DcsmCELLSframework%26bb3%3D4958%26pc3%3D4958%26ld3%3D4958%26t3%3Dundefined%26sc4%3DcsmCELLSpdm%26bb4%3D4958%26pc4%3D4976%26ld4%3D4976%26t4%3Dundefined%26sc5%3DcsmCELLSvpm%26bb5%3D4976%26pc5%3D4976%26ld5%3D4976%26t5%3Dundefined%26sc6%3DcsmCELLSfem%26bb6%3D4976%26pc6%3D4976%26ld6%3D4976%26t6%3Dundefined%26sc7%3Due_sushi_v1%26bb7%3D4976%26pc7%3D4977%26ld7%3D4977%26t7%3Dundefined%26sc8%3DamznSafeFrameHost%26bb8%3D6180%26pc8%3D6182%26ld8%3D6182%26t8%3Dundefined%26sc9%3DSocialShareJS%26bb9%3D14897%26be9%3D15085%26pc9%3D15085%26ld9%3D15085%26t9%3Dundefined%26sc10%3Ds-startup-component-scan%26bb10%3D15185%26cf10%3D15185%26pc10%3D15193%26ld10%3D15193%26t10%3Dundefined%26sc11%3Ds-swac%26bb11%3D15196%26cf11%3D15197%26pc11%3D15197%26ld11%3D15197%26t11%3Dundefined:15203
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (549)
Category:	dropped
Size (bytes):	245760
Entropy (8bit):	5.39864026520954
Encrypted:	false
SSDEEP:	3072:WYcQZMuZ7q9P1+pKbaTROoTQ9iQccc3b+Y6iogYZfBcko:WYXUMKbaFD+dijYLo
MD5:	091DDBE661610F737CE041007627CF4E
SHA1:	9BCFD25EF773739BD6C58EDC2AFDA64FA0B165BA
SHA-256:	6CB33EA7BA3AEE76DC05A123CB3FB66B889656A2650F1C17163ACA2317DB5743
SHA-512:	A7D13A81866527BB3BEF080174A33CF23EC0312C7AAD012738AA5FA270F98CC3FE826228DC7DC44FE39C29805C29DBD89F9842B12E6C1DCCBC6D2231A76B43EF
Malicious:	false
Reputation:	low
Preview:	(function(b){var c=window.AmazonUIPageJS\|\|window.P,e=c._namespace\|\|c.attributeErrors,a=e?e("AmazonUIBaseJS@analytics","AmazonUI"):c;a.guardFatal?a.guardFatal(b)(a,window):a.execute(function(){b(a,window)})})(function(b,c,e){"use strict";b.register("a-analytics",function(){function a(a,f){var b=c&&c.ue&&c.ue.count;if(b&&a){var d="aui:"+a;1<arguments.length&&b(d,f);return b(d)}}var b=c&&c.ue&&c.ue.tag;return{increment:function(b,f){if(b){var d=a(b)\|\|0;a(b,d+(f\|\|1))}},count:a,logError:function(b,a,h){c.ueLogError&&.c.ueLogError({message:b},{logLevel:a,attribution:h})},tag:function(a){b&&a&&b("aui:"+a)},logNexus:function(b,a){var f=c&&c.ue&&c.ue.event;f&&b&&a&&f(a,"aui-analytics",b)}}});b.when("a-analytics").register("prv:a-cache-analytics",function(b){function a(b){return(new URL(b.name)).searchParams.has("AUIClients/AmazonUI")}function d(a){var c;"script"===a.initiatorType&&(c="js");"link"===a.initiatorType&&(c=(new URL(a.name)).pathname.split(".").pop());c=["js","css"].includes(c)?c:"un

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 87a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:M3UWRtJlllHh/:klJ/
MD5:	EFC4EC590572EDBD9502C40266EAF56B
SHA1:	F4E5AA15E838464E0BDE9D43805B5A5F36EEF6E9
SHA-256:	2BB20425D644D2D75889D1192CC182282F2ED2EFA9C7B98CD6E0D70761DE5907
SHA-512:	490A7E2D5F4EF201625FF9ED34D15F2D88FDFFDF6B7048701F3866ED1131997C7A3A80238A2FA19D919F64D6788087931D2EAC53A06741AE65CBA7BB4B0163C2
Malicious:	false
Reputation:	low
URL:	https://images-na.ssl-images-amazon.com/images/G/01/x-locale/common/grey-pixel.gif
Preview:	GIF87a.............,...........D..;

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x274, components 3
Category:	dropped
Size (bytes):	18100
Entropy (8bit):	7.965666408022176
Encrypted:	false
SSDEEP:	384:Qn+BJ+pH2ycr2D4QSAUC/41XJX/X8GtGkuM2SSdcUw84thcVgCX:QnK+pWDbQ9UY4t2Gt4cUqhce2
MD5:	3729594BE68AD14998041DA02E7C7477
SHA1:	B38CC1D08F0F058F7067913FFB6537BB6D0FA05E
SHA-256:	9E18266A99DC626FF27E5D760C652D058275A951F0D7FDC3CB600B9183E0D888
SHA-512:	D18F6B733320FC7AF25C5E786595B81DB11FF26DB236DA198C7AD7610117E15D126020966B7E5EE048C9DA85340691383269E0C13B90EB6090729401CD7C2594
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$........@.."..........5..................................................................XNs.f...vQ.{..;.Q.a..9U.N........H..6.N)..:..S...o<l.4.g..G0wv.q..;Zl........1.L...F.]'P..p.KyC&...X.K!$.....i...&..Ntt.....#.{......h.L.Pxd'..y.s.-.'...Rz`..0.Jai.u.{d.."\C.0!.2........-!..VP...........l.<...f4....J.c...W\|;...Eg.A..qHw^WJ.H.d.9..._....<.sz..'6.K...&.....s.t...Kl.{.;.V!..k8....$..C<a...a.&.o}.=....q..t.[z...t.....aIF.<..z....{a.+dIF.'..#...u...)M.N...a..T.j;.FO.^. c..m]...X9..MF.....2.=...lS.2..i...x..}%...k.[LV.i.{...5..a.J..V!....A.Z4m##....;....._.35.#.-...Q^)wK.!0..:.T..Qq......<..f.+.1...%[..<..O:.E.....C....r.l.B...B.%r~..}.Z+n##.9.:.j.X.v?!.\Wu..\.E.S....K.....+....Os.m...:..fGsF.....T..y.8.=.F/m..!H..l.....F..Tr.u[...?.B.x...S..*.s....rM;.....u3v<....zi..\|.FXzt.^....[7.fQ

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 198x320, components 3
Category:	dropped
Size (bytes):	11450
Entropy (8bit):	7.957717967378887
Encrypted:	false
SSDEEP:	192:b4t4f7UWrbeLK5MflrQYP27+fz8zUKbpF5rpdRg3p0xM0Z:8WjBrZelrQTOz8oKnNpdRQp0W4
MD5:	0EEDBD4D1404E71EBB12C54D958693F3
SHA1:	C6DFCCEE7943EEA4D0C38D0495CDA8FEF2CE0A44
SHA-256:	D05D7064F7409C5D1003D8485FC467F3ABCF9B886E7F0FF1D4C9233E4D74568D
SHA-512:	7804E997D77D777E79868E5841483AB5927A3F83FE581AF5DBE5161337304C5C86854D671F98FE0D8433CEBCE3B54CAA192A31A87310E0F746DC3BE618B94975
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."................................................................!1."A.2Qa..#qrs.....3BR......$46CESU.........bdtu..ce...&DTV....................................................!1AQ."2Rq.B............?..].Q@QE...Q@Uk.o.c.g..&.\.......n`+.Rv.^3.I;.$.FN...s...%..L.....M.H..-.@9..F../.kdw..:...N.3.GY:........."... ..x....f..<{...u.....-M..P5.E..wYw.]N2j.........6..y._....A<..N#$.Z..^.o;..+q..(.:..p..g.Pe...f_6...N[.x.;L..Y.2G..qo.........?5...}..'..F^?.S.P]V.s\|#^.[.,c/.v.....v~J..mO..v..!..EP.c>.....M]../..Z....2q.....R.g..\.\.........'.l...j.........2.y0....'....p5ibp".6....}F...Q...I..hba".U.(9..]*..:~...y?...t..QE.E.P.QE.E.P.QE.^..G....Yz.m?....^".E>x......V....?...$b...T.....Q.&#o."..C.R......E.D..g..l.Y..6..t..r~JWf3..[Ni-..c.N....V$.n~0}f..f8.8.e...3....t.....Wn=./]...&.....W.i].;X=v....6

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 210x320, components 3
Category:	downloaded
Size (bytes):	14496
Entropy (8bit):	7.975158562441935
Encrypted:	false
SSDEEP:	192:rzdkcDvR/+2z/7bTdGL1lTX0Qvl1f9V45WJ4o1retCGtYXLciDNysG8K9WBiHiG:tN7R/v76XDhvl1FuUiUXL9DNyYpciG
MD5:	8412DBB8D7C01F1581CEBB6D0C10B335
SHA1:	5519EB480C2298A26F62E666B3164FC6BDA1D044
SHA-256:	55FED90FA57B41FB6E3E2FBF66F14776FC57EA724FA075C3A4BB344AC2B3226C
SHA-512:	191F3FD947E14B559DA66ECD8E600E8D1EA9CC80B4A4FFE23AC906317C142F1A9C05EBD583DBC9112DA626A4D8AF090D5CE5FE7194A51D46DE19D6D3694F3C3C
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/61vCWYbKKXL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."................................................................1..!AQ."aqr.24BS.....#RTt.......36bs.........$5C...Dcd..................................................1.!.."AQ...2RSq...3ar..4#Bb.$..............?..(..(.......8..(i..d...of.......m;.o.....Ju..k.....M{[..z....C+,.>..{[p.T.....t...!.w..2.../O..O...2.....U9.7.w;..d".{N9.-............K.8....>`?..O.;....{z....N.x1.t.7v.H.....d,..#5.h........L.\/o......n.q..:.....H.........0.-.q..}f3.=J.MZ;4..m.'.D...Asd.E$.,......n.#. 1.w.{..m...m.......K....$..z;Em..[.j.H..w&\&..FA......7..@n.t.m....`..Y..N}..=........6.s.......'..d...........P.%.YGj.6...7es.D.U\|..W...c......(./....L..?....~.q.....F6v.X. ..;....+R.5..L.gP.k.a...D.2.p.........i...f...-..wg.....u....r.5.Z.........a]3..TWS...}....\Jp.f..2....LK.........=....y..Jma0.D>h'h#.......^E.

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	23
Entropy (8bit):	4.175735869100492
Encrypted:	false
SSDEEP:	3:VXciJ:hD
MD5:	C7D3355DDAC8D35912F6CB56C4BE6ECA
SHA1:	4ECB85CA8A4B633FE7DB11B2B7591AF83A89D406
SHA-256:	88EA58255D4CD82340F7ACAABE0E6A99F195A4DC2CA6EF56EC503D03B331BEE5
SHA-512:	8164D943F11F6559A8AB31869676FD4801E6E8C18DF05B53EF2F5CE5EC23BD632E66018EC134DA658289B6FA4C2BA15EF47DCF6210866457CFA7DEDB45994272
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/G/01/csm/showads.v2.js?category=ad&adstype=-ad-column-&ad_size=-housead-
Preview:	window.ue_adb_chk = 1;.

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 250x320, components 3
Category:	dropped
Size (bytes):	13488
Entropy (8bit):	7.944522120515515
Encrypted:	false
SSDEEP:	192:IN5TduTyiS+YC2usjKJFVD9J4344TxI7LmkXr6odt06wGSAulISIS1fEUOlZO:IN6ymajaTJluwTrTBjSAaxISVEUP
MD5:	5A114F4F47476744799C344A202BE26E
SHA1:	FE83ADE1D979C993EE313ED9A5B9C90B3A6014B8
SHA-256:	42EC79E0DFDCFE740D744171EE514812562795C8D2F4144D4E2CB0E825488D70
SHA-512:	C006C10638716F35B1AFCCA756F95563554C2C393AD8D4E134826D3AA2AB2A11B3C5B0FE3F4D438F854999D4DE55022D54F3228617C0DE96B3B541AEAB73007F
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."..........6......................................................................0.X..T......._R.S.1.c.c............).h.T..Y....#...<....S..o..E.X.........q..V.nM...C`{@.{A......B..FL.2.;6Z...........k.m.....{....$...d..1p..............y. ...q.W$.../E..,@.%.#...eL.............y...h..[J....~.O<....3I..f9.W./.......k..d...{\|B${[..~'t.......7p.Vn.F.6...6.L?.o.Z..k.:-2z.K.H.]5.M....q.i..u.S.6.........7P."....r.O.f...x~.rR......-.l..=..._.}#..W.....2..I..l........[.k...ANi{.rU."/-...\|y..eqU'.n..\...4....G._...dwx.AqQ,..0z................sL.#.t.jn]..2Wy.l.J..<.5.94..e...Y.4..5..........q+k.pe.=..Z..+.s..k.[...-....d..sP.^.......>......Ou..#]l.......J.....\|.....U._>...f...w.o....\.s.,t.1..e..P..7..<..g.......Q._^.e..n....\..u...EEHk.^....".z..*..<bl.N.......y.]l.........Re.d.u...

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32965)
Category:	downloaded
Size (bytes):	221038
Entropy (8bit):	5.025059440003132
Encrypted:	false
SSDEEP:	3072:cnH2o3pouSXmkglKEKajAQlkEXZKt4ReJR1Ss6EGI:cnHc1Ss6EGI
MD5:	4F381E4C666A53A69D52CA61092076D2
SHA1:	D9AC2350C02132E3BD13F9E7D6C8FA6E5F9E17D2
SHA-256:	982B25212C52AF6DD589C73099C60D6A80C9AAA44F9E256862CF81C0A67540B9
SHA-512:	8E64CA3CA8D523FC6DF1A9352B831CAF4BC88724A41A9E8B2274DFA4AF92A3D1C85B691E73B7ED3C754A7C71A808C1E41915F354AB8D441720E44964D7B4B118
Malicious:	false
Reputation:	low
URL:	"https://m.media-amazon.com/images/I/11EIQ5IGqaL._RC%7C01e5ncglxyL.css,01lF2n-pPaL.css,51xslYVQAqL.css,318PabRHnEL.css,01fQPWUjn0L.css,11GEPqXartL.css,01qPl4hxayL.css,01ti0q+221L.css,413Vvv3GONL.css,11TIuySqr6L.css,01Rw4F+QU6L.css,115C34M4eKL.css,01DwiCRvNnL.css,01IdKcBuAdL.css,01dRHIoUjnL.css,216JhEla-AL.css,01lFHae5dSL.css,51pXp+P9GuL.css,01XPHJk60-L.css,11yW2wLgbZL.css,01QhqFH8I8L.css,01i8xapXUHL.css,21guB8pakaL.css,11G8RVHqS+L.css,21yWHgAzkkL.css,11DG4yr02+L.css,216LjtW6ADL.css,01CFUgsA-YL.css,31pGBgRFRdL.css,116t+WD27UL.css,11RvIU5HAoL.css,11lDoAr2PUL.css,11SbsdsyyJL.css,01Jlt0oEURL.css,01X+Gu6WK9L.css,21wzK4uL-JL.css,11Xwl-ZIbpL.css,01LzHhtXxxL.css,21hyIh8IHUL.css,110mkKR-MDL.css,11hvENnYNUL.css,11KWFgYmPtL.css,01890+Vwk8L.css,013tIj5f8aL.css,01cbS3UK11L.css,21F85am0yFL.css,016mfgi+D2L.css,01WslS8q5ML.css,113sefbl5fL.css,016Sx2kF1+L.css_.css?AUIClients/AmazonUI&vET8l+2h"
Preview:	button,input,select,textarea{font-family:inherit}h1,h2,h3,h4,h5,h6{padding:0;margin:0}h1,h2,h3,h4{padding-bottom:4px}h1,h2,h3,h4{text-rendering:optimizeLegibility}h1:last-child,h2:last-child,h3:last-child,h4:last-child{padding-bottom:0}h1.a-spacing-none,h2.a-spacing-none,h3.a-spacing-none,h4.a-spacing-none{padding-bottom:0}h1 .a-size-base,h1 .a-size-mini,h1 .a-size-small,h1.a-size-base,h1.a-size-mini,h1.a-size-small,h2 .a-size-base,h2 .a-size-mini,h2 .a-size-small,h2.a-size-base,h2.a-size-mini,h2.a-size-small,h3 .a-size-base,h3 .a-size-mini,h3 .a-size-small,h3.a-size-base,h3.a-size-mini,h3.a-size-small,h4 .a-size-base,h4 .a-size-mini,h4 .a-size-small,h4.a-size-base,h4.a-size-mini,h4.a-size-small{padding-bottom:0}h1,h2{padding-bottom:4px}h3,h4{padding-bottom:4px}.a-size-medium .a-row.a-size-base,h1 .a-row.a-size-base,h2 .a-row.a-size-base,h3 .a-row.a-size-base,h4 .a-size-large .a-row.a-size-base{padding-top:1px}.a-size-base .a-row.a-size-base{padding-top:0}.a-size-micro{font-size:10px;l

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x284, components 3
Category:	downloaded
Size (bytes):	26001
Entropy (8bit):	7.9774743024069545
Encrypted:	false
SSDEEP:	384:1yFou+CiWZubVVdjJA3UeofGIER7qF8AuYd6eHrVKZTSFME78clnM3SIwsP:1yFN+C2XNAUPGIERWF3dLLVyu7rnrsP
MD5:	07D83B229F27145F6A4908F13A9F5608
SHA1:	85455A3DBDD2A190CEF7964A92CE25EF06AAE18C
SHA-256:	BF43D1B15C721196376783085B25D8F17C546AB6479F51577666350E0A939A9F
SHA-512:	8BE89ED50DEBB8C15D633FE85CB4E3369F87D778BF3632917F6266AE4D0577A12CDC790B2C0341AFEB121D6B26E45CEE48F46145015273A5736BCB2B95A57592
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/81mzTGKPAoL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$........@.."..........5..................................................................-$$..BI.$$..BI.$/=.5.5.{...y'.MQ.....q.?..=...3K.to-...7...8..s..G..g.w..Ia.I!$...HI!$...HC...?..3;..'.p.....mN..H.&A.?U........`...,...y...e..d&.x.A.m..>...UY....T.-j..d.<E..i.i....Mk..?\.E.....e.1\|7h@.S-.H1..i.+...X$..4.9......e{.=s.....$.5..1%.,yq.n...]G....}.x..y.t\|..nuo..F._._.gg%h..q..W...._....4xC.....Q.M..P.I...s..{..bT!x.r..#.G.q.m.E.!#%.2......=.-....nR......Y......k.as...(#...zOa8./.}:.T.$\..Hgd....B..0...H.V.@f...76$...KT@cp.OL..;,<.&.<......B$...,.H..$>L...j.u..R.k.=V....GcW.!.[rjd..-.>...N...6..Gny.i....5k.G...o.+..mc.......-.p.3,..m..f}.L..........y..r..-....o...K..i...p-&..Z.H.....8?..1zW.......... %.-.q.......&_.2..>..}._.F.M.U`.,.[N.....o."{.o.{..Ur.......?/...U.T.s.{../Ov.z..3..<...BB.

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	69874
Entropy (8bit):	7.995864369416909
Encrypted:	true
SSDEEP:	1536:3XRVSgYyEl+3tmWxlehjV586cbf+SGa5FsLINK2fyjfeQ:3B4HbE3tmW3Ee6cb2SGa5FssajfJ
MD5:	920F2D77B1DEC324CDAABCFCA8D96601
SHA1:	DF6929767209D22AA97A7DB6E50BCDCA248945C9
SHA-256:	FEE3241A189944D6EC1F65070DA0263D29EEF0296D75626A9F25F752A4CEDA99
SHA-512:	3A649D4A9074FFA71B72C46BB8F3C7E97040AA4E639898FD4EBE81D0FA23415564D3DE9C39E3DFCF97B2CCD6A8A8FB2F030698D2AF7E8F9B7F89F6D61CEF0C6F
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X..............ALPH.5.....m.0I..........}:{N..&.%.CM.H..A...!..........!..4.Ch.m.....4..A.`... A.[k..=.Xz..k"B.m.BRm....9\...>..$I.$I.......aL.b}..~....d.n.\....<..=.A..}...)...=V..6".H..(.........._......'.>N.%S4.......P..(.n......:...nE..B..5...(;......G.{.r]..-..... .C).....D...%..!-..j.#.....H...........:E.`.F....{....Aw.@.d%...FcD.r..+....y.1..!.h..".<..G.7....vIY.a....J.X.UzTD........ Lq...UO..Y.+....u&..R.....).D..3=.hS....A.......W.u.-.F.x....D...<.x;.z..}..4n;..x.9#..>.c..x..7.u.u....^..z..~...>Q..c.X .,..h&.E...........[.NA.`F...0C.....=[..;.H..........a.}4....CX1...Nt.SS...R._dq7..4.&\|^.H.$....-!...;......Z4.Xu..?...K....l.S./.......#X".2.]..C..H>]G.v.)....iK.[@..1dc.r..\.SE.w. .. i...G{..C.....5.Z.......5.Z..N...x..*wzv.'..G...^..w..p.h.`....bQ. ...'..#.4.,...^.......H.>..\?......C...%G......S.I...:. .$:YoW......M.UDo+...l....@.x9.W.......(.).t.E..T....^....x......P..SF..G..#D........K..O$mw<}..;.:g...

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 175x75, components 3
Category:	downloaded
Size (bytes):	3392
Entropy (8bit):	7.872355174965263
Encrypted:	false
SSDEEP:	48:Gef4P6575tgGDxTR2cJY3swRC6+VhHUiOjWMwuWNawugM1JF8riL/mch:Goz7rgwt2cvOjWltzM1Jx7
MD5:	17A71DBC14B0EA2A3216FD38172E7ADB
SHA1:	F1DD604F4974FB326E14F18F6732BF61948605A7
SHA-256:	846B337F034313372A753227D37938F91617DAFBB6C3F3CC0FE7843D886D7154
SHA-512:	58AAD112AF20FED21D5899F5B1BA2C0D0C7D635B71AE6E1C713C6F10596B57FEBDD73E741257403C9E8932CD006F21BAF5A352E0A2DAF948602083474528DD31
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/S/al-na-9d5791cf-3faf/ebb1fa76-949e-42d8-ac03-81005b8a17e4._AC_SX175_SY100_QL70_.png
Preview:	......JFIF...............................&....#...#.##..#..'#..#'.#$4$&.'$1$4$4336:<4#:P...........1#.'3.$=3<'3633&C3<13.43'..''$3'664.&61#G&'#31:.#6@......K...."................................................................!1A."Q..245Tqrs....#6Rac...B..CS..................................................1!..2AQq."3a4r...#BR..............?..z.S.-.......U.....Nw.q..\|.\|..j..l.....#.\|....l.{."H[.....s..^l....a......P.r.YQX..F....5......j ..86.j.]...9!.Gp.. 3\.c..6....,..D.].\...}...z}.R0.....yY.V....}.....Uec...WSX...TP..?c^,.H... ....U<,...fC.+.i..DXb..Z...H.Oh.Ex.p.P.>..T/...N}.M~........r...k..9.4..#bU.N.xJ....."N..*......H..V#..Q..+ ....VA......JF.w.U%.KN!c.T..o.....23.XV...(O..a..s..P.RI..aA..Q.....%..O...].l..J..._YX..(.".t..d.e.4....5...F)Y...-..X..P.0..s..R...C$....C_I.>..\|.9..h\|....F..i.{X..D..SW.O.q.v.:.!..Q$P7.k..9.4../...+...qrm....../f....B..........o.]..=N.....$.R9.D.I.R.K9.NC=@....?.Fl..&.&.KE..S.....H.....(..e..k<..q..W../....MK_..

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 201x320, components 3
Category:	downloaded
Size (bytes):	9119
Entropy (8bit):	7.952397896357176
Encrypted:	false
SSDEEP:	192:PWlRDduONdcYVUrDSuyJ2Pbq7RXSmdTR3loLRme2FPw2/YBNyursq:gNG30ebq8UTvPbFY2AiGX
MD5:	2D7AFCA0481F9CEBFB3DD1299B9571C3
SHA1:	62CC84055E4DEFE4AF779D3CA0A700FED54BBAEF
SHA-256:	698593711B5F51058D7337970C5DB5B710A4322EEFFF7B1C41AFB6BA42111764
SHA-512:	47B900F7178CE23E14F274EAC878FF7575193C868BDE47A3BCF61E269788CA7BE5EFE0BD7A40A376B3695B850EF8F7A63E6D6A8836A3746260B6D3020BEAAD14
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/71EszgPo1TL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."..............................................................!..1AQ.q."2Rar....S....45BT.....#3Db.....$C....6EU.................................................1Q!2."A.RBq............?..-.B.B.... .!..4..`6._IN.....w.Tv.......<5.Q,N....8...~SP.@8...$.._\|W..B.qP...j.V...R.r.Db.o.T.&&......%p........!.!.@.B......!.!.@yY.....R...^.'e....a..@>aNZ..;.]...BP$....?....{..r.&....=.pa.D.pRevbp.s\.A.{..Q......y.....tB.... .!...B.B.... .V7.O#X...O._...kC.#k#.6...[..`>.......0.... ..w.<8...u.....e.....>...w..;......q%I.D....$..*....?../.<dq...e{..z'.........=?a......TR......J.dC...t?a..#..;..\.......).2..i.R...........k.\|....,<.=E.y(.F....+.uY..o...z..B..P%kI..%.d...I.Y}+.2..0........._.2~.r..tar....B...!...B.B.... .!7..b....p.GyK.8U]...X#...SJs&+<.].tn..Jf.yF...Ji...g:.2.........s.(.e...r.'.

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	71
Entropy (8bit):	4.19644707821733
Encrypted:	false
SSDEEP:	3:PouVIZxgRO5ZB1XbZ6iFi:haxUkZ3X96x
MD5:	6AAEF67381946BFC1DDACCA8CF7F6C36
SHA1:	E441BBA8B691AD0FFF0BCCB75974880018AB41D6
SHA-256:	73F8AE8C11DAA6AD905107970E55C3C64CD7133561E9E91E650AAB092BA7245E
SHA-512:	99039B90D4F3819EFB0A395D0DC810DEE1A56265D443D24D1C9BDF832EF9F95887E3C417253698A4F76EF176D0ACE6334905F4B7B4E6A8421D2F650B84255EC2
Malicious:	false
Reputation:	low
URL:	https://www.amazon.com/rd/uedata?at&v=0.299560.0&id=YT8YJ4B94N98J9DNZQCH&ctb=1&m=1&sc=YT8YJ4B94N98J9DNZQCH&pc=25213&at=25213&t=1729723024712&ec=1&ecf=0&pty=Search&spty=List&pti=undefined&tid=YT8YJ4B94N98J9DNZQCH&aftb=1&lob=1
Preview:	<!DOCTYPE html><html><head><title>x</title></head><body></body></html>.

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (550)
Category:	dropped
Size (bytes):	2132
Entropy (8bit):	5.253162542802221
Encrypted:	false
SSDEEP:	48:aZKcOAGKTTi8Hmw7CdQor2AR8hcSNZut/p7CDkzf/3:aZKBITBylR8GRB7/3
MD5:	73F0D0037A99A2E8962C66C536F62BF5
SHA1:	0C45685C722BF71F4DAB5EBE1329DB2FFB29C22C
SHA-256:	69A912BEA7F3832E903C8EC02CE0AB9F3E3B195A49253A4BBDC31D791FA80534
SHA-512:	378CE5BDF6142D18C81D145B06EC9C6EB969D4D870C01A9B8CA46513C9839996ADFF7EE300A1D649439F58A44D6834F60627B9C349AE9C5DF22D68906DD4881F
Malicious:	false
Reputation:	low
Preview:	(function(d){var b=window.AmazonUIPageJS\|\|window.P,f=b._namespace\|\|b.attributeErrors,a=f?f("WebFlowIngressJs",""):b;a.guardFatal?a.guardFatal(d)(a,window):a.execute(function(){d(a,window)})})(function(d,b,f){d.register("webflow-fetch-experience",function(){return{fetchExperience:function(a){return fetch(a,{headers:{Accept:"application/vnd.com.amazon.xa+html"}}).then(function(a){if(a.ok)return a.text();throw Error("Network response: "+a.status+", "+a.error);}).then(function(a){return{html:a}}).catch(function(a){return{error:a}})}}});.d.when("A","a-modal-framework","a-modal-framework-constants").register("webflow-modal",function(a,d,c){return{presentModal:function(e,b){e={type:"ajax",source:e};b='\x3cdiv class\x3d"'+c.CONTENT_WRAPPER_CLASS+'"\x3e\x3c/div\x3e';b=a.$('\x3cdiv style\x3d"background-color:white" class\x3d"overlay-container"\x3e\x3c/div\x3e').append("",'\x3cbutton class\x3d"overlay-close"\x3e\x3cspan class\x3d"a-icon a-icon-close-white"\x3e\x3c/span\x3e\x3c/button\x3e').append

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (582)
Category:	dropped
Size (bytes):	21859
Entropy (8bit):	5.2813610728948435
Encrypted:	false
SSDEEP:	384:q4lRe4Tkiep43TsqMQCCYnf5NhE7mlkGWJ1vF2cq/cseGp5aBfaZYjMgctFF:3443sqMQCdnf5NW7mnWJ1pq/d5aaYjMf
MD5:	525AAAA44C9029AD136CCF501E7AF292
SHA1:	74DC413F3074E51D29454A3C796825818ADE09AA
SHA-256:	12984FEA3A55815160E8DA89604A431BBB597E577B07594D9F2BBDEEFEB1B760
SHA-512:	0EC4B3850A771420DFC84D6A24EE638C875E6DED21BE21C7372D6D2B4960309D3452A3E845FB13C962ED58B906B063EA310C7B99E804DCC5F81CE297473C8378
Malicious:	false
Reputation:	low
Preview:	(function(k){var p=window.AmazonUIPageJS\|\|window.P,q=p._namespace\|\|p.attributeErrors,c=q?q("AmazonRushFramework","AmazonRush"):p;c.guardFatal?c.guardFatal(k)(c,window):c.execute(function(){k(c,window)})})(function(k,p,q){k.when("a-ajax","a-util","3p-promise","rush-asset-loader","rush-util","rush-metrics-adapter","rush-dispatcher").register("rush-ajax-controller",function(c,g,e,h,b,f,a){function d(a,d){if(!a)throw Error(d);}function u(){}function l(b,c){var f=b[0];b=b[1]\|\|{};d(v(f),"`dispatch` chunk must have a name");.a.trigger(f,{data:b,memo:c});return e.resolve({name:f,payload:b,memo:c})}function r(a,d,b){var c=a[0];if("title"===c)document.title=a[1];else if("dispatch"===c){var f=l(a.slice(1),b);f.then(function(a){d(a.name,a.payload,a.memo)})}else d(a,b),f=e.resolve();return f}var m=g.extend,x=b.isFunction,v=b.isNotBlank;return function(a,b){var f=[];var g=b&&b.success\|\|u;var l=b&&b.error\|\|u;var n=b&&b.chunk\|\|u;d(x(g),"`success` must be a function");d(x(l),"`error` must be a function

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 207x320, components 3
Category:	downloaded
Size (bytes):	16551
Entropy (8bit):	7.977297103610288
Encrypted:	false
SSDEEP:	384:5FCFMIE834U2uyI2bd4lGQXuhJmUfVZWj:5FCF1nzdi4LaTyj
MD5:	127D2C7A2B46886463665E6BFAC3329B
SHA1:	19305EB79CC04002511A22FDD96106E0F06F6262
SHA-256:	CE456715408E6A915DD68B7A3CE569A9478D8E8A22B39AE1D450167F2298CB38
SHA-512:	EC949C19A047B7E220FC2746C8BAC3B8068DA9C4A700B1E4F9D42336A824EEA75FB004496FAE6EF9E1A7CCF217455864F4F14890273A1998B487528C4CD6B512
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/71BfHrjAeqL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@....".................................................................!1.A."Qq#23a...4BRrst.......STb......$6C....%ce..DU.....................................................!1..AQq.."2....3Rar...#$B..4CSb.............?..(..(........n&8H..8$.{..O...Q.x.}>.im.@..+.[.!U...So....s...J.-.G..~.:..Z.H...q.......e.....q...n..<.9p...w.s;.aN1....k..7m.....z..H..k_....S=.};.'.\......Y..[(.S..~>...]Nd.&.l.pW..0....b.r.....Ay8.`...F...O_.....'..P....7/.S~S..X}..&[....A\|.x...{.r......I.....~..H.R.xm.... .I...t...n.~N.ZE....U....}.f....:O.]....r..y.__oO[..G.^s.......a.2...H$..1.hk8....../.ju.;..=<r_.m.7.Ghd[..pF}^..p}~..7..0.....oBn$m..H..b..}./.?.4.u..R...UU.O..egE../.....)H.f..L._k..<.v..u.............TV.....=.~...Y...~....e.o.........j[...O6...\|xH$?...\;.7..Gk{...8Y...n.`B..._...H....(..U.....]....O.

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 180x320, components 3
Category:	dropped
Size (bytes):	14678
Entropy (8bit):	7.973321429747529
Encrypted:	false
SSDEEP:	384:4GbHdX0UtLb40xy55vbQjRT66dG16U3+ETpQHDKT06Ea:4GGUV40x+5vbQjo6yuEFKDKT9D
MD5:	FBC9CF9FD3B595FDF453D1888746F794
SHA1:	ADE809B82817ADD4358573E5CDEBF2DD5DF54BF1
SHA-256:	1BAFBD725C87240C4F91AACFA168A9F680C7CA4462FD8B51E5B2CBD99402E4D3
SHA-512:	82FE4A6846C5DAE678642648EFF20A15D43692D0E4BDACE43E8AB4AEB13BC2A7ECFE1B86BFBC065B5E6BC894EAB6BCBFB1E3DDFCB335E167AC351FA57990D396
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."................................................................!1.Aq.."2Q.#3ar....45BSTt.........CR...$Dbs..%E......................................................!1AQ."2q....Ra.....#34b.....B..............?..t(P.!B.E<.qq.M).Uy..!F.B....P\.Y...xh.;n.\....Uy{..O=..h2.;.E....U..A.%`y..wA.e..m....-...kS..Jw....9T....... g.&...St........a]W^Z....B.....H.zd>Qx....A.zvp..].U\|...4^5.~9T..kN..{Jk..=...T..........9.j....Ri.........Z........2L....w.\.E..F"..qm..c.....D.;\|rK.....5a..`t.u....V 3.!..>..q.z...Z.C.F......4.4yX.5X\....BV$RHQ......USV.G....FT..J.....p.t/.?...4~%.....l.)....^.?j..v.s...).....~R..\|.v7.....%...Go.krOv9.R..?.O-..1.N .?.....t....Zwg`.Ok.]G.Z....a.....uk^.pN.. h..VU..R...VS..`...nh.BvlO.^x.........qud..hf..5...V...G......v_..3...t..4.G#84..u-6u..Y.....-..y...x...t;.K`..\J..=U.....D

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (10793), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	36715
Entropy (8bit):	5.9916880819881495
Encrypted:	false
SSDEEP:	768:CiBtrifZVO7Wg3hIBYxZ5Y7qXFnUpXmeUpXmuUpXm9dQ/UXFdiGPPbcq:C8Cg3LGSFn9e9u9YoHZPPbcq
MD5:	855849736C464D9C4D58B78B1BA639D0
SHA1:	10C8DE4DF198647B7D5F74FAD9D22CE26670099B
SHA-256:	15B114D5074F9B67DEBD73EEE348CF792A5A9A966B23137C9353351122D9D3FA
SHA-512:	4D5748EE67A73FE93D8DBBC68F059245EB99019FB24F0A290E759229FEC3E3E81EA8F64B36F0355B1ABC11E40DFF0FDF168E412C910223A2178DB5AF8C5AAD38
Malicious:	false
Reputation:	low
URL:	http://ww1.frothylattestudio.com/?fp=2qoqDYI%2B0iJZGtPstQqccpYVxaI6ObJitI3FjXXWfpuGUlRgNWh70labVRMtFUQ5LVzoMsVoCWLxiQoM%2BdHqAmXOoXaKy6JyeBLBtnHKVd%2FGKCsWGnM13tv86SZzSImbUwvUTGR%2FwbvV68cR0%2FelwwHzPZHwooLRpm81LFvUEvjkylyIR3ZT0%2B2EYh1V8Mk1LHsmLJgCnP3oZ1aTXFi%2FizUqz%2BiqR4qxlPDtjH3Rv7mUkC7JKPeRf7k2n5uCk9QpAZKz65a1XlYxqE%2BvpXcQKkjEW4hITPhDocilO%2FelAu0%3D&poru=b%2F8ZxUo4ug61cKbUIWuWZ9hktTN0TXmB5ubOU%2BIkZsWE32eqR80OwRFFQvOBToKB&_opnslfp=1&
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>..<head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net">.. <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","HR","LV","LT","MT","NL","PL","SV","SK","SL","CS","HU","RU","SR

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.066108939837481
Encrypted:	false
SSDEEP:	3:Q3S1lnyY:QC1lnL
MD5:	C2123D55130F2FA8031FE9BFFF36E675
SHA1:	B1F9FA4201BBA320891B92428E08EBDBE97F281A
SHA-256:	C456CA51EA843B4E09F6102F892EF409440A5C3C3615821B2586EEAD2F680506
SHA-512:	C962FF1CF2655106BE8456A80B945BFFE9EEFA29224684FA8B68FC8AA0364DADE034FBFF426BF48F8E2C0652F596EF47AFEE2129E40D995CB2B73F1109B13ED9
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwktpsIQHZ7nKRIFDb1LTuESBQ1IOj9B?alt=proto
Preview:	ChIKBw29S07hGgAKBw1IOj9BGgA=

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	69874
Entropy (8bit):	7.995864369416909
Encrypted:	true
SSDEEP:	1536:3XRVSgYyEl+3tmWxlehjV586cbf+SGa5FsLINK2fyjfeQ:3B4HbE3tmW3Ee6cb2SGa5FssajfJ
MD5:	920F2D77B1DEC324CDAABCFCA8D96601
SHA1:	DF6929767209D22AA97A7DB6E50BCDCA248945C9
SHA-256:	FEE3241A189944D6EC1F65070DA0263D29EEF0296D75626A9F25F752A4CEDA99
SHA-512:	3A649D4A9074FFA71B72C46BB8F3C7E97040AA4E639898FD4EBE81D0FA23415564D3DE9C39E3DFCF97B2CCD6A8A8FB2F030698D2AF7E8F9B7F89F6D61CEF0C6F
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/G/01/HST/AHI/Desktop/WebpImages/AP_PrimaryTile_Desktop.webp
Preview:	RIFF....WEBPVP8X..............ALPH.5.....m.0I..........}:{N..&.%.CM.H..A...!..........!..4.Ch.m.....4..A.`... A.[k..=.Xz..k"B.m.BRm....9\...>..$I.$I.......aL.b}..~....d.n.\....<..=.A..}...)...=V..6".H..(.........._......'.>N.%S4.......P..(.n......:...nE..B..5...(;......G.{.r]..-..... .C).....D...%..!-..j.#.....H...........:E.`.F....{....Aw.@.d%...FcD.r..+....y.1..!.h..".<..G.7....vIY.a....J.X.UzTD........ Lq...UO..Y.+....u&..R.....).D..3=.hS....A.......W.u.-.F.x....D...<.x;.z..}..4n;..x.9#..>.c..x..7.u.u....^..z..~...>Q..c.X .,..h&.E...........[.NA.`F...0C.....=[..;.H..........a.}4....CX1...Nt.SS...R._dq7..4.&\|^.H.$....-!...;......Z4.Xu..?...K....l.S./.......#X".2.]..C..H>]G.v.)....iK.[@..1dc.r..\.SE.w. .. i...G{..C.....5.Z.......5.Z..N...x..*wzv.'..G...^..w..p.h.`....bQ. ...'..#.4.,...^.......H.>..\?......C...%G......S.I...:. .$:YoW......M.UDo+...l....@.x9.W.......(.).t.E..T....^....x......P..SF..G..#D........K..O$mw<}..;.:g...

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x360, components 3
Category:	dropped
Size (bytes):	23895
Entropy (8bit):	7.943420512662733
Encrypted:	false
SSDEEP:	384:HnWZTclGkfl5xEemgprzy77UesUKEyzhtu+IFKmg0n0ZPlzwr8kKR+PYe:HZAkdrEIzy7MEazIgh0+tzwrrKRLe
MD5:	1720A5EFD72244CDB18DF6135796B18B
SHA1:	0A8F551DD8CD654A24FDF2F56E4BE5BFA4B7429F
SHA-256:	16656A0732CCB98629BD10E925827B4A5ED2DFAA011C3E8C0B403026DCDD8B46
SHA-512:	E796785294003D5D32CE6B3AE845A72FC48DFB995A79D26948C455DCF9694296EBC43F93D662846973D0D1F0E4DD815FCCFA371688943745BFC0296CA366EA8B
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................................%...#... ,!#&'))..-1-(0%))(...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......h...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..N...).(.GJ`....1..@).......1C.v).CHejZAN.l...)..+-...h?{...RF>Z.q.....Kr..[..!.T...[....G.......6g.i.6..`.M..iE..1%..I.1......qRc#.cs.EX...8.Y.......b.5.'.2...h..c..9E..%.....Y.TWY..".P.Y4k.t.X...1(....%...#.:...b.u%-.&....Z..?.j.....ei.........._.j..%M./.4...T?....1......ej..W##x...l._B..\|....*...q...._A.(#`..B..'....r.s.`TG.H.y...Vrv....;.$2..d.[.....0N....+>

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 23220, version 1.0
Category:	downloaded
Size (bytes):	23220
Entropy (8bit):	7.992386121959413
Encrypted:	true
SSDEEP:	384:cv6YLnAQlNf6nUw3EhOpHzr4Dt3l+QYxNWufCizUuQ+76ghaivkX3UmfilV:cv6KAy8Ux8TsDT+QACiQuQ+DI8mfk
MD5:	3A49BFC56868E37D88AF0A8C98502AF0
SHA1:	70056995A9F3A8AF43162ECB4D14399F0A1258F2
SHA-256:	2931B4FEF361FB14CEBE167B5C0827F3C00D0651B4AE34AF1EBDA1BCC261C254
SHA-512:	9C1CFEA187895BD8B0532609EF338497BB803689BEB7D71C2FBA06CBA3F9FBDF8FDC2623E7C448A544930744204458D323927FEF8C0CF190D12AB8BA58F62BEA
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/S/sash/KwhNPG8Jz-Vz2X7.woff2
Preview:	wOF2......Z...........ZJ........................?FFTM......l..^.`..j.V..e.....$....X..6.$..,. ..\..`..A[].q.m...6...D...ql.. R....@....y.Q...9Ie.m..E....!".T@?F....%H..e....a.BSK0wu....2%...q..v.E6.-.IT........Ne...=...........q....N'"+..NV..:.j...w...d.KR..::.G.......`.<n.......d..{..(....y.........M..rlN.d.'..Z{.....`.@..U.Y1...dvX.....?......>....5.....}..915'...........<y2..N.....2.flbmQ..L.d.$v..T@....m..........N.@ST@Q%`......V~..h...k.[.J;.3...."Y....o.e.B.)yWb.=.]00..6.(q.7.o.h..a~....#4}iK.s)}U.RC[zh......z....b...BX.9~N.u2Y...<.$>(..B.%..AP.K.....{..B.+[......>...>U.6.O.,.9Gm....v..._.9..?...*Tcw...\|...?>xw..OE.=n...'.C.......Z..P./....RP..YU.....Q...b.uU_.:..Zj/.3.x.uj..Zw!..A.+\...i.b.Q.O._.s.p.s.6.?.p.<}e..,@A.^.._.%(.<...A."x.p.j......8.....S.....?[=.....R@..E7..m..3.z...<.h....0..H3.y&........j. w...7..j.L..K.N..R...?.j.._.=....Ai..v..!........FU....&..M.....rfH..iR#... ...Jk../.9.\|..].8.m..M.H..f....U..V.Q"....T\f0.

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2474
Entropy (8bit):	4.85304884756774
Encrypted:	false
SSDEEP:	48:YlcYEBUDwG867BUF5G867BUBUaG867BUkzG867BUG0G867BUIedG867BUlOG867Z:kjEBUDwGJBUF5GJBUBUaGJBUkzGJBUG0
MD5:	B16D2AFFE1750F8116BFD715ED1F39AF
SHA1:	A3C16D84BBFC60DF2BC6BD1974C0D74D7A515415
SHA-256:	E19F6E0DB3A774F1C6AB97E94559A55F21850670D1B5DCF82479633CC8FC64C2
SHA-512:	362D90D06D426BE24E0A3A918BC826DCEB8C327257A66510C4A7A6B33CB58C9965F5F6FC3CF14FEF537BD95364CE88E8C2EB05034AD6BC9C282D4D02FD96B8D8
Malicious:	false
Reputation:	low
URL:	https://completion.amazon.com/api/2017/suggestions?limit=11&prefix=bloat%20relief&suggestion-type=WIDGET&suggestion-type=KEYWORD&page-type=Search&alias=aps&site-variant=desktop&version=3&event=onkeypress&wc=&lop=en_US&last-prefix=%00&avg-ks-time=0&fb=1&predicted_text_accepted=&session-id=146-5727277-4453238&request-id=YT8YJ4B94N98J9DNZQCH&mid=ATVPDKIKX0DER&plain-mid=1&client-info=search-ui
Preview:	{"alias":"aps","prefix":"bloat relief","suffix":"","suggestions":[{"suggType":"KeywordSuggestion","type":"KEYWORD","value":"bloat relief for men","refTag":"nb_sb_ss_ts-doa-p_1_12","candidateSources":"local","strategyId":"ts-doa-p","strategyApiType":"RANK","prior":0.0,"ghost":false,"help":false},{"suggType":"KeywordSuggestion","type":"KEYWORD","value":"bloat relief for women","refTag":"nb_sb_ss_ts-doa-p_2_12","candidateSources":"local","strategyId":"ts-doa-p","strategyApiType":"RANK","prior":0.0,"ghost":false,"help":false},{"suggType":"KeywordSuggestion","type":"KEYWORD","value":"bloat relief for dogs","refTag":"nb_sb_ss_ts-doa-p_3_12","candidateSources":"local","strategyId":"ts-doa-p","strategyApiType":"RANK","prior":0.0,"ghost":false,"help":false},{"suggType":"KeywordSuggestion","type":"KEYWORD","value":"bloat relief","refTag":"nb_sb_ss_ts-doa-p_4_12","candidateSources":"local","strategyId":"ts-doa-p","strategyApiType":"RANK","prior":0.0,"ghost":false,"help":false},{"suggType":"Keywor

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 900, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	16237
Entropy (8bit):	7.914373477606932
Encrypted:	false
SSDEEP:	192:uZUkQ4lr5sLQMaphjMr2VqWT33ZoXgsICdjyt8bpBXG8OfQwZop96OJ+CTy5:ui4B0arXq8ygCdjTHWfQ8opRpy5
MD5:	52B8D386D2B1D407C71A4AE966B61ADD
SHA1:	B962650FFFC15637F0D9F57C332702459F084B7B
SHA-256:	D47C1E50DB91BB597B75EDC63362CD0C568E4F5F15A3F8BE1B6ADFF24E89E447
SHA-512:	C6B69AF93D0683324A86CBEE5575E42A293C8588267C49034D1CC9AB3635034897838F9D5EA665B694C90D72CFE2B3F462CAD907CC74749E9AF863A90D233998
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/S/sash/McBZv0ZvnbehkIx.png
Preview:	.PNG........IHDR................Z....gAMA......a.....sRGB.........PLTE....j..j.....i....fJ.nU.....i.....j..j............._bg[ajD`e.k..j..i.. ..i....\..i."'+.j.......j....................i.&+1otzMT[.i..........NSZbgl.i.jpw..E.... ...HOW.....j....bde...KQY........OTS344^ch....j.........adh............2.....eefZ`f.j.......{..{..ejr..........s.........i...biq`fnOSY....................fff.....f...........w.!!!fff...bhp.u..u..Y.'..PUY.....488.u.588.H.........F..............c.../.....tz.............1.................J.!!!..c.l.......q.m..v;d..D..Vx..../8A......#*1/8@.....\333...`gofffPW`.....%......KR[]dl.u.dkr.....dT[dX_g............kqx................7>A.].......Y..<........+4>.j..................}..UUU......?GP.{.............uK....7.'..rx~..R../~.....y.s.....%....W.........t...Y.{{I...YY...........tRNS.A4............b.H..[eo6..'..Q.......Q....a.w...`....w.a.A.5...q/.{I...e..X.^.......p....q..~......R.w...6........Gc........\|......Z......

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	71
Entropy (8bit):	4.19644707821733
Encrypted:	false
SSDEEP:	3:PouVIZxgRO5ZB1XbZ6iFi:haxUkZ3X96x
MD5:	6AAEF67381946BFC1DDACCA8CF7F6C36
SHA1:	E441BBA8B691AD0FFF0BCCB75974880018AB41D6
SHA-256:	73F8AE8C11DAA6AD905107970E55C3C64CD7133561E9E91E650AAB092BA7245E
SHA-512:	99039B90D4F3819EFB0A395D0DC810DEE1A56265D443D24D1C9BDF832EF9F95887E3C417253698A4F76EF176D0ACE6334905F4B7B4E6A8421D2F650B84255EC2
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html><head><title>x</title></head><body></body></html>.

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (596)
Category:	downloaded
Size (bytes):	146340
Entropy (8bit):	5.47172992065056
Encrypted:	false
SSDEEP:	1536:F2Pnv3DHGitBzz3hznaL+6OhlXT4/6zrdB:Wnh3r3rP
MD5:	930F32DBB785892A1F5EEDDAC96E67C4
SHA1:	F50FA85980F440725B554FE6CB94204DE89C1F71
SHA-256:	888AF778DCF4C5A49C4A3C9577F8DC248BE827E6FEE3B13600214FA39F9988AD
SHA-512:	0A0CE35D8F5A83B157F3B89CE942EEA4B1CF7C9EA416AAC32F3A722A85ACA41D380255B0CEFDDD7B15818994DA0BA63924B66C4E21469EBB0452F207FBF48DE9
Malicious:	false
Reputation:	low
URL:	"https://images-na.ssl-images-amazon.com/images/I/11XMgK3X1EL._RC%7C31PLWBroQRL.js,31Y5AkqmNvL.js,01WtpFkF58L.js,313k3X0MlqL.js,41STYmgYJcL.js,41eDmkHUGAL.js,01r1r3sVlxL.js,21k0EzbSxUL.js,019dBqWurRL.js,11begzhl8OL.js,011VrMJVPzL.js,01XQQDMWkKL.js,012z3lMdhOL.js,11Exu1nsH7L.js,01b82LFIRTL.js,11UyW+59ZyL.js,015CwW0puPL.js,21UoUtkStoL.js,0164lSJukTL.js,219jZMsEOWL.js,31ydWb2R4oL.js,01FA0ZefFJL.js,41sLQbGE0jL.js_.js?AUIClients/SearchAssets&YLE0U/+D"
Preview:	(function(e){var f=window.AmazonUIPageJS\|\|window.P,k=f._namespace\|\|f.attributeErrors,c=k?k("SearchAssets@actions",""):f;c.guardFatal?c.guardFatal(e)(c,window):c.execute(function(){e(c,window)})})(function(e,f,k){e.declare("s-actions",{SUB_RESOURCE_ITEM_READY:"s-web-application-controller:subResourceItemReady",DEBUG_VIEWS_ATF:"s-web-application-controller:debugViewsAtf",DEFERRED_CONTENT_READY:"s-web-application-controller:deferredContentReady",FILTERS_LINK_VIEW_READY:"s-web-application-controller:filtersLinkViewReady",.FILTERS_PANEL_VIEW_COMPLETE:"s-web-application-controller:filtersPanelViewComplete",FILTERS_PANEL_VIEW_READY:"s-web-application-controller:filtersPanelViewReady",LOAD_REFINEMENTS_COMPLETE:"s-web-application-controller:loadSearchRefinementsComplete",LOAD_SEARCH_PAGE:"s-web-application-controller:loadSearchResults",LOAD_SEARCH_PAGE_COMPLETE:"s-web-application-controller:loadSearchResultsComplete",LOAD_SEARCH_PAGE_STARTING:"s-web-application-controller:loadSearchPageStarting

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 267x320, components 3
Category:	dropped
Size (bytes):	21737
Entropy (8bit):	7.9724223810440815
Encrypted:	false
SSDEEP:	384:sf8lOeGkbktfNI+QDkw0z9zyUPM8wA7ALL6vQRZtEXjla2qwoE:sfektEkwK9bPM8D7SL6aZtgBq+
MD5:	14FD2EA06C8F78D1F388EA8697DAFB59
SHA1:	8F7926B85618FF629BA86D30F5943E5652258050
SHA-256:	41005ACDFFCFE155FE58D883A1290E2A7E6CE059D7E9519AA936D58559FCF7F0
SHA-512:	51F0205E2A48EF4753C47DE7636A097DAF351B763F770D60F0CD73E6C7FE3505B8BF89E4440418A61934E0E7EADBD824E29D340CDCE54FF427A4EB71B6814051
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."..........5.....................................................................'.....e.....F.....b.M....8...X..../H{..>..l.(xr.....:.1Nq....9gl...x.i..~...^.k...%.7.w....z....5.gR.o.......~..b.....J...>G..L.A..S...:...........u...\|..T..(.....N.$'f4.......E5.l^O.p....fx....:.Nh... ..,.....j...E]..V...,.'..b.]6l.Kq.~4...L.bsQ.Z.b...+h.LIu../.V..l.U...)s_S..V.Di....2qM.~u.=..94.<j.j.......c..wIf.{[......Y.i.o.Y..f.5..fo.Z.A.u..m.)ch-l7.."....1....d.(K..V.0.".w...U.....&.kRw....'CO..M..N..E]..e`jM..\|.i...h...JG.[?..-l.^z.m=..2.IC...:Wl.dH.B...p./..6%.....@...N...ea.@...1.!"...)-..%.B.(..r.r..%.[.U#..j;.oO....-..d........r..L.c..)......'.o.W8(z..\|..^].....f._.0...y......b.nWD]...FV9..Kx......z5./..S...E....X..`...{.s..njE..4..?..l.D....x...%.U..z.1.$.s..Rj..q...%s...Yt.#..<I.O.3....

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (346), with no line terminators
Category:	downloaded
Size (bytes):	346
Entropy (8bit):	5.00818604439199
Encrypted:	false
SSDEEP:	6:qIZmJNsVwbDRWPWG3mV/R7cjTDEG5OQRoYxHSNHbMFKdCuFxXcvH3eVP4SzpF9yc:+JG0DRWZmX7OPrRNwN7MFMCu/cvOVQSl
MD5:	F84F931C0DD37448E03F0DABF4E4CA9F
SHA1:	9C2C50EDCF576453CCC07BF65668BD23C76E8663
SHA-256:	5C1D5FD46A88611C31ECBB8FFC1142A7E74EC7FB7D72BD3891131C880EF3F584
SHA-512:	AFC3089D932FB030E932BF6414AC05681771051DD51D164F09635CA09CBD8525A52879524B6AA24E972E7766DDF529484CC1EC416DE8B61255435A89BA781F8C
Malicious:	false
Reputation:	low
URL:	http://ww1.frothylattestudio.com/px.js?ch=2
Preview:	var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (767)
Category:	dropped
Size (bytes):	109163
Entropy (8bit):	5.599639707702945
Encrypted:	false
SSDEEP:	1536:aKK8doqULVrpN6YbGH9SWAJ0s7rav6H2M4D2IRMg7DcjktnRf8Qw7OTswdcwmovY:5jCl2PBysUI38L/1NRWU
MD5:	A73CAF55EE43E7D4035B957E75ECF844
SHA1:	D86313127CE020273DEDF3CA6B82E9A8769952A0
SHA-256:	235C300AF8D7A65899CDE7167AA3C4E8D83898A6FE912FF23AA1E12DC7F6D5DA
SHA-512:	9F2D78A9E30906A559CEAC1337FEF2F85E2AB264E45878095D3A3C4B420999A6FBBEF4FE2D44E8845D70508A58C0791685C37F2E0DD63B733BAC2B16B5106A94
Malicious:	false
Reputation:	low
Preview:	'use strict';mix_d("SBVideoCards__sb-video-product-collection-desktop:sb-video-product-collection-desktop__bxSjGeba","exports tslib @c/logger @c/metrics @c/pagemarker @c/scoped-dom @c/dom @p/a-ajax @p/A @c/aui-carousel @p/a-carousel-constants @p/a-carousel-framework @p/a-carousel-strategies @c/aui-utils @c/aui-truncate @c/remote-operations @c/browser-operations @c/aui-modal @c/aui-untrusted-ajax".split(" "),function(jb,m,kb,A,hc,ic,jc,kc,lc,mc,nc,oc,pc,lb,qc,rc,sc,tc,uc){function H(a){return a&&"object"===.typeof a&&"default"in a?a:{"default":a}}function vc(){var a=x["default"].cardRoot.querySelectorAll(".mobileEnergyEfficiencyContainer");(null===a\|\|void 0===a?0:a.length)&&a.forEach(function(f){var g=f.querySelector(".energyEfficiencyContainer"),e=f.querySelector(".energyEfficiencyProductFicheLabel");f=f.querySelector("svg");g&&e&&f?(g.setAttribute("style","min-height:30px;"),e.setAttribute("style","font-size: 12px!important;line-height: 16px!important;"),f.setAttribute("style","height

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (538)
Category:	dropped
Size (bytes):	2336
Entropy (8bit):	5.325315075451192
Encrypted:	false
SSDEEP:	48:8qaGfCntpCntD7/V8Bd+w6jrHusTGJ0nBfdyziit8ZcHF:3aVcb66jrHuseatdyxtEcHF
MD5:	C9647D6B01E0617025076B05E7BED1EB
SHA1:	39E37C18AD6508723B664C873AFA6F02DA8D6DAE
SHA-256:	7399F4490F05A081B965475317099CCDC6245DC1FAEF8B0BC5E500E5FF5C595A
SHA-512:	C8DFDD9A1ACF05FD06F2C20D3F69B0A224AD95D6CD14B1C769D76C6C5FDAC8E9A345A5C9959DE58C32E52EAB3AF0BAB3B9B8D446A84F7B2147472232A330DC12
Malicious:	false
Reputation:	low
Preview:	(function(d){var g=window.AmazonUIPageJS\|\|window.P,q=g._namespace\|\|g.attributeErrors,f=q?q("AmazonRushAssetLoader","AmazonRush"):g;f.guardFatal?f.guardFatal(d)(f,window):f.execute(function(){d(f,window)})})(function(d,g,q){function f(a){l&&l.count&&l.count(a,(l.count(a)\|\|0)+1)}function m(a){return[].concat(null!==a&&void 0!==a?a:[])}function r(a,c,b){a.addEventListener?a.addEventListener("error",c,!1):a.attachEvent&&a.attachEvent("onerror",c);a.addEventListener?a.addEventListener("load",b,!1):a.attachEvent&&.a.attachEvent("onload",b)}function x(a,c,b,h,e,d){if(a){a=document.createElement("script");r(a,e,d);if(c)a.textContent=b;else{a.async=!0;if(e=h)e=-1!==b.indexOf("images/I")\|\|/AUIClients/.test(b);e&&a.setAttribute("crossorigin","anonymous");a.src=b}b=a}else c?(c=document.createElement("style"),r(c,e,d),c.textContent=b,b=c):(c=document.createElement("link"),r(c,e,d),c.rel="stylesheet",c.href=b,b=c);(e=document.getElementsByTagName("head")[0])&&e.appendChild(b)}function k(a,c,b){retur

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	17542
Entropy (8bit):	2.247918084411713
Encrypted:	false
SSDEEP:	192:9dLhJ6/f2dh+xQLeZ10TLwhwOHae6nmErcglsIZS3F:3jaOdhQQu0TLwaOHEr6IZ
MD5:	CA6619B86C2F6E6068B69BA3AADDB7E4
SHA1:	C44A1BB9D14385334EB851FBB0AFB19D961C1EE7
SHA-256:	17D02E2DB6DBEDB95DD449D06868C147AC2C3B5371497BCB9407E75336A99E09
SHA-512:	30F8F8618BFBCD57925411E6860A10B6AD9A60F2A6B08D35C870EA3F4CEC4692596A937FF1457CEFF5847D5DA2B86CEBA0200706625E28C56A2455E6A8C121D3
Malicious:	false
Reputation:	low
Preview:	......00.... ..%..F... .... ......%........ ......6........ .h....@..(...0...`..... ......%.........................................E...................................................................................................................................................?...................................$...........................................................................................................................................................................................B............................................................................r...P..........................................................................................9...............-........................................................r...................................................>......................................................................$..............................................................................................................................

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 148x320, components 3
Category:	dropped
Size (bytes):	14717
Entropy (8bit):	7.974215284116661
Encrypted:	false
SSDEEP:	384:wmYsFmPCD5xNme2q6GAHyUvR7F7KSVAKNorbvzOcvAjfdErF:wmYRSme2HSuR7F7LVAGorbiiAs
MD5:	7EA8A5B994B83C00F12459766AA63A71
SHA1:	AB98892E5B6DD895DB8079EF72EA0B568E161FE2
SHA-256:	A160F6A4500105191E34DD47F5D49EF6B9BB6D240B9A15F17D5094295BD58ADA
SHA-512:	1D393C6885C2AC0B1B2558F76A1CA6D44A1B31097223ED45FE4DE14307F27C50067DF3ECF839F2CF7A1D083A0000368773E3AA83262C811325B6757217A147C3
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@....".................................................................!1.Q."2Aaq......#6Brt...3Rs....$4S..5c......CTbd......................................................!1.A.2Qaq..."3.....4B..#R.$cr...............?..t(P......;..?.....2%........z....y.../..n.......Ok...{.]....N...Ui...S..S.x..V....u8..'.E.T...U.+G......s.wZ...+....Jjs.x....:...Z..Q..R8U..WF..L.s.A...O.lX.m..U.'.>......o.9.q..k$Z...P...D$.....?_..J.....2.;......&Z<R...f\|....PC...m.O..}.N...l}...............2{y....\.E.-G..m.k...R..#aL...B.5...S...}..K..........G..B.(.s.u$..:..c.....\..a..7.}..O.xq....jq..n......e.+X......4...17).II...q.b@>..fx...3/..#$g....U..Vw..a .L.-.9..Y....-....[.<C...A......<..n.)..u.#t.p...r2.u.Q.H.3..L.{.B~+4N,..(...I.......j...L.<....C...........r9......=...A{.9U.B..*..O..s.....>.+)p......iyu-.I6.-S..I...$..

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32973)
Category:	downloaded
Size (bytes):	221244
Entropy (8bit):	5.030920266078868
Encrypted:	false
SSDEEP:	3072:EnH6o3pouSXmkglKEKajAQlkEXZKt4ReJRLwsiKGA:EnHoLwsiKGA
MD5:	34EEC927FF18A0E106B1B72CDCC91606
SHA1:	6712017308133B9A58EAEB96DC378BCE01586EE4
SHA-256:	0328E4308B4ABE6FE088E891409C2731464F4B8F101A4F8635D80D1B1108F16D
SHA-512:	4F518B24DFFCF2E8AA761B99BB0BAB8598DAD220728026F7E2A6ED57A2CA4B12D9598D250A1DC95D8201C912BFE0D0F00AF74C69CBC5236AC9C30DB45B0B814A
Malicious:	false
Reputation:	low
URL:	"https://images-na.ssl-images-amazon.com/images/I/11EIQ5IGqaL._RC%7C01e5ncglxyL.css,01lF2n-pPaL.css,519YvOBDG8L.css,318PabRHnEL.css,01fQPWUjn0L.css,11GEPqXartL.css,01qPl4hxayL.css,01pOTCa2wPL.css,413Vvv3GONL.css,11TIuySqr6L.css,01Rw4F+QU6L.css,11oq2t-LP6L.css,01J3raiFJrL.css,01IdKcBuAdL.css,01dRHIoUjnL.css,216JhEla-AL.css,01W0RNXC6mL.css,51eWt662OXL.css,01XPHJk60-L.css,11wvSzGn6tL.css,01ANX9Vx1mL.css,01cvE3JoRWL.css,21QZLEfhJ9L.css,11G8RVHqS+L.css,21RWaJb6t+L.css,11rcnzaRjSL.css,216LjtW6ADL.css,01CFUgsA-YL.css,31cRD+3IJtL.css,116t+WD27UL.css,11yEzLYDg2L.css,113QjYEJj-L.css,11BdrZWOJpL.css,01-FQc5gU7L.css,01X+Gu6WK9L.css,21ZipDicWQL.css,116PE3n1raL.css,01LzHhtXxxL.css,21djYMkdT6L.css,11Y4L5mw5IL.css,11hvENnYNUL.css,11jIWEQw57L.css,01890+Vwk8L.css,01bDiPuBD6L.css,01cbS3UK11L.css,21F85am0yFL.css,016mfgi+D2L.css,01WslS8q5ML.css,113sefbl5fL.css,016Sx2kF1+L.css_.css?AUIClients/AmazonUI&vET8l+2h"
Preview:	button,input,select,textarea{font-family:inherit}h1,h2,h3,h4,h5,h6{padding:0;margin:0}h1,h2,h3,h4{padding-bottom:4px}h1,h2,h3,h4{text-rendering:optimizeLegibility}h1:last-child,h2:last-child,h3:last-child,h4:last-child{padding-bottom:0}h1.a-spacing-none,h2.a-spacing-none,h3.a-spacing-none,h4.a-spacing-none{padding-bottom:0}h1 .a-size-base,h1 .a-size-mini,h1 .a-size-small,h1.a-size-base,h1.a-size-mini,h1.a-size-small,h2 .a-size-base,h2 .a-size-mini,h2 .a-size-small,h2.a-size-base,h2.a-size-mini,h2.a-size-small,h3 .a-size-base,h3 .a-size-mini,h3 .a-size-small,h3.a-size-base,h3.a-size-mini,h3.a-size-small,h4 .a-size-base,h4 .a-size-mini,h4 .a-size-small,h4.a-size-base,h4.a-size-mini,h4.a-size-small{padding-bottom:0}h1,h2{padding-bottom:4px}h3,h4{padding-bottom:4px}.a-size-medium .a-row.a-size-base,h1 .a-row.a-size-base,h2 .a-row.a-size-base,h3 .a-row.a-size-base,h4 .a-size-large .a-row.a-size-base{padding-top:1px}.a-size-base .a-row.a-size-base{padding-top:0}.a-size-micro{font-size:10px;l

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 194x320, components 3
Category:	dropped
Size (bytes):	18100
Entropy (8bit):	7.973576556939328
Encrypted:	false
SSDEEP:	384:HeCocazpz7FMxXGTrAzTnfDrXUQGi7bz2QuGcJiAHZUG:+pt3ypGToTfDYQPnHcsoZz
MD5:	4A5FE6C18223EDF4A69207CAB16FFB0C
SHA1:	C5375505AE4C465925F2D8CA603A4CC4B5F2EDC1
SHA-256:	433CBBFBF1CB50C82A8734DE012C4EEDFC541BA3DDFCC22167A3967FD8334A6B
SHA-512:	3E18CC4BF93A3EA8E13EEC3AEF16200B37CBF1F517BDF72588812E01EB45BC09EDFB2926D3809FB4D1119891F8FBA779AA69368205CEC85FB02B4A2815969C04
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."................................................................!1..A."2QRa.qr.....#35t......BDScs..Ubu...$%46C...E...................................................!1.A.."2Qaq.R...#3B....C...b.............?...x..>...Y.h.8d7...4u.B.@4n8..x.[..(-..!n.'.g.cp=.sj.e.ou.z;j..$..UEBq....o...3.......f.}B...;]...-J\.;.[n......4......!.....5..4..O.a..w.._..2iz...y...#8..gB..K.]R......X&.$..s...eb........".a...uX.5.J/%..&..B....d.....8.!!.O',....].{#2.hUl.e.Z.p.L x..9.Q.w{..Eh...,{..b...+...........\|lG...Gq...\|!}.L...H`p...O.P.LJ...8..'....~AB.0p......TT.....c..-..A.O..db...Kr+.....Xn.G2.x..(......dc.Lc...HJ.9.ef.{D..$`..A.....V...O9..v.l.V..)..p....-....F.~F.&..z=....cE....0...b..p.B.".w.v.t2\.H..f>......S{..E......?`.?ISO}.r........A.py.%T\|...E.."...C..X,D{..;Q.,..6..0....j.3..vP-...j**^..v

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 201x320, components 3
Category:	dropped
Size (bytes):	9119
Entropy (8bit):	7.952397896357176
Encrypted:	false
SSDEEP:	192:PWlRDduONdcYVUrDSuyJ2Pbq7RXSmdTR3loLRme2FPw2/YBNyursq:gNG30ebq8UTvPbFY2AiGX
MD5:	2D7AFCA0481F9CEBFB3DD1299B9571C3
SHA1:	62CC84055E4DEFE4AF779D3CA0A700FED54BBAEF
SHA-256:	698593711B5F51058D7337970C5DB5B710A4322EEFFF7B1C41AFB6BA42111764
SHA-512:	47B900F7178CE23E14F274EAC878FF7575193C868BDE47A3BCF61E269788CA7BE5EFE0BD7A40A376B3695B850EF8F7A63E6D6A8836A3746260B6D3020BEAAD14
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."..............................................................!..1AQ.q."2Rar....S....45BT.....#3Db.....$C....6EU.................................................1Q!2."A.RBq............?..-.B.B.... .!..4..`6._IN.....w.Tv.......<5.Q,N....8...~SP.@8...$.._\|W..B.qP...j.V...R.r.Db.o.T.&&......%p........!.!.@.B......!.!.@yY.....R...^.'e....a..@>aNZ..;.]...BP$....?....{..r.&....=.pa.D.pRevbp.s\.A.{..Q......y.....tB.... .!...B.B.... .V7.O#X...O._...kC.#k#.6...[..`>.......0.... ..w.<8...u.....e.....>...w..;......q%I.D....$..*....?../.<dq...e{..z'.........=?a......TR......J.dC...t?a..#..;..\.......).2..i.R...........k.\|....,<.=E.y(.F....+.uY..o...z..B..P%kI..%.d...I.Y}+.2..0........._.2~.r..tar....B...!...B.B.... .!7..b....p.GyK.8U]...X#...SJs&+<.].tn..Jf.yF...Ji...g:.2.........s.(.e...r.'.

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
URL:	https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26m%3D1%26sc%3Dcsa%3Asi%26si%3D7013%26pc%3D19242%26at%3D19242%26t%3D1729723018741%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:19242
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 246x320, components 3
Category:	downloaded
Size (bytes):	14005
Entropy (8bit):	7.950916489143395
Encrypted:	false
SSDEEP:	192:ToNYck+bWHc1gQwhtqRkc9I5alLV3Sj9Djnkn530KQQ/SNGhIqLQZdJ:kNYQWK8qKoMat1SjJC5wHNG+jfJ
MD5:	FF3F63227D98D4D92931C0AEC02E796E
SHA1:	8F88D3258BBB0663A55703626F2B79A7F007E7AA
SHA-256:	A8159A2CDAB2DCC1BF214B8B643F868CA62FE545BC926CE368C6FE02DE38BB4E
SHA-512:	16C5BEC8EB3817202F5D0094E7A11CE278818A8CD6407CD24E0B49E0EB223ECD73D8FEAFD200CD9F281AD19620F2A3FD0B1F519E2C5A7CB9039F512B2CF3F2A3
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/71y2IJlwKtL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."..........4.................................................................,.....9............S...........S.._2.n3...J..P......Y...................?.d.m$?$.).4_cn#....7.?..tS.D3..........E-:.-.v.,T.P.[F...........?D.=?3U...........".....{5...M.Vt>Ah....Y.6.^...N.3.........7...G.:..U....~...GZg..UjQ..n.....rd............#.[<O.D.xF.U...d.S.....;...,.{X....0.......Gu....Z....'8d7.Y..F..[...9..3.+af.'#PHf..W.z.........p..q..ex.....1bYP...i..i...!).E.s...6Y.60..H...0......../.H6.o....[L$.clk.E..UV.S.!.5{...+...o.c..."e. ......tc.k..y....2r.r..l./'..21.".SU'.h."X9.........A...y8.3K.=.k?...G..<......>.2rt...J.."V9....\.KJcz\...m.....:WW..1.u...@.jb...h._>.>..X.s..lkD..Y.....[.?j...X.....om>.?..\l\......-mlb.kTla..v...-..z..s...K.=b"3....3Ynp....}........y.......:...........\"yU.

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60509)
Category:	downloaded
Size (bytes):	179444
Entropy (8bit):	5.082224822328043
Encrypted:	false
SSDEEP:	3072:uDPEekE/5t/07HvTZDbHjefnX5TnDr7b/+BHR+Ei4weIvyV9lbT2SVCXFqwwO5/8:uDPEekE/5t/07PTZDbHjefnX5TnDr7bA
MD5:	36F280FFE55F4D0C123A8D595F8E0AC2
SHA1:	DD1AB87BE670A7B5837C1A18B561DF6169FBB357
SHA-256:	EDA333085133592F938B120FFAADBD601CA884CCB71CD282F5105CB02C466336
SHA-512:	EF2E47D0BDA15A199489EC2C41D7CF3F5E198D46732FC5CF662885CDDEA1A892C67D62832760DDBB422411AE97E18961DDFED83D6ECDD7AEC6AFD2F0BD64B73D
Malicious:	false
Reputation:	low
URL:	"https://images-na.ssl-images-amazon.com/images/I/01mI9NDJJTL._RC%7C01Hw8JIiKbL.css,11AQMRD3rsL.css,61VfgvRLcBL.css,01aTTaL5f8L.css,01NbgfyOxdL.css,01OfDy83BLL.css,11rNNhF9giL.css,41t-n4KOXvL.css,01AuLu1p0SL.css,01+A2nZ3DKL.css,11IaasccbKL.css,01m4HdUj51L.css,01LxUNzvnUL.css,11ABzUvcTsL.css,11a7luWQOCL.css,31J36LqHTUL.css,01e7DqahglL.css,01h5jb0krML.css,21O-2o3zNXL.css_.css?AUIClients/SearchAssets"
Preview:	.amzn-safe-frame-container{overflow:hidden;width:100%}.amzn-safe-frame-sizing{margin:0 auto}.amzn-safe-frame{border:0;width:100%}.amzn-safe-frame-footer{font-size:.85em;text-align:right}./* ******** */..s-banner-badge{color:#fff;margin-right:6px;border-radius:3px 0 0 3px;line-height:1.05;font-size:11px;padding:4px 5px 4px 6px;font-style:normal;font-weight:600}.s-banner-badge:after,.s-banner-badge:before{content:'';position:absolute;right:-6px;border:6px dashed #fff;width:0;height:0;font-size:0;line-height:0;-webkit-transform:rotate(360deg);border-left-width:0}.s-banner-badge:before{bottom:0;border-top:0;border-bottom:10px solid}.s-banner-badge:after{top:0;border-bottom:0;border-top:10px solid}.s-banner-badge.s-banner-badge-orange{background-color:#e47911}.s-banner-badge.s-banner-badge-orange:before{border-bottom-color:#e47911}.s-banner-badge.s-banner-badge-orange:after{border-top-color:#e47911}.s-banner-badge.s-banner-badge-light-grey{background-color:#a3a3a3}.s-banner-badge.s-banner-b

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (595)
Category:	dropped
Size (bytes):	52976
Entropy (8bit):	5.315043781142496
Encrypted:	false
SSDEEP:	768:/OwplOVh9aGPNItQPtazaikxMXXPB+YQycmcUOzheEfbTAYfnrIulbsksLZHU:Y9kXcmmzhe4vJrPsks6
MD5:	08ADE75238D50BE6B835CB9EB47F77BE
SHA1:	1283D0AD3A738552036F4AC495484DAB0E4F7C24
SHA-256:	D6F8F9D8EEF0165B139120551326140D8693B6309A64E55FC40DE19BE21C614B
SHA-512:	10790BEA14F378A0722FD5D6CF5683C45A3F5DE253CB1BC25126A96BE70D5D83E7BF9029CB974C7F8B8C10A4FA537A3A09B9A5DB97CD69E9A937EFF271F841D6
Malicious:	false
Reputation:	low
Preview:	(function(V){var f=window.AmazonUIPageJS\|\|window.P,M=f._namespace\|\|f.attributeErrors,a=M?M("CardJsRuntimeBuzzCopyBuild",""):f;a.guardFatal?a.guardFatal(V)(a,window):a.execute(function(){V(a,window)})})(function(V,f,M){mix_d("@c/api-lock",["exports"],function(a){var c={},d=function(a){delete c[a.type]};a["default"]={isLockedFor:function(a){return!a.every(function(a){return!!c[a]})},unlockForEvent:function(a,b){c[a.type]=a;try{var e=b();if(e instanceof Promise)return e.finally?e.finally(function(){return d(a)}):.e.then(function(){return d(a)},function(b){d(a);throw b;});d(a)}catch(k){throw d(a),k;}return Promise.resolve()},unlockForEventOnce:function(a){c[a.type]=a},resetLocks:function(){Object.keys(c).forEach(function(a){return d(c[a])})}};a.initialize=function(a,b,c){};Object.defineProperty(a,"__esModule",{value:!0})});mix_d("@c/aui-untrusted-ajax",["exports","tslib","@p/a-ajax","@c/guard"],function(a,c,d,e){function b(a){return a&&"object"===typeof a&&"default"in a?a:{"default":a}}fun

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12108)
Category:	downloaded
Size (bytes):	147456
Entropy (8bit):	5.151416480346765
Encrypted:	false
SSDEEP:	3072:U5r1CO2EvLtXKZHHthpzRDWhIEycowQkUMDYHMntjxNTF2EGOykgJp6dekfVB3sh:U5r1CO2EvLtXKZnthpzRDWhIEycowQky
MD5:	76F834A6C75686DA5485FF1A4947F74A
SHA1:	15685666A96B4572D9308421E0D455640EB568D8
SHA-256:	38256DF1E63A8CB2D146BB684ECD2940B55E01F178C6AC26975692C3CF75E5FE
SHA-512:	463F119F762D86746F5150E211579FD7151004A3EE4BB5F1E5FBAED4B072CFEED9B02670B55545F8F47C23837EA4C7F1BD89C62C234B3A645D1B66E388FAAACA
Malicious:	false
Reputation:	low
URL:	"https://m.media-amazon.com/images/I/01HCjmNENyL._RC%7C01UK0OQ0FvL.css,01VFX23kLjL.css,216fxsCd+3L.css,01ryVQRyFSL.css,01Q8qaOT7JL.css,11z+zmbs3hL.css,01A95w3v6WL.css,11Vf4DwR+3L.css,01sjthDVJfL.css,01eMw4K+MpL.css,01jxKgTxu9L.css,01vHirPPBxL.css,0133XK-8TgL.css,01HgtFLcGIL.css,11Ab4RWO08L.css,01G2qBjBmGL.css,01MRciSCcjL.css,01NUbuAnhkL.css,11McKAVkPgL.css,016hZAhJi1L.css,11J1ZUwKAHL.css,01uwN1SkKRL.css,31amMaY7+8L.css,21do6rtkGRL.css,01gFzmO27eL.css,019qpMX5ivL.css,01XdbL7DyhL.css,31E0vFkmhUL.css,61pJPd6C9IL.css,11uhwBiv1GL.css,21Ap+PAtZQL.css,11NZSxWNVZL.css_.css?AUIClients/ProductUIServiceAssets-v1ozh2963o9b4124htsthvwpiwi"
Preview:	.puis-v1ozh2963o9b4124htsthvwpiwi .val-widget-container .puis-atc-button{border-radius:.8rem}./* ******** */..puis-v1ozh2963o9b4124htsthvwpiwi .upsell-container-side-sheet-wrapper{overflow:visible;position:fixed;margin:0;top:0;bottom:0;right:-100%;width:505px;padding:16px;z-index:2000;background-color:#fff;box-shadow:-4px 0 5px rgba(0,0,0,.25);font-size:medium}.puis-v1ozh2963o9b4124htsthvwpiwi .upsell-container-side-sheet-placeholder{display:flex;justify-content:center;align-items:center;height:100%}.puis-v1ozh2963o9b4124htsthvwpiwi .upsell-container-side-sheet-overlay{opacity:.4;position:fixed;top:0;left:0;height:100%;width:100%;background:#000;z-index:280;cursor:pointer}.puis-v1ozh2963o9b4124htsthvwpiwi .upsell-spinner-container-inner{right:50%;left:50%;bottom:55%;top:45%;margin:auto;position:absolute}.puis-v1ozh2963o9b4124htsthvwpiwi .upsell-spinner-container{margin:0 auto;display:table-cell;text-align:center}.puis-v1ozh2963o9b4124htsthvwpiwi .upsell-container-side-sheet-close-butto

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	71
Entropy (8bit):	4.19644707821733
Encrypted:	false
SSDEEP:	3:PouVIZxgRO5ZB1XbZ6iFi:haxUkZ3X96x
MD5:	6AAEF67381946BFC1DDACCA8CF7F6C36
SHA1:	E441BBA8B691AD0FFF0BCCB75974880018AB41D6
SHA-256:	73F8AE8C11DAA6AD905107970E55C3C64CD7133561E9E91E650AAB092BA7245E
SHA-512:	99039B90D4F3819EFB0A395D0DC810DEE1A56265D443D24D1C9BDF832EF9F95887E3C417253698A4F76EF176D0ACE6334905F4B7B4E6A8421D2F650B84255EC2
Malicious:	false
Reputation:	low
URL:	https://www.amazon.com/rd/uedata?rid=YT8YJ4B94N98J9DNZQCH&sid=146-5727277-4453238&rx=AFAFcIl4TaD43RrZ1VMchg
Preview:	<!DOCTYPE html><html><head><title>x</title></head><body></body></html>.

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 265x320, components 3
Category:	downloaded
Size (bytes):	9902
Entropy (8bit):	7.925476515492132
Encrypted:	false
SSDEEP:	192:iLFgsa6nFDEeCyD3fCJLZ3FdntcR8tp1nJGzDdM8UUUf8+IZspzx7E9HxMP2:iLFgSFEetzQ5vntgKhsCBbj7am2
MD5:	986CB12FFA1D408ADF3E73A529B964AD
SHA1:	E77BB25B111AA2EDBBD24295343F222FE28E25F5
SHA-256:	68AF730DF3BCCDFB7B3F1FC2E5AE8F251BD4DB39E1CF959DE9B51B073D15BAE4
SHA-512:	3D4E254B3DB6F39066711346C289B121D73197EA141A6384036A3248F94028FBE44E72FE72052E913BF5F98313E7CEA3DCABBCABD5528A77F71FB13EC2EB7304
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/511gJMeLRiL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."..........4.................................................................-$$...9uK.....8.7.r8??..=..^.n.Cu........#..\.[...N..u.lt.....Twvz..HI!y.8...K....WUV...e&./...>P.....w..$~-/..s..g..\..k]gQF.z..-..g..tt..{.w..a~~....Io)$$..l.>b...O.N......gu.=...M..Xp.g].=..>.$\.V[..u..,..6kn.w...v.s...~o.L.n...+.HI!/9i.....]..".w..........C.YM...>Z..6...;n....9._...W.?C....:..gV......k....H...\...+..-y..mt..w....A.l+3....uB...G.......w/F.........j.../.nu...M.NI$$..K.Ib....s.P..lq....3........<P.z....I_qUl.n.......KgY5.e.66?..... .A..........F...`.a..V+..%.]...i.{pII ....QDQcy.s....\..vfM.S..g........Y.g.c.UROHw..m....1.l.^......i.{qII"=M.T.Q....v...]f.}uG..n.8o[.}r....S.B\|.7.b$..$t..F.k.+...mWigT.....$...MqM5.&.61.qM&s..........L..B.W...3..B.....Z.Al.-l.V.......@.ni...........`. b(`!8...P

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x301, components 3
Category:	downloaded
Size (bytes):	27489
Entropy (8bit):	7.980525227353786
Encrypted:	false
SSDEEP:	768:+4eRcRg5ldlQMdQt3r8WQK2cA7JCnAGY5bDwcDIQT:+48c2ld9eWcAV9ntT
MD5:	FB2D46D1C03C2A7BD5987B8B2F463174
SHA1:	26BE8E2EF59027FAF246003A4CE82FBCAACF7256
SHA-256:	6DAF133794E2F7404862C3F9E6402A9AB5EE98498B00CB25E21499240020A32E
SHA-512:	471D4F1DAECAC7398BF8C0BB450AAE438FE069F6E016AE71DE88F5C9CEFE6A91C1071586745E06B393BF94FE0007FC602ADD44D44B8E17CBEE8D3AA514A6AC4B
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/81-c+8W5VSL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......-.@.."..........5.................................................................../..<..@..GE.AH=.>J...AT....I&...o{...0....f..;.>+....#d...$..I I I I I I I Ix..{.]..5x..z.s"........+..."...#.7Uo..6U.$ZJ..l..pV...(.4.<..I I I I I I I I ..z..!.o...(.F.L....D..Mqx..:.........#.g...CP...K....Z.;.DP....zG...8..T.....tF7E.#....$..I....^.....r...S..v.c,k...P{.]1.a...!.-..[9..g.......].M...Q..3..x.1D@fE./......&..wh.x...-...).O*Ih.y........4....p.B...Rj^.@.,...JUr:.u.9..r....s.M...;...n..yV....l'.A...".e(.YR..3.9l.y=.E5.q.A.m.......Z.^z..!..y.P.Wn5...Y.q.k.....E....'U.b-......Y).eK@..Oj.....&.V.YyC..}.7....Y.l...V.XW......\].Q..[(^z...8O..w+....#Dr2B..@....'.m..9.:qA.+..7.!7.5...m;..{J.g.\|..#=....{.d...d.....8.(.....Io.$.s..$....'......JMFW.jK...pj.......UE..c...Y..u....j....\|.r...

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 64 x 64
Category:	downloaded
Size (bytes):	8865
Entropy (8bit):	7.881132938956866
Encrypted:	false
SSDEEP:	192:Y1cVEDjZAvmuIcq09pk4IYIhmJPjfr+UYN36:Y64jGeMpk4IYDJPjyUYd6
MD5:	B05B81750794CA693E9589C0A171634F
SHA1:	FA91375275E3E1C8FCD8F79BCAE5D85593A33C67
SHA-256:	FF24D4B094AB1896672F4C8D387150C74BBB2493F7D01BEA7C87247AA0AB3BB5
SHA-512:	0C1FBBBD92EAD677C12E4B8CC40239FF66D90A899180C0816A4827F982CB45DD259D24BBC08C34FF737BDE5D3BA3638FF99CA33F77D7C0D640B6970969D3B5EB
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/G/01/personalization/ybh/loading-4x-gray._CB485916920_.gif
Preview:	GIF89a@.@............................!..NETSCAPE2.0.....!..XMP DataXMPa1a8-9458-1177-8dcc-94086be1eca9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.!.......,....@.@....h..#.@)..1..`.P.v.......p...e..}...7.Zm.[....O&$..#J...HN.4%=...F`H..n..4<+g+....F...I....u.ayn=>.u.K.dTw...Ln..w..u.1c.}...u.~.I...;G`..p....]........j..-....@j.My....R...$$....R.4.p.0..........G..p..!]}....0.vxq...]..(T..`...r.. ."...Z,c.@.....P..%.c.w..t..g`...Q..p.C..+M.."fK^.r..Q.M.6...S..FE.............Uo....J..>.v`..+W.:.,{....i.bl{...j..(.....w=...o1.p=H..vC.]...&....;.8f\.... .T.m.....$..\.....W;F..4h&.Y..3..*.so..-B..#...Z....uB.....KAd...`.w....\|x.....?.\|\|...O..9.w.Y..O..m......x..d.~.R.To.IvI..!.......,....@.@....x....H..8.3...TP[i2Q....g...8..[..-.....+...a.fDj............8....+.....&Ue.....a.e....`.n;t@z.f........jw.\.....v?\f...(z.z........k....H.........~@...G........v.....^...H.....N......e......a..........e.....e.......W......,Pp.A........:\|..2,(..c.

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x206, components 3
Category:	dropped
Size (bytes):	12565
Entropy (8bit):	7.93309096516835
Encrypted:	false
SSDEEP:	384:TaAPLmaqZ0eaGrFIXYBlaDeCduQ4jcNi/WA3bxK:umtqprFIXY2De5MYK
MD5:	62F0793452B79F24647019A71D280E44
SHA1:	177174EF7AD0A80CEE03BF74AD7356421DAA1BB5
SHA-256:	7D21D6E98BCF1E1BC5E339F91FC605F8289F85F819688A543F3406961534AFE2
SHA-512:	3380764437CBD17448CEA84E683BDF453A99B4BC0D92F7008226D5E637803D389BAA3E916593861756D59CB529652298A8F50B88ED9B77244C9DDC61A9CEEEF3
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$........@.."..........4.................................................................w%....7.3....qZ.9.u.y.'....P.\|.m........@...}'.-...............-.nXo......1...;.k+-5.\...Z4<}k;S.).6.yS....vM.>.S/W..K.6]t>..V..1._}.._..54..W...p.Q.@.....s5Nm=.Z.hW....H4..)#Q=B.........1C.....]..o..:.c-.!..}`a...}8.VZzs.5->.@...`h..p...q..>O.9R.c....S.....g...h=.q..6Z.Rpb..Lp.....}{F6...N..."....(....j..<4x>..d>U..Cp...y..\|......O&..i.ovF.l............@..2.%];UM}.k`+..W.eV...J;.r.ZR....=.....s..../.j...g4...{<~.......8...;]....m;.9....A...TI,.....j..Q../?K.YrT....%Rd..:.....@....2....Y...q.0..x....7.z=F.]R.....N....m.!.b.-?..r.....?...;^q...x.4......[j..9M{.f.... .Q......nle..QG.S6+.(..~..'s.tI....O..e6.$..?.M.N. ....B.g..;.......}+!......w.W.(S.....LVY!.lk.W?..:.V..65.-=.5,.+G.r...lr..\|.........

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x301, components 3
Category:	dropped
Size (bytes):	29587
Entropy (8bit):	7.984465865692982
Encrypted:	false
SSDEEP:	768:m5Vb9L5qg6KFf6bUCAfkdoatgHEQQk5JYsZtAtKTBlIWO9gtcauB:mTZLOKCUXAR6Ok0sjAtM1OTB
MD5:	5013C54F0BB0AB42318EB12CDA8CDB49
SHA1:	E13DAFF5E919555BF642D01022E546ACA54DA8DD
SHA-256:	6DFD710211E306050034FFFAC8185F72DCC4852BAEC5CF4B218DEDB4505E14E3
SHA-512:	A7572C0C8CD5CF1D6E6BF80922890E5FAC4E1F393B59C77A0223E5FCC59D4AEB39C0E520414400C4A0B03ABB5395001D8D2725E0C1D0A6882B21975047B03A90
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......-.@.."..........5..................................................................{..Bo.^.w....@2.c`...-...X...E.[.Jy..Cv.Ne.sJ.-.........d.=6[......_.>......kxrEs.././\|......\xH.R.%tV..b..,.>N8A..c..8..v.r.:.........E......Z.....w...Z...h....\|.Aq.o..V...Y..........F..K..cF...5.....6..h.5..x.s7.....^.~._.mM.6..".)..4b_A.Uv.l........t....q.......s..I...{.H...c$5.,...a..s..6n.J.N..l.l.n>v<b........O...zxg./...1.ia.{.Q..D.(IUcor..cmU..1...y.3.'c{...W...wxV..FZ-...x...:.p.5... .;.....O$D5#;t0.m'.)..l...8.......f.Ca.1.1...=.C..........7KeZ.I..q..!lC}f...D.\)R....6c*............v.rZX...l.VG..w.....j_Wp.9.CMy.!....H.;.@.Wm...\&.../Y.S..5..P](.."l....g:J.......q..c.....EzAj..^.SRV..M.O.T\|.q..t.t.uWp.-.\|.LA.5.Y<d.&Am....U......b.5+P..d$..A.2. .4.bm.H.N]....Ho..0h.....y.ty.,.yte\..:.87...

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1191
Entropy (8bit):	7.699841050561305
Encrypted:	false
SSDEEP:	24:WUnP0r0sAXTxkCbqR9OX1znnUQFR7bDYiFkHFkkZY+OU2LbmT:xw0sKxk3m1Dt/EMsFkSb6bmT
MD5:	8196E1CDBB2CD561DDE2A4B52D0EE82C
SHA1:	1782ACD89CA7E4421ECE3516082397FDEDC48EAB
SHA-256:	3BCF6404A7B6696853A8F0F3E4572D525F2B018911A37BAF87E2BCC97F1BB3B8
SHA-512:	307E3C004B062422D3C66B274597A184F02DD60EF333CE9CBFB9A66458BDF14453759212A3DCC8D0AC520A4BDA95F62B45F5BFD61EDD50B865FA1014C770EED3
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/S/sash/XbXEZE76MQS35vU.png
Preview:	.PNG........IHDR...H...H.....U.G....pHYs..!8..!8.E.1`....sRGB.........gAMA......a....<IDATx..MR.0...vJ.G..Ps..'...Xv...n@XvGO@8............N.2..^....'.,...~3.$Nb.../=..a..a..a.....j......_v=...Y.......4.Z..$Ibh....$..=O.}...,Qe.g..@C8..u.P.....v.Q.^.BY...{.B=0..yD(.n..gM r'....r..KRF...c..d1'Q..t.. .(Ne1..D.t.5`E r)..........GxSI....&.s......~....cZP...0.p.>.._~#P..j.../..N....,.../........R....>u..1..n+V.P..Kw.......8.....Y...rI'.[.+!..<.J;l].qfXR...n..`,...5h...Yu...H40B.6.L..1r1..;...y.u.'..r..E;...YP[..-..h.P#..l....a@....^.S...V...f.,c.ba.$i...?..J\|....u...eC;.H[bX.K9...%.)....7h.7..8.;.=.zN.,.2...S.G.:V...@...?Y.R.A..m.JS....@...Mc...Ze.,..~....'..v.`...&.2..k..8..]..u+..x.$...R...!..Syd5..,.. .a...5.&..5?x.YX 5B..Y/..1m.....,c..q...i....... _..nv..1jw.%....&NM..M5.paq.....Q$.."..\.l50.r...Zu5..Q.#Z.....D..'.?S.}'T.j...B~..%....0.....[...R..-....z#D..F.f..!p...8...s. 6.F;3H.V...._..~..y.aE b..<A.."...8../.........5...f.CB..D$k...}A.=..e]+.

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://aax-us-iad.amazon.com/e/loi/imp?b=JN1QJQxvhsiGtgIlgDrnRhQAAAGSu4ZnhQEAAAH2AQBvbm9fdHhuX2JpZDMgICBvbm9fdHhuX2ltcDEgICBZxzWx
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
URL:	https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fs-on-search-route%26v%3D0.299560.0%26id%3DYT8YJ4B94N98J9DNZQCH%26ctb%3D1%26m%3D1%26sc0%3Ds-on-search-route%26pc0%3D15202%26s-on-search-route0%3D15202%26t0%3D1729723014701%26rt%3Dcf%3A22-0-6-14-5-0-1_af%3A24-0-6-16-5-0-1_%26csmtags%3Daui%7Caui%3Aaui_build_date%3A3.24.8-2024-10-17%7CmutObsYes%7Cewc%3Aunpersist%7Cewc%3Aunpersist%3Aemptycart%7Cewc%3Abview%7Cewc%7Cewc%3Aunrec%7Cewc%3Acartsize%3A0%7Cewc%3Aaui%7Cnavbar%7Caui%3Asw%3Apage_proxy%3Ano_ctrl%7CmutObsActive%7CFWCIMEnabled%7Cfls-na-amazon-com%7CperfYes%7Cfy_cdn_fr%7Cfy_cdn_mp%7Cadblk_no%7Csupports%3Amutationobserver%3Atrue%7Csupports%3Agetelementsbyclassname%3Atrue%7Csupports%3Amap%3Atrue%7Ccsm-feature-touch-enabled%3Afalse%7Caui%3Acss%3Anetwork%7Caui%3Ajs%3Anetwork%26viz%3Dvisible%3A3%26pty%3DSearch%26spty%3DList%26pti%3Dundefined%26tid%3DYT8YJ4B94N98J9DNZQCH%26aftb%3D1%26lob%3D1:15203
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4128
Entropy (8bit):	5.059123416280363
Encrypted:	false
SSDEEP:	96:dSr7aKxX/CE/k1JgquvFzuq8O2vBienZ6pQoMEHwvDZkaH:W7aNE81JuvFzu02vUIZ6pQodH4FxH
MD5:	FF56A9432764CD2F26FDB1FE681536D6
SHA1:	C2716D9898DC9A15C3266763E2FF5155D576A9A4
SHA-256:	E81CAC831BE2F05FF6D9435F57E763D0C18CA48516BAC5208B89F4452BD6B677
SHA-512:	DA94620764A5D1D2D59095D4B1BE8188FF8BBEA246C0ECD9E823C287C1C9EF9FBB08D1B6D443BA576C74A77E965479C04D259463124373F20F1E0CFFE4B3A26B
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>..<svg viewBox="0 0 258 258" version="1.1" width="258" height="258" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns="http://www.w3.org/2000/svg".. xmlns:svg="http://www.w3.org/2000/svg">.. <defs>.. <style.. id="style2">.cls-1{fill:#0a3a67;}.cls-2{fill:#1e9cd7;}.cls-3{fill:url(#verlauf);}.cls-4{fill:url(#verlauf-2);}.cls-5{fill:#0075be;}.cls-6{fill:url(#verlauf-3);}.cls-7{fill:url(#verlauf-4);}.cls-8{fill:#bbd5f1;}.. </style>.. <linearGradient id="verlauf" x1="107.41" y1="233.11" x2="108.2" y2="233.11" gradientUnits="userSpaceOnUse">.. <stop offset="0" stop-color="#bbd5f1" id="stop4" />.. <stop offset="0.07" stop-color="#b2d2ef" id="stop6" />.. <stop offset="0.18" stop-color="#98c8eb" id="stop8" />.. <stop offset="0.33" stop-color="#6fb9e4" id="stop10" />.. <stop offset="0.5" stop-color="#36a5db" id="stop12" />.. <stop offset="0.57" stop-color="#1e9cd7" id="stop14" />.. <stop offset="0.87" stop-color="#0075be"

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 191x320, components 3
Category:	downloaded
Size (bytes):	17873
Entropy (8bit):	7.981516795947259
Encrypted:	false
SSDEEP:	384:CRS9aWrb9L3QqNlfhnuVH1Srt7agQMSSwrNRHbZBGfX4WXlsRkPj:OSPb53QqNDuVOFagQMYr7ZUDVsRWj
MD5:	3EA5A40708214AD7918B02D16AF244CC
SHA1:	03AFE7B99367B0DE4E6FA801EFDBD7B642D5F42D
SHA-256:	36A71FB1788FA50A7747B973903552200FC2BEA8E700E794F521306C293A6B05
SHA-512:	50E7A6BBE5275D7715113BE67B6F2B7ABA2A1377B60133156B53A453224F1B3374E76E212CB0D959F0836DFD59106FFBDD94F9E87DDF7D8F2E1F288B0D6053A0
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/713IlfLrEYL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."................................................................!1."AQ.q..2Ba.......#5ERSbt...$6Urs......3....%4CTu&7Dcde.....................................................!1.Aq.."2Q.#BRa.3..$4r........Cb............?....Q..U.......{.n=...P.W.3?...T<.l..my...j3....'..g...E.[i.u.S.=..;I.X.X0.N......6..8h..,.P..7..0....f.U3P.HZ..)O...........?x.....S.........I.$...+...Tm..%.>...^....QI.\."y.P09.'."`......)..~....>......d..[,.n.~`@.m....(...x.sW:-..}n.3XC..k.Z......gr.Z&...z .H...Y...>Y..V....f.3.[..=f...8..,B......PXU.......h.e.7R%.LK..x.\|x`7J..u....Z..r.~..,......F..".!.k(m.7.<...k.@..q..0y.$.':A...#.@.\..H..X.k..[.....v.!...S..$.~..}.\|.RR..~..u./.]L........[...@.,..~1...m.3j.P?.{4..%e.....R$S.A$...m.b .V..l......\|9..f....."..4F.my...n.70J.XW...j...W.Z..;8'{.....^b..$....y.....r.....

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13194
Entropy (8bit):	4.652267717786981
Encrypted:	false
SSDEEP:	192:x86GQc2L4lJUITcDJNiIfHI/NzxYVHb4g0wvwR:xNFo/NWR30V
MD5:	BF66FBA93BDD5A864CF7395B070BD432
SHA1:	F18F0CD37B2009C885D54FA5A1F0541FD12FAD6B
SHA-256:	EE6EB50B6B84E172E18F8F8D32FEB40028CCD08723DB58C6AC1BDD0ADDD0892E
SHA-512:	C2B12CA748360DEC07332D04355ADB201FC279CBF4461880984B8CA4F46DDF77A8A7B371B0C24072FFBBFB6CB6AEFDE63A7BD27C69B2488A737A639B7AB609D3
Malicious:	false
Reputation:	low
Preview:	{"html":"\n\n\n\n<style>\n .flyout-store-box {\n background-color: #F2F5F7;\n border: #F2F5F7;\n width: 165px;\n height: 165px;\n text-align: center;\n display: inline-block;\n position:relative;\n}\n\n.flyout-store-box:hover {\n background-color: #EBEEF0;\n transition: background-color 250ms ease-in-out;\n}\n\n.flyout-store-box:active {\n background-color: #E3E6E8;\n transition: background-color 250ms ease-in-out;\n}\n\n.ahi-flyout-section {\n width: fit-content;\n margin-top: 0;\n display: grid;\n grid-template-columns: repeat(2, 1fr);\n grid-column-gap: 5px;\n grid-row-gap: 5px;\n}\n\n.grid-full-row {\n grid-column: 1 / -1;\n}\n\n.flyout-section-stores {\n margin-top: 15px;\n margin-bottom: 15px;\n font-size: 0;\n}\n\n.flyout-store-img {\n height: auto;\n width: 130px;\n}\n\n.flyout-store-img-wide {\n height: auto;\n width: 160px;\n}\n\n.flyout-store-box-content {\n left: 50%;\n position: absolute;\n margin: 0 auto;\n top: 50%;\n width: 90%;\n trans

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x206, components 3
Category:	downloaded
Size (bytes):	12565
Entropy (8bit):	7.93309096516835
Encrypted:	false
SSDEEP:	384:TaAPLmaqZ0eaGrFIXYBlaDeCduQ4jcNi/WA3bxK:umtqprFIXY2De5MYK
MD5:	62F0793452B79F24647019A71D280E44
SHA1:	177174EF7AD0A80CEE03BF74AD7356421DAA1BB5
SHA-256:	7D21D6E98BCF1E1BC5E339F91FC605F8289F85F819688A543F3406961534AFE2
SHA-512:	3380764437CBD17448CEA84E683BDF453A99B4BC0D92F7008226D5E637803D389BAA3E916593861756D59CB529652298A8F50B88ED9B77244C9DDC61A9CEEEF3
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/61qWDqN7W0L._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$........@.."..........4.................................................................w%....7.3....qZ.9.u.y.'....P.\|.m........@...}'.-...............-.nXo......1...;.k+-5.\...Z4<}k;S.).6.yS....vM.>.S/W..K.6]t>..V..1._}.._..54..W...p.Q.@.....s5Nm=.Z.hW....H4..)#Q=B.........1C.....]..o..:.c-.!..}`a...}8.VZzs.5->.@...`h..p...q..>O.9R.c....S.....g...h=.q..6Z.Rpb..Lp.....}{F6...N..."....(....j..<4x>..d>U..Cp...y..\|......O&..i.ovF.l............@..2.%];UM}.k`+..W.eV...J;.r.ZR....=.....s..../.j...g4...{<~.......8...;]....m;.9....A...TI,.....j..Q../?K.YrT....%Rd..:.....@....2....Y...q.0..x....7.z=F.]R.....N....m.!.b.-?..r.....?...;^q...x.4......[j..9M{.f.... .Q......nle..QG.S6+.(..~..'s.tI....O..e6.$..?.M.N. ....B.g..;.......}+!......w.W.(S.....LVY!.lk.W?..:.V..65.-=.5,.+G.r...lr..\|.........

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	14230
Entropy (8bit):	5.146529116832934
Encrypted:	false
SSDEEP:	192:B61S+I+WVETIguWTsXMx3ThlHzdgo8TxNZJS1m:+zWVETb9TsX23rHxnM/L
MD5:	0AF28B3B129B2E7A300A1D6304BE42AA
SHA1:	2C9A0C3BC9EF8D6E255EF855E8FF286A580E302F
SHA-256:	1BC6E161956C4D095833D7025511FCF28189AF1CFFFED072693233F882987F02
SHA-512:	13C958FED43C363367607A8EB06B87F3D52A5AC1B703ED90E87E7EA90EB9B9EDC3E62FBF5D431465685A99B17C49B011D2EE3E141474E671FCC0AC9825503317
Malicious:	false
Reputation:	low
URL:	https://www.amazon.com/nav/ajax/hMenuDesktopFirstLayer?ajaxTemplate=hMenuDesktopFirstLayer&pageType=Search&hmDataAjaxHint=1&isFreshRegion=false&isFreshCustomer=false&isPrimeMember=false&isPrimeDay=false&isBackup=false&firstName=false&navDeviceType=desktop&hashCustomerAndSessionId=5060be85c428ee41c92db4732349695aea71a80c&environmentVFI=AmazonNavigationCards%2Fdevelopment%40B6251171938-AL2_aarch64&languageCode=en_US&customerCountryCode=US
Preview:	{"data":" NAVYAAN-HMENU-AJAX-->\n<div id=\"hmenu-container\" cel_widget_id=\"Navigation-desktop-HamburgerMenu\" style=\"display:none;\" class=\"celwidget nav-sprite-v1\">\n <div id=\"hmenu-canvas-background\" class=\"hmenu-transparent hmenu-dark-bkg-color\">\n <div class=\"nav-sprite hmenu-close-icon\"></div>\n </div>\n <div id=\"hmenu-canvas\" class=\"hmenu-translateX-left nav-ignore-pinning\">\n \n<a id=\"hmenu-close-menu\" class=\"hmenu-hidden-link\" href=\"javascript:void(0)\">\n <div>Close menu</div>\n</a>\n<a id=\"hmenu-customer-profile-link\" href=\"javascript:void(0)\" onClick=\"$Nav.getNow('signInRedirect')('nav_em_hd_re_signin', 'https://www.amazon.com/ap/signin?openid.pape.max_auth_age=0&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fgp%2Fyourstore%2Fhome%2F%3Fie%3DUTF8%26ref_%3Dnav_em_hd_re_signin&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=usflex&openid.mode=checkid_setup&openid.claimed_id=http%3A%2F%2Fsp

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6950)
Category:	downloaded
Size (bytes):	264984
Entropy (8bit):	5.398297139623805
Encrypted:	false
SSDEEP:	6144:/k0mQvan9IR90rNydViRFtXD3AhjAIPg9Jrsf29v8bcTxYrQDEZHNQ6gpPib3C8m:/k0mQvan95rNydViRFtXD3AhjAIPg9Jp
MD5:	56C00280A43B2B213A37569ECD521E71
SHA1:	7FE6C1377650B74A407E884E33062867A13BE90C
SHA-256:	BC30FE724699A9CEB8FC68C18831A419E478F1F95152D63D4D52C782B6061558
SHA-512:	CEDA6A14BAA19670BB679C6BB2365DAA9F346B54F0C1558BD3AB1CAF02D2C08238CBA81AECFCFD590AF04D6CDAABE9B570F2EC63624917BCBBA8585DD0012C80
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/81LmaXL9x7L.js?AUIClients/FWCIMAssets
Preview:	////////////////////////////////////////////.;(function (packageFunction) {. /* istanbul ignore next /. var p = window.AmazonUIPageJS \|\| window.P;. / istanbul ignore next /. var attribute = p._namespace \|\| p.attributeErrors;. / istanbul ignore next /. var namespacedP = attribute ? attribute("FWCIMAssets", "") : p;.. / istanbul ignore next /. if (namespacedP.guardFatal) {. namespacedP.guardFatal(packageFunction)(namespacedP, window);. } else {. namespacedP.execute(function () {. packageFunction(namespacedP, window);. });. }.}(function(P, window, undefined){.// BEGIN ASSET FWCIMAssets - 4.0./////////////////////////.// BEGIN FILE src/js/fwcim.js./////////////////////////./...Full source (including license, if applicable) included below.././***/ (function(modules) { // webpackBootstrap./**/ .// The module cache./**/ .var installedModules = {};./**/./**/ .// The require function./**/ .function __webpack_require__(moduleId) {./****/.

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 194 x 295, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	45977
Entropy (8bit):	7.985058314720174
Encrypted:	false
SSDEEP:	768:Ox2kO+0B5izHhTPdZVliVcR3+/ku/iUYi09ERbCC4lxOQ3JZT9AlpsyjSB:OAkp45izBXfNR35u/izi2GbHU3X9An8B
MD5:	A824C7A90E2C465DA4C4DB9FD9FC15E4
SHA1:	36F46FBD4D03D1E55BC0B0D4381D351620750532
SHA-256:	6641FF165206F0F54CD94518DED93DFCBFC7436A806B0DE96991CB3DA4032A8B
SHA-512:	AF530AF8E111A8B7DA4C2776253E6BDFD295E2A84A11EBCC020024E6B8364C6D75AC2C8BAE725D6441036BB3F163E74410F87F9C9B031417F16DA330C5C708DC
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/S/sash/Z8YwjOjqIHxqujG.png
Preview:	.PNG........IHDR.......'.............gAMA......a....KiCCPsRGB IEC61966-2.1..H..SgTS..=...BK...KoR.. RB..Ti........@...."....q....."..A...y.(..(6T....}..7o....9g..}>.F`.D....dJ....<6..'w..T ...@.-.................m@..n....8..P.....$......B....2r.2..2...t...%..[.....j..;e.O..v.$....(S*.@..@&.......X......`.(..s....`....`....).d....`...S......GE...3.(...x.W\!.S...d..T.n!...\].x.87C.P........ee......3...FvD.....9;.:;.8.:\|...........?........E..............e..../.....B.._......T.B.fg...k+..m.._......_.....................2..r<[&..q.?......wL..'..b.P.GK..i....$.I...H.........k.`.~..B[P..... ..%....w......1...w..0....h....................4P.6h.>....#..;x...P..8X.BH.L.C.,.UP.%...B..Z..F8.-p.........<.^...0.o`.A.2.DX.6b..".#.Ef!~H0...!.H."E..Rd5R..#U.^....9..E.!=.=...F~C>...@..j..\...B...h....G...h%Z..B.......>G.0....3.l0...B.x,..c.b......6.....b#.{..."....;!.0. $,",'..........B.a...$....nD>1..B.%..+.u.c...[.......!..\H..8R.i......D:C.!....d.6..A.%...r.y;...

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (549)
Category:	downloaded
Size (bytes):	368780
Entropy (8bit):	5.378285265957196
Encrypted:	false
SSDEEP:	3072:WYcQZMuZ7q9P1+pKbaTROoTQ9iQccc3b+Y6iogYZfBckvITzuK9/oYSidRF:WYXUMKbaFD+dijYL3K9AYSidRF
MD5:	5B2FA1313532C9499398745B47A4DE67
SHA1:	962371BFCCB017BBED094288F8830B62EE451D34
SHA-256:	FA1598033ECFB9A706C399C5ECF439DD1C4A99201F7937A0D27C98FA1DB5D1D3
SHA-512:	F6DE02D7DCABFE6A5513F6A9AEB5F349C9BAD7C79C46DA9CD0285DB45A8D45F6D71B033D494F003456808925CD293CA80F15C1D9B35ECEBC948F2E2BE206B29C
Malicious:	false
Reputation:	low
URL:	"https://images-na.ssl-images-amazon.com/images/I/11oNqlOaNXL._RC%7C61xJcNKKLXL.js,11Y+5x+kkTL.js,51cR93oXsVL.js,11yKORv-GTL.js,11GgN1+C7hL.js,01+z+uIeJ-L.js,01VRMV3FBdL.js,21u+kGQyRqL.js,01meRT+S4PL.js,11aD5q6kNBL.js,11rRjDLdAVL.js,51t8Z4zPMfL.js,11nAhXzgUmL.js,119kvzYmMJL.js,11joUTnxHvL.js,11F8myQivDL.js,21eKR4hvwNL.js,01Q4S7ptbiL.js,5118qJbclGL.js,01JYHc2oIlL.js,31nfKXylf6L.js,01ktRCtOqKL.js,31RasBDgYVL.js,11bEz2VIYrL.js,31o2NGTXThL.js,01rpauTep4L.js,31IW8GrKLzL.js,01tvglXfQOL.js,11RxSrTRyHL.js,012ATIEpZ2L.js_.js?AUIClients/AmazonUI"
Preview:	(function(b){var c=window.AmazonUIPageJS\|\|window.P,e=c._namespace\|\|c.attributeErrors,a=e?e("AmazonUIBaseJS@analytics","AmazonUI"):c;a.guardFatal?a.guardFatal(b)(a,window):a.execute(function(){b(a,window)})})(function(b,c,e){"use strict";b.register("a-analytics",function(){function a(a,f){var b=c&&c.ue&&c.ue.count;if(b&&a){var d="aui:"+a;1<arguments.length&&b(d,f);return b(d)}}var b=c&&c.ue&&c.ue.tag;return{increment:function(b,f){if(b){var d=a(b)\|\|0;a(b,d+(f\|\|1))}},count:a,logError:function(b,a,h){c.ueLogError&&.c.ueLogError({message:b},{logLevel:a,attribution:h})},tag:function(a){b&&a&&b("aui:"+a)},logNexus:function(b,a){var f=c&&c.ue&&c.ue.event;f&&b&&a&&f(a,"aui-analytics",b)}}});b.when("a-analytics").register("prv:a-cache-analytics",function(b){function a(b){return(new URL(b.name)).searchParams.has("AUIClients/AmazonUI")}function d(a){var c;"script"===a.initiatorType&&(c="js");"link"===a.initiatorType&&(c=(new URL(a.name)).pathname.split(".").pop());c=["js","css"].includes(c)?c:"un

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 194x320, components 3
Category:	downloaded
Size (bytes):	17760
Entropy (8bit):	7.972440081114767
Encrypted:	false
SSDEEP:	384:9evFEGDB0xYx7J7S5uF0iQwfHajUkrj9o0MsBCoICmsaIZ:9WF5DqxYxN74uFlfHajLv9ofYrmsn
MD5:	A56D2AF3129B99E5C7014209A4072DD7
SHA1:	E44BEA1BE4815FF1E4DD1430AF7BFB5A402F9116
SHA-256:	7AFD93A15430C5CF4BDB667F49FFB620F925F8B86775347F0E8323B9A0350971
SHA-512:	A6ACF3AC022AD358E90D9C4D7EFB1630491C5FCF7FE5C654811B586DFC5F1AB5CBF1250657D83EB980935F4370F71DC49810BD23E1C646672396C48291C2AA95
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/71tL5zXpzIL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."................................................................!1..AQ"2r...aq.....#35BRt.....$STs...4Cb..c.e.....................................................!1.AQ.."2q.a...#B...34CR...............?..8....$y5%.M"....j..g.;.9.h...}........^.+.K...X\.-...].}.b].O.S..#..bl........o...........x.....9..t.ke.....6....BZ{....xFK.'/=.!...2.]C..X....Z..d.k..H..R.7....._.f...K.+.9.i....<.NS...\|...c{m..&...)..O3...5../:&cH.yR1.Q5..2..d,.h=...g'}..WD......W..6.r..7.._..y..L...9w.P.}y.bO..K.^Y..DK3...;.k+N#I...t!.M.#...:....;.w73m..d......w}e..MB.T...2.>.........6.r..7.....g...Ye..Bc.9...y."S$..r..X...c..2..... n.\|.m./.3.]/.m....o...F....m....o.........t....'..%.F.$..P.....Y[..lRumM8h;............V.r..7.....^J.R..mg.4.G....Q.9'V.i....j..w...V..!.N... i.?=,.II\|.m./.3.]/......o.{n.....!.v..oy..b..*..E..EH

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	453394
Entropy (8bit):	5.373221359661549
Encrypted:	false
SSDEEP:	6144:TV/9KwI51nTbhjuAwiiol25GZiyTXOVYmD4sp7SJs5g92+b//sFrDfEOxO9qi7v:8IctDOVYS7SJs5XFr7iv
MD5:	2E254E8EDD69FC5E6628A6DDA86C05CF
SHA1:	44327E00888FBFC92284F6CF9BCA5F8130E89848
SHA-256:	ED8909E15E1F2E9D0BA9694BC5BD3CF04F19AA3A40B1F8536AD0F675450B5991
SHA-512:	10DD9F51CF71088EF30331E1B8389B17F13392C001641B10C3E458DBC63807386CAECCF3932DA915CF81FB85ABD7C2E1805D43F6D6915B3D90D091CEA517E8B0
Malicious:	false
Reputation:	low
URL:	https://cdn.consentmanager.net/delivery/js/cmp_en.min.js
Preview:	window.cmpccsversionbuild="2024-10-12.17.59";if(!("rpl" in String.prototype)){Object.defineProperty(String.prototype,"rpl",{value:function(a,b){var c=this;return c.split(a).join(b)},enumerable:false})}if(!("cmp_unq" in window)){window.cmp_unq=function(a){return a.filter(function(c,d,b){return b&&b.indexOf(c)===d})}}if(!("replaceAll" in String.prototype)){Object.defineProperty(String.prototype,"replaceAll",{value:function(a,b){var c=this;return c.split(a).join(b)},enumerable:false})}if(!("fnd" in Array.prototype)){Object.defineProperty(Array.prototype,"fnd",{value:function(b){var c=this;b=String(b);for(var a=0;a<c.length;a++){if(String(c[a])==b){return a}}return -1},enumerable:false})}window.cmp_fnd=function(a,c){var d=a;c=String(c);for(var b=0;b<d.length;b++){if(String(d[b])==c){return b}}return -1};window.cmpccsversion=20220717;(function(){var b="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",a=/^(?:[A-Za-z\d+\/]{4})*?(?:[A-Za-z\d+\/]{2}(?:==)?\|[A-Za-z\d+\/]{3}=?)?

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (580)
Category:	dropped
Size (bytes):	6543
Entropy (8bit):	5.272859629056633
Encrypted:	false
SSDEEP:	192:gyzz5hktnOYGuj5gVFiarjquEGDQozjl5PBpPKP3:DAOuArnbBY
MD5:	79F933EE5EFC2BA80689FCED8E266CF4
SHA1:	46A21BEC44C54D66958ED362B3914B6817EE8EF1
SHA-256:	F1341B3B228311FE2428A92B1051A82E963A45873314722AD9CB83ABE2FFF35D
SHA-512:	97A2AEF175BDFEDD932B433C75357482B1F3177C237CD0DC04A2B33D2F014F57560E5D5ADACF9E86C8E71F1983A56289A64F0C8B02959D0954293F63D2EB46C6
Malicious:	false
Reputation:	low
Preview:	(function(b){var a=window.AmazonUIPageJS\|\|window.P,d=a._namespace\|\|a.attributeErrors,c=d?d("ARARegisterTriggerSubAssets@utils",""):a;c.guardFatal?c.guardFatal(b)(c,window):c.execute(function(){b(c,window)})})(function(b,a,d){b.now("ARAConfiguration").execute(function(a){a\|\|b.register("ARAConfiguration",function(){return{getRoboticSessionId:function(){return"000-0000000-0000000"},getUserAgent:function(){return navigator.userAgent}}})});"use strict";b.now("ARAAddMetric").execute(function(c){c\|\|b.register("ARAAddMetric",.function(){return{addMetric:function(b,c){a.ue&&a.ue.count&&a.ue.count(b,c)}}})});"use strict";b.now("ARALogError").execute(function(c){c\|\|b.register("ARALogError",function(){return{logError:function(b){var c={logLevel:2<arguments.length&&arguments[2]!==d?arguments[2]:"ERROR",attribution:"ARARegisterTrigger",message:1<arguments.length&&arguments[1]!==d?arguments[1]:""};a.ueLogError&&a.ueLogError(b,c);return[b,c]}}})});"use strict";b.now("ARAUtils").execute(function(c){c\|\|

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x320, components 3
Category:	downloaded
Size (bytes):	20533
Entropy (8bit):	7.973494582531961
Encrypted:	false
SSDEEP:	384:GPU2xtzwGgsSfUv71Z6fAKNWSOD4Jkm4au3JP8h2ufGhug2VEYAoTsx:Gs2xtJtSfiZeN/mAywzOh2EYAd
MD5:	437566C85CF5E56288C2896E52DC3536
SHA1:	0A56EAECED25A43F160263BF051EA260CCBB8A63
SHA-256:	EB2888DA612F5FA36DC8FB435C9BE635C174F43028F4BDEA6C95EB63546D7B21
SHA-512:	A3120CD142334AD710B450A7E021BF02622EEDD409D9BA9437B6E9B8F259BFE2D44F338D30BD9644B75D31D26A2E55C64FE4E27AE6587ECB31931DBE1DFB8626
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/71t2OGXp3pL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."..........6..................................................................n...K.gN...[...7..#J.V./[g.)c(?SC1..H.?.a....a.#.....Oq2..O.....V..>'a..n..V7N.Q....GY..MZ..!..f.$.U.nc{....(F.V...?...b.R.lJ.d.........<L.....4.!\)..xlY."..{<z)....I...R..I9.H Pk.n..:.7.....t..S..i.6t..u,\|....l.Xz.v..._p.eE6..q..T@..A{..t..x.C..5.../i...0.a.g.iG.......9G;......{..i..Pn....?+.>.@.z3K.!..{.........).....N.U..:..Q_=^...@.....Y.".i....k..._?u.\|9......$@......c..~s.m.8.....;..LI..k.....Ua...d%.U.f....KuJ...2.+.Y=....l<..Wm..d..(1.l...I.V..:..9.....iH.;...H.V-...@P..Z.1$n{.0I%v^...Fp~R<...{....i..Xn......5E+..VOS.I..\|..,.:.$./5uzD.c:.H ....%.c...R.....^O]..O.uy.,j....QGNT?....T..SW.C...xc...u...yF......]...:.4c.N?3g.E.l.2I..Y.]fa...f..N.Z.JDr.?.........u..7}..6q.m.2....98....N..v\.....+6.....A.+.a.3

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	17542
Entropy (8bit):	2.247918084411713
Encrypted:	false
SSDEEP:	192:9dLhJ6/f2dh+xQLeZ10TLwhwOHae6nmErcglsIZS3F:3jaOdhQQu0TLwaOHEr6IZ
MD5:	CA6619B86C2F6E6068B69BA3AADDB7E4
SHA1:	C44A1BB9D14385334EB851FBB0AFB19D961C1EE7
SHA-256:	17D02E2DB6DBEDB95DD449D06868C147AC2C3B5371497BCB9407E75336A99E09
SHA-512:	30F8F8618BFBCD57925411E6860A10B6AD9A60F2A6B08D35C870EA3F4CEC4692596A937FF1457CEFF5847D5DA2B86CEBA0200706625E28C56A2455E6A8C121D3
Malicious:	false
Reputation:	low
URL:	https://www.amazon.com/favicon.ico
Preview:	......00.... ..%..F... .... ......%........ ......6........ .h....@..(...0...`..... ......%.........................................E...................................................................................................................................................?...................................$...........................................................................................................................................................................................B............................................................................r...P..........................................................................................9...............-........................................................r...................................................>......................................................................$..............................................................................................................................

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (10821), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	38308
Entropy (8bit):	5.888911773398597
Encrypted:	false
SSDEEP:	768:CiBtrifZVO7Wg3hIBYucXjOkSG5J5bEa1Gp24diGPVbcq:C8Cg3vX1SxmGphZPVbcq
MD5:	2275FBCEB2EE991EB747CD913D802390
SHA1:	72022CFC3501E54EB3D6F3CB86B062D3481EE262
SHA-256:	9C5E6DAE289DA3435BBBB5CF3E1CAB9A9BD6CAF2DF11714589DC173E87E61DB8
SHA-512:	9509D124F565040401A62D4973B58DE8E6D4E5DE2C89846AC566F1FBDFEAC58654ACE9E8CA2FA96FF0844DBD3877B736B0659F0A0CDEE1E468A8AD3993D50759
Malicious:	false
Reputation:	low
URL:	http://ww1.frothylattestudio.com/Frothy_Bloat.cfm?fp=2qoqDYI%2B0iJZGtPstQqccvV6mj3sWtCwuxlIlildqdntAr9vCYTVvHWakr2mYgOXvaI2w1lxQwNvQXQ9geMJWXl76t3S5yB%2BiBy%2BZCGz7fRNEfPfmlAL%2B069aOrJirw2FJnjwcPzaE3aWg0OVkAGQTIcS1usl4qXiQIt0xrHb3yncYN7pI0iAXPRcPni8exSan7QRmShFhmVmi8KFswxZrLXK%2BOUgJen18K1VzM4b1G1Lu5vHzl8ZYaBIW4hntdKakG3S9NtAbOds5CPuuOLB1pjsFT52eS2TmdodNxuSO8SdSiMpEHtXZO0Fn2iJEUzEPSdSn6fQwESLH%2BNGOM8Kg%3D%3D&yep=M6FboBuP98sdvcRwAsDx%2FyxJST0KXfB41zVuwQ%2FG8zz5eBalqNa3nTw4xx9bTiMCTfZD4TNwdokKLB%2Fmq%2BOEwXZ6cOAIejqa5Fnt4Udux7%2Fe1WTTGF4DOwXSOEGa%2B%2BQ8%2Fl7bpeCjv5d7px2wcISuPrYfnpp2z53JwpuA7FMPq%2FQUAwG7sOU7pMoYRXtw9bP3TbMCayGOhwzbWjlUpS7GN4%2FllYasm5FrgM0zxUuTwV4jsjXJH6KNTwx%2F4DgHfnupPnNHnCLJ5x0MnzjocudPm81zh%2F50DsJt5moQXBeSSyAbLEtSyEZWmL%2FJcLlq9ryaz2kEpNgj7YQRSWKSHVoVsRnbg%2Bvib080YywKXc9uZEE69bp3nnEN7UTipMx0zPqF1G%2BE65tK2unYlh64NRz2m%2FiJbdG%2B4TBba7BXJht8BEWPEyXl%2BDflzhI2JSnIEg7gaUzlrs%2Fl084s5kOgy2pSClnmP4Rb5DsrwxMqXzjp8qlcULhwyiim1m6AcQiHxsa6ZO9Ic8s1LD5fQDkWr1FFuQk8QOAkKb772scbyYCsuTrVHUiLFQ3R9PBz0brQmLLgYF%2FxpOg8Lg3eSqC7X%2FTGgiuR7tvN7kPlevT0JkYb4NCMi1JB6YRIC1MNT7NEJmYa6ug2%2FzS3RBqIkXs%2BIFdC9AYdeV0EjoWsiI7AHEH%2BYBwaX03L6%2FG%2Bp2DFlgD%2FtKfO%2FDTsJIP5WtNuyDBAs4gDtj8LJSSTlVlPmMbHmVFqAzf9q92z2zErU9X4%2BHljl0tbmPajZzoh%2B4KZD3mK%2BurSExz%2BfQDAUyhL4wBMQN0z3POl4LSbBsCxuD1Q2%2B2dpxfCBGApOsU8XYsFWfC7bdNk3LlwjnGpo4NHrkHoCPHXhaGPvBKZ4wdSeCUMc8uDwVihCDHO%2BAJmbcpgmOojkSYSAm%2BN15H2zCcYYbSbEG5qbZ6tocPQtZTBvxsQlL%2BazGDAGMDxoPXnTQxwbbA8nve5gud1YlnPdCjxoZ7GtMYJL80rc4kxrl0yXVUXrNT5qHTl89OJ1earDH%2FQ4uRYmGM4bhJa2bTwAAvbjP15VouWngXxtQSbaaV%2BErvTGH7vr2x%2BelRJe%2FB6ioFawWsATNLdPO8rO9L3CEq0iO4WWL%2FG2xENhQsAJ5nx47eBdTBXie0A2kF2D9SZNmzRwKxlWWvTWFi3IpfcOogm9eKlfg2Tn0ViP4CN5%2B1zM3cL5SjSToRX95ipqQChf84EH16AucfX5IWVIj8H7hZMJiZFW%2B7pceEK7VTpYEl4EiqszSXpz3n8Kos6F1y1k47nLMbM%2Fj6iytoibzzHWFayAGYP6WnHJCCiZbhp0esXP0DzM0GVemj8mTtjxXZcFozyt6ccVvmXrIcOHRa3UbayAIf%2FvR8lKiei47q24Y3bY7b8H%2FuxqLaMtBQ9zsybN8Hrk4XIg8DMENreQlyJ42SEk45332g2YBY8PKGJSWSZ5SqIVJDFCjfZgSxWyYigkVtuI5iYwpfNABoK3Mc0uCKo1bfOP3iE428MwC6Xbr%2F3xUTqgNQW6l4ZVMJxEDG%2Fj4M%2FT0FN9wpGtnGu7DlCgTsv4GqFUw7DYVCVRvFf6B7pnLeLrTKf3vEBh%2Bn3WAAHtwc%2BGVB74AKszAVEBdYuMN%2FzBN0b8HwP3WhuzCSxaQAtp2kSoDs5deoTR89AYH35bMjGOwnATl7Ax79lln58sfJA0UIvrGn1My6Nova5nxU54KCLjYMmDccBSf7l7RHoW8T6KpRKElCErtKTxM6He%2F8ohvR7mVWwFDg%3D&gtnp=0&gtpp=0&kbetu=1&maxads=0&kld=1040&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=b%2F8ZxUo4ug61cKbUIWuWZ9hktTN0TXmB5ubOU%2BIkZsWE32eqR80OwRFFQvOBToKB&&gtnp=0&gtpp=0&kt=362&&kbc=frothy&ki=86919640&ktd=0&kld=1040&kp=3&bd=-4%231024%231280%231%230%23639%23443
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>..<head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net">.. <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","HR","LV","LT","MT","NL","PL","SV","SK","SL","CS","HU","RU","SR

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 267x320, components 3
Category:	downloaded
Size (bytes):	21737
Entropy (8bit):	7.9724223810440815
Encrypted:	false
SSDEEP:	384:sf8lOeGkbktfNI+QDkw0z9zyUPM8wA7ALL6vQRZtEXjla2qwoE:sfektEkwK9bPM8D7SL6aZtgBq+
MD5:	14FD2EA06C8F78D1F388EA8697DAFB59
SHA1:	8F7926B85618FF629BA86D30F5943E5652258050
SHA-256:	41005ACDFFCFE155FE58D883A1290E2A7E6CE059D7E9519AA936D58559FCF7F0
SHA-512:	51F0205E2A48EF4753C47DE7636A097DAF351B763F770D60F0CD73E6C7FE3505B8BF89E4440418A61934E0E7EADBD824E29D340CDCE54FF427A4EB71B6814051
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/71XanPqNduL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."..........5.....................................................................'.....e.....F.....b.M....8...X..../H{..>..l.(xr.....:.1Nq....9gl...x.i..~...^.k...%.7.w....z....5.gR.o.......~..b.....J...>G..L.A..S...:...........u...\|..T..(.....N.$'f4.......E5.l^O.p....fx....:.Nh... ..,.....j...E]..V...,.'..b.]6l.Kq.~4...L.bsQ.Z.b...+h.LIu../.V..l.U...)s_S..V.Di....2qM.~u.=..94.<j.j.......c..wIf.{[......Y.i.o.Y..f.5..fo.Z.A.u..m.)ch-l7.."....1....d.(K..V.0.".w...U.....&.kRw....'CO..M..N..E]..e`jM..\|.i...h...JG.[?..-l.^z.m=..2.IC...:Wl.dH.B...p./..6%.....@...N...ea.@...1.!"...)-..%.B.(..r.r..%.[.U#..j;.oO....-..d........r..L.c..)......'.o.W8(z..\|..^].....f._.0...y......b.nWD]...FV9..Kx......z5./..S...E....X..`...{.s..njE..4..?..l.D....x...%.U..z.1.$.s..Rj..q...%s...Yt.#..<I.O.3....

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 210x320, components 3
Category:	dropped
Size (bytes):	14496
Entropy (8bit):	7.975158562441935
Encrypted:	false
SSDEEP:	192:rzdkcDvR/+2z/7bTdGL1lTX0Qvl1f9V45WJ4o1retCGtYXLciDNysG8K9WBiHiG:tN7R/v76XDhvl1FuUiUXL9DNyYpciG
MD5:	8412DBB8D7C01F1581CEBB6D0C10B335
SHA1:	5519EB480C2298A26F62E666B3164FC6BDA1D044
SHA-256:	55FED90FA57B41FB6E3E2FBF66F14776FC57EA724FA075C3A4BB344AC2B3226C
SHA-512:	191F3FD947E14B559DA66ECD8E600E8D1EA9CC80B4A4FFE23AC906317C142F1A9C05EBD583DBC9112DA626A4D8AF090D5CE5FE7194A51D46DE19D6D3694F3C3C
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."................................................................1..!AQ."aqr.24BS.....#RTt.......36bs.........$5C...Dcd..................................................1.!.."AQ...2RSq...3ar..4#Bb.$..............?..(..(.......8..(i..d...of.......m;.o.....Ju..k.....M{[..z....C+,.>..{[p.T.....t...!.w..2.../O..O...2.....U9.7.w;..d".{N9.-............K.8....>`?..O.;....{z....N.x1.t.7v.H.....d,..#5.h........L.\/o......n.q..:.....H.........0.-.q..}f3.=J.MZ;4..m.'.D...Asd.E$.,......n.#. 1.w.{..m...m.......K....$..z;Em..[.j.H..w&\&..FA......7..@n.t.m....`..Y..N}..=........6.s.......'..d...........P.%.YGj.6...7es.D.U\|..W...c......(./....L..?....~.q.....F6v.X. ..;....+R.5..L.gP.k.a...D.2.p.........i...f...-..wg.....u....r.5.Z.........a]3..TWS...}....\Jp.f..2....LK.........=....y..Jma0.D>h'h#.......^E.

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 312x320, components 3
Category:	dropped
Size (bytes):	13933
Entropy (8bit):	7.958531222524912
Encrypted:	false
SSDEEP:	384:PI7P/H1u+rQp+ZsvtQJcU/3Ed2AtcqAomfcEr5IGhrW:P0Hk+rQvvi3EAAtcqi/9s
MD5:	27A92D7ECE8FBB24A38D8F767123F611
SHA1:	3C274E6640AB085E01325208E52A1D8E134818D1
SHA-256:	1832D6D344F8D781A18F93809326E30288B17F6370EAE53B09A96AB4562C68D8
SHA-512:	5FA387F6D68C874F94F7CBABB459EFEA01AD55E1EB588983ED5D4014656C01099941D5F17A4BC66FFBD94E380CAD47823C54F9C65490ADBB5F45DD7FBAFCAE5A
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@.8.."..........3................................................................(>....!".D@.V.a..%....S...\|.J..N.Kh..i.u.5...G..U...i.].F..Q......%.{...Sa.IT....G.sD.4n.q..2K.y.HI!$...7....g..yc.y.IX.BI..r....I\|.BI..6..H ..$x.4MsF...~..$..f.W3.t...d....cP.{..#+...Y....}.i...:..X.z..g3.\|n.%.})$...#.3..B.......in...}.k.q.......W.%..ca\|...y....8..y....-M.p.`.w-....\5j....HK.D.'..-..;r..=...V..$BmENu.\.7.].<.MM..\S...........?L....49..3.v.7N....BI.,D.....b...z.^.>..db.....eA...[C..7S.Y......<U...3..xo_....N.+..y..r...=n.y.h...rx...n]E%.i$qj....TY.M0M....k]...`..`.(.#.X.cTp. ..s\..$.{.=/O#H...5....?;.R_..G .....OZ.t..2...l3..l?.a..1.V.<...4...&.6..... .)....F..+.lk.=....w.4........>..q-...g;..g.......B....Q.y.....h...m....l.k.k&ZW....M.&:V.X.Pw...........8.m.G..{....j...7..[WSy.>e5`..z..

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 163x320, components 3
Category:	downloaded
Size (bytes):	11301
Entropy (8bit):	7.969087013665654
Encrypted:	false
SSDEEP:	192:3b4VT6FzkYs39V5LL3nu3ohu1ji1bIpQrTJEZEsGb4CkMKd788KrvFlsWK68Vjij:3b821k7tVtTu3okVmrTJCEsGsPdo8xZq
MD5:	B9CDEC25EECA7AB1DC005017D829CB31
SHA1:	D4A671DBF72C4BD8C0610A179FA8F7618C107827
SHA-256:	3F59348B9D7DD5D9CFE5DCD1C7EC9B6E080062E29D9FA03403D8C90674F9BBD3
SHA-512:	88CAFE7C46620CF0BCB1C68669106F09EA1610113BBD1894276C1BCE145EEB9F7ED549E5C4CB7C8D8AE9AD85EC8A5578BE48C1317CD709D0D5DEC9675D9A18AD
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/71ccDxTRtzL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."..............................................................!1..AQ.."2q....BSar...#3R.......$45CTs.....D....b..%EUc..................................................!1.AQ.a."....2R.Bq..............?......(...yr@..sbx.+......~..rn.]J.4.w.e?\b...o.{.J.x.G.(.....@...s.Q!....=.h.......!....g...f.(.............y..H...$.......{.B.,x.p.-..R.g..{`#&...]..>.b....V@....y....s\.....Sw.M.I.j9?.).-...57.P.....{.4.....W....q.u'.8.F..PX.5s.........B.....0~.......\sH.F....0....x...x.W....O..y.=X..C.[..@..{vG..D...r/..0>......W.G=5?%...^x.Q..,.K....mu9W.c..>u..._......h....5.C..3.I..!..{..`..@\. ...u.v...'.up..)...cC..+.c.u.{7...W.=.y.k.}..\|.KyG.&f...Q.2VQ$X..A$@zX...U.vl..KSU..x..0H.[..p.~lU.c...+.B..E.q'.p.y=...+.Y..T..P.N.It.."..b.YC..#...h..zm...lt.N.....8....w.E....a.Q...]..p9...Ln*..`..0A.#.4

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 229x320, components 3
Category:	dropped
Size (bytes):	14193
Entropy (8bit):	7.945468676461795
Encrypted:	false
SSDEEP:	384:57/Z9E+O6D3Qdimv0V38VO3wfNaQ6NnsTVYbmh+E0:57BS96q7vxbfNn61KF0
MD5:	FC1F93C2F06C64BB759D22D6A7AC795D
SHA1:	C6A618008F1D39ABAC6FD9CA34FAD4646F2A9A3A
SHA-256:	F4931DAF1D92ACB44E818ECBD03F489F5B9BAAF0021EAA65D13F41DF6DC2A6C7
SHA-512:	46C78580F486428EE445DEF8C71B32FC3B589F78311E07B7037337C2E518DC8C652B72000F80B5E44F736CFEEA0C4DF297EBACCF87C11D1022A771ABBDBAD93A
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."..........5..................................................................,..]aW..$...$..%.EI^..Y.Rg...D._.D%y.BO..ds......g......b.B....T.C....Q.Z.@Z...@..X..jU.sjU.jr...4..L.3C..q...]._.L..w6EzE....J..@.m...2.@+.re^..l..DP......p.&4Yo.!.....@..WhW....^.t.....,.?.v.%...X.j+.P4.....h......4..e.L.3C..q...]._.L..w6EzE...<...a^i....<....p.=.=......8.....K..\#I..[..s4:....+....d...sdW.]//....2.....?....6)..G..r...q.~l..p...K..\#I..[..s4:....+....d...sdW.]//.......-.!... ..}.5O....?]..$...)..p."<Yn.!.....@..WhW..*..^.t....ba[d......~....D]]..r.w...........w.^.F..,....hu.. .. \.Ly.p..`4+.. ....._@....e...:.w.....".#(...._........^....m.n.U...~......O_.t..\Z..p.6.v........J.S.._M\|.....3.L...y...v^........................`........N........1...p...9......h.....KRb.....R.Uw.8...o..i.ju ...3l+u.l<

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (665)
Category:	downloaded
Size (bytes):	275528
Entropy (8bit):	5.350358779455347
Encrypted:	false
SSDEEP:	3072:pROoTQ9iQccc3b+Y6iogYZfBckvITzuK9/oYSidRb:DD+dijYL3K9AYSidRb
MD5:	DB11F23641123A0832E01DF479C895F8
SHA1:	4616EB2F28679FDC138380C2E3ED74D066A82CAD
SHA-256:	6701BD983A64F5237F39D89B3030322A7CF344F0220FF6AC57434EE9AB987559
SHA-512:	EFBC1DEBBB1B133B5306E410EA2D381578D0F8C9766F150ACF05BFA56456BA56EB05474BA00BD286FD9C350C1FC425583EFFB533A1B0E52C482669A15CE7E473
Malicious:	false
Reputation:	low
URL:	"https://m.media-amazon.com/images/I/11oNqlOaNXL._RC%7C11Y+5x+kkTL.js,51cR93oXsVL.js,11yKORv-GTL.js,11GgN1+C7hL.js,01+z+uIeJ-L.js,01VRMV3FBdL.js,21u+kGQyRqL.js,01meRT+S4PL.js,11aD5q6kNBL.js,11rRjDLdAVL.js,51t8Z4zPMfL.js,11nAhXzgUmL.js,119kvzYmMJL.js,11joUTnxHvL.js,11F8myQivDL.js,21eKR4hvwNL.js,01Q4S7ptbiL.js,5118qJbclGL.js,01JYHc2oIlL.js,31nfKXylf6L.js,01ktRCtOqKL.js,31RasBDgYVL.js,11bEz2VIYrL.js,31o2NGTXThL.js,01rpauTep4L.js,31IW8GrKLzL.js,01tvglXfQOL.js,11RxSrTRyHL.js,01eoUDsroDL.js_.js?AUIClients/AmazonUI"
Preview:	(function(b){var c=window.AmazonUIPageJS\|\|window.P,e=c._namespace\|\|c.attributeErrors,a=e?e("AmazonUIBaseJS@analytics","AmazonUI"):c;a.guardFatal?a.guardFatal(b)(a,window):a.execute(function(){b(a,window)})})(function(b,c,e){"use strict";b.register("a-analytics",function(){function a(a,f){var b=c&&c.ue&&c.ue.count;if(b&&a){var d="aui:"+a;1<arguments.length&&b(d,f);return b(d)}}var b=c&&c.ue&&c.ue.tag;return{increment:function(b,f){if(b){var d=a(b)\|\|0;a(b,d+(f\|\|1))}},count:a,logError:function(b,a,h){c.ueLogError&&.c.ueLogError({message:b},{logLevel:a,attribution:h})},tag:function(a){b&&a&&b("aui:"+a)},logNexus:function(b,a){var f=c&&c.ue&&c.ue.event;f&&b&&a&&f(a,"aui-analytics",b)}}});b.when("a-analytics").register("prv:a-cache-analytics",function(b){function a(b){return(new URL(b.name)).searchParams.has("AUIClients/AmazonUI")}function d(a){var c;"script"===a.initiatorType&&(c="js");"link"===a.initiatorType&&(c=(new URL(a.name)).pathname.split(".").pop());c=["js","css"].includes(c)?c:"un

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 195x320, components 3
Category:	downloaded
Size (bytes):	19467
Entropy (8bit):	7.980375653005753
Encrypted:	false
SSDEEP:	384:h2JVdJ3atRqb3n8JVK20csyt35bymEVGOrXE1UP+i00:h2CtYzn8JVKNOtJBEEwYUWk
MD5:	4B390B24A8A96B1E976F61E266B115B8
SHA1:	524270BD7203D046F08A3EFE044E6B7D58A7A892
SHA-256:	1FDCBF1188D11B717B34495B3E506509E2B2A175BC9C63E08869DB905E4D7D06
SHA-512:	BB5C5A54524A87550F5C66E7C49C5CDC9DAA16A55F011CF79379736F7DD65FC1249F5396F17710E1219E60FACB4E415C66E0F9656AAD125D2732AD2A29E105C0
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/71LxS3VKnTL._AC_UL320_.jpg
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."...............................................................!.1.."AQ.2aq..#rt......356BRSTU.....$4bs..Cc...%Dd......................................................!1....2AQq.."3RSa..r..#$B.....4b.....T..............?...q.KES_Rm..X..o...;.cl..!....qJ....}l....3..........BW...C..t..7.......z^.o.O..^.<.[.M.I..^....5:>.py.7.................L.I.A....H[.uat\|....q..U..M..'.o.....n..i?...G.c<j...,......U=.;g..+]e}/U..R...K#\|.n..\N.8........H.M..~......5.>.>.g..J.G..wt2>'.....EN<^..G.....9.Z.....^....'*..0.4...C]>.........j.j.._J.&.....1..z1..74..A..O...hE.7i32.1..~....W.N...9.+J>?.g..O..Z.%..1(..)+......q.....Qr....J.......od.%$.Z.....z..5..1ly.3.j....n......)..iP9Hp.\|3.Y.yL!.o4.m.<CT.1..p.,v\Y.#....R<...gG.E....fU.~.N...k..%Z).2".!.w.\|......_.f.....@......d.(AyE\.$[.R..0+t....o5X.F,..je{.Dw#

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 261x320, components 3
Category:	dropped
Size (bytes):	12028
Entropy (8bit):	7.945844263336166
Encrypted:	false
SSDEEP:	192:YdWfl/mjRq0tMvx+sdD6Ijq5uMntwCqflzTa8zwBIZfMIKRHkETKGjPRHKTLy3+j:Yd0KRq06vxLDbWtafdwRJr7KfN46UFi
MD5:	2E312FD7853BC29AA348EAF69F43F964
SHA1:	48E9495985D58B80E3F6FD20F969A47FA4ABAFBE
SHA-256:	2700914347288066C43761B89483CBFCF215CF12B12165FD31AC30955322DC53
SHA-512:	43792C5DD91E2C9DEEEC8E5AE9DA4F8D08CF4291268150B4412E550A978D7FCBC5A352109C1F4A87B9E92EC6CD6FEA2F7FF02A16022E4957C8509E3CEA156DB0
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#......!.#.#""$'(#.'5...........!..."...)"(."$"".,"(!".#"........".$$#..$!./..."!'..$......@...."..........4.................................................................+..3V...f....J.Q8....j.+.....o.B.\h;.....PZIL.{6u...:I.$.)...r.H....s..."D..... ..1JQ.F...!..m.d'L...5.BZ.$..I.+;.A....U]1. .8...F..f..F# !....;...d...NKK$R...N)$.}QuM......I"1Jq.$8.$ !JQ.HQ...w...........Mi:a.f..pI .Q.Q.....8.$04.@.....'!6;....I.i.8.t....4.{0$..I.".../N.Tti......7.....7.vA7O.!.8...M.{.g.H...#.}.=k.aXu.[I.Pr..5....I8..b....^......b...h...c.y..\|...W.~...2...+<..)i.Bv=...,.!f...Mvo7....w.%....Z1&..3...N)$....=...G].o...N'...lb..k....f`s.hl..mu&..6..$+..>.S.8....3....j]-\|..i$....f....?L.c..z.......;gG..'WS.!..A).G+..=.9...#..........%...M$.c.Z\.n...n'.G..(}G...sn.".wy:...:\|K...".......]..EiN.T."..)m'N$BS.....I&.H2..Fc?F..6.O.M...._LH._.vB.k.....z^........gi........q..y.N.(...j]-\|...I.K/..g...S~w.Q........5..

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUXPQD/lHpse:1Qvse
MD5:	E68CC604CAB69BF03B8CD228D940F5EF
SHA1:	15C0C62C4C7C917B5DD82A8E1E439211A44B9E98
SHA-256:	A3A64AEA2E96EC58A163DDB8D4CF86CF236178ED2D225B8F44154BC1B010DDCE
SHA-512:	E250128E5EBE1384113C834409BEFB9CD0728B68EF07AB3450CB0A11F64A8AE9B29C48695DB73D0E4BBA0FD976BDCC24BEEA0F326FAD1B4CA072BCCE6E24E3A5
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 24, 2024 00:36:14.973294973 CEST	192.168.2.7	1.1.1.1	0x5d90	Standard query (0)	frothylattestudio.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:14.973443031 CEST	192.168.2.7	1.1.1.1	0x6d01	Standard query (0)	frothylattestudio.com	65	IN (0x0001)	false
Oct 24, 2024 00:36:15.788719893 CEST	192.168.2.7	1.1.1.1	0xc21	Standard query (0)	ww1.frothylattestudio.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:15.789185047 CEST	192.168.2.7	1.1.1.1	0x3558	Standard query (0)	ww1.frothylattestudio.com	65	IN (0x0001)	false
Oct 24, 2024 00:36:17.169892073 CEST	192.168.2.7	1.1.1.1	0x527a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:17.170129061 CEST	192.168.2.7	1.1.1.1	0x9c22	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 24, 2024 00:36:17.627034903 CEST	192.168.2.7	1.1.1.1	0xff52	Standard query (0)	delivery.consentmanager.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:17.627439022 CEST	192.168.2.7	1.1.1.1	0xdac	Standard query (0)	delivery.consentmanager.net	65	IN (0x0001)	false
Oct 24, 2024 00:36:17.628072023 CEST	192.168.2.7	1.1.1.1	0xd63b	Standard query (0)	cdn.consentmanager.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:17.628587008 CEST	192.168.2.7	1.1.1.1	0x9d91	Standard query (0)	cdn.consentmanager.net	65	IN (0x0001)	false
Oct 24, 2024 00:36:17.644454002 CEST	192.168.2.7	1.1.1.1	0xf86f	Standard query (0)	a.delivery.consentmanager.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:17.644717932 CEST	192.168.2.7	1.1.1.1	0x5c88	Standard query (0)	a.delivery.consentmanager.net	65	IN (0x0001)	false
Oct 24, 2024 00:36:17.724236012 CEST	192.168.2.7	1.1.1.1	0xc11c	Standard query (0)	i3.cdn-image.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:17.724443913 CEST	192.168.2.7	1.1.1.1	0xccb8	Standard query (0)	i3.cdn-image.com	65	IN (0x0001)	false
Oct 24, 2024 00:36:18.589235067 CEST	192.168.2.7	1.1.1.1	0x2ac2	Standard query (0)	ww1.frothylattestudio.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:18.589724064 CEST	192.168.2.7	1.1.1.1	0xe8ff	Standard query (0)	ww1.frothylattestudio.com	65	IN (0x0001)	false
Oct 24, 2024 00:36:18.592132092 CEST	192.168.2.7	1.1.1.1	0x71f7	Standard query (0)	i3.cdn-image.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:18.592566967 CEST	192.168.2.7	1.1.1.1	0x3057	Standard query (0)	i3.cdn-image.com	65	IN (0x0001)	false
Oct 24, 2024 00:36:19.048444033 CEST	192.168.2.7	1.1.1.1	0xfdad	Standard query (0)	a.delivery.consentmanager.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:19.048755884 CEST	192.168.2.7	1.1.1.1	0x30b3	Standard query (0)	a.delivery.consentmanager.net	65	IN (0x0001)	false
Oct 24, 2024 00:36:19.426723957 CEST	192.168.2.7	1.1.1.1	0x9199	Standard query (0)	cdn.consentmanager.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:19.426865101 CEST	192.168.2.7	1.1.1.1	0x4b37	Standard query (0)	cdn.consentmanager.net	65	IN (0x0001)	false
Oct 24, 2024 00:36:20.922516108 CEST	192.168.2.7	1.1.1.1	0xec68	Standard query (0)	i1.cdn-image.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:20.922686100 CEST	192.168.2.7	1.1.1.1	0xe612	Standard query (0)	i1.cdn-image.com	65	IN (0x0001)	false
Oct 24, 2024 00:36:21.880949974 CEST	192.168.2.7	1.1.1.1	0x3b4d	Standard query (0)	i1.cdn-image.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:21.881225109 CEST	192.168.2.7	1.1.1.1	0xa26d	Standard query (0)	i1.cdn-image.com	65	IN (0x0001)	false
Oct 24, 2024 00:36:35.539027929 CEST	192.168.2.7	1.1.1.1	0x4b82	Standard query (0)	r.search.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:35.539334059 CEST	192.168.2.7	1.1.1.1	0x59d1	Standard query (0)	r.search.yahoo.com	65	IN (0x0001)	false
Oct 24, 2024 00:36:39.109340906 CEST	192.168.2.7	1.1.1.1	0x3b6b	Standard query (0)	www.amazon.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:39.109494925 CEST	192.168.2.7	1.1.1.1	0x9eb7	Standard query (0)	www.amazon.com	65	IN (0x0001)	false
Oct 24, 2024 00:36:40.956301928 CEST	192.168.2.7	1.1.1.1	0x4f02	Standard query (0)	m.media-amazon.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:40.959836960 CEST	192.168.2.7	1.1.1.1	0xf467	Standard query (0)	m.media-amazon.com	65	IN (0x0001)	false
Oct 24, 2024 00:36:40.967901945 CEST	192.168.2.7	1.1.1.1	0x621c	Standard query (0)	images-na.ssl-images-amazon.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:40.969105005 CEST	192.168.2.7	1.1.1.1	0x6034	Standard query (0)	images-na.ssl-images-amazon.com	65	IN (0x0001)	false
Oct 24, 2024 00:36:40.972609997 CEST	192.168.2.7	1.1.1.1	0x98cd	Standard query (0)	completion.amazon.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:40.973016977 CEST	192.168.2.7	1.1.1.1	0x1806	Standard query (0)	completion.amazon.com	65	IN (0x0001)	false
Oct 24, 2024 00:36:40.986603975 CEST	192.168.2.7	1.1.1.1	0x27ab	Standard query (0)	unagi-na.amazon.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:40.986745119 CEST	192.168.2.7	1.1.1.1	0x1ce2	Standard query (0)	unagi-na.amazon.com	65	IN (0x0001)	false
Oct 24, 2024 00:36:42.721643925 CEST	192.168.2.7	1.1.1.1	0x5336	Standard query (0)	aax-us-iad.amazon.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:42.721854925 CEST	192.168.2.7	1.1.1.1	0x5913	Standard query (0)	aax-us-iad.amazon.com	65	IN (0x0001)	false
Oct 24, 2024 00:36:42.722711086 CEST	192.168.2.7	1.1.1.1	0x2ac5	Standard query (0)	d1f0esyb34c1g2.cloudfront.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:42.722871065 CEST	192.168.2.7	1.1.1.1	0xf6f5	Standard query (0)	d1f0esyb34c1g2.cloudfront.net	65	IN (0x0001)	false
Oct 24, 2024 00:36:42.724733114 CEST	192.168.2.7	1.1.1.1	0x4ca9	Standard query (0)	fls-na.amazon.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:42.724869967 CEST	192.168.2.7	1.1.1.1	0xd458	Standard query (0)	fls-na.amazon.com	65	IN (0x0001)	false
Oct 24, 2024 00:36:43.659409046 CEST	192.168.2.7	1.1.1.1	0x442a	Standard query (0)	m.media-amazon.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:43.659713030 CEST	192.168.2.7	1.1.1.1	0xba86	Standard query (0)	m.media-amazon.com	65	IN (0x0001)	false
Oct 24, 2024 00:36:43.664247990 CEST	192.168.2.7	1.1.1.1	0xe133	Standard query (0)	aax-us-iad.amazon.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:43.664566040 CEST	192.168.2.7	1.1.1.1	0x94da	Standard query (0)	aax-us-iad.amazon.com	65	IN (0x0001)	false
Oct 24, 2024 00:36:43.742090940 CEST	192.168.2.7	1.1.1.1	0x52fc	Standard query (0)	fls-na.amazon.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:43.742263079 CEST	192.168.2.7	1.1.1.1	0xc319	Standard query (0)	fls-na.amazon.com	65	IN (0x0001)	false
Oct 24, 2024 00:36:44.419115067 CEST	192.168.2.7	1.1.1.1	0x436d	Standard query (0)	d1f0esyb34c1g2.cloudfront.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:44.419518948 CEST	192.168.2.7	1.1.1.1	0x55dd	Standard query (0)	d1f0esyb34c1g2.cloudfront.net	65	IN (0x0001)	false
Oct 24, 2024 00:36:45.771127939 CEST	192.168.2.7	1.1.1.1	0x905	Standard query (0)	images-na.ssl-images-amazon.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:45.771749020 CEST	192.168.2.7	1.1.1.1	0x364c	Standard query (0)	images-na.ssl-images-amazon.com	65	IN (0x0001)	false
Oct 24, 2024 00:36:57.524564028 CEST	192.168.2.7	1.1.1.1	0x89a	Standard query (0)	www.amazon.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:57.525388002 CEST	192.168.2.7	1.1.1.1	0x103f	Standard query (0)	www.amazon.com	65	IN (0x0001)	false
Oct 24, 2024 00:36:58.360785007 CEST	192.168.2.7	1.1.1.1	0xc7ad	Standard query (0)	completion.amazon.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:58.360948086 CEST	192.168.2.7	1.1.1.1	0x2616	Standard query (0)	completion.amazon.com	65	IN (0x0001)	false
Oct 24, 2024 00:36:59.028913021 CEST	192.168.2.7	1.1.1.1	0x1319	Standard query (0)	unagi.amazon.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:59.028913021 CEST	192.168.2.7	1.1.1.1	0xb47f	Standard query (0)	unagi.amazon.com	65	IN (0x0001)	false
Oct 24, 2024 00:36:59.056612968 CEST	192.168.2.7	1.1.1.1	0x8b4b	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:59.058507919 CEST	192.168.2.7	1.1.1.1	0x9277	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 24, 2024 00:36:59.662597895 CEST	192.168.2.7	1.1.1.1	0xabf1	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:59.662811995 CEST	192.168.2.7	1.1.1.1	0x4b68	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Oct 24, 2024 00:36:59.899274111 CEST	192.168.2.7	1.1.1.1	0xe033	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:59.899461985 CEST	192.168.2.7	1.1.1.1	0x19f9	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:00.891007900 CEST	192.168.2.7	1.1.1.1	0x444	Standard query (0)	unagi.amazon.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:00.891453028 CEST	192.168.2.7	1.1.1.1	0xeb1c	Standard query (0)	unagi.amazon.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:00.902995110 CEST	192.168.2.7	1.1.1.1	0xdc53	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:00.911798954 CEST	192.168.2.7	1.1.1.1	0xa1c6	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:01.987958908 CEST	192.168.2.7	1.1.1.1	0x5d30	Standard query (0)	ara.paa-reporting-advertising.amazon	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:01.988662958 CEST	192.168.2.7	1.1.1.1	0x7202	Standard query (0)	ara.paa-reporting-advertising.amazon	65	IN (0x0001)	false
Oct 24, 2024 00:37:02.822448015 CEST	192.168.2.7	1.1.1.1	0x6a29	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.822624922 CEST	192.168.2.7	1.1.1.1	0xa7d	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:02.823606968 CEST	192.168.2.7	1.1.1.1	0x4c89	Standard query (0)	match.360yield.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.823851109 CEST	192.168.2.7	1.1.1.1	0x6174	Standard query (0)	match.360yield.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:02.836443901 CEST	192.168.2.7	1.1.1.1	0xf91f	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.837033033 CEST	192.168.2.7	1.1.1.1	0xed26	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:02.839225054 CEST	192.168.2.7	1.1.1.1	0x7a72	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.839550018 CEST	192.168.2.7	1.1.1.1	0x424d	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:02.840542078 CEST	192.168.2.7	1.1.1.1	0x6790	Standard query (0)	pbs.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.840914011 CEST	192.168.2.7	1.1.1.1	0xc7c	Standard query (0)	pbs.yahoo.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:02.841630936 CEST	192.168.2.7	1.1.1.1	0xb434	Standard query (0)	capi.connatix.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.842298985 CEST	192.168.2.7	1.1.1.1	0x90ad	Standard query (0)	capi.connatix.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:02.843111992 CEST	192.168.2.7	1.1.1.1	0xc52a	Standard query (0)	amazon.partners.tremorhub.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.843295097 CEST	192.168.2.7	1.1.1.1	0x4e88	Standard query (0)	amazon.partners.tremorhub.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:02.844206095 CEST	192.168.2.7	1.1.1.1	0x6ab9	Standard query (0)	www.imdb.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.844703913 CEST	192.168.2.7	1.1.1.1	0xa3ec	Standard query (0)	www.imdb.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:02.845612049 CEST	192.168.2.7	1.1.1.1	0x8418	Standard query (0)	usersync.samplicio.us	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.845875025 CEST	192.168.2.7	1.1.1.1	0x35d3	Standard query (0)	usersync.samplicio.us	65	IN (0x0001)	false
Oct 24, 2024 00:37:02.847300053 CEST	192.168.2.7	1.1.1.1	0xcb8	Standard query (0)	ads.samba.tv	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.847486973 CEST	192.168.2.7	1.1.1.1	0x6b53	Standard query (0)	ads.samba.tv	65	IN (0x0001)	false
Oct 24, 2024 00:37:02.860476017 CEST	192.168.2.7	1.1.1.1	0x5971	Standard query (0)	amazon.partners.tremorhub.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.875258923 CEST	192.168.2.7	1.1.1.1	0xd423	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.875444889 CEST	192.168.2.7	1.1.1.1	0x7cb3	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:03.943613052 CEST	192.168.2.7	1.1.1.1	0x4a50	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:03.943614006 CEST	192.168.2.7	1.1.1.1	0x8873	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Oct 24, 2024 00:37:03.944247961 CEST	192.168.2.7	1.1.1.1	0xf298	Standard query (0)	odr.mookie1.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:03.944399118 CEST	192.168.2.7	1.1.1.1	0x11dd	Standard query (0)	odr.mookie1.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:03.955641985 CEST	192.168.2.7	1.1.1.1	0x427a	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:03.955641985 CEST	192.168.2.7	1.1.1.1	0x9b1b	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:03.983488083 CEST	192.168.2.7	1.1.1.1	0x718a	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:03.983799934 CEST	192.168.2.7	1.1.1.1	0xe6fa	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
Oct 24, 2024 00:37:04.268999100 CEST	192.168.2.7	1.1.1.1	0xaa82	Standard query (0)	bs.serving-sys.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:04.269273043 CEST	192.168.2.7	1.1.1.1	0xce3b	Standard query (0)	bs.serving-sys.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:04.417162895 CEST	192.168.2.7	1.1.1.1	0x8323	Standard query (0)	usersync.samplicio.us	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:04.417444944 CEST	192.168.2.7	1.1.1.1	0x193f	Standard query (0)	usersync.samplicio.us	65	IN (0x0001)	false
Oct 24, 2024 00:37:04.750658035 CEST	192.168.2.7	1.1.1.1	0x481e	Standard query (0)	cookie-matching.mediarithmics.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:04.751115084 CEST	192.168.2.7	1.1.1.1	0x19ad	Standard query (0)	cookie-matching.mediarithmics.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:04.783157110 CEST	192.168.2.7	1.1.1.1	0xd02d	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:04.783310890 CEST	192.168.2.7	1.1.1.1	0x37be	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:04.851793051 CEST	192.168.2.7	1.1.1.1	0x9166	Standard query (0)	csync.loopme.me	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:04.852021933 CEST	192.168.2.7	1.1.1.1	0xed28	Standard query (0)	csync.loopme.me	65	IN (0x0001)	false
Oct 24, 2024 00:37:04.936517000 CEST	192.168.2.7	1.1.1.1	0x8fd3	Standard query (0)	odr.mookie1.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:04.937064886 CEST	192.168.2.7	1.1.1.1	0x8106	Standard query (0)	odr.mookie1.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:05.143327951 CEST	192.168.2.7	1.1.1.1	0x35d2	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:05.143903971 CEST	192.168.2.7	1.1.1.1	0xdc40	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:05.154067039 CEST	192.168.2.7	1.1.1.1	0x1557	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:05.154340982 CEST	192.168.2.7	1.1.1.1	0x23be	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:05.432701111 CEST	192.168.2.7	1.1.1.1	0x85dd	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:05.433125973 CEST	192.168.2.7	1.1.1.1	0x5403	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:05.638401031 CEST	192.168.2.7	1.1.1.1	0x327	Standard query (0)	lm.serving-sys.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:05.638859034 CEST	192.168.2.7	1.1.1.1	0x8295	Standard query (0)	lm.serving-sys.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:05.995295048 CEST	192.168.2.7	1.1.1.1	0xdba2	Standard query (0)	loadus.exelator.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:05.995655060 CEST	192.168.2.7	1.1.1.1	0xeeda	Standard query (0)	loadus.exelator.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:06.221400976 CEST	192.168.2.7	1.1.1.1	0xc27c	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:06.221601963 CEST	192.168.2.7	1.1.1.1	0x5a11	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:06.506524086 CEST	192.168.2.7	1.1.1.1	0xb647	Standard query (0)	lciapi.ninthdecimal.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:06.506974936 CEST	192.168.2.7	1.1.1.1	0x889f	Standard query (0)	lciapi.ninthdecimal.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:06.518050909 CEST	192.168.2.7	1.1.1.1	0x23f7	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:06.518558025 CEST	192.168.2.7	1.1.1.1	0x9d48	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:06.954579115 CEST	192.168.2.7	1.1.1.1	0xfdae	Standard query (0)	sync-amazon.ads.yieldmo.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:06.955112934 CEST	192.168.2.7	1.1.1.1	0x8e26	Standard query (0)	sync-amazon.ads.yieldmo.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:06.957884073 CEST	192.168.2.7	1.1.1.1	0xe022	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:06.958367109 CEST	192.168.2.7	1.1.1.1	0xccb2	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Oct 24, 2024 00:37:07.124201059 CEST	192.168.2.7	1.1.1.1	0xcb6b	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:07.124233961 CEST	192.168.2.7	1.1.1.1	0xaa62	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Oct 24, 2024 00:37:07.309178114 CEST	192.168.2.7	1.1.1.1	0x8dc4	Standard query (0)	sync.taboola.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:07.309410095 CEST	192.168.2.7	1.1.1.1	0xc2cf	Standard query (0)	sync.taboola.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:07.329416037 CEST	192.168.2.7	1.1.1.1	0x63fc	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:07.329416037 CEST	192.168.2.7	1.1.1.1	0xd7ca	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:07.341336966 CEST	192.168.2.7	1.1.1.1	0xc60f	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:07.341619968 CEST	192.168.2.7	1.1.1.1	0x3bf6	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Oct 24, 2024 00:37:08.057245016 CEST	192.168.2.7	1.1.1.1	0xd48f	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:08.057586908 CEST	192.168.2.7	1.1.1.1	0x27de	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:08.149307013 CEST	192.168.2.7	1.1.1.1	0x3481	Standard query (0)	public-prod-dspcookiematching.dmxleo.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:08.149497986 CEST	192.168.2.7	1.1.1.1	0x2960	Standard query (0)	public-prod-dspcookiematching.dmxleo.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:08.236160040 CEST	192.168.2.7	1.1.1.1	0x7cc6	Standard query (0)	cms.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:08.236160040 CEST	192.168.2.7	1.1.1.1	0xe084	Standard query (0)	cms.analytics.yahoo.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:09.161741972 CEST	192.168.2.7	1.1.1.1	0x36ab	Standard query (0)	spl.zeotap.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:09.161895037 CEST	192.168.2.7	1.1.1.1	0x1e06	Standard query (0)	spl.zeotap.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:09.211994886 CEST	192.168.2.7	1.1.1.1	0xf64c	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:09.212277889 CEST	192.168.2.7	1.1.1.1	0x6eb7	Standard query (0)	ads.stickyadstv.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:09.261847973 CEST	192.168.2.7	1.1.1.1	0x689a	Standard query (0)	sync.rfp.fout.jp	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:09.262017012 CEST	192.168.2.7	1.1.1.1	0xd347	Standard query (0)	sync.rfp.fout.jp	65	IN (0x0001)	false
Oct 24, 2024 00:37:09.296665907 CEST	192.168.2.7	1.1.1.1	0xae13	Standard query (0)	public-prod-dspcookiematching.dmxleo.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:09.296804905 CEST	192.168.2.7	1.1.1.1	0x1c70	Standard query (0)	public-prod-dspcookiematching.dmxleo.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:09.303325891 CEST	192.168.2.7	1.1.1.1	0x238e	Standard query (0)	beacon.krxd.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:09.303566933 CEST	192.168.2.7	1.1.1.1	0xd6f6	Standard query (0)	beacon.krxd.net	65	IN (0x0001)	false
Oct 24, 2024 00:37:09.313581944 CEST	192.168.2.7	1.1.1.1	0x10b6	Standard query (0)	beacon.krxd.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:09.357240915 CEST	192.168.2.7	1.1.1.1	0xf8fe	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:09.357426882 CEST	192.168.2.7	1.1.1.1	0x5269	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:09.524252892 CEST	192.168.2.7	1.1.1.1	0xc661	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:09.527620077 CEST	192.168.2.7	1.1.1.1	0x25de	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:09.598386049 CEST	192.168.2.7	1.1.1.1	0xde43	Standard query (0)	ms-cookie-sync.presage.io	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:09.598628044 CEST	192.168.2.7	1.1.1.1	0x6104	Standard query (0)	ms-cookie-sync.presage.io	65	IN (0x0001)	false
Oct 24, 2024 00:37:10.089951992 CEST	192.168.2.7	1.1.1.1	0x8b16	Standard query (0)	mwzeom.zeotap.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:10.090282917 CEST	192.168.2.7	1.1.1.1	0x3922	Standard query (0)	mwzeom.zeotap.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:10.249870062 CEST	192.168.2.7	1.1.1.1	0x88de	Standard query (0)	sync.rfp.fout.jp	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:10.250320911 CEST	192.168.2.7	1.1.1.1	0xceb7	Standard query (0)	sync.rfp.fout.jp	65	IN (0x0001)	false
Oct 24, 2024 00:37:10.486057043 CEST	192.168.2.7	1.1.1.1	0xef24	Standard query (0)	usermatch.krxd.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:10.486200094 CEST	192.168.2.7	1.1.1.1	0x7c30	Standard query (0)	usermatch.krxd.net	65	IN (0x0001)	false
Oct 24, 2024 00:37:10.495984077 CEST	192.168.2.7	1.1.1.1	0xb6c	Standard query (0)	usermatch.krxd.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:10.504846096 CEST	192.168.2.7	1.1.1.1	0x7846	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:10.505058050 CEST	192.168.2.7	1.1.1.1	0xe337	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:10.690800905 CEST	192.168.2.7	1.1.1.1	0x1511	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:10.691169977 CEST	192.168.2.7	1.1.1.1	0xb08b	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:10.735229969 CEST	192.168.2.7	1.1.1.1	0xbe4e	Standard query (0)	uipglob.semasio.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:10.735434055 CEST	192.168.2.7	1.1.1.1	0xd3f4	Standard query (0)	uipglob.semasio.net	65	IN (0x0001)	false
Oct 24, 2024 00:37:11.533879042 CEST	192.168.2.7	1.1.1.1	0x1bff	Standard query (0)	usersync.gumgum.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:11.534271002 CEST	192.168.2.7	1.1.1.1	0x6647	Standard query (0)	usersync.gumgum.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:11.713567972 CEST	192.168.2.7	1.1.1.1	0x3b7a	Standard query (0)	pi.ispot.tv	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:11.713567972 CEST	192.168.2.7	1.1.1.1	0xd380	Standard query (0)	pi.ispot.tv	65	IN (0x0001)	false
Oct 24, 2024 00:37:11.859214067 CEST	192.168.2.7	1.1.1.1	0x26d0	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:11.859473944 CEST	192.168.2.7	1.1.1.1	0xa6a8	Standard query (0)	image6.pubmatic.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:11.864537954 CEST	192.168.2.7	1.1.1.1	0xc2b4	Standard query (0)	uipus.semasio.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:11.867083073 CEST	192.168.2.7	1.1.1.1	0x9a4e	Standard query (0)	uipus.semasio.net	65	IN (0x0001)	false
Oct 24, 2024 00:37:20.746054888 CEST	192.168.2.7	1.1.1.1	0x5939	Standard query (0)	health.amazon.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:20.746196985 CEST	192.168.2.7	1.1.1.1	0x23f7	Standard query (0)	health.amazon.com	65	IN (0x0001)	false
Oct 24, 2024 00:37:26.074671030 CEST	192.168.2.7	1.1.1.1	0x78a8	Standard query (0)	usermatch.krxd.net	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 24, 2024 00:36:15.107156038 CEST	1.1.1.1	192.168.2.7	0x5d90	No error (0)	frothylattestudio.com		192.157.56.139	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:16.024171114 CEST	1.1.1.1	192.168.2.7	0x3558	No error (0)	ww1.frothylattestudio.com	9145.searchmagnified.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:16.139008045 CEST	1.1.1.1	192.168.2.7	0xc21	No error (0)	ww1.frothylattestudio.com	9145.searchmagnified.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:16.139008045 CEST	1.1.1.1	192.168.2.7	0xc21	No error (0)	9145.searchmagnified.com		208.91.196.145	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:17.178919077 CEST	1.1.1.1	192.168.2.7	0x527a	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:17.179148912 CEST	1.1.1.1	192.168.2.7	0x9c22	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 00:36:17.636794090 CEST	1.1.1.1	192.168.2.7	0xff52	No error (0)	delivery.consentmanager.net		87.230.98.78	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:17.637271881 CEST	1.1.1.1	192.168.2.7	0xd63b	No error (0)	cdn.consentmanager.net	1376624012.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:17.637271881 CEST	1.1.1.1	192.168.2.7	0xd63b	No error (0)	1376624012.rsc.cdn77.org		37.19.194.80	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:17.637271881 CEST	1.1.1.1	192.168.2.7	0xd63b	No error (0)	1376624012.rsc.cdn77.org		169.150.255.180	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:17.637271881 CEST	1.1.1.1	192.168.2.7	0xd63b	No error (0)	1376624012.rsc.cdn77.org		212.102.56.179	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:17.637271881 CEST	1.1.1.1	192.168.2.7	0xd63b	No error (0)	1376624012.rsc.cdn77.org		195.181.175.40	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:17.637271881 CEST	1.1.1.1	192.168.2.7	0xd63b	No error (0)	1376624012.rsc.cdn77.org		169.150.255.183	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:17.637271881 CEST	1.1.1.1	192.168.2.7	0xd63b	No error (0)	1376624012.rsc.cdn77.org		195.181.170.18	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:17.637271881 CEST	1.1.1.1	192.168.2.7	0xd63b	No error (0)	1376624012.rsc.cdn77.org		207.211.211.27	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:17.637839079 CEST	1.1.1.1	192.168.2.7	0x9d91	No error (0)	cdn.consentmanager.net	1376624012.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:17.654418945 CEST	1.1.1.1	192.168.2.7	0xf86f	No error (0)	a.delivery.consentmanager.net		87.230.98.78	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:17.752609968 CEST	1.1.1.1	192.168.2.7	0xc11c	No error (0)	i3.cdn-image.com		208.91.196.253	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:18.614845037 CEST	1.1.1.1	192.168.2.7	0x71f7	No error (0)	i3.cdn-image.com		208.91.196.253	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:18.930234909 CEST	1.1.1.1	192.168.2.7	0xe8ff	No error (0)	ww1.frothylattestudio.com	9145.searchmagnified.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:18.975649118 CEST	1.1.1.1	192.168.2.7	0x2ac2	No error (0)	ww1.frothylattestudio.com	9145.searchmagnified.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:18.975649118 CEST	1.1.1.1	192.168.2.7	0x2ac2	No error (0)	9145.searchmagnified.com		208.91.196.145	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:19.055798054 CEST	1.1.1.1	192.168.2.7	0xfdad	No error (0)	a.delivery.consentmanager.net		87.230.98.78	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:19.436654091 CEST	1.1.1.1	192.168.2.7	0x4b37	No error (0)	cdn.consentmanager.net	1376624012.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:19.436669111 CEST	1.1.1.1	192.168.2.7	0x9199	No error (0)	cdn.consentmanager.net	1376624012.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:19.436669111 CEST	1.1.1.1	192.168.2.7	0x9199	No error (0)	1376624012.rsc.cdn77.org		195.181.170.18	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:19.436669111 CEST	1.1.1.1	192.168.2.7	0x9199	No error (0)	1376624012.rsc.cdn77.org		169.150.255.184	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:19.436669111 CEST	1.1.1.1	192.168.2.7	0x9199	No error (0)	1376624012.rsc.cdn77.org		169.150.255.180	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:19.436669111 CEST	1.1.1.1	192.168.2.7	0x9199	No error (0)	1376624012.rsc.cdn77.org		212.102.56.178	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:19.436669111 CEST	1.1.1.1	192.168.2.7	0x9199	No error (0)	1376624012.rsc.cdn77.org		207.211.211.26	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:19.436669111 CEST	1.1.1.1	192.168.2.7	0x9199	No error (0)	1376624012.rsc.cdn77.org		195.181.175.41	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:19.436669111 CEST	1.1.1.1	192.168.2.7	0x9199	No error (0)	1376624012.rsc.cdn77.org		37.19.194.81	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:20.944022894 CEST	1.1.1.1	192.168.2.7	0xec68	No error (0)	i1.cdn-image.com		208.91.196.253	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:21.924151897 CEST	1.1.1.1	192.168.2.7	0x3b4d	No error (0)	i1.cdn-image.com		208.91.196.253	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:26.967843056 CEST	1.1.1.1	192.168.2.7	0xcd96	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:26.967843056 CEST	1.1.1.1	192.168.2.7	0xcd96	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:35.547760963 CEST	1.1.1.1	192.168.2.7	0x59d1	No error (0)	r.search.yahoo.com	ds-global3.l7.search.ystg1.b.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:35.548846006 CEST	1.1.1.1	192.168.2.7	0x4b82	No error (0)	r.search.yahoo.com	ds-global3.l7.search.ystg1.b.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:35.548846006 CEST	1.1.1.1	192.168.2.7	0x4b82	No error (0)	ds-global3.l7.search.ystg1.b.yahoo.com		212.82.100.137	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:39.116394043 CEST	1.1.1.1	192.168.2.7	0x3b6b	No error (0)	www.amazon.com	tp.47cf2c8c9-frontier.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:39.116394043 CEST	1.1.1.1	192.168.2.7	0x3b6b	No error (0)	tp.47cf2c8c9-frontier.amazon.com	d3ag4hukkh62yn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:39.116394043 CEST	1.1.1.1	192.168.2.7	0x3b6b	No error (0)	d3ag4hukkh62yn.cloudfront.net		99.86.8.42	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:39.117002964 CEST	1.1.1.1	192.168.2.7	0x9eb7	No error (0)	www.amazon.com	tp.47cf2c8c9-frontier.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:39.117002964 CEST	1.1.1.1	192.168.2.7	0x9eb7	No error (0)	tp.47cf2c8c9-frontier.amazon.com	d3ag4hukkh62yn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:40.967047930 CEST	1.1.1.1	192.168.2.7	0x4f02	No error (0)	m.media-amazon.com	tp.c47710ee9-frontier.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:40.967047930 CEST	1.1.1.1	192.168.2.7	0x4f02	No error (0)	tp.c47710ee9-frontier.media-amazon.com	f.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:40.967047930 CEST	1.1.1.1	192.168.2.7	0x4f02	No error (0)	f.media-amazon.com	media.amazon.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:40.967047930 CEST	1.1.1.1	192.168.2.7	0x4f02	No error (0)	media.amazon.map.fastly.net		151.101.1.16	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:40.967047930 CEST	1.1.1.1	192.168.2.7	0x4f02	No error (0)	media.amazon.map.fastly.net		151.101.129.16	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:40.967047930 CEST	1.1.1.1	192.168.2.7	0x4f02	No error (0)	media.amazon.map.fastly.net		151.101.65.16	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:40.967047930 CEST	1.1.1.1	192.168.2.7	0x4f02	No error (0)	media.amazon.map.fastly.net		151.101.193.16	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:40.969475031 CEST	1.1.1.1	192.168.2.7	0xf467	No error (0)	m.media-amazon.com	tp.c47710ee9-frontier.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:40.969475031 CEST	1.1.1.1	192.168.2.7	0xf467	No error (0)	tp.c47710ee9-frontier.media-amazon.com	c.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:40.978634119 CEST	1.1.1.1	192.168.2.7	0x621c	No error (0)	images-na.ssl-images-amazon.com	m.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:40.978634119 CEST	1.1.1.1	192.168.2.7	0x621c	No error (0)	m.media-amazon.com	tp.c47710ee9-frontier.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:40.978634119 CEST	1.1.1.1	192.168.2.7	0x621c	No error (0)	tp.c47710ee9-frontier.media-amazon.com	f.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:40.978634119 CEST	1.1.1.1	192.168.2.7	0x621c	No error (0)	f.media-amazon.com	media.amazon.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:40.978634119 CEST	1.1.1.1	192.168.2.7	0x621c	No error (0)	media.amazon.map.fastly.net		151.101.1.16	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:40.978634119 CEST	1.1.1.1	192.168.2.7	0x621c	No error (0)	media.amazon.map.fastly.net		151.101.193.16	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:40.978634119 CEST	1.1.1.1	192.168.2.7	0x621c	No error (0)	media.amazon.map.fastly.net		151.101.65.16	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:40.978634119 CEST	1.1.1.1	192.168.2.7	0x621c	No error (0)	media.amazon.map.fastly.net		151.101.129.16	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:40.979445934 CEST	1.1.1.1	192.168.2.7	0x6034	No error (0)	images-na.ssl-images-amazon.com	m.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:40.979445934 CEST	1.1.1.1	192.168.2.7	0x6034	No error (0)	m.media-amazon.com	tp.c47710ee9-frontier.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:40.979445934 CEST	1.1.1.1	192.168.2.7	0x6034	No error (0)	tp.c47710ee9-frontier.media-amazon.com	c.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:40.983593941 CEST	1.1.1.1	192.168.2.7	0x98cd	No error (0)	completion.amazon.com		44.215.134.156	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:40.996506929 CEST	1.1.1.1	192.168.2.7	0x27ab	No error (0)	unagi-na.amazon.com		44.199.181.5	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:40.996506929 CEST	1.1.1.1	192.168.2.7	0x27ab	No error (0)	unagi-na.amazon.com		44.199.181.222	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:40.996506929 CEST	1.1.1.1	192.168.2.7	0x27ab	No error (0)	unagi-na.amazon.com		44.215.133.78	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:40.996506929 CEST	1.1.1.1	192.168.2.7	0x27ab	No error (0)	unagi-na.amazon.com		44.215.138.159	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:40.996506929 CEST	1.1.1.1	192.168.2.7	0x27ab	No error (0)	unagi-na.amazon.com		44.215.132.248	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:40.996506929 CEST	1.1.1.1	192.168.2.7	0x27ab	No error (0)	unagi-na.amazon.com		44.215.129.188	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:40.996506929 CEST	1.1.1.1	192.168.2.7	0x27ab	No error (0)	unagi-na.amazon.com		44.215.137.192	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:40.996506929 CEST	1.1.1.1	192.168.2.7	0x27ab	No error (0)	unagi-na.amazon.com		44.199.180.130	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:42.729300022 CEST	1.1.1.1	192.168.2.7	0x5336	No error (0)	aax-us-iad.amazon.com		54.239.17.248	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:42.732215881 CEST	1.1.1.1	192.168.2.7	0xd458	No error (0)	fls-na.amazon.com	gateway.prod.us-east-1.forester.a2z.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:42.732215881 CEST	1.1.1.1	192.168.2.7	0xd458	No error (0)	gateway.prod.us-east-1.forester.a2z.com	endpoint.prod.us-east-1.forester.a2z.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:42.732225895 CEST	1.1.1.1	192.168.2.7	0x2ac5	No error (0)	d1f0esyb34c1g2.cloudfront.net		13.33.158.190	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:42.732225895 CEST	1.1.1.1	192.168.2.7	0x2ac5	No error (0)	d1f0esyb34c1g2.cloudfront.net		13.33.158.219	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:42.732225895 CEST	1.1.1.1	192.168.2.7	0x2ac5	No error (0)	d1f0esyb34c1g2.cloudfront.net		13.33.158.223	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:42.732225895 CEST	1.1.1.1	192.168.2.7	0x2ac5	No error (0)	d1f0esyb34c1g2.cloudfront.net		13.33.158.107	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:42.732443094 CEST	1.1.1.1	192.168.2.7	0x4ca9	No error (0)	fls-na.amazon.com	gateway.prod.us-east-1.forester.a2z.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:42.732443094 CEST	1.1.1.1	192.168.2.7	0x4ca9	No error (0)	gateway.prod.us-east-1.forester.a2z.com	endpoint.prod.us-east-1.forester.a2z.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:42.732443094 CEST	1.1.1.1	192.168.2.7	0x4ca9	No error (0)	endpoint.prod.us-east-1.forester.a2z.com		34.194.74.255	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:42.732443094 CEST	1.1.1.1	192.168.2.7	0x4ca9	No error (0)	endpoint.prod.us-east-1.forester.a2z.com		184.72.74.126	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:42.732443094 CEST	1.1.1.1	192.168.2.7	0x4ca9	No error (0)	endpoint.prod.us-east-1.forester.a2z.com		54.235.123.186	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:42.732443094 CEST	1.1.1.1	192.168.2.7	0x4ca9	No error (0)	endpoint.prod.us-east-1.forester.a2z.com		3.93.140.199	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:42.732443094 CEST	1.1.1.1	192.168.2.7	0x4ca9	No error (0)	endpoint.prod.us-east-1.forester.a2z.com		184.73.248.111	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:42.732443094 CEST	1.1.1.1	192.168.2.7	0x4ca9	No error (0)	endpoint.prod.us-east-1.forester.a2z.com		34.194.159.230	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:42.732443094 CEST	1.1.1.1	192.168.2.7	0x4ca9	No error (0)	endpoint.prod.us-east-1.forester.a2z.com		54.225.118.244	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:42.732443094 CEST	1.1.1.1	192.168.2.7	0x4ca9	No error (0)	endpoint.prod.us-east-1.forester.a2z.com		34.200.45.74	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:43.666420937 CEST	1.1.1.1	192.168.2.7	0x442a	No error (0)	m.media-amazon.com	tp.c47710ee9-frontier.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:43.666420937 CEST	1.1.1.1	192.168.2.7	0x442a	No error (0)	tp.c47710ee9-frontier.media-amazon.com	f.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:43.666420937 CEST	1.1.1.1	192.168.2.7	0x442a	No error (0)	f.media-amazon.com	media.amazon.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:43.666420937 CEST	1.1.1.1	192.168.2.7	0x442a	No error (0)	media.amazon.map.fastly.net		151.101.193.16	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:43.666420937 CEST	1.1.1.1	192.168.2.7	0x442a	No error (0)	media.amazon.map.fastly.net		151.101.1.16	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:43.666420937 CEST	1.1.1.1	192.168.2.7	0x442a	No error (0)	media.amazon.map.fastly.net		151.101.129.16	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:43.666420937 CEST	1.1.1.1	192.168.2.7	0x442a	No error (0)	media.amazon.map.fastly.net		151.101.65.16	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:43.667362928 CEST	1.1.1.1	192.168.2.7	0xba86	No error (0)	m.media-amazon.com	tp.c47710ee9-frontier.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:43.667362928 CEST	1.1.1.1	192.168.2.7	0xba86	No error (0)	tp.c47710ee9-frontier.media-amazon.com	f.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:43.667362928 CEST	1.1.1.1	192.168.2.7	0xba86	No error (0)	f.media-amazon.com	media.amazon.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:43.671308041 CEST	1.1.1.1	192.168.2.7	0xe133	No error (0)	aax-us-iad.amazon.com		52.46.132.119	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:43.750391960 CEST	1.1.1.1	192.168.2.7	0x52fc	No error (0)	fls-na.amazon.com	gateway.prod.us-east-1.forester.a2z.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:43.750391960 CEST	1.1.1.1	192.168.2.7	0x52fc	No error (0)	gateway.prod.us-east-1.forester.a2z.com	endpoint.prod.us-east-1.forester.a2z.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:43.750391960 CEST	1.1.1.1	192.168.2.7	0x52fc	No error (0)	endpoint.prod.us-east-1.forester.a2z.com		52.201.171.121	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:43.750391960 CEST	1.1.1.1	192.168.2.7	0x52fc	No error (0)	endpoint.prod.us-east-1.forester.a2z.com		3.225.34.251	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:43.750391960 CEST	1.1.1.1	192.168.2.7	0x52fc	No error (0)	endpoint.prod.us-east-1.forester.a2z.com		54.205.171.223	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:43.750391960 CEST	1.1.1.1	192.168.2.7	0x52fc	No error (0)	endpoint.prod.us-east-1.forester.a2z.com		54.88.123.40	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:43.750391960 CEST	1.1.1.1	192.168.2.7	0x52fc	No error (0)	endpoint.prod.us-east-1.forester.a2z.com		44.219.44.163	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:43.750391960 CEST	1.1.1.1	192.168.2.7	0x52fc	No error (0)	endpoint.prod.us-east-1.forester.a2z.com		35.171.64.213	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:43.750391960 CEST	1.1.1.1	192.168.2.7	0x52fc	No error (0)	endpoint.prod.us-east-1.forester.a2z.com		34.224.152.141	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:43.750391960 CEST	1.1.1.1	192.168.2.7	0x52fc	No error (0)	endpoint.prod.us-east-1.forester.a2z.com		3.220.34.185	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:43.750407934 CEST	1.1.1.1	192.168.2.7	0xc319	No error (0)	fls-na.amazon.com	gateway.prod.us-east-1.forester.a2z.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:43.750407934 CEST	1.1.1.1	192.168.2.7	0xc319	No error (0)	gateway.prod.us-east-1.forester.a2z.com	endpoint.prod.us-east-1.forester.a2z.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:44.432291985 CEST	1.1.1.1	192.168.2.7	0x436d	No error (0)	d1f0esyb34c1g2.cloudfront.net		13.33.158.219	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:44.432291985 CEST	1.1.1.1	192.168.2.7	0x436d	No error (0)	d1f0esyb34c1g2.cloudfront.net		13.33.158.107	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:44.432291985 CEST	1.1.1.1	192.168.2.7	0x436d	No error (0)	d1f0esyb34c1g2.cloudfront.net		13.33.158.190	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:44.432291985 CEST	1.1.1.1	192.168.2.7	0x436d	No error (0)	d1f0esyb34c1g2.cloudfront.net		13.33.158.223	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:45.779383898 CEST	1.1.1.1	192.168.2.7	0x905	No error (0)	images-na.ssl-images-amazon.com	m.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:45.779383898 CEST	1.1.1.1	192.168.2.7	0x905	No error (0)	m.media-amazon.com	tp.c47710ee9-frontier.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:45.779383898 CEST	1.1.1.1	192.168.2.7	0x905	No error (0)	tp.c47710ee9-frontier.media-amazon.com	f.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:45.779383898 CEST	1.1.1.1	192.168.2.7	0x905	No error (0)	f.media-amazon.com	media.amazon.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:45.779383898 CEST	1.1.1.1	192.168.2.7	0x905	No error (0)	media.amazon.map.fastly.net		151.101.1.16	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:45.779383898 CEST	1.1.1.1	192.168.2.7	0x905	No error (0)	media.amazon.map.fastly.net		151.101.129.16	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:45.779383898 CEST	1.1.1.1	192.168.2.7	0x905	No error (0)	media.amazon.map.fastly.net		151.101.65.16	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:45.779383898 CEST	1.1.1.1	192.168.2.7	0x905	No error (0)	media.amazon.map.fastly.net		151.101.193.16	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:45.780244112 CEST	1.1.1.1	192.168.2.7	0x364c	No error (0)	images-na.ssl-images-amazon.com	m.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:45.780244112 CEST	1.1.1.1	192.168.2.7	0x364c	No error (0)	m.media-amazon.com	tp.c47710ee9-frontier.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:45.780244112 CEST	1.1.1.1	192.168.2.7	0x364c	No error (0)	tp.c47710ee9-frontier.media-amazon.com	c.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:57.532365084 CEST	1.1.1.1	192.168.2.7	0x89a	No error (0)	www.amazon.com	tp.47cf2c8c9-frontier.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:57.532365084 CEST	1.1.1.1	192.168.2.7	0x89a	No error (0)	tp.47cf2c8c9-frontier.amazon.com	d3ag4hukkh62yn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:57.532365084 CEST	1.1.1.1	192.168.2.7	0x89a	No error (0)	d3ag4hukkh62yn.cloudfront.net		99.86.8.42	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:57.537605047 CEST	1.1.1.1	192.168.2.7	0x103f	No error (0)	www.amazon.com	tp.47cf2c8c9-frontier.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:57.537605047 CEST	1.1.1.1	192.168.2.7	0x103f	No error (0)	tp.47cf2c8c9-frontier.amazon.com	www.amazon.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:58.368175983 CEST	1.1.1.1	192.168.2.7	0xc7ad	No error (0)	completion.amazon.com		44.215.116.37	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:59.036927938 CEST	1.1.1.1	192.168.2.7	0xb47f	No error (0)	unagi.amazon.com	unagi-na.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:59.038108110 CEST	1.1.1.1	192.168.2.7	0x1319	No error (0)	unagi.amazon.com	unagi-na.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:59.038108110 CEST	1.1.1.1	192.168.2.7	0x1319	No error (0)	unagi-na.amazon.com		44.215.137.192	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:59.038108110 CEST	1.1.1.1	192.168.2.7	0x1319	No error (0)	unagi-na.amazon.com		44.215.139.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:59.038108110 CEST	1.1.1.1	192.168.2.7	0x1319	No error (0)	unagi-na.amazon.com		44.215.117.206	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:59.038108110 CEST	1.1.1.1	192.168.2.7	0x1319	No error (0)	unagi-na.amazon.com		44.215.118.141	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:59.038108110 CEST	1.1.1.1	192.168.2.7	0x1319	No error (0)	unagi-na.amazon.com		44.215.132.248	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:59.038108110 CEST	1.1.1.1	192.168.2.7	0x1319	No error (0)	unagi-na.amazon.com		44.215.137.166	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:59.038108110 CEST	1.1.1.1	192.168.2.7	0x1319	No error (0)	unagi-na.amazon.com		44.199.181.5	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:59.038108110 CEST	1.1.1.1	192.168.2.7	0x1319	No error (0)	unagi-na.amazon.com		44.215.137.152	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:59.064352989 CEST	1.1.1.1	192.168.2.7	0x8b4b	No error (0)	googleads.g.doubleclick.net		216.58.206.66	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:59.065749884 CEST	1.1.1.1	192.168.2.7	0x9277	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 24, 2024 00:36:59.670082092 CEST	1.1.1.1	192.168.2.7	0x4b68	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:59.671211004 CEST	1.1.1.1	192.168.2.7	0xabf1	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:36:59.671211004 CEST	1.1.1.1	192.168.2.7	0xabf1	No error (0)	d1ykf07e75w7ss.cloudfront.net		108.138.6.136	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:36:59.906444073 CEST	1.1.1.1	192.168.2.7	0xe033	No error (0)	s.amazon-adsystem.com		98.82.156.207	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:00.899003029 CEST	1.1.1.1	192.168.2.7	0x444	No error (0)	unagi.amazon.com	unagi-na.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:00.899003029 CEST	1.1.1.1	192.168.2.7	0x444	No error (0)	unagi-na.amazon.com		44.199.181.222	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:00.899003029 CEST	1.1.1.1	192.168.2.7	0x444	No error (0)	unagi-na.amazon.com		44.215.129.188	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:00.899003029 CEST	1.1.1.1	192.168.2.7	0x444	No error (0)	unagi-na.amazon.com		44.215.138.159	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:00.899003029 CEST	1.1.1.1	192.168.2.7	0x444	No error (0)	unagi-na.amazon.com		44.215.137.192	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:00.899003029 CEST	1.1.1.1	192.168.2.7	0x444	No error (0)	unagi-na.amazon.com		44.215.139.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:00.899003029 CEST	1.1.1.1	192.168.2.7	0x444	No error (0)	unagi-na.amazon.com		44.215.129.38	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:00.899003029 CEST	1.1.1.1	192.168.2.7	0x444	No error (0)	unagi-na.amazon.com		44.215.132.248	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:00.899003029 CEST	1.1.1.1	192.168.2.7	0x444	No error (0)	unagi-na.amazon.com		44.215.137.152	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:00.899219990 CEST	1.1.1.1	192.168.2.7	0xeb1c	No error (0)	unagi.amazon.com	unagi-na.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:00.910826921 CEST	1.1.1.1	192.168.2.7	0xdc53	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:00.910826921 CEST	1.1.1.1	192.168.2.7	0xdc53	No error (0)	d1ykf07e75w7ss.cloudfront.net		108.138.6.136	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:00.919553995 CEST	1.1.1.1	192.168.2.7	0xa1c6	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:01.997138023 CEST	1.1.1.1	192.168.2.7	0x5d30	No error (0)	ara.paa-reporting-advertising.amazon		18.245.46.47	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:01.997138023 CEST	1.1.1.1	192.168.2.7	0x5d30	No error (0)	ara.paa-reporting-advertising.amazon		18.245.46.38	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:01.997138023 CEST	1.1.1.1	192.168.2.7	0x5d30	No error (0)	ara.paa-reporting-advertising.amazon		18.245.46.13	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:01.997138023 CEST	1.1.1.1	192.168.2.7	0x5d30	No error (0)	ara.paa-reporting-advertising.amazon		18.245.46.109	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.829906940 CEST	1.1.1.1	192.168.2.7	0x6a29	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:02.829906940 CEST	1.1.1.1	192.168.2.7	0x6a29	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.829906940 CEST	1.1.1.1	192.168.2.7	0x6a29	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.829906940 CEST	1.1.1.1	192.168.2.7	0x6a29	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.829906940 CEST	1.1.1.1	192.168.2.7	0x6a29	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.829906940 CEST	1.1.1.1	192.168.2.7	0x6a29	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.829906940 CEST	1.1.1.1	192.168.2.7	0x6a29	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.829906940 CEST	1.1.1.1	192.168.2.7	0x6a29	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.829906940 CEST	1.1.1.1	192.168.2.7	0x6a29	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.829906940 CEST	1.1.1.1	192.168.2.7	0x6a29	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.829906940 CEST	1.1.1.1	192.168.2.7	0x6a29	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.829906940 CEST	1.1.1.1	192.168.2.7	0x6a29	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.829906940 CEST	1.1.1.1	192.168.2.7	0x6a29	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.831696987 CEST	1.1.1.1	192.168.2.7	0x6174	No error (0)	match.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:02.831696987 CEST	1.1.1.1	192.168.2.7	0x6174	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:02.831872940 CEST	1.1.1.1	192.168.2.7	0x4c89	No error (0)	match.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:02.831872940 CEST	1.1.1.1	192.168.2.7	0x4c89	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:02.831872940 CEST	1.1.1.1	192.168.2.7	0x4c89	No error (0)	euw-ice.360yield.com		52.17.18.217	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.831872940 CEST	1.1.1.1	192.168.2.7	0x4c89	No error (0)	euw-ice.360yield.com		52.213.231.191	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.831872940 CEST	1.1.1.1	192.168.2.7	0x4c89	No error (0)	euw-ice.360yield.com		34.251.131.61	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.831872940 CEST	1.1.1.1	192.168.2.7	0x4c89	No error (0)	euw-ice.360yield.com		54.194.59.188	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.831872940 CEST	1.1.1.1	192.168.2.7	0x4c89	No error (0)	euw-ice.360yield.com		52.16.213.114	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.831872940 CEST	1.1.1.1	192.168.2.7	0x4c89	No error (0)	euw-ice.360yield.com		54.76.209.116	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.831872940 CEST	1.1.1.1	192.168.2.7	0x4c89	No error (0)	euw-ice.360yield.com		54.74.19.247	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.831872940 CEST	1.1.1.1	192.168.2.7	0x4c89	No error (0)	euw-ice.360yield.com		52.215.15.24	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.844245911 CEST	1.1.1.1	192.168.2.7	0xf91f	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:02.844245911 CEST	1.1.1.1	192.168.2.7	0xf91f	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.117	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.844245911 CEST	1.1.1.1	192.168.2.7	0xf91f	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.121	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.844245911 CEST	1.1.1.1	192.168.2.7	0xf91f	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.844245911 CEST	1.1.1.1	192.168.2.7	0xf91f	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.201	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.844245911 CEST	1.1.1.1	192.168.2.7	0xf91f	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.105	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.844245911 CEST	1.1.1.1	192.168.2.7	0xf91f	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.106	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.844245911 CEST	1.1.1.1	192.168.2.7	0xf91f	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.104	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.844245911 CEST	1.1.1.1	192.168.2.7	0xf91f	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.97	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.844245911 CEST	1.1.1.1	192.168.2.7	0xf91f	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.173	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.844245911 CEST	1.1.1.1	192.168.2.7	0xf91f	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.73	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.844245911 CEST	1.1.1.1	192.168.2.7	0xf91f	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.120	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.844245911 CEST	1.1.1.1	192.168.2.7	0xf91f	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.116	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.844245911 CEST	1.1.1.1	192.168.2.7	0xf91f	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.88	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.844245911 CEST	1.1.1.1	192.168.2.7	0xf91f	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.74	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.844245911 CEST	1.1.1.1	192.168.2.7	0xf91f	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.200	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.844245911 CEST	1.1.1.1	192.168.2.7	0xf91f	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.89	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.845258951 CEST	1.1.1.1	192.168.2.7	0xed26	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:02.847773075 CEST	1.1.1.1	192.168.2.7	0x7a72	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.847773075 CEST	1.1.1.1	192.168.2.7	0x7a72	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.847804070 CEST	1.1.1.1	192.168.2.7	0x6790	No error (0)	pbs.yahoo.com	edge-prebid-cdn.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:02.847804070 CEST	1.1.1.1	192.168.2.7	0x6790	No error (0)	edge-prebid-cdn.g03.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.847804070 CEST	1.1.1.1	192.168.2.7	0x6790	No error (0)	edge-prebid-cdn.g03.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.847965956 CEST	1.1.1.1	192.168.2.7	0x424d	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Oct 24, 2024 00:37:02.848993063 CEST	1.1.1.1	192.168.2.7	0xc7c	No error (0)	pbs.yahoo.com	edge-prebid-cdn.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:02.849967003 CEST	1.1.1.1	192.168.2.7	0xb434	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:02.850095987 CEST	1.1.1.1	192.168.2.7	0x90ad	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:02.850542068 CEST	1.1.1.1	192.168.2.7	0xc52a	Name error (3)	amazon.partners.tremorhub.com	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.851583958 CEST	1.1.1.1	192.168.2.7	0x4e88	Name error (3)	amazon.partners.tremorhub.com	none	none	65	IN (0x0001)	false
Oct 24, 2024 00:37:02.851856947 CEST	1.1.1.1	192.168.2.7	0x6ab9	No error (0)	www.imdb.com	tp.391b988c0-frontier.imdb.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:02.851856947 CEST	1.1.1.1	192.168.2.7	0x6ab9	No error (0)	tp.391b988c0-frontier.imdb.com	d2bytcopxu066p.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:02.851856947 CEST	1.1.1.1	192.168.2.7	0x6ab9	No error (0)	d2bytcopxu066p.cloudfront.net		18.245.39.216	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.853620052 CEST	1.1.1.1	192.168.2.7	0x8418	No error (0)	usersync.samplicio.us		18.197.217.70	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.853620052 CEST	1.1.1.1	192.168.2.7	0x8418	No error (0)	usersync.samplicio.us		18.185.147.174	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.853620052 CEST	1.1.1.1	192.168.2.7	0x8418	No error (0)	usersync.samplicio.us		18.194.108.42	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.855305910 CEST	1.1.1.1	192.168.2.7	0x6b53	No error (0)	ads.samba.tv	pixelapi-east.cs.mysamba.tv		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:02.863679886 CEST	1.1.1.1	192.168.2.7	0xa3ec	No error (0)	www.imdb.com	tp.391b988c0-frontier.imdb.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:02.863679886 CEST	1.1.1.1	192.168.2.7	0xa3ec	No error (0)	tp.391b988c0-frontier.imdb.com	d2bytcopxu066p.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:02.868561029 CEST	1.1.1.1	192.168.2.7	0x5971	Name error (3)	amazon.partners.tremorhub.com	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.878942966 CEST	1.1.1.1	192.168.2.7	0xcb8	No error (0)	ads.samba.tv	pixelapi-east.cs.mysamba.tv		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:02.878942966 CEST	1.1.1.1	192.168.2.7	0xcb8	No error (0)	pixelapi-east.cs.mysamba.tv		3.232.144.122	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.878942966 CEST	1.1.1.1	192.168.2.7	0xcb8	No error (0)	pixelapi-east.cs.mysamba.tv		34.198.12.150	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:02.883193970 CEST	1.1.1.1	192.168.2.7	0x7cb3	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:02.883224964 CEST	1.1.1.1	192.168.2.7	0xd423	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:03.950859070 CEST	1.1.1.1	192.168.2.7	0x8873	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:03.950859070 CEST	1.1.1.1	192.168.2.7	0x8873	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:03.950859070 CEST	1.1.1.1	192.168.2.7	0x8873	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:03.950871944 CEST	1.1.1.1	192.168.2.7	0x4a50	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:03.950871944 CEST	1.1.1.1	192.168.2.7	0x4a50	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:03.950871944 CEST	1.1.1.1	192.168.2.7	0x4a50	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:03.950871944 CEST	1.1.1.1	192.168.2.7	0x4a50	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.213.88.80	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:03.950871944 CEST	1.1.1.1	192.168.2.7	0x4a50	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.217.253.102	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:03.950871944 CEST	1.1.1.1	192.168.2.7	0x4a50	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.48.129.25	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:03.950871944 CEST	1.1.1.1	192.168.2.7	0x4a50	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.17.200.40	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:03.950871944 CEST	1.1.1.1	192.168.2.7	0x4a50	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.254.132.151	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:03.950871944 CEST	1.1.1.1	192.168.2.7	0x4a50	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.154.229.188	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:03.950871944 CEST	1.1.1.1	192.168.2.7	0x4a50	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.246.111.217	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:03.950871944 CEST	1.1.1.1	192.168.2.7	0x4a50	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.229.50.82	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:03.951642990 CEST	1.1.1.1	192.168.2.7	0x11dd	No error (0)	odr.mookie1.com	tagr-pixel-nginx-odr-euw4.mookie1.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:03.952155113 CEST	1.1.1.1	192.168.2.7	0xf298	No error (0)	odr.mookie1.com	tagr-pixel-nginx-odr-euw4.mookie1.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:03.952155113 CEST	1.1.1.1	192.168.2.7	0xf298	No error (0)	tagr-pixel-nginx-odr-euw4.mookie1.com		34.160.236.64	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:03.963665009 CEST	1.1.1.1	192.168.2.7	0x9b1b	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:03.963665009 CEST	1.1.1.1	192.168.2.7	0x9b1b	No error (0)	rtb-csync-euw2.smartadserver.com		178.32.197.56	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:03.963665009 CEST	1.1.1.1	192.168.2.7	0x9b1b	No error (0)	rtb-csync-euw2.smartadserver.com		149.202.238.105	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:03.963665009 CEST	1.1.1.1	192.168.2.7	0x9b1b	No error (0)	rtb-csync-euw2.smartadserver.com		5.196.111.72	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:03.963665009 CEST	1.1.1.1	192.168.2.7	0x9b1b	No error (0)	rtb-csync-euw2.smartadserver.com		178.32.197.57	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:03.963665009 CEST	1.1.1.1	192.168.2.7	0x9b1b	No error (0)	rtb-csync-euw2.smartadserver.com		91.134.110.137	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:03.963665009 CEST	1.1.1.1	192.168.2.7	0x9b1b	No error (0)	rtb-csync-euw2.smartadserver.com		164.132.25.184	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:03.963665009 CEST	1.1.1.1	192.168.2.7	0x9b1b	No error (0)	rtb-csync-euw2.smartadserver.com		217.182.178.233	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:03.963665009 CEST	1.1.1.1	192.168.2.7	0x9b1b	No error (0)	rtb-csync-euw2.smartadserver.com		51.178.195.216	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:03.963665009 CEST	1.1.1.1	192.168.2.7	0x9b1b	No error (0)	rtb-csync-euw2.smartadserver.com		91.134.110.136	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:03.963665009 CEST	1.1.1.1	192.168.2.7	0x9b1b	No error (0)	rtb-csync-euw2.smartadserver.com		5.135.209.105	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:03.963665009 CEST	1.1.1.1	192.168.2.7	0x9b1b	No error (0)	rtb-csync-euw2.smartadserver.com		164.132.25.185	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:03.963665009 CEST	1.1.1.1	192.168.2.7	0x9b1b	No error (0)	rtb-csync-euw2.smartadserver.com		5.196.111.73	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:03.963665009 CEST	1.1.1.1	192.168.2.7	0x9b1b	No error (0)	rtb-csync-euw2.smartadserver.com		51.178.195.217	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:03.963665009 CEST	1.1.1.1	192.168.2.7	0x9b1b	No error (0)	rtb-csync-euw2.smartadserver.com		5.135.209.104	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:03.963665009 CEST	1.1.1.1	192.168.2.7	0x9b1b	No error (0)	rtb-csync-euw2.smartadserver.com		217.182.178.234	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:03.963665009 CEST	1.1.1.1	192.168.2.7	0x9b1b	No error (0)	rtb-csync-euw2.smartadserver.com		149.202.238.104	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:03.964198112 CEST	1.1.1.1	192.168.2.7	0x427a	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:03.991424084 CEST	1.1.1.1	192.168.2.7	0x718a	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:03.993134022 CEST	1.1.1.1	192.168.2.7	0xe6fa	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:04.278225899 CEST	1.1.1.1	192.168.2.7	0xaa82	No error (0)	bs.serving-sys.com	bs.eyeblaster.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:04.278225899 CEST	1.1.1.1	192.168.2.7	0xaa82	No error (0)	aka-fr.ads.sizmdx.com	adserver-prod-alb-2056226458.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:04.278225899 CEST	1.1.1.1	192.168.2.7	0xaa82	No error (0)	adserver-prod-alb-2056226458.eu-central-1.elb.amazonaws.com		52.58.254.85	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:04.278225899 CEST	1.1.1.1	192.168.2.7	0xaa82	No error (0)	adserver-prod-alb-2056226458.eu-central-1.elb.amazonaws.com		3.68.7.153	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:04.278225899 CEST	1.1.1.1	192.168.2.7	0xaa82	No error (0)	adserver-prod-alb-2056226458.eu-central-1.elb.amazonaws.com		52.29.48.188	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:04.280019045 CEST	1.1.1.1	192.168.2.7	0xce3b	No error (0)	bs.serving-sys.com	bs.eyeblaster.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:04.280019045 CEST	1.1.1.1	192.168.2.7	0xce3b	No error (0)	aka-fr.ads.sizmdx.com	adserver-prod-alb-2056226458.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:04.427053928 CEST	1.1.1.1	192.168.2.7	0x8323	No error (0)	usersync.samplicio.us		18.185.147.174	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:04.427053928 CEST	1.1.1.1	192.168.2.7	0x8323	No error (0)	usersync.samplicio.us		18.197.217.70	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:04.427053928 CEST	1.1.1.1	192.168.2.7	0x8323	No error (0)	usersync.samplicio.us		18.194.108.42	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:04.761600971 CEST	1.1.1.1	192.168.2.7	0x481e	No error (0)	cookie-matching.mediarithmics.com	lb.mediarithmics.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:04.761600971 CEST	1.1.1.1	192.168.2.7	0x481e	No error (0)	lb.mediarithmics.com		54.36.150.186	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:04.761600971 CEST	1.1.1.1	192.168.2.7	0x481e	No error (0)	lb.mediarithmics.com		54.36.150.183	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:04.761600971 CEST	1.1.1.1	192.168.2.7	0x481e	No error (0)	lb.mediarithmics.com		54.36.150.185	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:04.761600971 CEST	1.1.1.1	192.168.2.7	0x481e	No error (0)	lb.mediarithmics.com		54.36.150.180	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:04.761600971 CEST	1.1.1.1	192.168.2.7	0x481e	No error (0)	lb.mediarithmics.com		54.36.150.182	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:04.761600971 CEST	1.1.1.1	192.168.2.7	0x481e	No error (0)	lb.mediarithmics.com		54.36.150.184	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:04.761600971 CEST	1.1.1.1	192.168.2.7	0x481e	No error (0)	lb.mediarithmics.com		54.36.150.187	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:04.761600971 CEST	1.1.1.1	192.168.2.7	0x481e	No error (0)	lb.mediarithmics.com		54.36.150.181	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:04.763789892 CEST	1.1.1.1	192.168.2.7	0x19ad	No error (0)	cookie-matching.mediarithmics.com	lb.mediarithmics.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:04.792440891 CEST	1.1.1.1	192.168.2.7	0xd02d	No error (0)	s.amazon-adsystem.com		98.82.154.76	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:04.861083031 CEST	1.1.1.1	192.168.2.7	0x9166	No error (0)	csync.loopme.me	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:04.861083031 CEST	1.1.1.1	192.168.2.7	0x9166	No error (0)	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		35.214.216.122	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:04.861083031 CEST	1.1.1.1	192.168.2.7	0x9166	No error (0)	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		34.1.224.215	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:04.861083031 CEST	1.1.1.1	192.168.2.7	0x9166	No error (0)	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		34.1.240.58	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:04.861083031 CEST	1.1.1.1	192.168.2.7	0x9166	No error (0)	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		35.214.142.103	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:04.861083031 CEST	1.1.1.1	192.168.2.7	0x9166	No error (0)	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		35.214.172.170	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:04.861083031 CEST	1.1.1.1	192.168.2.7	0x9166	No error (0)	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		35.214.215.58	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:04.861083031 CEST	1.1.1.1	192.168.2.7	0x9166	No error (0)	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		35.214.243.78	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:04.861083031 CEST	1.1.1.1	192.168.2.7	0x9166	No error (0)	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		35.214.151.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:04.861083031 CEST	1.1.1.1	192.168.2.7	0x9166	No error (0)	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		35.214.254.224	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:04.861083031 CEST	1.1.1.1	192.168.2.7	0x9166	No error (0)	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		35.214.166.54	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:04.863663912 CEST	1.1.1.1	192.168.2.7	0xed28	No error (0)	csync.loopme.me	envoy-hl.envoy-csync.core-002-ew4.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:04.945657969 CEST	1.1.1.1	192.168.2.7	0x8fd3	No error (0)	odr.mookie1.com	tagr-pixel-nginx-odr-euw4.mookie1.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:04.945657969 CEST	1.1.1.1	192.168.2.7	0x8fd3	No error (0)	tagr-pixel-nginx-odr-euw4.mookie1.com		34.160.236.64	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:04.945972919 CEST	1.1.1.1	192.168.2.7	0x8106	No error (0)	odr.mookie1.com	tagr-pixel-nginx-odr-euw4.mookie1.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:05.152064085 CEST	1.1.1.1	192.168.2.7	0x35d2	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:05.152064085 CEST	1.1.1.1	192.168.2.7	0x35d2	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:05.153820038 CEST	1.1.1.1	192.168.2.7	0xdc40	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
Oct 24, 2024 00:37:05.163084984 CEST	1.1.1.1	192.168.2.7	0x1557	No error (0)	crb.kargo.com		35.156.174.96	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:05.163084984 CEST	1.1.1.1	192.168.2.7	0x1557	No error (0)	crb.kargo.com		3.77.58.244	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:05.163084984 CEST	1.1.1.1	192.168.2.7	0x1557	No error (0)	crb.kargo.com		52.57.84.100	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:05.441941023 CEST	1.1.1.1	192.168.2.7	0x85dd	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:05.441941023 CEST	1.1.1.1	192.168.2.7	0x85dd	No error (0)	image2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:05.441941023 CEST	1.1.1.1	192.168.2.7	0x85dd	No error (0)	pug-lhr-bc.pubmnet.com		185.64.191.210	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:05.442452908 CEST	1.1.1.1	192.168.2.7	0x5403	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:05.442452908 CEST	1.1.1.1	192.168.2.7	0x5403	No error (0)	image2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:05.648541927 CEST	1.1.1.1	192.168.2.7	0x8295	No error (0)	lm.serving-sys.com	lm.eyeblaster.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:05.648541927 CEST	1.1.1.1	192.168.2.7	0x8295	No error (0)	aka-lm-fr.ads.sizmdx.com	adserver-logmodule-prod-nlb-v18-0c4f9d0d3a18a66d.elb.eu-central-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:05.658554077 CEST	1.1.1.1	192.168.2.7	0x327	No error (0)	lm.serving-sys.com	lm.eyeblaster.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:05.658554077 CEST	1.1.1.1	192.168.2.7	0x327	No error (0)	aka-lm-fr.ads.sizmdx.com	adserver-logmodule-prod-nlb-v18-0c4f9d0d3a18a66d.elb.eu-central-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:05.658554077 CEST	1.1.1.1	192.168.2.7	0x327	No error (0)	adserver-logmodule-prod-nlb-v18-0c4f9d0d3a18a66d.elb.eu-central-1.amazonaws.com		3.65.151.29	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:05.658554077 CEST	1.1.1.1	192.168.2.7	0x327	No error (0)	adserver-logmodule-prod-nlb-v18-0c4f9d0d3a18a66d.elb.eu-central-1.amazonaws.com		52.57.209.126	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:05.658554077 CEST	1.1.1.1	192.168.2.7	0x327	No error (0)	adserver-logmodule-prod-nlb-v18-0c4f9d0d3a18a66d.elb.eu-central-1.amazonaws.com		18.199.27.70	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:06.004489899 CEST	1.1.1.1	192.168.2.7	0xdba2	No error (0)	loadus.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:06.004489899 CEST	1.1.1.1	192.168.2.7	0xdba2	No error (0)	loadus.tm.ssl.exelator.com	eu-west.load.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:06.004489899 CEST	1.1.1.1	192.168.2.7	0xdba2	No error (0)	eu-west.load.exelator.com	load-euw1.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:06.004489899 CEST	1.1.1.1	192.168.2.7	0xdba2	No error (0)	load-euw1.exelator.com		34.254.143.3	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:06.005675077 CEST	1.1.1.1	192.168.2.7	0xeeda	No error (0)	loadus.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:06.005675077 CEST	1.1.1.1	192.168.2.7	0xeeda	No error (0)	loadus.tm.ssl.exelator.com	eu-west.load.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:06.005675077 CEST	1.1.1.1	192.168.2.7	0xeeda	No error (0)	eu-west.load.exelator.com	load-euw1.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:06.230397940 CEST	1.1.1.1	192.168.2.7	0xc27c	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:06.230397940 CEST	1.1.1.1	192.168.2.7	0xc27c	No error (0)	star-mini.c10r.facebook.com		157.240.252.35	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:06.231372118 CEST	1.1.1.1	192.168.2.7	0x5a11	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:06.515749931 CEST	1.1.1.1	192.168.2.7	0xb647	No error (0)	lciapi.ninthdecimal.com		35.241.62.124	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:06.527918100 CEST	1.1.1.1	192.168.2.7	0x23f7	No error (0)	crb.kargo.com		35.156.174.96	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:06.527918100 CEST	1.1.1.1	192.168.2.7	0x23f7	No error (0)	crb.kargo.com		52.57.84.100	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:06.527918100 CEST	1.1.1.1	192.168.2.7	0x23f7	No error (0)	crb.kargo.com		3.77.58.244	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:06.963696003 CEST	1.1.1.1	192.168.2.7	0xfdae	No error (0)	sync-amazon.ads.yieldmo.com	sync.ads.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:06.963696003 CEST	1.1.1.1	192.168.2.7	0xfdae	No error (0)	sync.ads.yieldmo.com	eu-west-1-sync.ads.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:06.963696003 CEST	1.1.1.1	192.168.2.7	0xfdae	No error (0)	eu-west-1-sync.ads.yieldmo.com	sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:06.963696003 CEST	1.1.1.1	192.168.2.7	0xfdae	No error (0)	sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com		99.80.210.41	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:06.963696003 CEST	1.1.1.1	192.168.2.7	0xfdae	No error (0)	sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com		18.200.179.187	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:06.963696003 CEST	1.1.1.1	192.168.2.7	0xfdae	No error (0)	sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com		54.76.53.206	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:06.965466976 CEST	1.1.1.1	192.168.2.7	0x8e26	No error (0)	sync-amazon.ads.yieldmo.com	sync.ads.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:06.965466976 CEST	1.1.1.1	192.168.2.7	0x8e26	No error (0)	sync.ads.yieldmo.com	eu-west-1-sync.ads.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:06.965466976 CEST	1.1.1.1	192.168.2.7	0x8e26	No error (0)	eu-west-1-sync.ads.yieldmo.com	sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:06.967828035 CEST	1.1.1.1	192.168.2.7	0xe022	No error (0)	cm.g.doubleclick.net		216.58.206.66	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:07.132816076 CEST	1.1.1.1	192.168.2.7	0xcb6b	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:07.132816076 CEST	1.1.1.1	192.168.2.7	0xcb6b	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:07.318469048 CEST	1.1.1.1	192.168.2.7	0x8dc4	No error (0)	sync.taboola.com	am-vip001.taboola.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:07.318469048 CEST	1.1.1.1	192.168.2.7	0x8dc4	No error (0)	am-vip001.taboola.com		141.226.228.48	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:07.318984985 CEST	1.1.1.1	192.168.2.7	0xc2cf	No error (0)	sync.taboola.com	am-vip001.taboola.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:07.339767933 CEST	1.1.1.1	192.168.2.7	0x63fc	No error (0)	aa.agkn.com	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:07.339767933 CEST	1.1.1.1	192.168.2.7	0x63fc	No error (0)	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		34.248.126.201	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:07.339767933 CEST	1.1.1.1	192.168.2.7	0x63fc	No error (0)	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		34.250.214.229	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:07.340576887 CEST	1.1.1.1	192.168.2.7	0xd7ca	No error (0)	aa.agkn.com	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:07.351325989 CEST	1.1.1.1	192.168.2.7	0xc60f	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:07.351325989 CEST	1.1.1.1	192.168.2.7	0xc60f	No error (0)	user-data-eu.bidswitch.net		35.214.136.108	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:07.351360083 CEST	1.1.1.1	192.168.2.7	0x3bf6	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:08.065361977 CEST	1.1.1.1	192.168.2.7	0xd48f	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:08.065629959 CEST	1.1.1.1	192.168.2.7	0x27de	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:08.156850100 CEST	1.1.1.1	192.168.2.7	0x3481	No error (0)	public-prod-dspcookiematching.dmxleo.com		13.32.121.111	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:08.156850100 CEST	1.1.1.1	192.168.2.7	0x3481	No error (0)	public-prod-dspcookiematching.dmxleo.com		13.32.121.32	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:08.156850100 CEST	1.1.1.1	192.168.2.7	0x3481	No error (0)	public-prod-dspcookiematching.dmxleo.com		13.32.121.23	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:08.156850100 CEST	1.1.1.1	192.168.2.7	0x3481	No error (0)	public-prod-dspcookiematching.dmxleo.com		13.32.121.112	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:08.243609905 CEST	1.1.1.1	192.168.2.7	0xe084	No error (0)	cms.analytics.yahoo.com	dcs-ups.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:08.243885040 CEST	1.1.1.1	192.168.2.7	0x7cc6	No error (0)	cms.analytics.yahoo.com	dcs-ups.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:08.243885040 CEST	1.1.1.1	192.168.2.7	0x7cc6	No error (0)	dcs-ups.g03.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:08.243885040 CEST	1.1.1.1	192.168.2.7	0x7cc6	No error (0)	dcs-ups.g03.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:09.169557095 CEST	1.1.1.1	192.168.2.7	0x36ab	No error (0)	spl.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:09.169557095 CEST	1.1.1.1	192.168.2.7	0x36ab	No error (0)	spl.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:09.169557095 CEST	1.1.1.1	192.168.2.7	0x36ab	No error (0)	spl.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:09.169578075 CEST	1.1.1.1	192.168.2.7	0x1e06	No error (0)	spl.zeotap.com			65	IN (0x0001)	false
Oct 24, 2024 00:37:09.219450951 CEST	1.1.1.1	192.168.2.7	0xf64c	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:09.219837904 CEST	1.1.1.1	192.168.2.7	0x6eb7	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:09.283016920 CEST	1.1.1.1	192.168.2.7	0x689a	No error (0)	sync.rfp.fout.jp		35.186.196.148	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:09.309154987 CEST	1.1.1.1	192.168.2.7	0xae13	No error (0)	public-prod-dspcookiematching.dmxleo.com		13.32.121.23	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:09.309154987 CEST	1.1.1.1	192.168.2.7	0xae13	No error (0)	public-prod-dspcookiematching.dmxleo.com		13.32.121.112	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:09.309154987 CEST	1.1.1.1	192.168.2.7	0xae13	No error (0)	public-prod-dspcookiematching.dmxleo.com		13.32.121.111	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:09.309154987 CEST	1.1.1.1	192.168.2.7	0xae13	No error (0)	public-prod-dspcookiematching.dmxleo.com		13.32.121.32	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:09.312150955 CEST	1.1.1.1	192.168.2.7	0x238e	Name error (3)	beacon.krxd.net	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:09.312616110 CEST	1.1.1.1	192.168.2.7	0xd6f6	Name error (3)	beacon.krxd.net	none	none	65	IN (0x0001)	false
Oct 24, 2024 00:37:09.322741985 CEST	1.1.1.1	192.168.2.7	0x10b6	Name error (3)	beacon.krxd.net	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:09.365736008 CEST	1.1.1.1	192.168.2.7	0xf8fe	No error (0)	ups.analytics.yahoo.com	dcs-ups.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:09.365736008 CEST	1.1.1.1	192.168.2.7	0xf8fe	No error (0)	dcs-ups.g03.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:09.365736008 CEST	1.1.1.1	192.168.2.7	0xf8fe	No error (0)	dcs-ups.g03.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:09.366655111 CEST	1.1.1.1	192.168.2.7	0x5269	No error (0)	ups.analytics.yahoo.com	dcs-ups.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:09.531286001 CEST	1.1.1.1	192.168.2.7	0xc661	No error (0)	match.sharethrough.com	match-eu-central-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:09.531286001 CEST	1.1.1.1	192.168.2.7	0xc661	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.195.234.25	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:09.534871101 CEST	1.1.1.1	192.168.2.7	0x25de	No error (0)	match.sharethrough.com	match-eu-central-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:09.605396032 CEST	1.1.1.1	192.168.2.7	0xde43	No error (0)	ms-cookie-sync.presage.io	ms-cookie-sync.prod.cloud.ogury.io		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:09.605396032 CEST	1.1.1.1	192.168.2.7	0xde43	No error (0)	ms-cookie-sync.prod.cloud.ogury.io		99.80.128.60	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:09.606419086 CEST	1.1.1.1	192.168.2.7	0x6104	No error (0)	ms-cookie-sync.presage.io	ms-cookie-sync.prod.cloud.ogury.io		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:10.097951889 CEST	1.1.1.1	192.168.2.7	0x8b16	No error (0)	mwzeom.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:10.097951889 CEST	1.1.1.1	192.168.2.7	0x8b16	No error (0)	mwzeom.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:10.097951889 CEST	1.1.1.1	192.168.2.7	0x8b16	No error (0)	mwzeom.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:10.098062038 CEST	1.1.1.1	192.168.2.7	0x3922	No error (0)	mwzeom.zeotap.com			65	IN (0x0001)	false
Oct 24, 2024 00:37:10.257407904 CEST	1.1.1.1	192.168.2.7	0x88de	No error (0)	sync.rfp.fout.jp		35.186.196.148	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:10.493220091 CEST	1.1.1.1	192.168.2.7	0xef24	Name error (3)	usermatch.krxd.net	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:10.495008945 CEST	1.1.1.1	192.168.2.7	0x7c30	Name error (3)	usermatch.krxd.net	none	none	65	IN (0x0001)	false
Oct 24, 2024 00:37:10.503161907 CEST	1.1.1.1	192.168.2.7	0xb6c	Name error (3)	usermatch.krxd.net	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:10.512903929 CEST	1.1.1.1	192.168.2.7	0x7846	No error (0)	sb.scorecardresearch.com		18.244.18.122	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:10.512903929 CEST	1.1.1.1	192.168.2.7	0x7846	No error (0)	sb.scorecardresearch.com		18.244.18.27	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:10.512903929 CEST	1.1.1.1	192.168.2.7	0x7846	No error (0)	sb.scorecardresearch.com		18.244.18.32	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:10.512903929 CEST	1.1.1.1	192.168.2.7	0x7846	No error (0)	sb.scorecardresearch.com		18.244.18.38	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:10.698561907 CEST	1.1.1.1	192.168.2.7	0x1511	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:10.698561907 CEST	1.1.1.1	192.168.2.7	0x1511	No error (0)	eu-eb2.3lift.com		76.223.111.18	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:10.698561907 CEST	1.1.1.1	192.168.2.7	0x1511	No error (0)	eu-eb2.3lift.com		13.248.245.213	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:10.699866056 CEST	1.1.1.1	192.168.2.7	0xb08b	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:10.742655993 CEST	1.1.1.1	192.168.2.7	0xbe4e	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:10.742655993 CEST	1.1.1.1	192.168.2.7	0xbe4e	No error (0)	uip.semasio.net		77.243.51.121	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:10.742655993 CEST	1.1.1.1	192.168.2.7	0xbe4e	No error (0)	uip.semasio.net		77.243.51.122	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:10.742986917 CEST	1.1.1.1	192.168.2.7	0xd3f4	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:11.544054031 CEST	1.1.1.1	192.168.2.7	0x1bff	No error (0)	usersync.gumgum.com		34.247.233.198	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:11.544054031 CEST	1.1.1.1	192.168.2.7	0x1bff	No error (0)	usersync.gumgum.com		52.210.15.1	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:11.544054031 CEST	1.1.1.1	192.168.2.7	0x1bff	No error (0)	usersync.gumgum.com		34.247.205.196	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:11.723196983 CEST	1.1.1.1	192.168.2.7	0x3b7a	No error (0)	pi.ispot.tv	j.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:11.723689079 CEST	1.1.1.1	192.168.2.7	0xd380	No error (0)	pi.ispot.tv	j.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:11.868503094 CEST	1.1.1.1	192.168.2.7	0xa6a8	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:11.868503094 CEST	1.1.1.1	192.168.2.7	0xa6a8	No error (0)	image6v2.pubmnet.com	pugm-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:11.868578911 CEST	1.1.1.1	192.168.2.7	0x26d0	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:11.868578911 CEST	1.1.1.1	192.168.2.7	0x26d0	No error (0)	image6v2.pubmnet.com	pugm-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:37:11.868578911 CEST	1.1.1.1	192.168.2.7	0x26d0	No error (0)	pugm-amsfpairbc.pubmnet.com		198.47.127.19	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:11.877839088 CEST	1.1.1.1	192.168.2.7	0xc2b4	No error (0)	uipus.semasio.net		50.57.31.206	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:20.766112089 CEST	1.1.1.1	192.168.2.7	0x5939	No error (0)	health.amazon.com		52.222.214.117	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:20.766112089 CEST	1.1.1.1	192.168.2.7	0x5939	No error (0)	health.amazon.com		52.222.214.37	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:20.766112089 CEST	1.1.1.1	192.168.2.7	0x5939	No error (0)	health.amazon.com		52.222.214.66	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:20.766112089 CEST	1.1.1.1	192.168.2.7	0x5939	No error (0)	health.amazon.com		52.222.214.20	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:37:26.082312107 CEST	1.1.1.1	192.168.2.7	0x78a8	Name error (3)	usermatch.krxd.net	none	none	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49704	192.157.56.139	80	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:36:15.113811970 CEST	436	OUT	GET / HTTP/1.1 Host: frothylattestudio.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:36:15.771456957 CEST	382	IN	HTTP/1.1 302 Found cache-control: max-age=0, private, must-revalidate connection: close content-length: 11 date: Wed, 23 Oct 2024 22:36:15 GMT location: http://ww1.frothylattestudio.com server: nginx set-cookie: sid=36c3fe85-918f-11ef-a133-88a30638f3e0; path=/; domain=.frothylattestudio.com; expires=Tue, 11 Nov 2092 01:50:22 GMT; max-age=2147483647; HttpOnly Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 Data Ascii: Redirecting

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49708	208.91.196.145	80	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:36:16.146147013 CEST	490	OUT	GET / HTTP/1.1 Host: ww1.frothylattestudio.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=36c3fe85-918f-11ef-a133-88a30638f3e0
Oct 24, 2024 00:36:16.874484062 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:16 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_fB2ndJ56riCtU+4LZtMM5aLOfBbFZEPSfwdf9+tOk/5EIF5cMFQcOAU6HwhINmTYBnr20P50+KZ15j4lp+U4nw== Content-Length: 2042 Keep-Alive: timeout=5, max=127 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 3c 21 2d 2d 0d 0a 09 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 3d 22 68 74 74 70 3a 2f 2f 77 77 31 2e 66 72 6f 74 68 79 6c 61 74 74 65 73 74 75 64 69 6f 2e 63 6f 6d 2f 3f 66 70 3d 32 71 6f 71 44 59 49 25 32 42 30 69 4a 5a 47 74 50 73 74 51 71 63 63 70 59 56 78 61 49 36 4f 62 4a 69 74 49 33 46 6a 58 58 57 66 70 75 47 55 6c 52 67 4e 57 68 37 30 6c 61 62 56 52 4d 74 46 55 51 35 4c 56 7a 6f 4d 73 56 6f 43 57 4c 78 69 51 6f 4d 25 32 42 64 48 71 41 6d 58 4f 6f 58 61 4b 79 36 4a 79 65 42 4c 42 74 6e 48 4b 56 64 25 32 46 47 4b 43 73 57 47 6e 4d 31 33 74 76 38 36 53 5a 7a 53 49 6d 62 55 77 76 55 54 47 52 25 32 46 77 62 76 56 36 38 63 52 30 25 32 46 65 6c 77 77 48 7a 50 5a 48 77 6f 6f 4c 52 70 6d 38 31 4c 46 76 55 45 76 6a 6b 79 6c 79 49 52 33 5a 54 30 25 32 42 32 45 59 68 31 56 38 4d 6b 31 4c 48 73 6d 4c 4a 67 43 6e 50 33 6f 5a 31 61 54 58 46 69 25 32 46 69 7a 55 71 7a 25 32 42 69 71 52 34 71 78 6c 50 44 74 6a 48 33 52 76 37 6d 55 6b 43 37 4a 4b 50 65 52 66 37 6b 32 6e 35 75 43 6b 39 51 70 41 5a 4b 7a 36 35 61 31 [TRUNCATED] Data Ascii: ...top.location="http://ww1.frothylattestudio.com/?fp=2qoqDYI%2B0iJZGtPstQqccpYVxaI6ObJitI3FjXXWfpuGUlRgNWh70labVRMtFUQ5LVzoMsVoCWLxiQoM%2BdHqAmXOoXaKy6JyeBLBtnHKVd%2FGKCsWGnM13tv86SZzSImbUwvUTGR%2FwbvV68cR0%2FelwwHzPZHwooLRpm81LFvUEvjkylyIR3ZT0%2B2EYh1V8Mk1LHsmLJgCnP3oZ1aTXFi%2FizUqz%2BiqR4qxlPDtjH3Rv7mUkC7JKPeRf7k2n5uCk9QpAZKz65a1XlYxqE%2BvpXcQKkj
Oct 24, 2024 00:36:16.874711990 CEST	1236	IN	Data Raw: 45 57 34 68 49 54 50 68 44 6f 63 69 6c 4f 25 32 46 65 6c 41 75 30 25 33 44 26 70 6f 72 75 3d 62 25 32 46 38 5a 78 55 6f 34 75 67 36 31 63 4b 62 55 49 57 75 57 5a 39 68 6b 74 54 4e 30 54 58 6d 42 35 75 62 4f 55 25 32 42 49 6b 5a 73 57 45 33 32 65 Data Ascii: EW4hITPhDocilO%2FelAu0%3D&poru=b%2F8ZxUo4ug61cKbUIWuWZ9hktTN0TXmB5ubOU%2BIkZsWE32eqR80OwRFFQvOBToKB&cifr=1&";/*--><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF
Oct 24, 2024 00:36:16.874725103 CEST	451	IN	Data Raw: 49 36 4f 62 4a 69 74 49 33 46 6a 58 58 57 66 70 75 47 55 6c 52 67 4e 57 68 37 30 6c 61 62 56 52 4d 74 46 55 51 35 4c 56 7a 6f 4d 73 56 6f 43 57 4c 78 69 51 6f 4d 25 32 42 64 48 71 41 6d 58 4f 6f 58 61 4b 79 36 4a 79 65 42 4c 42 74 6e 48 4b 56 64 Data Ascii: I6ObJitI3FjXXWfpuGUlRgNWh70labVRMtFUQ5LVzoMsVoCWLxiQoM%2BdHqAmXOoXaKy6JyeBLBtnHKVd%2FGKCsWGnM13tv86SZzSImbUwvUTGR%2FwbvV68cR0%2FelwwHzPZHwooLRpm81LFvUEvjkylyIR3ZT0%2B2EYh1V8Mk1LHsmLJgCnP3oZ1aTXFi%2FizUqz%2BiqR4qxlPDtjH3Rv7mUkC7JKPeRf7k2n5uCk9Q
Oct 24, 2024 00:36:16.952183962 CEST	946	OUT	GET /?fp=2qoqDYI%2B0iJZGtPstQqccpYVxaI6ObJitI3FjXXWfpuGUlRgNWh70labVRMtFUQ5LVzoMsVoCWLxiQoM%2BdHqAmXOoXaKy6JyeBLBtnHKVd%2FGKCsWGnM13tv86SZzSImbUwvUTGR%2FwbvV68cR0%2FelwwHzPZHwooLRpm81LFvUEvjkylyIR3ZT0%2B2EYh1V8Mk1LHsmLJgCnP3oZ1aTXFi%2FizUqz%2BiqR4qxlPDtjH3Rv7mUkC7JKPeRf7k2n5uCk9QpAZKz65a1XlYxqE%2BvpXcQKkjEW4hITPhDocilO%2FelAu0%3D&poru=b%2F8ZxUo4ug61cKbUIWuWZ9hktTN0TXmB5ubOU%2BIkZsWE32eqR80OwRFFQvOBToKB&_opnslfp=1& HTTP/1.1 Host: ww1.frothylattestudio.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://ww1.frothylattestudio.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=36c3fe85-918f-11ef-a133-88a30638f3e0
Oct 24, 2024 00:36:17.600836039 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:17 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_kx8AswUgPXLJQ2Uszx6pedXtTW4l366fE3HTOegM5JMyU9bNiQuJ0tpoxfUacb+tI9qEC0kpvmIhNUmHllxajw== Keep-Alive: timeout=5, max=124 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 38 66 36 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 28 [TRUNCATED] Data Ascii: 8f6b<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppli
Oct 24, 2024 00:36:17.601031065 CEST	1236	IN	Data Raw: 65 73 47 6c 6f 62 61 6c 6c 79 22 20 69 6e 20 77 69 6e 64 6f 77 29 7b 77 69 6e 64 6f 77 2e 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 3d 74 72 75 65 7d 69 66 28 21 28 22 63 6d 70 5f 69 64 22 20 69 6e 20 77 69 6e 64 6f 77 29 7c 7c 77 Data Ascii: esGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in
Oct 24, 2024 00:36:17.601042986 CEST	1236	IN	Data Raw: 7b 72 65 74 75 72 6e 20 63 6d 70 5f 67 65 74 6c 61 6e 67 2e 75 73 65 64 6c 61 6e 67 7d 76 61 72 20 67 3d 77 69 6e 64 6f 77 2e 63 6d 70 5f 67 65 74 73 75 70 70 6f 72 74 65 64 4c 61 6e 67 73 28 29 3b 76 61 72 20 63 3d 5b 5d 3b 76 61 72 20 66 3d 6c Data Ascii: {return cmp_getlang.usedlang}var g=window.cmp_getsupportedLangs();var c=[];var f=location.hash;var e=location.search;var a="languages" in navigator?navigator.languages:[];if(f.indexOf("cmplang=")!=-1){c.push(f.substr(f.indexOf("cmplang=")+8,2)
Oct 24, 2024 00:36:17.601840973 CEST	570	IN	Data Raw: 70 70 65 72 43 61 73 65 28 29 29 7b 6f 3d 22 65 6e 22 3b 62 72 65 61 6b 7d 7d 7d 62 3d 22 5f 22 2b 6f 7d 66 75 6e 63 74 69 6f 6e 20 78 28 69 2c 65 29 7b 76 61 72 20 77 3d 22 22 3b 69 2b 3d 22 3d 22 3b 76 61 72 20 73 3d 69 2e 6c 65 6e 67 74 68 3b Data Ascii: pperCase()){o="en";break}}}b="_"+o}function x(i,e){var w="";i+="=";var s=i.length;var d=location;if(d.hash.indexOf(i)!=-1){w=d.hash.substr(d.hash.indexOf(i)+s,9999)}else{if(d.search.indexOf(i)!=-1){w=d.search.substr(d.search.indexOf(i)+s,9999)
Oct 24, 2024 00:36:17.601852894 CEST	1236	IN	Data Raw: 22 29 3b 76 61 72 20 66 3d 78 28 22 63 6d 70 72 65 67 75 6c 61 74 69 6f 6e 6b 65 79 22 2c 22 63 6d 70 5f 72 65 67 75 6c 61 74 69 6f 6e 6b 65 79 22 20 69 6e 20 68 3f 68 2e 63 6d 70 5f 72 65 67 75 6c 61 74 69 6f 6e 6b 65 79 3a 22 22 29 3b 76 61 72 Data Ascii: ");var f=x("cmpregulationkey","cmp_regulationkey" in h?h.cmp_regulationkey:"");var r=x("cmpgppkey","cmp_gppkey" in h?h.cmp_gppkey:"");var n=x("cmpatt","cmp_att" in h?h.cmp_att:"");j.src=k+"//"+h.cmp_host+"/delivery/cmp.php?"+("cmp_id" in h&&h.
Oct 24, 2024 00:36:17.602719069 CEST	1236	IN	Data Raw: 64 22 3b 70 3d 22 22 7d 76 61 72 20 6a 3d 75 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 6a 2e 73 72 63 3d 6b 2b 22 2f 2f 22 2b 68 2e 63 6d 70 5f 63 64 6e 2b 22 2f 64 65 6c 69 76 65 72 79 2f 22 2b 6d 2b 22 2f 63 6d Data Ascii: d";p=""}var j=u.createElement("script");j.src=k+"//"+h.cmp_cdn+"/delivery/"+m+"/cmp"+b+p+".js";j.type="text/javascript";j.setAttribute("data-cmp-ab","1");j.async=true;if(u.currentScript&&u.currentScript.parentElement){u.currentScript.parentEle
Oct 24, 2024 00:36:17.602731943 CEST	1236	IN	Data Raw: 22 29 29 7d 65 6c 73 65 7b 76 61 72 20 63 3d 62 2e 73 75 62 73 74 72 28 62 2e 69 6e 64 65 78 4f 66 28 22 3d 22 29 2b 31 2c 62 2e 6c 65 6e 67 74 68 29 7d 69 66 28 68 3d 3d 67 29 7b 66 3d 63 7d 76 61 72 20 65 3d 62 2e 69 6e 64 65 78 4f 66 28 22 3b Data Ascii: "))}else{var c=b.substr(b.indexOf("=")+1,b.length)}if(h==g){f=c}var e=b.indexOf(";")+1;if(e==0){e=b.length}b=b.substring(e,b.length)}return(f)};window.cmp_stub=function(){var a=arguments;__cmp.a=__cmp.a\|\|[];if(!a.length){return __cmp.a}else{if
Oct 24, 2024 00:36:17.602742910 CEST	438	IN	Data Raw: 64 2b 2b 3b 76 61 72 20 63 3d 5f 5f 67 70 70 2e 6c 61 73 74 49 64 3b 5f 5f 67 70 70 2e 65 2e 70 75 73 68 28 7b 69 64 3a 63 2c 63 61 6c 6c 62 61 63 6b 3a 66 7d 29 3b 72 65 74 75 72 6e 7b 65 76 65 6e 74 4e 61 6d 65 3a 22 6c 69 73 74 65 6e 65 72 52 Data Ascii: d++;var c=__gpp.lastId;__gpp.e.push({id:c,callback:f});return{eventName:"listenerRegistered",listenerId:c,data:true,pingData:window.cmp_gpp_ping()}}else{if(g==="removeEventListener"){var h=false;__gpp.e=__gpp.e\|\|[];for(var d=0;d<__gpp.e.length
Oct 24, 2024 00:36:17.603238106 CEST	1236	IN	Data Raw: 2c 67 70 70 56 65 72 73 69 6f 6e 3a 31 2c 73 65 63 74 69 6f 6e 4c 69 73 74 3a 5b 5d 2c 61 70 70 6c 69 63 61 62 6c 65 53 65 63 74 69 6f 6e 73 3a 5b 30 5d 2c 67 70 70 53 74 72 69 6e 67 3a 22 22 2c 70 69 6e 67 44 61 74 61 3a 77 69 6e 64 6f 77 2e 63 Data Ascii: ,gppVersion:1,sectionList:[],applicableSections:[0],gppString:"",pingData:window.cmp_gpp_ping()}}else{if(g==="hasSection"\|\|g==="getSection"\|\|g==="getField"){return null}else{__gpp.q.push([].slice.apply(a))}}}}}};window.cmp_msghandler=function(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49715	208.91.196.145	80	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:36:17.653271914 CEST	794	OUT	GET /px.js?ch=1 HTTP/1.1 Host: ww1.frothylattestudio.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww1.frothylattestudio.com/?fp=2qoqDYI%2B0iJZGtPstQqccpYVxaI6ObJitI3FjXXWfpuGUlRgNWh70labVRMtFUQ5LVzoMsVoCWLxiQoM%2BdHqAmXOoXaKy6JyeBLBtnHKVd%2FGKCsWGnM13tv86SZzSImbUwvUTGR%2FwbvV68cR0%2FelwwHzPZHwooLRpm81LFvUEvjkylyIR3ZT0%2B2EYh1V8Mk1LHsmLJgCnP3oZ1aTXFi%2FizUqz%2BiqR4qxlPDtjH3Rv7mUkC7JKPeRf7k2n5uCk9QpAZKz65a1XlYxqE%2BvpXcQKkjEW4hITPhDocilO%2FelAu0%3D&poru=b%2F8ZxUo4ug61cKbUIWuWZ9hktTN0TXmB5ubOU%2BIkZsWE32eqR80OwRFFQvOBToKB&_opnslfp=1& Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=36c3fe85-918f-11ef-a133-88a30638f3e0
Oct 24, 2024 00:36:18.482094049 CEST	1085	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:18 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT ETag: "15a-5b952a63b81f1" Accept-Ranges: bytes Content-Length: 346 Keep-Alive: timeout=5, max=128 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 76 61 72 20 61 62 70 3d 61 62 70 7c 7c 66 61 6c 73 65 3b 76 61 72 20 73 63 72 69 70 74 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 3b 76 61 72 20 73 63 72 69 70 74 3d 73 63 72 69 70 74 73 5b 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 2d 31 5d 3b 69 66 28 73 63 72 69 70 74 29 7b 76 61 72 20 71 75 65 72 79 3d 73 63 72 69 70 74 2e 73 72 63 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 2e 73 70 6c 69 74 28 22 26 22 29 3b 76 61 72 20 70 61 72 61 6d 73 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 71 75 65 72 79 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 70 61 72 61 6d 3d 71 75 65 72 79 5b 69 5d 2e 73 70 6c 69 74 28 22 3d 22 29 3b 70 61 72 61 6d 73 5b 70 61 72 61 6d 5b 30 5d 5d 3d 70 61 72 61 6d 5b 31 5d 7d 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 31 29 61 62 70 3d 74 72 75 65 3b 65 6c 73 65 20 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 32 29 61 62 70 3d 61 62 70 26 [TRUNCATED] Data Ascii: var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};
Oct 24, 2024 00:36:18.486876965 CEST	1085	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:18 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT ETag: "15a-5b952a63b81f1" Accept-Ranges: bytes Content-Length: 346 Keep-Alive: timeout=5, max=128 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 76 61 72 20 61 62 70 3d 61 62 70 7c 7c 66 61 6c 73 65 3b 76 61 72 20 73 63 72 69 70 74 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 3b 76 61 72 20 73 63 72 69 70 74 3d 73 63 72 69 70 74 73 5b 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 2d 31 5d 3b 69 66 28 73 63 72 69 70 74 29 7b 76 61 72 20 71 75 65 72 79 3d 73 63 72 69 70 74 2e 73 72 63 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 2e 73 70 6c 69 74 28 22 26 22 29 3b 76 61 72 20 70 61 72 61 6d 73 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 71 75 65 72 79 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 70 61 72 61 6d 3d 71 75 65 72 79 5b 69 5d 2e 73 70 6c 69 74 28 22 3d 22 29 3b 70 61 72 61 6d 73 5b 70 61 72 61 6d 5b 30 5d 5d 3d 70 61 72 61 6d 5b 31 5d 7d 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 31 29 61 62 70 3d 74 72 75 65 3b 65 6c 73 65 20 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 32 29 61 62 70 3d 61 62 70 26 [TRUNCATED] Data Ascii: var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};
Oct 24, 2024 00:37:03.634151936 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49716	208.91.196.145	80	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:36:17.655246973 CEST	794	OUT	GET /px.js?ch=2 HTTP/1.1 Host: ww1.frothylattestudio.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww1.frothylattestudio.com/?fp=2qoqDYI%2B0iJZGtPstQqccpYVxaI6ObJitI3FjXXWfpuGUlRgNWh70labVRMtFUQ5LVzoMsVoCWLxiQoM%2BdHqAmXOoXaKy6JyeBLBtnHKVd%2FGKCsWGnM13tv86SZzSImbUwvUTGR%2FwbvV68cR0%2FelwwHzPZHwooLRpm81LFvUEvjkylyIR3ZT0%2B2EYh1V8Mk1LHsmLJgCnP3oZ1aTXFi%2FizUqz%2BiqR4qxlPDtjH3Rv7mUkC7JKPeRf7k2n5uCk9QpAZKz65a1XlYxqE%2BvpXcQKkjEW4hITPhDocilO%2FelAu0%3D&poru=b%2F8ZxUo4ug61cKbUIWuWZ9hktTN0TXmB5ubOU%2BIkZsWE32eqR80OwRFFQvOBToKB&_opnslfp=1& Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=36c3fe85-918f-11ef-a133-88a30638f3e0
Oct 24, 2024 00:36:18.482074976 CEST	1085	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:18 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT ETag: "15a-5b952a63b81f1" Accept-Ranges: bytes Content-Length: 346 Keep-Alive: timeout=5, max=127 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 76 61 72 20 61 62 70 3d 61 62 70 7c 7c 66 61 6c 73 65 3b 76 61 72 20 73 63 72 69 70 74 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 3b 76 61 72 20 73 63 72 69 70 74 3d 73 63 72 69 70 74 73 5b 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 2d 31 5d 3b 69 66 28 73 63 72 69 70 74 29 7b 76 61 72 20 71 75 65 72 79 3d 73 63 72 69 70 74 2e 73 72 63 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 2e 73 70 6c 69 74 28 22 26 22 29 3b 76 61 72 20 70 61 72 61 6d 73 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 71 75 65 72 79 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 70 61 72 61 6d 3d 71 75 65 72 79 5b 69 5d 2e 73 70 6c 69 74 28 22 3d 22 29 3b 70 61 72 61 6d 73 5b 70 61 72 61 6d 5b 30 5d 5d 3d 70 61 72 61 6d 5b 31 5d 7d 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 31 29 61 62 70 3d 74 72 75 65 3b 65 6c 73 65 20 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 32 29 61 62 70 3d 61 62 70 26 [TRUNCATED] Data Ascii: var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};
Oct 24, 2024 00:36:18.486067057 CEST	1085	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:18 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT ETag: "15a-5b952a63b81f1" Accept-Ranges: bytes Content-Length: 346 Keep-Alive: timeout=5, max=127 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 76 61 72 20 61 62 70 3d 61 62 70 7c 7c 66 61 6c 73 65 3b 76 61 72 20 73 63 72 69 70 74 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 3b 76 61 72 20 73 63 72 69 70 74 3d 73 63 72 69 70 74 73 5b 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 2d 31 5d 3b 69 66 28 73 63 72 69 70 74 29 7b 76 61 72 20 71 75 65 72 79 3d 73 63 72 69 70 74 2e 73 72 63 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 2e 73 70 6c 69 74 28 22 26 22 29 3b 76 61 72 20 70 61 72 61 6d 73 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 71 75 65 72 79 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 70 61 72 61 6d 3d 71 75 65 72 79 5b 69 5d 2e 73 70 6c 69 74 28 22 3d 22 29 3b 70 61 72 61 6d 73 5b 70 61 72 61 6d 5b 30 5d 5d 3d 70 61 72 61 6d 5b 31 5d 7d 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 31 29 61 62 70 3d 74 72 75 65 3b 65 6c 73 65 20 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 32 29 61 62 70 3d 61 62 70 26 [TRUNCATED] Data Ascii: var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};
Oct 24, 2024 00:36:18.970333099 CEST	3484	OUT	GET /Frothy_Bloat.cfm?fp=2qoqDYI%2B0iJZGtPstQqccvV6mj3sWtCwuxlIlildqdntAr9vCYTVvHWakr2mYgOXvaI2w1lxQwNvQXQ9geMJWXl76t3S5yB%2BiBy%2BZCGz7fRNEfPfmlAL%2B069aOrJirw2FJnjwcPzaE3aWg0OVkAGQTIcS1usl4qXiQIt0xrHb3yncYN7pI0iAXPRcPni8exSan7QRmShFhmVmi8KFswxZrLXK%2BOUgJen18K1VzM4b1G1Lu5vHzl8ZYaBIW4hntdKakG3S9NtAbOds5CPuuOLB1pjsFT52eS2TmdodNxuSO8SdSiMpEHtXZO0Fn2iJEUzEPSdSn6fQwESLH%2BNGOM8Kg%3D%3D&yep=M6FboBuP98sdvcRwAsDx%2FyxJST0KXfB41zVuwQ%2FG8zz5eBalqNa3nTw4xx9bTiMCTfZD4TNwdokKLB%2Fmq%2BOEwXZ6cOAIejqa5Fnt4Udux7%2Fe1WTTGF4DOwXSOEGa%2B%2BQ8%2Fl7bpeCjv5d7px2wcISuPrYfnpp2z53JwpuA7FMPq%2FQUAwG7sOU7pMoYRXtw9bP3TbMCayGOhwzbWjlUpS7GN4%2FllYasm5FrgM0zxUuTwV4jsjXJH6KNTwx%2F4DgHfnupPnNHnCLJ5x0MnzjocudPm81zh%2F50DsJt5moQXBeSSyAbLEtSyEZWmL%2FJcLlq9ryaz2kEpNgj7YQRSWKSHVoVsRnbg%2Bvib080YywKXc9uZEE69bp3nnEN7UTipMx0zPqF1G%2BE65tK2unYlh64NRz2m%2FiJbdG%2B4TBba7BXJht8BEWPEyXl%2BDflzhI2JSnIEg7gaUzlrs%2Fl084s5kOgy2pSClnmP4Rb5DsrwxMqXzjp8qlcULhwyiim1m6AcQiHxsa6ZO9Ic8s1LD5fQDkWr1FFuQk8QOAkKb772scbyYCsuTrVHUiLFQ3R9PBz0brQmLLgYF%2FxpOg8Lg3eSqC7X% [TRUNCATED] Host: ww1.frothylattestudio.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://ww1.frothylattestudio.com/?fp=2qoqDYI%2B0iJZGtPstQqccpYVxaI6ObJitI3FjXXWfpuGUlRgNWh70labVRMtFUQ5LVzoMsVoCWLxiQoM%2BdHqAmXOoXaKy6JyeBLBtnHKVd%2FGKCsWGnM13tv86SZzSImbUwvUTGR%2FwbvV68cR0%2FelwwHzPZHwooLRpm81LFvUEvjkylyIR3ZT0%2B2EYh1V8Mk1LHsmLJgCnP3oZ1aTXFi%2FizUqz%2BiqR4qxlPDtjH3Rv7mUkC7JKPeRf7k2n5uCk9QpAZKz65a1XlYxqE%2BvpXcQKkjEW4hITPhDocilO%2FelAu0%3D&poru=b%2F8ZxUo4ug61cKbUIWuWZ9hktTN0TXmB5ubOU%2BIkZsWE32eqR80OwRFFQvOBToKB&_opnslfp=1& Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=36c3fe85-918f-11ef-a133-88a30638f3e0
Oct 24, 2024 00:36:20.269062996 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:19 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_aDNcicFayqxw0bybk8I4hKep3weuSPruM7wmEY7IeeQ4xBddjY2pV6+whuBMJSmPQVetdTf5uGAlon4XwKallQ== Keep-Alive: timeout=5, max=121 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 39 35 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 28 [TRUNCATED] Data Ascii: 95a4<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppli
Oct 24, 2024 00:36:20.269124031 CEST	146	IN	Data Raw: 65 73 47 6c 6f 62 61 6c 6c 79 22 20 69 6e 20 77 69 6e 64 6f 77 29 7b 77 69 6e 64 6f 77 2e 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 3d 74 72 75 65 7d 69 66 28 21 28 22 63 6d 70 5f 69 64 22 20 69 6e 20 77 69 6e 64 6f 77 29 7c 7c 77 Data Ascii: esGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){wind
Oct 24, 2024 00:36:20.269272089 CEST	1236	IN	Data Raw: 6f 77 2e 63 6d 70 5f 63 64 69 64 3d 22 32 31 66 64 63 61 32 32 38 31 38 33 33 22 7d 69 66 28 21 28 22 63 6d 70 5f 70 61 72 61 6d 73 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 70 61 72 61 6d 73 3d 22 22 7d 69 66 28 Data Ascii: ow.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in w
Oct 24, 2024 00:36:20.269305944 CEST	1236	IN	Data Raw: 72 3f 6e 61 76 69 67 61 74 6f 72 2e 6c 61 6e 67 75 61 67 65 73 3a 5b 5d 3b 69 66 28 66 2e 69 6e 64 65 78 4f 66 28 22 63 6d 70 6c 61 6e 67 3d 22 29 21 3d 2d 31 29 7b 63 2e 70 75 73 68 28 66 2e 73 75 62 73 74 72 28 66 2e 69 6e 64 65 78 4f 66 28 22 Data Ascii: r?navigator.languages:[];if(f.indexOf("cmplang=")!=-1){c.push(f.substr(f.indexOf("cmplang=")+8,2).toUpperCase())}else{if(e.indexOf("cmplang=")!=-1){c.push(e.substr(e.indexOf("cmplang=")+8,2).toUpperCase())}else{if("cmp_setlang" in window&&wind
Oct 24, 2024 00:36:20.269339085 CEST	1236	IN	Data Raw: 69 6e 64 65 78 4f 66 28 69 29 2b 73 2c 39 39 39 39 29 7d 65 6c 73 65 7b 69 66 28 64 2e 73 65 61 72 63 68 2e 69 6e 64 65 78 4f 66 28 69 29 21 3d 2d 31 29 7b 77 3d 64 2e 73 65 61 72 63 68 2e 73 75 62 73 74 72 28 64 2e 73 65 61 72 63 68 2e 69 6e 64 Data Ascii: indexOf(i)+s,9999)}else{if(d.search.indexOf(i)!=-1){w=d.search.substr(d.search.indexOf(i)+s,9999)}else{return e}}if(w.indexOf("&")!=-1){w=w.substr(0,w.indexOf("&"))}return w}var k=("cmp_proto" in h)?h.cmp_proto:"https:";if(k!="http:"&&k!="http
Oct 24, 2024 00:36:20.269372940 CEST	1236	IN	Data Raw: 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6a 29 7d 65 6c 73 65 7b 76 61 72 20 74 3d 76 28 22 62 6f 64 79 22 29 3b 69 66 28 74 2e 6c 65 6e 67 74 68 3d 3d 30 29 7b 74 3d 76 28 22 64 69 76 22 29 7d 69 66 28 74 2e 6c 65 6e 67 74 68 3d 3d 30 Data Ascii: body.appendChild(j)}else{var t=v("body");if(t.length==0){t=v("div")}if(t.length==0){t=v("span")}if(t.length==0){t=v("ins")}if(t.length==0){t=v("script")}if(t.length==0){t=v("head")}if(t.length>0){t[0].appendChild(j)}}}var m="js";var p=x("cmpde
Oct 24, 2024 00:36:20.269618034 CEST	1236	IN	Data Raw: 6e 74 65 6e 74 69 6f 6e 61 6c 6c 79 20 68 69 64 64 65 6e 2c 20 70 6c 65 61 73 65 20 69 67 6e 6f 72 65 22 29 3b 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 72 6f 6c 65 22 2c 22 6e 6f 6e 65 22 29 3b 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 Data Ascii: ntentionally hidden, please ignore");a.setAttribute("role","none");a.setAttribute("tabindex","-1");document.body.appendChild(a)}else{window.setTimeout(window.cmp_addFrame,10,b)}}};window.cmp_rc=function(h){var b=document.cookie;var f="";var d=
Oct 24, 2024 00:36:20.269654036 CEST	1236	IN	Data Raw: 74 61 74 75 73 3a 22 73 74 75 62 22 2c 63 6d 70 44 69 73 70 6c 61 79 53 74 61 74 75 73 3a 22 68 69 64 64 65 6e 22 2c 73 75 70 70 6f 72 74 65 64 41 50 49 73 3a 5b 22 74 63 66 63 61 22 2c 22 75 73 6e 61 74 22 2c 22 75 73 63 61 22 2c 22 75 73 76 61 Data Ascii: tatus:"stub",cmpDisplayStatus:"hidden",supportedAPIs:["tcfca","usnat","usca","usva","usco","usut","usct"],cmpId:31}};window.cmp_gppstub=function(){var a=arguments;__gpp.q=__gpp.q\|\|[];if(!a.length){return __gpp.q}var g=a[0];var f=a.length>1?a[1
Oct 24, 2024 00:36:20.269984007 CEST	1236	IN	Data Raw: 6d 70 43 61 6c 6c 22 20 69 6e 20 63 29 7b 76 61 72 20 62 3d 63 2e 5f 5f 63 6d 70 43 61 6c 6c 3b 77 69 6e 64 6f 77 2e 5f 5f 63 6d 70 28 62 2e 63 6f 6d 6d 61 6e 64 2c 62 2e 70 61 72 61 6d 65 74 65 72 2c 66 75 6e 63 74 69 6f 6e 28 68 2c 67 29 7b 76 Data Ascii: mpCall" in c){var b=c.__cmpCall;window.__cmp(b.command,b.parameter,function(h,g){var e={__cmpReturn:{returnValue:h,success:g,callId:b.callId}};d.source.postMessage(a?JSON.stringify(e):e,"*")})}if(typeof(c)==="object"&&c!==null&&"__uspapiCall"
Oct 24, 2024 00:36:20.270122051 CEST	1236	IN	Data Raw: 73 61 67 65 22 2c 77 69 6e 64 6f 77 2e 63 6d 70 5f 6d 73 67 68 61 6e 64 6c 65 72 2c 66 61 6c 73 65 29 7d 7d 3b 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 65 74 47 70 70 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 28 61 20 69 6e 20 77 Data Ascii: sage",window.cmp_msghandler,false)}};window.cmp_setGppStub=function(a){if(!(a in window)\|\|(typeof(window[a])!=="function"&&typeof(window[a])!=="object"&&(typeof(window[a])==="undefined"\|\|window[a]!==null))){window[a]=window.cmp_gppstub;window[
Oct 24, 2024 00:36:20.270133018 CEST	248	IN	Data Raw: 74 69 6f 6e 20 68 61 6e 64 6c 65 41 42 50 44 65 74 65 63 74 28 29 7b 74 72 79 7b 69 66 28 21 61 62 70 29 20 72 65 74 75 72 6e 3b 76 61 72 20 69 6d 67 6c 6f 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d Data Ascii: tion handleABPDetect(){try{if(!abp) return;var imglog = document.createElement("img");imglog.style.height="0px";imglog.style.width="0px";imglog.src="http://ww1.frothylattestudio.com/sk-logabpstatus.php?a=ekk1Z3NtbGEvVEJwR3VRbFczL0diS05aajRZNzh
Oct 24, 2024 00:36:26.218239069 CEST	3193	OUT	GET /favicon.ico HTTP/1.1 Host: ww1.frothylattestudio.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww1.frothylattestudio.com/Frothy_Bloat.cfm?fp=2qoqDYI%2B0iJZGtPstQqccvV6mj3sWtCwuxlIlildqdntAr9vCYTVvHWakr2mYgOXvaI2w1lxQwNvQXQ9geMJWXl76t3S5yB%2BiBy%2BZCGz7fRNEfPfmlAL%2B069aOrJirw2FJnjwcPzaE3aWg0OVkAGQTIcS1usl4qXiQIt0xrHb3yncYN7pI0iAXPRcPni8exSan7QRmShFhmVmi8KFswxZrLXK%2BOUgJen18K1VzM4b1G1Lu5vHzl8ZYaBIW4hntdKakG3S9NtAbOds5CPuuOLB1pjsFT52eS2TmdodNxuSO8SdSiMpEHtXZO0Fn2iJEUzEPSdSn6fQwESLH%2BNGOM8Kg%3D%3D&yep=M6FboBuP98sdvcRwAsDx%2FyxJST0KXfB41zVuwQ%2FG8zz5eBalqNa3nTw4xx9bTiMCTfZD4TNwdokKLB%2Fmq%2BOEwXZ6cOAIejqa5Fnt4Udux7%2Fe1WTTGF4DOwXSOEGa%2B%2BQ8%2Fl7bpeCjv5d7px2wcISuPrYfnpp2z53JwpuA7FMPq%2FQUAwG7sOU7pMoYRXtw9bP3TbMCayGOhwzbWjlUpS7GN4%2FllYasm5FrgM0zxUuTwV4jsjXJH6KNTwx%2F4DgHfnupPnNHnCLJ5x0MnzjocudPm81zh%2F50DsJt5moQXBeSSyAbLEtSyEZWmL%2FJcLlq9ryaz2kEpNgj7YQRSWKSHVoVsRnbg%2Bvib080YywKXc9uZEE69bp3nnEN7UTipMx0zPqF1G%2BE65tK2unYlh64NRz2m%2FiJbdG%2B4TBba7BXJht8BEWPEyXl%2BDflzhI2JSnIEg7gaUzlrs%2Fl084s5kOgy2pSClnmP4Rb5DsrwxMqXzjp8qlcULhwyiim1m6AcQiHxsa6ZO9Ic8s1LD5fQDkWr1FFuQk8QOAkKb772scbyYCsuTrVHUi [TRUNCATED] Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=36c3fe85-918f-11ef-a133-88a30638f3e0; __cmpcc=1; __cmpcccx68884=aBQG_sgDAAwABAAoBIAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHALMgo0BUQCpYBfYOtg7LB_Wi-tGRaNK0bNo3WjftHm0elo-LZ2Wz2tn3bQltCraHW0Sto1bhe3UbdS4Xphe3R69Hs6Pfo-PZQdlD8G5wcA; __cmpccpausps=1NNY
Oct 24, 2024 00:36:26.356729031 CEST	667	IN	HTTP/1.1 404 Not Found Date: Wed, 23 Oct 2024 22:36:26 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") Content-Length: 10 Keep-Alive: timeout=5, max=107 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 4e 6f 20 66 61 76 69 63 6f 6e Data Ascii: No favicon
Oct 24, 2024 00:36:34.944947004 CEST	6430	OUT	GET /trf?q=Frothy+Bloat&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9M0U2MUFDMDUzQTkwNDcwNSZ1dD0xNzI5NzIyOTc5Mzc3JnVvPTc2OTY1OTk5ODM2MTIyJmx0PTImcz0yJmVzPUVSRktqbkVBaHV0Vzl5MERRbkNidm9TRkFET05pTGpxVFJnMm02ZzZXaXI2MDFQMDRmR2ZKT0tOZERMREgyYjA4NEdlSmlyVkZuQ085dy0t%2FRV%3D2%2FRE%3D1732314979%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de8RPyPnS_03BcMny4P9QrU4zVUCUzQWs7_nfkTegDX9UXUe9ggNjRpHp9xUKperLOATX5eqIj0tW3bxcvmvhTONBMNxZmjNbDfDbwczUvG_rooSnA2OKnDr_SwgcyIru_jAIH9KbHEZNvRymGlHnEjPohilM45Au1YlF9k9qixFtvSvDYW%2526u%253daHR0cHMlM2ElMmYlMmZ3d3cuYW1hem9uLmNvbSUyZnMlMmYlM2ZpZSUzZFVURjglMjZrZXl3b3JkcyUzZGJsb2F0JTJicmVsaWVmJTI2aW5kZXglM2RhcHMlMjZ0YWclM2R0eHRzdGRiZ2R0LTIwJTI2cmVmJTNkcGRfc2xfOWs3eWZleTJlNF9wJTI2YWRncnBpZCUzZDEyMzE0NTMzMzMwODk4MTQlMjZodmFkaWQlM2Q3Njk2NTk5OTgzNjEyMiUyNmh2bmV0dyUzZHMlMjZodnFtdCUzZHAlMjZodmJtdCUzZGJwJTI2aHZkZXYlM2RjJTI2aHZsb2NpbnQlM2QlMjZodmxvY3BoeSUzZDY1MzAwJTI2aHZ0YXJnaWQlM2Rrd2QtNzY5NjYwNjcxMTE4NzElM2Fsb2MtMTkwJTI2aHlkYWRjciUzZDkzOTJfMTM2NDAzNDUlMjZsYW5nd [TRUNCATED] Host: ww1.frothylattestudio.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://ww1.frothylattestudio.com/Frothy_Bloat.cfm?fp=2qoqDYI%2B0iJZGtPstQqccvV6mj3sWtCwuxlIlildqdntAr9vCYTVvHWakr2mYgOXvaI2w1lxQwNvQXQ9geMJWXl76t3S5yB%2BiBy%2BZCGz7fRNEfPfmlAL%2B069aOrJirw2FJnjwcPzaE3aWg0OVkAGQTIcS1usl4qXiQIt0xrHb3yncYN7pI0iAXPRcPni8exSan7QRmShFhmVmi8KFswxZrLXK%2BOUgJen18K1VzM4b1G1Lu5vHzl8ZYaBIW4hntdKakG3S9NtAbOds5CPuuOLB1pjsFT52eS2TmdodNxuSO8SdSiMpEHtXZO0Fn2iJEUzEPSdSn6fQwESLH%2BNGOM8Kg%3D%3D&yep=M6FboBuP98sdvcRwAsDx%2FyxJST0KXfB41zVuwQ%2FG8zz5eBalqNa3nTw4xx9bTiMCTfZD4TNwdokKLB%2Fmq%2BOEwXZ6cOAIejqa5Fnt4Udux7%2Fe1WTTGF4DOwXSOEGa%2B%2BQ8%2Fl7bpeCjv5d7px2wcISuPrYfnpp2z53JwpuA7FMPq%2FQUAwG7sOU7pMoYRXtw9bP3TbMCayGOhwzbWjlUpS7GN4%2FllYasm5FrgM0zxUuTwV4jsjXJH6KNTwx%2F4DgHfnupPnNHnCLJ5x0MnzjocudPm81zh%2F50DsJt5moQXBeSSyAbLEtSyEZWmL%2FJcLlq9ryaz2kEpNgj7YQRSWKSHVoVsRnbg%2Bvib080YywKXc9uZEE69bp3nnEN7UTipMx0zPqF1G%2BE65tK2unYlh64NRz2m%2FiJbdG%2B4TBba7BXJht8BEWPEyXl%2BDflzhI2JSnIEg7gaUzlrs%2Fl084s5kOgy2pSClnmP4Rb5DsrwxMqXzjp8qlcULhwyiim1m6AcQiHxsa6ZO9Ic8s1LD5fQDkWr1FFuQk8QOAkKb772scbyYCsuTrVHUi [TRUNCATED] Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=36c3fe85-918f-11ef-a133-88a30638f3e0; __cmpcc=1; __cmpcccx68884=aBQG_sgDAAwABAAoBIAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHALMgo0BUQCpYBfYOtg7LB_Wi-tGRaNK0bNo3WjftHm0elo-LZ2Wz2tn3bQltCraHW0Sto1bhe3UbdS4Xphe3R69Hs6Pfo-PZQdlD8G5wcA; __cmpccpausps=1NNY
Oct 24, 2024 00:36:35.309557915 CEST	1236	IN	HTTP/1.1 302 Found Date: Wed, 23 Oct 2024 22:36:35 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") Location: https://r.search.yahoo.com/rdclk/dWU9M0U2MUFDMDUzQTkwNDcwNSZ1dD0xNzI5NzIyOTc5Mzc3JnVvPTc2OTY1OTk5ODM2MTIyJmx0PTImcz0yJmVzPUVSRktqbkVBaHV0Vzl5MERRbkNidm9TRkFET05pTGpxVFJnMm02ZzZXaXI2MDFQMDRmR2ZKT0tOZERMREgyYjA4NEdlSmlyVkZuQ085dy0t/RV=2/RE=1732314979/RO=14/RU=https%3a%2f%2fwww.bing.com%2faclick%3fld%3de8RPyPnS_03BcMny4P9QrU4zVUCUzQWs7_nfkTegDX9UXUe9ggNjRpHp9xUKperLOATX5eqIj0tW3bxcvmvhTONBMNxZmjNbDfDbwczUvG_rooSnA2OKnDr_SwgcyIru_jAIH9KbHEZNvRymGlHnEjPohilM45Au1YlF9k9qixFtvSvDYW%26u%3daHR0cHMlM2ElMmYlMmZ3d3cuYW1hem9uLmNvbSUyZnMlMmYlM2ZpZSUzZFVURjglMjZrZXl3b3JkcyUzZGJsb2F0JTJicmVsaWVmJTI2aW5kZXglM2RhcHMlMjZ0YWclM2R0eHRzdGRiZ2R0LTIwJTI2cmVmJTNkcGRfc2xfOWs3eWZleTJlNF9wJTI2YWRncnBpZCUzZDEyMzE0N Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49723	208.91.196.253	80	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:36:17.760914087 CEST	749	OUT	GET /__media__/js/min.js?v2.3 HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww1.frothylattestudio.com/?fp=2qoqDYI%2B0iJZGtPstQqccpYVxaI6ObJitI3FjXXWfpuGUlRgNWh70labVRMtFUQ5LVzoMsVoCWLxiQoM%2BdHqAmXOoXaKy6JyeBLBtnHKVd%2FGKCsWGnM13tv86SZzSImbUwvUTGR%2FwbvV68cR0%2FelwwHzPZHwooLRpm81LFvUEvjkylyIR3ZT0%2B2EYh1V8Mk1LHsmLJgCnP3oZ1aTXFi%2FizUqz%2BiqR4qxlPDtjH3Rv7mUkC7JKPeRf7k2n5uCk9QpAZKz65a1XlYxqE%2BvpXcQKkjEW4hITPhDocilO%2FelAu0%3D&poru=b%2F8ZxUo4ug61cKbUIWuWZ9hktTN0TXmB5ubOU%2BIkZsWE32eqR80OwRFFQvOBToKB&_opnslfp=1& Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:36:18.482784033 CEST	341	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 23 Oct 2024 22:36:18 GMT Content-Type: application/javascript Content-Length: 8435 Last-Modified: Wed, 22 Sep 2021 05:16:03 GMT Connection: keep-alive ETag: "614abc13-20f3" Expires: Wed, 06 Nov 2024 22:36:18 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Oct 24, 2024 00:36:18.482795954 CEST	1236	IN	Data Raw: 2f 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 32 2d 32 30 31 36 20 4d 65 64 69 61 2e 6e 65 74 20 41 64 76 65 72 74 69 73 69 6e 67 20 46 5a 2d 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 20 Data Ascii: /* * Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved */var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n
Oct 24, 2024 00:36:18.483532906 CEST	1236	IN	Data Raw: 28 29 3b 6f 3c 31 65 33 26 26 28 6f 2b 3d 31 39 30 30 29 3b 76 61 72 20 72 3d 6e 2e 67 65 74 44 61 79 28 29 2c 69 3d 6e 2e 67 65 74 4d 6f 6e 74 68 28 29 2c 6e 3d 6e 2e 67 65 74 44 61 74 65 28 29 3b 6e 3c 31 30 26 26 28 6e 3d 22 30 22 2b 6e 29 3b Data Ascii: ();o<1e3&&(o+=1900);var r=n.getDay(),i=n.getMonth(),n=n.getDate();n<10&&(n="0"+n);o=t[r]+", "+e[i]+" "+n+", "+o;document.write(o)}function checkUTFChar(t){for(var e=!0,n=0;n<128;++n){var o=n.toString(16);if(1==o.length&&(o="0"+o),o="%"+o,(o=un
Oct 24, 2024 00:36:18.483546972 CEST	1236	IN	Data Raw: 65 28 62 72 5f 64 61 74 61 2e 67 65 74 4d 6f 75 73 65 50 6f 73 69 74 69 6f 6e 44 61 74 61 28 29 29 3a 22 61 64 63 6c 6b 22 3d 3d 74 7c 7c 22 73 72 63 71 72 79 22 3d 3d 74 3f 22 26 62 64 3d 22 2b 65 73 63 61 70 65 28 62 72 5f 64 61 74 61 2e 67 65 Data Ascii: e(br_data.getMousePositionData()):"adclk"==t\|\|"srcqry"==t?"&bd="+escape(br_data.getSearchBoxRelatedData()):"&bd="+escape(br_data.getURLBrowserData())}catch(t){}return e}var brdata=function(){this.fd="#",this.cookieSupport=-1,this.isinframe=-1,
Oct 24, 2024 00:36:18.483558893 CEST	1236	IN	Data Raw: 65 50 6f 73 69 74 69 6f 6e 44 61 74 61 28 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 66 69 72 6d 54 6f 4f 70 74 4f 75 74 28 29 7b 76 61 72 20 74 3b 6f 70 74 4f 75 74 3d 63 6f 6e 66 69 72 6d 28 22 59 6f 75 20 77 69 6c 6c 20 6e 6f 74 20 62 65 Data Ascii: ePositionData()}};function confirmToOptOut(){var t;optOut=confirm("You will not be able to see any ads or websearches."),optOut&&((t=new Date).setTime(t.getTime()+31536e6),t="; expires="+t.toGMTString(),document.cookie="dnsoptout=1"+t+"; path=
Oct 24, 2024 00:36:18.484415054 CEST	848	IN	Data Raw: 69 65 6e 74 57 69 64 74 68 26 26 28 65 3d 74 68 69 73 2e 5f 54 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 69 65 6e 74 57 69 64 74 68 29 7d 63 61 74 63 68 28 74 29 7b 65 3d 30 7d 72 65 74 75 72 6e 20 65 7d 2c 5f 77 74 3a 66 75 6e 63 Data Ascii: ientWidth&&(e=this._Top.document.body.clientWidth)}catch(t){e=0}return e},_wt:function(){return this._Top?null!=this._Top.window.screenTop?this._Top.window.screenTop:this._Top.window.screenY:0},_wl:function(){return this._Top?null!=this._Top.w
Oct 24, 2024 00:36:18.484427929 CEST	1236	IN	Data Raw: 74 3d 22 2b 70 68 29 3b 72 65 74 75 72 6e 20 5f 6e 70 57 26 26 28 5f 6e 70 57 2e 62 6c 75 72 28 29 2c 2d 31 3c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 Data Ascii: t="+ph);return _npW&&(_npW.blur(),-1<navigator.userAgent.toLowerCase().indexOf("applewebkit")&&(this._Top.window.blur(),this._Top.window.focus()),_npW.Init=function(e){with(e)Params=e.Params,Main=function(){void 0===window.mozPaintCount\|\|(t=wi
Oct 24, 2024 00:36:18.485219002 CEST	1236	IN	Data Raw: 70 65 26 26 22 74 65 78 74 22 21 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2e 74 79 70 65 2e 76 61 6c 75 65 26 26 76 6f 69 64 20 30 21 3d 3d 73 68 6f 77 50 6f 70 26 26 28 73 68 6f 77 50 6f 70 3d 30 29 2c 21 31 3b 31 21 3d 73 68 6f 77 50 6f 70 7c 7c Data Ascii: pe&&"text"!=e.attributes.type.value&&void 0!==showPop&&(showPop=0),!1;1!=showPop\|\|renderFACP(t)\|\|shpp(t)}catch(t){}}function shpp(t){if("undefined"!=typeof __pp&&1==showPop&&!renderFACP(t))try{if(t\|\|((t=window.event\|\|window.Event).cancelBubble
Oct 24, 2024 00:36:18.485232115 CEST	171	IN	Data Raw: 6e 63 74 69 6f 6e 20 69 73 49 45 28 29 7b 76 61 72 20 74 3d 21 31 3b 74 72 79 7b 74 3d 2f 6d 73 69 65 7c 4d 53 49 45 2f 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 Data Ascii: nction isIE(){var t=!1;try{t=/msie\|MSIE/.test(navigator.userAgent)}catch(t){}return t}function setBrowserDetails(){relplaceAllALinks&&relplaceAllALinks(/(\/trf\|\.cfm)\?/)}
Oct 24, 2024 00:36:18.485240936 CEST	171	IN	Data Raw: 6e 63 74 69 6f 6e 20 69 73 49 45 28 29 7b 76 61 72 20 74 3d 21 31 3b 74 72 79 7b 74 3d 2f 6d 73 69 65 7c 4d 53 49 45 2f 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 Data Ascii: nction isIE(){var t=!1;try{t=/msie\|MSIE/.test(navigator.userAgent)}catch(t){}return t}function setBrowserDetails(){relplaceAllALinks&&relplaceAllALinks(/(\/trf\|\.cfm)\?/)}
Oct 24, 2024 00:36:18.520545006 CEST	402	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww1.frothylattestudio.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:36:18.652672052 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 23 Oct 2024 22:36:18 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Wed, 06 Nov 2024 22:36:18 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 c2 00 00 03 dc 04 03 00 00 00 09 4e b3 37 00 00 00 0f 50 4c 54 45 1a 23 41 10 16 2c 26 2f 4d 3a 43 61 4d 56 73 32 a1 dd 4a 00 00 20 00 49 44 41 54 78 da ec dd 51 7a 1a c7 b6 80 d1 8d d0 00 30 f2 00 2c c1 00 2c 37 03 90 81 f9 8f 29 b2 13 3b 91 25 a0 9b ae dd a1 ab d6 7a bc 0f e7 7c b7 4e fd b0 ab 8a 28 f1 09 c8 13 96 00 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c [TRUNCATED] Data Ascii: PNGIHDRN7PLTE#A,&/M:CaMVs2J IDATxQz0,,7);%z\|N(@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0P%@a@a0@a0P0P(P(P((@a@a0@a0P0P(P(P((@a@a0@aPeaLt[=ul=HhOnNc=e{l[,lu_cnk,n;~'^a$sbV&aqcm3Ts*l#zXtH+8c/BH1>CXHay/AIl2g}s/Q8{.;R91oeGo-V:;u$5'.lW:Q\v_:z4',l]2z4'e,~O]%>\|v_2U}8u=hL4$7aj;eMhL\>',/]I,{}a91\|Jz
Oct 24, 2024 00:36:18.652862072 CEST	1236	IN	Data Raw: b1 73 e2 d5 85 ed aa 5b 43 07 31 c7 b0 d3 f6 53 17 56 dd 8c e8 20 e6 18 96 72 88 08 4b e8 20 e6 18 96 f8 01 7c 65 61 db 1a 97 d0 8b 98 d7 b0 f2 73 62 f8 8c 1a 3f 6a d3 c2 07 f0 95 33 ce 55 85 55 39 23 1e fd 63 98 c5 54 ba 3f 16 93 15 b6 b5 82 34 Data Ascii: s[C1SV rK \|easb?j3UU9#cT?4JYA)O(W.:+FOQX3DWsn]{d^Va4\>gDbvU1aEjass+e9<lNTX3KVaV\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49725	208.91.196.253	80	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:36:18.527231932 CEST	405	OUT	GET /__media__/pics/28905/arrrow.png HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww1.frothylattestudio.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:36:19.129209995 CEST	609	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 23 Oct 2024 22:36:19 GMT Content-Type: image/png Content-Length: 283 Last-Modified: Tue, 04 Jan 2022 14:44:27 GMT Connection: keep-alive ETag: "61d45d4b-11b" Expires: Wed, 06 Nov 2024 22:36:19 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 11 00 00 00 1b 08 03 00 00 00 ad 28 94 ae 00 00 00 48 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 05 7a f2 f8 00 00 00 17 74 52 4e 53 00 74 db fa 40 1b e0 0e 05 66 55 f4 bd ec 32 27 d1 b0 ca 82 a6 64 67 ff c5 fb 8e 00 00 00 6b 49 44 41 54 18 d3 7d d1 c9 0e 80 20 0c 04 50 c4 a5 e0 86 7b ff ff 4f 35 f4 e0 c8 24 f6 f8 c2 d2 76 9c 93 18 c5 61 89 57 ed 12 4a d4 a7 a6 b9 94 0f 49 97 69 68 5e 4a 46 35 50 eb 8d 7a a0 85 48 b6 4c 7a 02 8d 46 d5 2f 85 d5 68 07 3a 8c a0 89 e0 8b 7b 74 86 de a1 bf 18 ca 9e 69 2e 9a 9d f6 c3 3b bc 68 cf 9c 05 e7 45 99 de f1 b5 0e ae 42 db 93 36 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR(HPLTEGpLztRNSt@fU2'dgkIDAT} P{O5$vaWJIih^JF5PzHLzF/h:{ti.;hEB6IENDB`
Oct 24, 2024 00:37:04.129374027 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49726	208.91.196.253	80	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:36:18.630284071 CEST	293	OUT	GET /__media__/js/min.js?v2.3 HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:36:19.223459005 CEST	341	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 23 Oct 2024 22:36:19 GMT Content-Type: application/javascript Content-Length: 8435 Last-Modified: Wed, 22 Sep 2021 05:16:03 GMT Connection: keep-alive ETag: "614abc13-20f3" Expires: Wed, 06 Nov 2024 22:36:19 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Oct 24, 2024 00:36:19.223524094 CEST	1236	IN	Data Raw: 2f 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 32 2d 32 30 31 36 20 4d 65 64 69 61 2e 6e 65 74 20 41 64 76 65 72 74 69 73 69 6e 67 20 46 5a 2d 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 20 Data Ascii: /* * Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved */var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n
Oct 24, 2024 00:36:19.223666906 CEST	1236	IN	Data Raw: 28 29 3b 6f 3c 31 65 33 26 26 28 6f 2b 3d 31 39 30 30 29 3b 76 61 72 20 72 3d 6e 2e 67 65 74 44 61 79 28 29 2c 69 3d 6e 2e 67 65 74 4d 6f 6e 74 68 28 29 2c 6e 3d 6e 2e 67 65 74 44 61 74 65 28 29 3b 6e 3c 31 30 26 26 28 6e 3d 22 30 22 2b 6e 29 3b Data Ascii: ();o<1e3&&(o+=1900);var r=n.getDay(),i=n.getMonth(),n=n.getDate();n<10&&(n="0"+n);o=t[r]+", "+e[i]+" "+n+", "+o;document.write(o)}function checkUTFChar(t){for(var e=!0,n=0;n<128;++n){var o=n.toString(16);if(1==o.length&&(o="0"+o),o="%"+o,(o=un
Oct 24, 2024 00:36:19.223679066 CEST	292	IN	Data Raw: 65 28 62 72 5f 64 61 74 61 2e 67 65 74 4d 6f 75 73 65 50 6f 73 69 74 69 6f 6e 44 61 74 61 28 29 29 3a 22 61 64 63 6c 6b 22 3d 3d 74 7c 7c 22 73 72 63 71 72 79 22 3d 3d 74 3f 22 26 62 64 3d 22 2b 65 73 63 61 70 65 28 62 72 5f 64 61 74 61 2e 67 65 Data Ascii: e(br_data.getMousePositionData()):"adclk"==t\|\|"srcqry"==t?"&bd="+escape(br_data.getSearchBoxRelatedData()):"&bd="+escape(br_data.getURLBrowserData())}catch(t){}return e}var brdata=function(){this.fd="#",this.cookieSupport=-1,this.isinframe=-1,
Oct 24, 2024 00:36:19.223915100 CEST	1236	IN	Data Raw: 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 77 69 6e 64 6f 77 2e 61 62 70 26 26 77 69 6e 64 6f 77 2e 61 62 70 3f 31 3a 30 7d 2c 74 68 69 73 2e 67 65 74 4c 6f 63 61 6c 54 69 6d 65 5a 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 Data Ascii: return void 0!==window.abp&&window.abp?1:0},this.getLocalTimeZone=function(){return(new Date).getTimezoneOffset()/60*-1},this.getScreenHeight=function(){return screen.height},this.getScreenWidth=function(){return screen.width},this.calledInExt
Oct 24, 2024 00:36:19.223927021 CEST	1236	IN	Data Raw: 61 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 6d 50 6f 73 28 74 29 7b 74 72 79 7b 6d 58 3d 77 69 6e 64 6f 77 2e 45 76 65 6e 74 3f 74 2e 70 61 67 65 58 3a 65 76 65 6e 74 2e 63 6c 69 65 6e 74 58 2b 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 Data Ascii: a=!1;function mPos(t){try{mX=window.Event?t.pageX:event.clientX+(document.documentElement.scrollLeft\|\|document.body.scrollLeft),mY=window.Event?t.pageY:event.clientY+(document.documentElement.scrollTop\|\|document.body.scrollTop)}catch(t){}retur
Oct 24, 2024 00:36:19.223937988 CEST	424	IN	Data Raw: 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 58 3a 30 7d 2c 64 6f 50 55 3a 66 75 6e 63 74 69 6f 6e 28 75 72 6c 2c 70 77 2c 70 68 2c 6e 70 66 2c 64 72 29 7b 69 66 28 21 74 68 69 73 2e 5f 54 6f 70 26 26 28 74 68 69 73 2e 5f 54 6f 70 3d Data Ascii: ._Top.window.screenX:0},doPU:function(url,pw,ph,npf,dr){if(!this._Top&&(this._Top=self,top!=self))try{top.document.location.toString()&&(this._Top=top)}catch(e){}var _npSU=dr?url:"about:blank",_npID="pu_"+Math.floor(89999999*Math.random()+1e7)
Oct 24, 2024 00:36:19.224328041 CEST	1236	IN	Data Raw: 73 74 61 74 75 73 62 61 72 3d 30 2c 6d 65 6e 75 62 61 72 3d 30 2c 72 65 73 69 7a 61 62 6c 65 3d 31 22 3b 76 61 72 20 5f 6e 70 57 3d 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 5f 6e 70 53 55 2c 5f 6e 70 49 44 2c 6e 70 66 2b Data Ascii: statusbar=0,menubar=0,resizable=1";var _npW=this._Top.window.open(_npSU,_npID,npf+",top="+pxTop+",left="+pxLeft+",width="+pw+",height="+ph);return _npW&&(_npW.blur(),-1<navigator.userAgent.toLowerCase().indexOf("applewebkit")&&(this._Top.windo
Oct 24, 2024 00:36:19.224339962 CEST	1236	IN	Data Raw: 70 70 63 74 72 6c 28 74 29 7b 74 72 79 7b 76 61 72 20 65 3d 28 74 3d 74 7c 7c 28 77 69 6e 64 6f 77 2e 65 76 65 6e 74 7c 7c 77 69 6e 64 6f 77 2e 45 76 65 6e 74 29 29 2e 73 72 63 45 6c 65 6d 65 6e 74 7c 7c 74 2e 74 61 72 67 65 74 3b 69 66 28 65 2e Data Ascii: ppctrl(t){try{var e=(t=t\|\|(window.event\|\|window.Event)).srcElement\|\|t.target;if(e.tagName&&"INPUT"==e.tagName)return e.attributes.type&&"text"!=e.attributes.type.value&&void 0!==showPop&&(showPop=0),!1;1!=showPop\|\|renderFACP(t)\|\|shpp(t)}catch(
Oct 24, 2024 00:36:19.224349022 CEST	303	IN	Data Raw: 70 2e 6c 64 2e 75 2e 6c 65 6e 67 74 68 26 26 30 3d 3d 5f 5f 70 70 2e 6c 64 2e 70 64 3f 28 5f 5f 70 70 2e 6c 64 2e 70 64 3d 21 30 2c 5f 73 6b 50 55 2e 64 6f 50 55 28 5f 5f 70 70 2e 6c 64 2e 75 2c 5f 5f 70 70 2e 6c 64 2e 77 2c 5f 5f 70 70 2e 6c 64 Data Ascii: p.ld.u.length&&0==__pp.ld.pd?(__pp.ld.pd=!0,_skPU.doPU(__pp.ld.u,__pp.ld.w,__pp.ld.h,__pp.ld.p,"ld"==t),!0):!1}catch(t){return!1}}function isIE(){var t=!1;try{t=/msie\|MSIE/.test(navigator.userAgent)}catch(t){}return t}function setBrowserDetail
Oct 24, 2024 00:37:04.230951071 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49727	208.91.196.253	80	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:36:18.630687952 CEST	407	OUT	GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive Origin: http://ww1.frothylattestudio.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww1.frothylattestudio.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:36:19.235168934 CEST	360	IN	HTTP/1.1 404 Not Found Server: nginx Date: Wed, 23 Oct 2024 22:36:19 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Content-Encoding: gzip Data Raw: 61 61 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed 90 b1 0a 02 31 10 44 7b c1 7f 58 3f 20 44 e1 ca 25 8d 28 58 68 e3 17 e4 dc f5 12 c8 6d 8e 18 c1 fb 7b 13 bd 03 b1 b6 b4 dc 99 37 c3 b0 e8 72 1f cc 72 81 8e 2d 19 cc 3e 07 36 cd ba 81 53 cc b0 8f 77 21 d4 6f 11 f5 0b 29 68 1b 69 ac 91 0b 4b e6 64 d0 6d be 13 45 41 3d d9 b5 bb 40 d3 25 9d 97 c7 a7 a7 e7 36 3d 2f 59 29 05 16 06 4b e4 a5 83 1c 81 fc cd b6 81 e1 78 3e ec c0 0a c1 d6 a5 d8 33 5c 93 67 a1 30 02 a7 14 53 49 74 0c 4a d5 65 ff 8a 5f fe e2 09 27 a7 bf a8 24 02 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: aa1D{X? D%(Xhm{7rr->6Sw!o)hiKdmEA=@%6=/Y)Kx>3\g0SItJe_'$0
Oct 24, 2024 00:36:19.250540972 CEST	408	OUT	GET /__media__/fonts/montserrat-bold/montserrat-bold.woff2 HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive Origin: http://ww1.frothylattestudio.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww1.frothylattestudio.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49728	208.91.196.253	80	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:36:18.631283998 CEST	413	OUT	GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive Origin: http://ww1.frothylattestudio.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww1.frothylattestudio.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49729	208.91.196.253	80	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:36:18.674262047 CEST	297	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:36:19.278342962 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 23 Oct 2024 22:36:19 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Wed, 06 Nov 2024 22:36:19 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 c2 00 00 03 dc 04 03 00 00 00 09 4e b3 37 00 00 00 0f 50 4c 54 45 1a 23 41 10 16 2c 26 2f 4d 3a 43 61 4d 56 73 32 a1 dd 4a 00 00 20 00 49 44 41 54 78 da ec dd 51 7a 1a c7 b6 80 d1 8d d0 00 30 f2 00 2c c1 00 2c 37 03 90 81 f9 8f 29 b2 13 3b 91 25 a0 9b ae dd a1 ab d6 7a bc 0f e7 7c b7 4e fd b0 ab 8a 28 f1 09 c8 13 96 00 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c [TRUNCATED] Data Ascii: PNGIHDRN7PLTE#A,&/M:CaMVs2J IDATxQz0,,7);%z\|N(@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0P%@a@a0@a0P0P(P(P((@a@a0@a0P0P(P(P((@a@a0@aPeaLt[=ul=HhOnNc=e{l[,lu_cnk,n;~'^a$sbV&aqcm3Ts*l#zXtH+8c/BH1>CXHay/AIl2g}s/Q8{.;R91oeGo-V:;u$5'.lW:Q\v_:z4',l]2z4'e,~O]%>\|v_2U}8u=hL4$7aj;eMhL\>',/]I,{}a91\|Jz
Oct 24, 2024 00:36:19.278356075 CEST	475	IN	Data Raw: b1 73 e2 d5 85 ed aa 5b 43 07 31 c7 b0 d3 f6 53 17 56 dd 8c e8 20 e6 18 96 72 88 08 4b e8 20 e6 18 96 f8 01 7c 65 61 db 1a 97 d0 8b 98 d7 b0 f2 73 62 f8 8c 1a 3f 6a d3 c2 07 f0 95 33 ce 55 85 55 39 23 1e fd 63 98 c5 54 ba 3f 16 93 15 b6 b5 82 34 Data Ascii: s[C1SV rK \|easb?j3UU9#cT?4JYA)O(W.:+FOQX3DWsn]{d^Va4\>gDbvU1aEjass+e9<lNTX3KVaV\|
Oct 24, 2024 00:36:19.278539896 CEST	1236	IN	Data Raw: 34 23 7a 0e f3 20 96 30 27 86 19 d1 73 98 07 b1 c4 6d 73 be b0 6d 53 2b e5 2a d1 65 62 f9 39 31 cc d3 bd 27 6a fa 6a eb 93 f9 fc f9 3d 7c d9 bb 4a 74 99 98 38 27 86 4f 22 57 89 2e 13 13 a7 9f b0 4c 2e 3a 5c 75 24 7e 38 87 55 72 d1 e1 aa 23 f1 d3 Data Ascii: 4#z 0'smsmS+eb91'jj=\|Jt8'O"W.L.:\u$~8Ur#9T9m2vOO%[k91\|oHt_3'hLL?l!m9hgDwx"#Q8pvg{-nr34/
Oct 24, 2024 00:36:19.278551102 CEST	1236	IN	Data Raw: b3 07 67 85 29 4c 61 0a 53 98 c2 50 d8 7b 7e d4 e1 27 1d 0a 53 98 c2 14 a6 30 85 a1 30 85 29 4c 61 0a 53 98 c2 14 86 c2 14 a6 30 85 29 4c 61 0a 53 58 cd bc 38 7b 71 56 98 c2 14 a6 30 85 29 0c 85 29 4c 61 0a 9b d6 42 1e 05 f8 e7 c3 14 76 8a 3a 8a Data Ascii: g)LaSP{~'S00)LaS0)LaSX8{qV0))LaBv:0)LaSX]26>o!?))La+qv21E\|JWz]"s21_iE-Lc.:\uil!BV6/LT}RKpc.:\u}a7 V
Oct 24, 2024 00:36:19.278738022 CEST	424	IN	Data Raw: d1 0a 4b 80 89 37 3b a6 cc ef 40 02 22 f1 72 8d f8 2d 0f 25 31 06 9d 08 af 03 3e c7 a5 1a 31 66 bc 52 25 26 b3 67 78 c8 44 88 c4 6b 35 a2 28 5c 8f d7 32 7b 8a 87 d7 01 9f e3 62 8d 28 36 8b 41 27 42 26 42 24 5e a9 11 c9 26 b1 0d b5 c9 93 3c 64 22 Data Ascii: K7;@"r-%1>1fR%&gxDk5(\2{b(6A'B&B$^&<d"Du~D`'OLR:2"2(9ful<@e178Db(^knX]B{ST1Sb<NDG+OKbyJ(P]%4wzl7dhawh
Oct 24, 2024 00:36:19.278855085 CEST	1236	IN	Data Raw: b2 22 55 5f 6c f6 07 7c 47 d4 64 26 65 7d 62 98 54 27 a2 21 86 76 d8 3b 1a d1 f6 97 d3 30 62 a0 65 63 8a d3 a9 4c d9 f4 e3 a4 3a 11 84 81 b0 d7 bb 3b 85 23 2e ce 86 7c f3 a5 37 b0 d8 e3 98 93 ea 44 10 06 c2 5e d6 88 ea 63 98 75 da 3f 84 a5 d3 2c Data Ascii: "U_l\|Gd&e}bT'!v;0becL:;#.\|7D^cu?,6MA{[#gt"S6^/Kt2u+3D^QxMnAVb:,<Na U(O)LxI6ak/a4$#Wy0DWw)t"a/jD7uB"l\|uUcvDa}Y
Oct 24, 2024 00:36:19.278868914 CEST	1236	IN	Data Raw: 56 60 65 73 74 64 22 99 8e 9a b9 1d a9 4d 62 23 e8 44 a4 30 24 b1 63 1a 31 1a 9e 58 9b c7 79 9f f6 d3 63 2a 36 bf b1 9f 9a ca 37 cf 0a 0d ea 27 82 06 24 b1 63 3d 1c 2a 43 18 5c cd 26 3e 7e 75 22 31 3c 93 89 65 bf a2 5e 89 59 58 0b c3 3d ab 90 c2 Data Ascii: V`estd"Mb#D0$c1Xyc67'$c=C\&>~u"1<e^YX=jeuu%sk,=HmFy "7=}iWfGL 0%w.5HJqBf!76qvMaUsr\^s>l9}0][NG#(Z]Ln
Oct 24, 2024 00:36:19.278878927 CEST	1236	IN	Data Raw: 1b f1 b5 2b 49 59 a1 fb 4d 24 7a c2 ea a1 45 fb 07 62 f3 96 4b 9a 3b 5b b6 11 88 cf d6 88 e5 5a 2f 21 7b b4 c4 dd 08 bb b3 e9 37 ec 12 16 bb 32 d1 2c 74 13 bb fd 57 74 52 0b 88 21 c6 22 ac 72 0f 9d 8d 5e 8e b1 c8 ee 9d 61 a1 21 6c d9 bb d5 39 52 Data Ascii: +IYM$zEbK;[Z/!{72,tWtR!"r^a!l9R,:;'/HKZ/t!)HI1!\$YI*ADY.^sx=FCUD#,HnAS1Tc2>wm0LX(Md<#w\|k4
Oct 24, 2024 00:36:19.278889894 CEST	1236	IN	Data Raw: 5b 79 3b cb c1 64 58 39 4a 12 1b 84 3d 60 13 61 dd 6d 3d a1 34 9b ab ba a8 62 4a d5 34 61 bb ae ff 7c bc 82 d8 e0 10 06 0d 5a d5 e7 22 d2 1e cc db 06 d3 d3 4c 24 8b 50 36 b2 fa 3a f5 b5 ff ff e1 ed 79 84 6d 25 ed 12 bb e9 dd 8f 4a 18 a6 8a 16 73 Data Ascii: [y;dX9J=`am=4bJ4a\|Z"L$P6:ym%Js),P6#)8e0,Usc;PK&Ib]s&f&bvd:^fnx,s6M%+@I]YWp5C:FE\mm\|;p_!/%Z/Vv6\$"
Oct 24, 2024 00:36:19.279299021 CEST	1236	IN	Data Raw: 45 d9 da ac 32 a0 8e 62 6a 7f a6 0c 3b 40 58 37 06 6e d6 50 2c 3e d2 48 69 88 41 1c 9d a6 52 76 c0 d2 17 db ea bc 62 d8 d8 18 c6 2c a4 55 b6 2e 99 01 8b 79 12 5c 0f f8 06 2d bd aa 92 90 7b e4 05 07 0d d3 bd 33 7b 79 04 a5 e7 10 b6 37 21 92 5a 6e Data Ascii: E2bj;@X7nP,>HiARvb,U.y\-{3{y7!Zn!},!neWO~!BIWd_h2vuv;aDX`SR7T=B}0~#?$\K!LUUWvSFr~Pvm1a5"V]J)DU+R
Oct 24, 2024 00:36:19.284425974 CEST	1236	IN	Data Raw: 31 ed 80 ef 43 a6 40 1d c5 35 47 1d 03 47 36 8a a9 36 ee dc 7e 81 b0 3d 13 27 96 26 b2 18 b7 6a 2d 90 20 41 75 f1 d9 35 46 f5 74 3d 81 dc a8 ea 42 bb 66 9c 47 21 4c 8a 6f 97 7e 32 0c 27 c4 87 50 07 1d 29 bf 37 42 63 6f 5a 7a 22 2a 3c 44 0a 89 d4 Data Ascii: 1C@5GG66~='&j- Au5Ft=BfG!Lo~2'P)7BcoZz"<DS78Lh3HL"3a&k?3G>fK-=\|xju#yn%NZboC`WNHq1L^V&LyVKo}gM^O\(GT?G\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	49736	208.91.196.145	80	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:36:18.982774019 CEST	338	OUT	GET /px.js?ch=1 HTTP/1.1 Host: ww1.frothylattestudio.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=36c3fe85-918f-11ef-a133-88a30638f3e0
Oct 24, 2024 00:36:19.587007046 CEST	1085	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:19 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT ETag: "15a-5b952a63b81f1" Accept-Ranges: bytes Content-Length: 346 Keep-Alive: timeout=5, max=128 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 76 61 72 20 61 62 70 3d 61 62 70 7c 7c 66 61 6c 73 65 3b 76 61 72 20 73 63 72 69 70 74 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 3b 76 61 72 20 73 63 72 69 70 74 3d 73 63 72 69 70 74 73 5b 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 2d 31 5d 3b 69 66 28 73 63 72 69 70 74 29 7b 76 61 72 20 71 75 65 72 79 3d 73 63 72 69 70 74 2e 73 72 63 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 2e 73 70 6c 69 74 28 22 26 22 29 3b 76 61 72 20 70 61 72 61 6d 73 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 71 75 65 72 79 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 70 61 72 61 6d 3d 71 75 65 72 79 5b 69 5d 2e 73 70 6c 69 74 28 22 3d 22 29 3b 70 61 72 61 6d 73 5b 70 61 72 61 6d 5b 30 5d 5d 3d 70 61 72 61 6d 5b 31 5d 7d 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 31 29 61 62 70 3d 74 72 75 65 3b 65 6c 73 65 20 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 32 29 61 62 70 3d 61 62 70 26 [TRUNCATED] Data Ascii: var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};
Oct 24, 2024 00:37:04.592647076 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	49735	208.91.196.145	80	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:36:18.983074903 CEST	338	OUT	GET /px.js?ch=2 HTTP/1.1 Host: ww1.frothylattestudio.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: sid=36c3fe85-918f-11ef-a133-88a30638f3e0
Oct 24, 2024 00:36:19.595807076 CEST	854	IN	HTTP/1.1 404 Not Found Date: Wed, 23 Oct 2024 22:36:19 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") Content-Length: 196 Keep-Alive: timeout=5, max=128 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Oct 24, 2024 00:37:04.722378016 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	49739	208.91.196.253	80	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:36:19.162517071 CEST	300	OUT	GET /__media__/pics/28905/arrrow.png HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:36:19.778047085 CEST	609	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 23 Oct 2024 22:36:19 GMT Content-Type: image/png Content-Length: 283 Last-Modified: Tue, 04 Jan 2022 14:44:27 GMT Connection: keep-alive ETag: "61d45d4b-11b" Expires: Wed, 06 Nov 2024 22:36:19 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 11 00 00 00 1b 08 03 00 00 00 ad 28 94 ae 00 00 00 48 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 05 7a f2 f8 00 00 00 17 74 52 4e 53 00 74 db fa 40 1b e0 0e 05 66 55 f4 bd ec 32 27 d1 b0 ca 82 a6 64 67 ff c5 fb 8e 00 00 00 6b 49 44 41 54 18 d3 7d d1 c9 0e 80 20 0c 04 50 c4 a5 e0 86 7b ff ff 4f 35 f4 e0 c8 24 f6 f8 c2 d2 76 9c 93 18 c5 61 89 57 ed 12 4a d4 a7 a6 b9 94 0f 49 97 69 68 5e 4a 46 35 50 eb 8d 7a a0 85 48 b6 4c 7a 02 8d 46 d5 2f 85 d5 68 07 3a 8c a0 89 e0 8b 7b 74 86 de a1 bf 18 ca 9e 69 2e 9a 9d f6 c3 3b bc 68 cf 9c 05 e7 45 99 de f1 b5 0e ae 42 db 93 36 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR(HPLTEGpLztRNSt@fU2'dgkIDAT} P{O5$vaWJIih^JF5PzHLzF/h:{ti.;hEB6IENDB`
Oct 24, 2024 00:37:04.932540894 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	49751	208.91.196.253	80	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:36:20.959667921 CEST	2875	OUT	GET /__media__/js/min.js?v2.3 HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww1.frothylattestudio.com/Frothy_Bloat.cfm?fp=2qoqDYI%2B0iJZGtPstQqccvV6mj3sWtCwuxlIlildqdntAr9vCYTVvHWakr2mYgOXvaI2w1lxQwNvQXQ9geMJWXl76t3S5yB%2BiBy%2BZCGz7fRNEfPfmlAL%2B069aOrJirw2FJnjwcPzaE3aWg0OVkAGQTIcS1usl4qXiQIt0xrHb3yncYN7pI0iAXPRcPni8exSan7QRmShFhmVmi8KFswxZrLXK%2BOUgJen18K1VzM4b1G1Lu5vHzl8ZYaBIW4hntdKakG3S9NtAbOds5CPuuOLB1pjsFT52eS2TmdodNxuSO8SdSiMpEHtXZO0Fn2iJEUzEPSdSn6fQwESLH%2BNGOM8Kg%3D%3D&yep=M6FboBuP98sdvcRwAsDx%2FyxJST0KXfB41zVuwQ%2FG8zz5eBalqNa3nTw4xx9bTiMCTfZD4TNwdokKLB%2Fmq%2BOEwXZ6cOAIejqa5Fnt4Udux7%2Fe1WTTGF4DOwXSOEGa%2B%2BQ8%2Fl7bpeCjv5d7px2wcISuPrYfnpp2z53JwpuA7FMPq%2FQUAwG7sOU7pMoYRXtw9bP3TbMCayGOhwzbWjlUpS7GN4%2FllYasm5FrgM0zxUuTwV4jsjXJH6KNTwx%2F4DgHfnupPnNHnCLJ5x0MnzjocudPm81zh%2F50DsJt5moQXBeSSyAbLEtSyEZWmL%2FJcLlq9ryaz2kEpNgj7YQRSWKSHVoVsRnbg%2Bvib080YywKXc9uZEE69bp3nnEN7UTipMx0zPqF1G%2BE65tK2unYlh64NRz2m%2FiJbdG%2B4TBba7BXJht8BEWPEyXl%2BDflzhI2JSnIEg7gaUzlrs%2Fl084s5kOgy2pSClnmP4Rb5DsrwxMqXzjp8qlcULhwyiim1m6AcQiHxsa6ZO9Ic8s1LD5fQDkWr1FFuQk8QOAkKb772scbyYCsuTrVHUi [TRUNCATED] Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:36:21.564449072 CEST	341	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 23 Oct 2024 22:36:21 GMT Content-Type: application/javascript Content-Length: 8435 Last-Modified: Fri, 30 Aug 2024 19:35:24 GMT Connection: keep-alive ETag: "66d21efc-20f3" Expires: Wed, 06 Nov 2024 22:36:21 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Oct 24, 2024 00:36:21.564532995 CEST	1236	IN	Data Raw: 2f 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 32 2d 32 30 31 36 20 4d 65 64 69 61 2e 6e 65 74 20 41 64 76 65 72 74 69 73 69 6e 67 20 46 5a 2d 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 20 Data Ascii: /* * Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved */var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n
Oct 24, 2024 00:36:21.564681053 CEST	1236	IN	Data Raw: 28 29 3b 6f 3c 31 65 33 26 26 28 6f 2b 3d 31 39 30 30 29 3b 76 61 72 20 72 3d 6e 2e 67 65 74 44 61 79 28 29 2c 69 3d 6e 2e 67 65 74 4d 6f 6e 74 68 28 29 2c 6e 3d 6e 2e 67 65 74 44 61 74 65 28 29 3b 6e 3c 31 30 26 26 28 6e 3d 22 30 22 2b 6e 29 3b Data Ascii: ();o<1e3&&(o+=1900);var r=n.getDay(),i=n.getMonth(),n=n.getDate();n<10&&(n="0"+n);o=t[r]+", "+e[i]+" "+n+", "+o;document.write(o)}function checkUTFChar(t){for(var e=!0,n=0;n<128;++n){var o=n.toString(16);if(1==o.length&&(o="0"+o),o="%"+o,(o=un
Oct 24, 2024 00:36:21.564694881 CEST	424	IN	Data Raw: 65 28 62 72 5f 64 61 74 61 2e 67 65 74 4d 6f 75 73 65 50 6f 73 69 74 69 6f 6e 44 61 74 61 28 29 29 3a 22 61 64 63 6c 6b 22 3d 3d 74 7c 7c 22 73 72 63 71 72 79 22 3d 3d 74 3f 22 26 62 64 3d 22 2b 65 73 63 61 70 65 28 62 72 5f 64 61 74 61 2e 67 65 Data Ascii: e(br_data.getMousePositionData()):"adclk"==t\|\|"srcqry"==t?"&bd="+escape(br_data.getSearchBoxRelatedData()):"&bd="+escape(br_data.getURLBrowserData())}catch(t){}return e}var brdata=function(){this.fd="#",this.cookieSupport=-1,this.isinframe=-1,
Oct 24, 2024 00:36:21.564889908 CEST	1236	IN	Data Raw: 65 65 6e 48 65 69 67 68 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 63 72 65 65 6e 2e 68 65 69 67 68 74 7d 2c 74 68 69 73 2e 67 65 74 53 63 72 65 65 6e 57 69 64 74 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 Data Ascii: eenHeight=function(){return screen.height},this.getScreenWidth=function(){return screen.width},this.calledInExternalFrame=function(){return"n"},this.isCookieSupported=function(){var t;return-1==this.cookieSupport&&(t=navigator.cookieEnabled\|\|!
Oct 24, 2024 00:36:21.565119982 CEST	1236	IN	Data Raw: 69 6e 64 6f 77 2e 45 76 65 6e 74 3f 74 2e 70 61 67 65 59 3a 65 76 65 6e 74 2e 63 6c 69 65 6e 74 59 2b 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 54 6f 70 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f Data Ascii: indow.Event?t.pageY:event.clientY+(document.documentElement.scrollTop\|\|document.body.scrollTop)}catch(t){}return!0}document.onmousemove=mPos;var _skPU={_Top:null,_wh:function(){var e=0;try{"number"==typeof this._Top.window.innerHeight?e=this._
Oct 24, 2024 00:36:21.565135956 CEST	424	IN	Data Raw: 28 29 26 26 28 74 68 69 73 2e 5f 54 6f 70 3d 74 6f 70 29 7d 63 61 74 63 68 28 65 29 7b 7d 76 61 72 20 5f 6e 70 53 55 3d 64 72 3f 75 72 6c 3a 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 2c 5f 6e 70 49 44 3d 22 70 75 5f 22 2b 4d 61 74 68 2e 66 6c 6f 6f Data Ascii: ()&&(this._Top=top)}catch(e){}var _npSU=dr?url:"about:blank",_npID="pu_"+Math.floor(89999999*Math.random()+1e7),pxLeft=0,pxTop=0;-1==pw&&(pw=this._ww()),-1==ph&&(ph=this._wh()),pxLeft=this._wl()+this._ww()/2-pw/2,pxTop=this._wt()+this._wh()/2-
Oct 24, 2024 00:36:21.565289021 CEST	1236	IN	Data Raw: 74 3d 22 2b 70 68 29 3b 72 65 74 75 72 6e 20 5f 6e 70 57 26 26 28 5f 6e 70 57 2e 62 6c 75 72 28 29 2c 2d 31 3c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 Data Ascii: t="+ph);return _npW&&(_npW.blur(),-1<navigator.userAgent.toLowerCase().indexOf("applewebkit")&&(this._Top.window.blur(),this._Top.window.focus()),_npW.Init=function(e){with(e)Params=e.Params,Main=function(){void 0===window.mozPaintCount\|\|(t=wi
Oct 24, 2024 00:36:21.565303087 CEST	1236	IN	Data Raw: 70 65 26 26 22 74 65 78 74 22 21 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2e 74 79 70 65 2e 76 61 6c 75 65 26 26 76 6f 69 64 20 30 21 3d 3d 73 68 6f 77 50 6f 70 26 26 28 73 68 6f 77 50 6f 70 3d 30 29 2c 21 31 3b 31 21 3d 73 68 6f 77 50 6f 70 7c 7c Data Ascii: pe&&"text"!=e.attributes.type.value&&void 0!==showPop&&(showPop=0),!1;1!=showPop\|\|renderFACP(t)\|\|shpp(t)}catch(t){}}function shpp(t){if("undefined"!=typeof __pp&&1==showPop&&!renderFACP(t))try{if(t\|\|((t=window.event\|\|window.Event).cancelBubble
Oct 24, 2024 00:36:21.565315962 CEST	28	IN	Data Raw: 6e 63 74 69 6f 6e 20 69 73 49 45 28 29 7b 76 61 72 20 74 3d 21 31 3b 74 72 79 7b 74 Data Ascii: nction isIE(){var t=!1;try{t
Oct 24, 2024 00:36:21.572067976 CEST	143	IN	Data Raw: 3d 2f 6d 73 69 65 7c 4d 53 49 45 2f 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 42 72 6f 77 73 65 72 44 65 74 61 69 Data Ascii: =/msie\|MSIE/.test(navigator.userAgent)}catch(t){}return t}function setBrowserDetails(){relplaceAllALinks&&relplaceAllALinks(/(\/trf\|\.cfm)\?/)}
Oct 24, 2024 00:36:21.788260937 CEST	402	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww1.frothylattestudio.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:36:21.955423117 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 23 Oct 2024 22:36:21 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Wed, 06 Nov 2024 22:36:21 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 c2 00 00 03 dc 04 03 00 00 00 09 4e b3 37 00 00 00 0f 50 4c 54 45 1a 23 41 10 16 2c 26 2f 4d 3a 43 61 4d 56 73 32 a1 dd 4a 00 00 20 00 49 44 41 54 78 da ec dd 51 7a 1a c7 b6 80 d1 8d d0 00 30 f2 00 2c c1 00 2c 37 03 90 81 f9 8f 29 b2 13 3b 91 25 a0 9b ae dd a1 ab d6 7a bc 0f e7 7c b7 4e fd b0 ab 8a 28 f1 09 c8 13 96 00 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c [TRUNCATED] Data Ascii: PNGIHDRN7PLTE#A,&/M:CaMVs2J IDATxQz0,,7);%z\|N(@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0P%@a@a0@a0P0P(P(P((@a@a0@a0P0P(P(P((@a@a0@aPeaLt[=ul=HhOnNc=e{l[,lu_cnk,n;~'^a$sbV&aqcm3Ts*l#zXtH+8c/BH1>CXHay/AIl2g}s/Q8{.;R91oeGo-V:;u$5'.lW:Q\v_:z4',l]2z4'e,~O]%>\|v_2U}8u=hL4$7aj;eMhL\>',/]I,{}a91\|Jz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	49757	208.91.196.253	80	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:36:21.796354055 CEST	406	OUT	GET /__media__/pics/28905/res-arw.png HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww1.frothylattestudio.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:36:22.436611891 CEST	667	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 23 Oct 2024 22:36:22 GMT Content-Type: image/png Content-Length: 346 Last-Modified: Tue, 04 Jan 2022 14:44:28 GMT Connection: close ETag: "61d45d4c-15a" Expires: Wed, 06 Nov 2024 22:36:22 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 22 00 00 00 1d 08 03 00 00 00 f8 b5 4e 88 00 00 00 45 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 57 d4 34 b7 00 00 00 16 74 52 4e 53 00 51 a8 e4 9d fa 21 30 f4 13 ba 01 72 90 da 3e 7e 03 c7 5f 0a 88 8d 4f 23 a5 00 00 00 ae 49 44 41 54 28 cf 85 93 e1 12 83 20 0c 83 11 41 d4 82 0a 6a de ff 51 37 b7 dd 4e a4 94 ef 77 ae 85 34 51 e7 7e a8 06 2b c6 30 34 34 33 80 b9 8b 92 c4 e1 a2 df 26 41 a3 3f 1a 58 bd 92 3c e6 62 f1 b5 51 e6 af c1 68 1c a7 a0 c1 e2 46 62 5d 30 c8 e0 5c c8 c7 80 75 21 a0 e0 e1 02 4d 23 18 32 17 e8 04 cb dd 05 7e 4c ee 82 a9 48 ac 76 e2 63 b2 37 07 4e 90 f6 a8 a8 6e 0c ec e3 14 9a db 40 fc ad 7f 1b ca 84 cd c5 37 a9 88 ef 6d 03 1f 99 24 5c ef 4b 27 c7 e9 4d 5c 1a a1 54 6a 47 ab 25 47 df ec 9a 5f fc a1 a2 5c 58 6a 55 fa 05 63 50 20 91 7b 34 90 ee 00 00 00 00 [TRUNCATED] Data Ascii: PNGIHDR"NEPLTEGpLW4tRNSQ!0r>~_O#IDAT( AjQ7Nw4Q~+0443&A?X<bQhFb]0\u!M#2~LHvc7Nn@7m$\K'M\TjG%G_\XjUcP {4IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	49758	208.91.196.253	80	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:36:21.816169024 CEST	407	OUT	GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive Origin: http://ww1.frothylattestudio.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww1.frothylattestudio.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:36:22.440987110 CEST	360	IN	HTTP/1.1 404 Not Found Server: nginx Date: Wed, 23 Oct 2024 22:36:22 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Content-Encoding: gzip Data Raw: 61 61 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed 90 b1 0a 02 31 10 44 7b c1 7f 58 3f 20 44 e1 ca 25 8d 28 58 68 e3 17 e4 dc f5 12 c8 6d 8e 18 c1 fb 7b 13 bd 03 b1 b6 b4 dc 99 37 c3 b0 e8 72 1f cc 72 81 8e 2d 19 cc 3e 07 36 cd ba 81 53 cc b0 8f 77 21 d4 6f 11 f5 0b 29 68 1b 69 ac 91 0b 4b e6 64 d0 6d be 13 45 41 3d d9 b5 bb 40 d3 25 9d 97 c7 a7 a7 e7 36 3d 2f 59 29 05 16 06 4b e4 a5 83 1c 81 fc cd b6 81 e1 78 3e ec c0 0a c1 d6 a5 d8 33 5c 93 67 a1 30 02 a7 14 53 49 74 0c 4a d5 65 ff 8a 5f fe e2 09 27 a7 bf a8 24 02 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: aa1D{X? D%(Xhm{7rr->6Sw!o)hiKdmEA=@%6=/Y)Kx>3\g0SItJe_'$0
Oct 24, 2024 00:36:22.846973896 CEST	414	OUT	GET /__media__/fonts/montserrat-regular/montserrat-regular.woff2 HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive Origin: http://ww1.frothylattestudio.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww1.frothylattestudio.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:36:22.982990026 CEST	281	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 23 Oct 2024 22:36:22 GMT Content-Type: application/octet-stream Content-Length: 12132 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-2f64" Access-Control-Allow-Origin: * Accept-Ranges: bytes
Oct 24, 2024 00:36:22.983001947 CEST	1236	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 2f 64 00 10 00 00 00 00 71 40 00 00 2f 02 00 02 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 1b a7 46 1c 20 06 60 00 87 06 11 08 0a 81 8f 78 ea 2d 0b 84 10 00 01 36 02 24 Data Ascii: wOF2/dq@/B?FFTMF `x-6$ 4CL[\#@t.OD5[Hd!%-;db9Jhb1Cl7DLa[AA~\|xB0Q(bwNC{D2t#.&
Oct 24, 2024 00:36:22.983011961 CEST	146	IN	Data Raw: c6 b4 1a cc e8 be aa dc 08 1b ed fb e7 dd ff 63 b7 50 39 7c 38 60 0b 97 39 2e 91 4d f5 ea b6 5e 4d f1 4d 93 d0 95 fe 44 c0 e8 d7 14 75 f5 c5 76 92 0c 0e 28 0a 0c a5 76 eb ed 02 fb 20 89 05 38 a5 6b dd 99 12 ca 37 8c 31 ab f2 8f 7d 09 87 f0 5f 62 Data Ascii: cP9\|8`9.M^MMDuv(v 8k71}_b,2/?HkZQL!)[K>0&bMHx]03{/4k
Oct 24, 2024 00:36:22.983021021 CEST	1236	IN	Data Raw: 48 9f 36 c5 57 14 e6 3a 4a 62 0d 32 30 e4 78 c0 18 69 58 2e d4 3e 32 e4 0b d6 45 0c 12 5b 5c 85 ca 6d f6 a8 29 f1 1f 2a 25 b4 0c 97 6f 19 35 c6 28 93 36 a6 d8 2c d6 b9 b6 85 3e 4b 7c fd 4c 1a d1 88 79 94 61 f0 4c 8a 23 c3 b5 2e 34 a6 71 d9 e5 72 Data Ascii: H6W:Jb20xiX.>2E[\m)%o5(6,>K\|LyaL#.4qrRv'z0gJkIbW0(%7u@r!vv(@%4UmpUW!/;C~h?gno%JRR Yd.3~eF j4k#$!a
Oct 24, 2024 00:36:22.983031034 CEST	212	IN	Data Raw: 1a 80 23 a8 a1 58 00 d9 3a ac 7b 46 9b 9e b5 0d 80 d9 b5 39 ed f6 29 ba ba 87 6d 02 ee 75 16 53 dd 69 5b 00 36 27 ba 4f 35 d4 9d b4 3f ea c9 30 d8 81 ba 21 73 20 46 62 18 a3 59 12 13 31 81 c2 21 78 77 72 58 23 84 ad 7c 9d d2 db 2d 94 4f ac 35 50 Data Ascii: #X:{F9)muSi[6'O5?0!s FbY1!xwrX#\|-O5PTv,-1tx'$7Fu%s0I]=hvrapjw1i0cj."T!"Vv@C);kJL[86/\hj)
Oct 24, 2024 00:36:22.984345913 CEST	1236	IN	Data Raw: 10 61 25 72 82 ca 2e c4 05 45 82 1b a6 44 77 5c 29 3e 04 50 fe f2 a5 8b 70 d0 a0 91 56 b1 8a 91 57 b7 ba 51 66 65 45 dd 4a 2b d1 36 6e 02 7d fb 1c c0 dc 39 e7 b0 f7 9d ef 70 f6 83 1f 70 f7 9f 7b 78 7b e1 15 c1 de 78 43 bc 8f 3e 92 cc 0e e8 60 fe Data Ascii: a%r.EDw\)>PpVWQfeEJ+6n}9pp{x{xC>`B6HCINxJ!p/0_^E7?C>r0l@IAi14I1[k"%P4[ gpEFt0},57b"%(4/
Oct 24, 2024 00:36:22.984358072 CEST	1236	IN	Data Raw: 03 4c 43 67 a1 cb dc b4 42 be 98 11 e5 31 5a aa c1 8c 02 32 ad 53 f5 00 6d 22 cb cc c5 73 6e 53 39 f9 42 96 5f 77 f9 83 f7 61 8b 97 4f 8b f5 3b 3d 53 32 f9 0e b6 cb 94 f3 b2 e5 03 af d7 b4 17 3f e1 ee f5 8e 37 70 df 2d 9c b3 63 e9 d6 a5 35 76 b0 Data Ascii: LCgB1Z2Sm"snS9B_waO;=S2?7p-c5vsnK\|w3LG;A~`31}QzgIsAD,\|c8}nM`a3Rnemw#4m{euNr^G'+rrAvhvg`R-G
Oct 24, 2024 00:36:22.984368086 CEST	1236	IN	Data Raw: e7 7b 73 5d 2f 01 93 27 97 c6 66 2c a1 30 37 f6 78 9a b5 dc 97 62 6d 96 ae 8a fd 81 bd a1 ba 76 ff 8c 9e d8 d1 14 0c 85 ff e8 50 17 ab 8d dd 25 12 e7 28 0b 6e e6 7e 1d 0e 4c 07 39 75 2e 45 7f 47 8a 48 4f 22 cb fd 6d c3 9a ca d6 17 1a d3 f1 34 b4 Data Ascii: {s]/'f,07xbmvP%(n~L9u.EGHO"m4@(IzRncgTTf6Jsh;o!}{>uJ j6fhw{.xQVx1\|C9qG#_*6P\|$HAIKW1avK
Oct 24, 2024 00:36:22.984380960 CEST	1236	IN	Data Raw: a9 82 63 5a 59 f7 8f 99 96 a2 12 66 ab d0 79 19 26 31 36 2f 26 4b 36 31 0d 38 01 2d 50 8b c0 24 98 82 a6 12 0c 60 93 f5 e3 18 f8 77 da 14 b3 fb 68 46 7e 7f f5 f9 a1 76 73 3f 5f 89 11 d6 6c e5 47 e9 b8 d9 95 22 4c c7 d4 12 0e d0 2a 95 e2 26 50 dc Data Ascii: cZYfy&16/&K618-P$`whF~vs?_lG"L&Pg/w5v`Dr)YVh`eYrI&$>1~?0N0:l,_x@j%&<TQv#edl)pH5d&0a6=9f;;!zSy:@&b\
Oct 24, 2024 00:36:22.985193968 CEST	1236	IN	Data Raw: 85 58 28 4a 95 90 45 74 d3 71 55 7a 7a d9 49 1f ad d5 2a cd d7 0e d2 a4 d0 73 cf c6 46 ef 02 50 be bd cf 73 21 74 13 52 2a df ba 84 85 37 49 e1 66 48 54 c6 66 2f 64 8b 9f 9e b5 28 a1 fb c9 43 07 8a 26 f9 7c 93 fc 1f 68 31 64 9a 50 60 e1 00 72 00 Data Ascii: X(JEtqUzzIsFPs!tR7IfHTf/d(C&\|h1dP`rx%2QVckHA/?3V&c\T,\|B;7Dq;OFo7UMB3m9R^&\|o}zf89,o+XkWS q}3[{$
Oct 24, 2024 00:36:22.985207081 CEST	1236	IN	Data Raw: 76 c2 b3 99 28 32 b8 fc 73 ba 69 38 f5 de f8 fe e8 de 18 b7 75 dd 86 b3 be f4 54 81 6e 74 44 43 3a 6b d1 9e a6 4c 50 d3 1a ce bf f5 80 e2 d6 f0 5d c7 c4 aa 63 1b 53 cf ee b8 ac 54 2c 35 c0 b6 73 f2 e9 8e 1d ef e2 e4 43 f8 82 ac 9d 3b be c8 f1 05 Data Ascii: v(2si8uTntDC:kLP]cST,5sC;#5lD}FmE_/}Ug&G6Yesf_T/g]9y(`yK\hAjWM`^\dT}[w7.bLT^s+e2m@?YR@N2Idkh&JmtRTHL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	49759	208.91.196.253	80	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:36:21.818355083 CEST	413	OUT	GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive Origin: http://ww1.frothylattestudio.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww1.frothylattestudio.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:36:22.427687883 CEST	360	IN	HTTP/1.1 404 Not Found Server: nginx Date: Wed, 23 Oct 2024 22:36:22 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Content-Encoding: gzip Data Raw: 61 61 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed 90 b1 0a 02 31 10 44 7b c1 7f 58 3f 20 44 e1 ca 25 8d 28 58 68 e3 17 e4 dc f5 12 c8 6d 8e 18 c1 fb 7b 13 bd 03 b1 b6 b4 dc 99 37 c3 b0 e8 72 1f cc 72 81 8e 2d 19 cc 3e 07 36 cd ba 81 53 cc b0 8f 77 21 d4 6f 11 f5 0b 29 68 1b 69 ac 91 0b 4b e6 64 d0 6d be 13 45 41 3d d9 b5 bb 40 d3 25 9d 97 c7 a7 a7 e7 36 3d 2f 59 29 05 16 06 4b e4 a5 83 1c 81 fc cd b6 81 e1 78 3e ec c0 0a c1 d6 a5 d8 33 5c 93 67 a1 30 02 a7 14 53 49 74 0c 4a d5 65 ff 8a 5f fe e2 09 27 a7 bf a8 24 02 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: aa1D{X? D%(Xhm{7rr->6Sw!o)hiKdmEA=@%6=/Y)Kx>3\g0SItJe_'$0
Oct 24, 2024 00:36:22.847661018 CEST	408	OUT	GET /__media__/fonts/montserrat-bold/montserrat-bold.woff2 HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive Origin: http://ww1.frothylattestudio.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww1.frothylattestudio.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:36:22.981695890 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 23 Oct 2024 22:36:22 GMT Content-Type: application/octet-stream Content-Length: 12104 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-2f48" Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 77 4f 46 32 00 01 00 00 00 00 2f 48 00 10 00 00 00 00 73 60 00 00 2e e6 00 02 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 20 1b ad 40 1c 20 06 60 00 87 06 11 08 0a 81 8e 38 e9 21 0b 84 10 00 01 36 02 24 03 88 1a 04 20 05 8d 19 07 85 43 0c 07 1b a1 5d 25 ec 98 89 b8 1d 80 52 b4 3f 8b 88 6a 52 a1 23 11 b6 62 91 2a cb fe ff 63 02 1d 43 2c b8 87 ca 54 f7 40 45 5b 95 cc 76 4f 08 b6 5f e2 72 2f b5 76 f7 d1 3c 3a dd 0e 0e 7e f7 02 59 35 b8 c4 63 07 48 61 a0 88 db d9 fd 6a ea d3 ed 5b 29 d4 8e d8 59 2d 27 25 7c 13 8b 61 67 3c 40 86 08 fc 77 c9 aa 7f b0 2c 64 cd 0a 6f fa bd 3f 3b 6f 20 12 21 92 c3 38 3c 74 c7 8f c8 10 bf 72 06 b6 8d fc 49 4e 5e 9e e7 7f bf a7 ed 73 ef 17 1f 11 4f e3 c9 2d 4d 12 b1 6c 02 44 5d 5d 34 12 2a 95 45 9f 86 25 12 c9 d3 9b 52 55 c1 d2 41 d4 07 58 1a d8 5e ea 50 81 0a d8 01 59 b4 a1 52 a1 c2 6e f3 e4 5d e7 cd 49 df 90 f4 61 8c 86 85 22 91 61 4b 20 1d 86 89 97 db 5d 98 bb 4c 74 0e a9 f3 0f db ec 1b 15 9b d3 31 b3 d0 06 a9 14 10 10 8b 30 41 b1 [TRUNCATED] Data Ascii: wOF2/Hs`.B?FFTM @ `8!6$ C]%R?jR#bcC,T@E[vO_r/v<:~Y5cHaj[)Y-'%\|ag<@w,do?;o !8<trIN^sO-MlD]]4E%RUAX^PYRn]Ia"aK ]Lt10AP='VNpZUEJ8YMEO;`[5C%Ckr:LZ)V6PG$]3Jm;d@}R0-Qc6pa{<vJ$8!`<Tv0HMJo>-A6$WnTA!]R6{E^D\J-^:)L8^3U8[W&M3of&8%$7rlXWjw]]U)9iJCnL1ym RHv~lU][*bN@uPB Y{?`Q-[\%]~Qrk7RNtY=f2{._zo:.nT3jCpa9:=Z;&1Xe\|5i7lie3k39V\|3w,`cK-5-,[--OZ^2[X:fR@a^"^KZ+hR
Oct 24, 2024 00:36:22.981715918 CEST	1236	IN	Data Raw: d3 ae 81 0f 11 1d b4 e5 f5 0a d0 cc 75 ce e0 61 02 4d 75 d1 82 21 43 46 34 31 32 41 25 a1 a0 d9 66 eb 84 a2 d8 67 8f 7b d9 39 ad ca 2f 15 d7 ba 06 db 24 5a a0 cd 3c 87 83 16 1b 15 a4 6b 0d 18 d3 cb 6c b0 10 05 ed 78 ad 02 54 d4 2d 48 b3 1c 96 68 Data Ascii: uaMu!CF412A%fg{9/$Z<klxT-HhVp**iC=NYY()YUQnI.IWm@?xFPmN>sT/mSilP,lZ7DE)\|&oG,(HS.}
Oct 24, 2024 00:36:22.981729031 CEST	1236	IN	Data Raw: bf 08 a7 e4 c3 78 94 ef e8 ca a2 79 c9 a1 ac 29 e5 f3 c6 aa 5e 92 ca 65 ae c3 87 6a b4 29 1a c5 3e 2c 38 21 d4 4d c3 a0 70 6e 14 4d 32 f9 9c 5d c9 99 c5 25 16 57 fa 84 d6 2b 97 ac 92 9c 54 90 1c 6d d5 db ab 6e 5c d3 fb f4 f3 d3 ac 07 a9 0d 13 1a Data Ascii: xy)^ej)>,8!MpnM2]%W+Tmn\uFgMqSs>_da;n)4/B]kM.'o^{qf:wiDm67\ 7gt%<^XNOldcN*9nPXm['r\|d@r\">kaa
Oct 24, 2024 00:36:22.981961012 CEST	1236	IN	Data Raw: 33 0e 3a 64 de 61 47 bc 53 24 43 26 a1 0f d6 1a 55 20 d7 77 a5 44 53 f3 81 7e ff 2b 9e 7a aa 9b a4 7e fa e3 b7 a7 fe 39 ac 02 f0 9d 39 eb a4 cb f7 d7 dd 80 ff 89 55 fa 08 78 45 4e e9 8a ab 9e 79 ee b5 37 5e 78 69 36 4d 3f 00 fe f2 cd 67 5f d2 4a Data Ascii: 3:daGS$C&U wDS~+z~99UxENy7^xi6M?g_Jd^y:kC.z)R4e<=j@P&0 VR_J\\~oK=:Ql FX9T\|4~1GZh+qc3\|10Oc6=_vf>N}Yf~
Oct 24, 2024 00:36:22.981971979 CEST	1236	IN	Data Raw: 4d e6 51 d3 b9 44 ec 49 21 41 42 36 d6 22 c0 51 24 6b 65 2c 9d 02 bb 4b 51 3d 45 71 4f f4 62 00 21 c8 d1 c2 26 87 74 ef 95 9c 4c 84 aa 09 ca 85 40 b9 5d 93 8f 7e 2a 28 33 9c fb 29 41 f1 04 b4 bd c2 33 81 b9 af 3d f0 04 b7 c2 de a7 30 17 5e ea 5d Data Ascii: MQDI!AB6"Q$ke,KQ=EqOb!&tL@]~(3)A3=0^]ZL,(J'S+<a b<_X40EKR,c~FHK#$cbyjsa=BY:6{ZBKIN!\|}W+emY+
Oct 24, 2024 00:36:22.981982946 CEST	1236	IN	Data Raw: f8 3b 29 22 af 8d 63 7e 92 61 f5 a1 79 54 39 6e f6 10 ed 8d f2 e6 ac 72 ad 5a ca 55 bf 6d 90 f2 d8 50 ae 3f ef 79 e3 5a 12 d6 27 a4 ad 2b 31 4f 2c aa 48 4a 80 2e cb de 93 74 bb 37 21 f9 d5 58 1c 90 af a8 be af e1 e5 d7 90 cf 40 7f 90 f7 18 4a ff Data Ascii: ;)"c~ayT9nrZUmP?yZ'+1O,HJ.t7!X@Jqa{THqk-eufnlt0h:9<N@YRsGQQ6.)h?saN3(ygT(4^^.H~a-L!3u{\9
Oct 24, 2024 00:36:22.982382059 CEST	1236	IN	Data Raw: 8b 3b 70 c1 02 45 5a 50 01 e6 bc ca df b3 05 9c 3e 78 a8 32 65 be 72 46 35 bf b8 b7 7a 5f f5 b5 79 15 88 c9 c7 4f dc 7f 80 e2 bb 99 c7 41 ee 11 e9 fa 9d 9d 65 5e 5a bb b3 48 b0 7e e8 e2 a5 60 00 4f 02 78 37 d7 5d a1 a1 90 0e a4 fc a7 9a ff 91 54 Data Ascii: ;pEZP>x2erF5z_yOAe^ZH~`Ox7]TP%<tbd{ku~@59YB"`?-Xj%^DscAvI. y2(XBZUC&eXw{y
Oct 24, 2024 00:36:22.982393980 CEST	1236	IN	Data Raw: 85 7b 82 c4 8c 78 4f 7f fc 62 02 9c 26 cb 4c 8b cb 82 34 e1 85 f4 58 74 99 a7 2b d7 9f e0 ea ef e0 51 ea e6 9f 06 52 7b 62 a6 4f 9e 5e cf f3 56 80 7f fc 17 cf 6b 4b be 57 ae 75 2f d1 eb de 8d f7 df 4e 4c bc 9b 9c 7a bb 65 e2 63 11 9d 21 2b 9c a9 Data Ascii: {xOb&L4Xt+QR{bO^VkKWu/NLzec!+,A#^g2^{=D*Xu$ix\|khqnYiz,Qfd~_sh0OqC(_tY])VrD3=f;$$<Kk6RRmQ`sG%<+\|
Oct 24, 2024 00:36:22.982403994 CEST	1236	IN	Data Raw: 3f 59 79 13 d0 c9 9a df 26 c3 a4 bb 51 aa 6b 01 2d e6 bd b8 ee d2 df fb bb bf 3f 8b 0a 0f 7c a7 98 54 fc da cf e8 1a 74 99 4c 3d 7b 6d 8b ec a2 60 b8 f9 4e 63 fc 58 7e f1 8a 78 31 4b cc 1d 76 da fa e2 39 ab 21 42 f8 c3 cb ec d4 9a 29 20 d8 6d 1d Data Ascii: ?Yy&Qk-?\|TtL={m`NcX~x1Kv9!B) mrvQ:#94<i}q '9lxVg2o~YUXcH{,Y7l@eQ.V6'cS@2&j+/Y-_\"GGC
Oct 24, 2024 00:36:22.982414007 CEST	1236	IN	Data Raw: 81 58 95 c0 68 3c eb 87 09 cd dd 6d cb 23 21 8f 75 83 34 20 a1 ea 1d 0c a2 30 56 f3 3d fa 5b f8 e9 dd 84 21 77 4d a3 04 33 ee dc 40 6c d4 b5 60 33 96 6d d7 80 87 a7 51 df 63 54 8e f0 be 4e d2 2c eb cc 2f db 9a 59 3a f0 8f 4d 40 36 22 8b f1 34 26 Data Ascii: Xh<m#!u4 0V=[!wM3@l`3mQcTN,/Y:M@6"4&$"%g\$,.2T?nP";(r0}5t<g5EF+-nP;#nY4j-&A' )lnbxL#44'@'xs6i%Z
Oct 24, 2024 00:36:22.982425928 CEST	25	IN	Data Raw: 72 0f ed 22 6b d0 c4 da 45 3a d1 a4 39 22 7a 46 ed 9f 7c a8 d9 06 00 00 00 Data Ascii: r"kE:9"zF\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	49760	208.91.196.253	80	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:36:21.822247982 CEST	411	OUT	GET /__media__/fonts/montserrat-medium/montserrat-medium.woff HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive Origin: http://ww1.frothylattestudio.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww1.frothylattestudio.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:36:22.428013086 CEST	360	IN	HTTP/1.1 404 Not Found Server: nginx Date: Wed, 23 Oct 2024 22:36:22 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Content-Encoding: gzip Data Raw: 61 61 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed 90 b1 0a 02 31 10 44 7b c1 7f 58 3f 20 44 e1 ca 25 8d 28 58 68 e3 17 e4 dc f5 12 c8 6d 8e 18 c1 fb 7b 13 bd 03 b1 b6 b4 dc 99 37 c3 b0 e8 72 1f cc 72 81 8e 2d 19 cc 3e 07 36 cd ba 81 53 cc b0 8f 77 21 d4 6f 11 f5 0b 29 68 1b 69 ac 91 0b 4b e6 64 d0 6d be 13 45 41 3d d9 b5 bb 40 d3 25 9d 97 c7 a7 a7 e7 36 3d 2f 59 29 05 16 06 4b e4 a5 83 1c 81 fc cd b6 81 e1 78 3e ec c0 0a c1 d6 a5 d8 33 5c 93 67 a1 30 02 a7 14 53 49 74 0c 4a d5 65 ff 8a 5f fe e2 09 27 a7 bf a8 24 02 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: aa1D{X? D%(Xhm{7rr->6Sw!o)hiKdmEA=@%6=/Y)Kx>3\g0SItJe_'$0
Oct 24, 2024 00:36:22.847258091 CEST	412	OUT	GET /__media__/fonts/montserrat-medium/montserrat-medium.woff2 HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive Origin: http://ww1.frothylattestudio.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww1.frothylattestudio.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:36:22.983043909 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 23 Oct 2024 22:36:22 GMT Content-Type: application/octet-stream Content-Length: 26368 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-6700" Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 77 4f 46 32 00 01 00 00 00 00 67 00 00 13 00 00 00 01 26 88 00 00 66 91 00 07 33 33 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 68 1b 82 84 36 1c 86 24 06 60 00 83 62 08 3c 09 84 65 11 08 0a 82 97 28 81 f6 67 01 36 02 24 03 87 24 0b 83 54 00 04 20 05 8a 14 07 85 52 0c 81 6f 3f 77 65 62 66 06 5b 28 13 51 a2 ba 35 e3 aa 3b 01 a5 d7 df b6 a7 d7 26 dc 86 db ed f0 27 99 e9 ed 44 91 11 61 e3 00 01 b3 7b 18 d9 ff 9f 90 9c c8 18 ec 05 ec bf 9a 56 b5 20 58 52 02 73 c3 30 8b 85 4e 38 dd ee 66 8b 85 c9 9d 55 6f 98 36 e4 fa a8 a4 61 a1 57 d1 71 3d cf 4b 1f d1 4d f2 43 4d 89 83 6f 6e 4c 5c 50 75 60 61 67 e2 a4 34 32 d8 d3 10 a9 7e 34 6a d5 d2 a0 d8 bf 3f 4e b4 48 c2 12 3c 26 68 f0 62 fb 65 aa f3 b6 f7 c4 ea 9b 32 60 3c 7b 52 d7 a2 e7 28 cc 79 c9 12 63 d7 03 11 35 4b 8e f4 f5 e1 69 5b bd 3f 33 a4 c3 50 03 48 3a 12 69 14 da d8 ec ad 7d b8 55 62 f6 66 a4 7a 5d 21 41 b5 df 93 3d bb b3 ef ff 03 80 10 a9 73 01 06 05 84 42 21 ab 2b 4f 32 88 ea 2a ea 5c 74 2a 12 78 06 78 3d fb 17 3b [TRUNCATED] Data Ascii: wOF2g&f33?FFTMh6$`b<e(g6$$T Ro?webf[(Q5;&'Da{V XRs0N8fUo6aWq=KMCMonL\Pu`ag42~4j?NH<&hbe2`<{R(yc5Ki[?3PH:i}Ubfz]!A=sB!+O2\txx=;W}u:"R"$eGXi bX%bFh:81/XV=A6p1?5k{_~mZeoR4JWIWRiPRP!PBrpBjoUq\hF!.>=b"@k)q%A0AIX5hf1F>YhhpkCsxZ~F4!$6sn2iq;$oQ/t`8y9!A.i@krrHxl]7Tp1iXP.V]Mq\7lytH}MsEiAcE\A2R4oBt)9B82CRryEPu+WZi.H3?rAYd935 uwHZK>(2{c-AJwxt3S*B',j"\X/l-Yh}~g
Oct 24, 2024 00:36:22.983053923 CEST	427	IN	Data Raw: 2a 8f c4 49 7a aa 6c 5d 48 26 36 de 34 db 6d 26 50 cd fc 7c d7 0c 48 17 e9 d0 0c 42 bb 49 f4 8c 30 c2 38 9f ef 31 bc 73 76 fb ca 6f b4 ef b8 5d ec 3d bb 6d 45 64 08 12 42 90 20 22 12 86 f7 77 5c 77 12 fe d7 64 4f 0b af a4 b7 9e aa bb aa 55 6b c5 Data Ascii: *Izl]H&64m&P\|HBI081svo]=mEdB "w\wdOUk\D17c}[^#rUu<aL#II}rj[oZ$~Soo=7/M0<Q(PZDPZ~Ph=x=%fY5
Oct 24, 2024 00:36:22.983066082 CEST	1236	IN	Data Raw: 88 dc 26 39 cd e6 04 a9 7e 14 93 c4 f9 a6 bb f0 00 b1 5b 7e cb 3d d0 f5 81 90 3a cb ab 1d 7f e3 d6 89 d6 0a 14 06 7f ec 89 d4 c8 9a d5 5e 3d 3c 54 c9 4c 51 ec 44 dd 68 2f f8 99 fb e0 92 d2 7c cb b3 92 51 1f 6e cc bb 83 e9 ce 77 36 a8 8d 54 50 76 Data Ascii: &9~[~=:^=<TLQDh/\|Qnw6TPv'B A)b(aS"{!A(6\Yu5&1i&r@V;DnRY-a1/9A}!"0k>}z\/z&`pF'^:HY!TvJVs0g
Oct 24, 2024 00:36:22.983745098 CEST	1236	IN	Data Raw: c1 39 e2 f8 68 ef 40 c1 d2 4d 28 1b 2a 05 d2 b6 f5 87 ed eb a4 9c 96 05 5b 36 3b e5 57 6b 64 c8 a6 2d 7f a3 08 c8 45 0e 36 6e bf 24 ad d8 48 fb 15 49 2f b2 7b cf ec 3d 43 32 c3 ed 0f 5c d2 62 7b a5 ef d6 68 51 f7 a5 91 77 37 f1 6a e2 c6 b3 ea c1 Data Ascii: 9h@M(*[6;Wkd-E6n$HI/{=C2\b{hQw7jk]wFuq-d={l2`5U:]>-:_2cU-z_Q"j"_lz>QKaoqi@4rxw$/dC,Yq8za/Jy9
Oct 24, 2024 00:36:22.983756065 CEST	424	IN	Data Raw: 6d 99 d5 4e 1a f5 98 37 bd 83 da c2 3d 2f 6b fa d6 fc 27 9b 01 30 af 68 fe df 8e 75 91 7e 56 59 53 be b8 28 fa da 51 29 40 a8 f4 be 26 d5 e3 09 af c9 67 bd f7 b2 2e 57 9c 6f 0b 88 dd 5b 6c fa 25 ea 9f 62 24 88 6c 52 de 94 9c 2a 77 55 f7 08 fc 8a Data Ascii: mN7=/k'0hu~VYS(Q)@&g.Wo[l%b$lRwU?>Lg;0N!9~?Fu2JFVwriSzvPs&'\|dIKm2x8\]aJ(jkPaGhVl^5[1436 FjW:pmXV&)
Oct 24, 2024 00:36:22.983767033 CEST	1236	IN	Data Raw: 86 dc 8f e4 dd b5 00 39 07 29 65 65 5a 0a 4c 38 3c e5 ed 35 ae b0 ad ba 7c 35 87 22 0d e6 a8 92 50 75 62 2d b4 95 4e 4b 91 51 cb 8a 90 d6 70 1e 93 34 c2 9c cc 91 5e 2f 68 55 ce 51 c0 15 3f 00 0e b5 35 2c 1b 87 46 8b 4d 37 1f 40 75 16 e2 55 2c 6b Data Ascii: 9)eeZL8<5\|5"Pub-NKQp4^/hUQ?5,FM7@uU,k_hA\TojVR-ZQu4;SyJ1&hEG ]`^MBcjh_}tq-4j\OmC5e.4Cxu-b-
Oct 24, 2024 00:36:22.983779907 CEST	1236	IN	Data Raw: 09 c0 c5 08 71 d1 c6 ce ac 6a 38 f4 a7 6a 3d 74 0a 91 41 06 ca 76 5f 93 75 76 57 02 99 ac a2 12 b2 44 32 4a 7d ea e2 ba 71 95 a3 78 e7 6c 26 a3 d8 97 7c 56 57 05 fd e1 5c 09 31 1d aa ed a5 44 4f 6b e1 45 01 49 01 fa e9 91 9c 83 89 b6 b9 05 3a 99 Data Ascii: qj8j=tAv_uvWD2J}qxl&\|VW\1DOkEI:zeSY:rjz.Omx`ZGNvnebnH"i,""E?Q^C\|C75n8$#AjBNEx1l;RTX(iBNuth^@$* LKFO!
Oct 24, 2024 00:36:22.983792067 CEST	160	IN	Data Raw: 1f f3 3a b2 5c f2 f6 ac 95 45 34 88 e7 5a e1 2e ac 57 d5 08 6d 93 83 be 88 e9 76 5c ad ed 75 46 cd 29 b2 0a 33 5d 85 ae 4a 30 17 29 e3 a6 c9 ce 1a c9 84 51 6a a4 0d bb a7 06 2f aa 24 56 8e 02 26 6b 9c 1a 81 a9 d6 7e 72 00 50 ca cd 6f 60 a0 4c 58 Data Ascii: :\E4Z.Wmv\uF)3]J0)Qj/$V&k~rPo`LXGr +3',[-H.RUb7(h85cK8E
Oct 24, 2024 00:36:22.984308004 CEST	1236	IN	Data Raw: 9f a7 73 3e 4c 88 64 72 62 83 66 8e 38 2e 5f 94 ce a9 80 bc 42 ad 3f 6c b3 a2 b1 4b 53 d3 6e 7a c0 43 22 a1 cc 90 64 76 29 b9 d8 4a c8 35 62 c9 1a db f7 6c 1c a2 94 b6 58 3c 16 cf c6 4d 2d c0 47 ca cb fd 78 3d 90 8a 13 4c 47 14 44 ca 14 21 04 22 Data Ascii: s>Ldrbf8._B?lKSnzC"dv)J5blX<M-Gx=LGD!"X*#Bh,1vkG)p3`G"a=2W,^,&j0DAp)$4IW .<cJ!\|$vZnpUZz#V%QcV\|"#Y0io
Oct 24, 2024 00:36:22.984324932 CEST	1236	IN	Data Raw: 0f ec f1 7a 1d d3 1a ae bc 5a 4c fc c9 f6 cc 00 d2 ba 6b 42 b1 d3 dd 0e 46 11 98 22 96 3a 99 2c 6a e7 21 f5 cd 50 1f 14 6f 46 ed d2 f5 50 04 bd 35 b6 23 25 7d de 8f 5f 83 56 25 45 53 2c 1f b8 c9 98 6a bc 03 97 79 00 e2 6b 80 4c 79 d7 d3 6c da 78 Data Ascii: zZLkBF":,j!PoFP5#%}_V%ES,jykLylx[q[e-9q1ycY+];`#0rYI<gUy!Yj^%/u_AaEkTEtLsXvIyK)d:&3F
Oct 24, 2024 00:36:22.984335899 CEST	424	IN	Data Raw: b8 46 17 fa f9 48 fc 70 e8 27 9e 0d ae fd 3d e0 46 0f 7b c1 1a 22 22 8f 43 4d cc 9a 5d fd ca 0b 8a 62 c5 5b 20 d5 b3 39 32 37 09 89 4c 44 44 05 a2 55 21 a9 5a c4 a8 03 11 02 4b 49 d5 24 32 60 08 31 a8 cb 60 41 81 b7 0c a5 a1 76 94 4e 6b a8 cc 19 Data Ascii: FHp'=F{""CM]b[ 927LDDU!ZKI$2`1`AvNkI]+72"G!w/MBr5rwU94WJ`:#2A<^ACYRTx)FoxV5(UgZ"~) EKQEI9;$2u[8@bv34D'"i9?ZhyLu~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.7	49761	208.91.196.253	80	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:36:21.986264944 CEST	293	OUT	GET /__media__/js/min.js?v2.3 HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:36:22.587634087 CEST	341	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 23 Oct 2024 22:36:22 GMT Content-Type: application/javascript Content-Length: 8435 Last-Modified: Wed, 22 Sep 2021 05:16:17 GMT Connection: keep-alive ETag: "614abc21-20f3" Expires: Wed, 06 Nov 2024 22:36:22 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Oct 24, 2024 00:36:22.587770939 CEST	1236	IN	Data Raw: 2f 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 32 2d 32 30 31 36 20 4d 65 64 69 61 2e 6e 65 74 20 41 64 76 65 72 74 69 73 69 6e 67 20 46 5a 2d 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 20 Data Ascii: /* * Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved */var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n
Oct 24, 2024 00:36:22.587830067 CEST	1236	IN	Data Raw: 28 29 3b 6f 3c 31 65 33 26 26 28 6f 2b 3d 31 39 30 30 29 3b 76 61 72 20 72 3d 6e 2e 67 65 74 44 61 79 28 29 2c 69 3d 6e 2e 67 65 74 4d 6f 6e 74 68 28 29 2c 6e 3d 6e 2e 67 65 74 44 61 74 65 28 29 3b 6e 3c 31 30 26 26 28 6e 3d 22 30 22 2b 6e 29 3b Data Ascii: ();o<1e3&&(o+=1900);var r=n.getDay(),i=n.getMonth(),n=n.getDate();n<10&&(n="0"+n);o=t[r]+", "+e[i]+" "+n+", "+o;document.write(o)}function checkUTFChar(t){for(var e=!0,n=0;n<128;++n){var o=n.toString(16);if(1==o.length&&(o="0"+o),o="%"+o,(o=un
Oct 24, 2024 00:36:22.587842941 CEST	1236	IN	Data Raw: 65 28 62 72 5f 64 61 74 61 2e 67 65 74 4d 6f 75 73 65 50 6f 73 69 74 69 6f 6e 44 61 74 61 28 29 29 3a 22 61 64 63 6c 6b 22 3d 3d 74 7c 7c 22 73 72 63 71 72 79 22 3d 3d 74 3f 22 26 62 64 3d 22 2b 65 73 63 61 70 65 28 62 72 5f 64 61 74 61 2e 67 65 Data Ascii: e(br_data.getMousePositionData()):"adclk"==t\|\|"srcqry"==t?"&bd="+escape(br_data.getSearchBoxRelatedData()):"&bd="+escape(br_data.getURLBrowserData())}catch(t){}return e}var brdata=function(){this.fd="#",this.cookieSupport=-1,this.isinframe=-1,
Oct 24, 2024 00:36:22.588136911 CEST	438	IN	Data Raw: 65 50 6f 73 69 74 69 6f 6e 44 61 74 61 28 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 66 69 72 6d 54 6f 4f 70 74 4f 75 74 28 29 7b 76 61 72 20 74 3b 6f 70 74 4f 75 74 3d 63 6f 6e 66 69 72 6d 28 22 59 6f 75 20 77 69 6c 6c 20 6e 6f 74 20 62 65 Data Ascii: ePositionData()}};function confirmToOptOut(){var t;optOut=confirm("You will not be able to see any ads or websearches."),optOut&&((t=new Date).setTime(t.getTime()+31536e6),t="; expires="+t.toGMTString(),document.cookie="dnsoptout=1"+t+"; path=
Oct 24, 2024 00:36:22.588149071 CEST	1236	IN	Data Raw: 70 61 67 65 59 3a 65 76 65 6e 74 2e 63 6c 69 65 6e 74 59 2b 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 54 6f 70 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 54 6f 70 29 7d Data Ascii: pageY:event.clientY+(document.documentElement.scrollTop\|\|document.body.scrollTop)}catch(t){}return!0}document.onmousemove=mPos;var _skPU={_Top:null,_wh:function(){var e=0;try{"number"==typeof this._Top.window.innerHeight?e=this._Top.window.inn
Oct 24, 2024 00:36:22.588165045 CEST	1236	IN	Data Raw: 3d 74 6f 70 29 7d 63 61 74 63 68 28 65 29 7b 7d 76 61 72 20 5f 6e 70 53 55 3d 64 72 3f 75 72 6c 3a 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 2c 5f 6e 70 49 44 3d 22 70 75 5f 22 2b 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 39 39 2a 4d 61 74 Data Ascii: =top)}catch(e){}var _npSU=dr?url:"about:blank",_npID="pu_"+Math.floor(89999999*Math.random()+1e7),pxLeft=0,pxTop=0;-1==pw&&(pw=this._ww()),-1==ph&&(ph=this._wh()),pxLeft=this._wl()+this._ww()/2-pw/2,pxTop=this._wt()+this._wh()/2-ph/2,npf=npf\|\|
Oct 24, 2024 00:36:22.588177919 CEST	1236	IN	Data Raw: 50 2e 75 2c 5f 5f 70 70 2e 46 41 43 50 2e 77 2c 5f 5f 70 70 2e 46 41 43 50 2e 68 2c 5f 5f 70 70 2e 46 41 43 50 2e 70 2c 22 65 78 22 3d 3d 74 29 2c 21 28 73 68 6f 77 50 6f 70 3d 30 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 28 5f 5f 70 Data Ascii: P.u,__pp.FACP.w,__pp.FACP.h,__pp.FACP.p,"ex"==t),!(showPop=0)}catch(t){return!(__pp.FACP.pd=!0)}}function atevt(){document.addEventListener?document.addEventListener("click",ppctrl,!1):document.attachEvent?document.attachEvent("onclick",ppctrl
Oct 24, 2024 00:36:22.588190079 CEST	581	IN	Data Raw: 74 72 79 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 5f 5f 70 70 2e 64 70 26 26 76 6f 69 64 20 30 21 3d 3d 5f 5f 70 70 2e 64 70 2e 75 26 26 5f 5f 70 70 2e 64 70 2e 75 26 26 30 3c 5f 5f 70 70 2e 64 70 2e 75 2e 6c 65 6e 67 74 68 26 26 30 3d Data Ascii: try{return void 0!==__pp.dp&&void 0!==__pp.dp.u&&__pp.dp.u&&0<__pp.dp.u.length&&0==__pp.dp.pd?(__pp.dp.pd=!0,_skPU.doPU(__pp.dp.u,__pp.dp.w,__pp.dp.h,__pp.dp.p,"ex"==t),!0):!1}catch(t){return!1}}function shldp(t){try{return void 0!==__pp.ld&&v
Oct 24, 2024 00:36:22.817641973 CEST	297	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:36:22.955744028 CEST	329	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 23 Oct 2024 22:36:22 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Wed, 06 Nov 2024 22:36:22 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Oct 24, 2024 00:36:22.955770016 CEST	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 c2 00 00 03 dc 04 03 00 00 00 09 4e b3 37 00 00 00 0f 50 4c 54 45 1a 23 41 10 16 2c 26 2f 4d 3a 43 61 4d 56 73 32 a1 dd 4a 00 00 20 00 49 44 41 54 78 da ec dd 51 7a 1a c7 b6 80 d1 8d d0 00 Data Ascii: PNGIHDRN7PLTE#A,&/M:CaMVs2J IDATxQz0,,7);%z\|N(@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((
Oct 24, 2024 00:36:22.955781937 CEST	146	IN	Data Raw: a2 c2 14 56 7e 4e ec 57 58 1b 33 a2 c2 14 56 7e 4e ec 57 d8 4e 61 28 ec aa 39 b1 57 61 8d cc 88 7e 5b 5f 46 2b 13 4f bf 39 31 ac 98 c2 14 96 b8 5f fa 14 b6 6b 66 c5 16 f2 28 60 d5 cc 7e 39 94 29 6c d9 cc 82 f9 3b 1d 65 b4 b3 61 be 96 28 ac 9d ef Data Ascii: V~NWX3V~NWNa(9Wa~[_F+O91_kf(`~9)l;ea(\|kvsbX.),q\,+ZwqM8]K`q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	49768	208.91.196.253	80	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:36:23.622450113 CEST	301	OUT	GET /__media__/pics/28905/res-arw.png HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:36:24.223656893 CEST	672	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 23 Oct 2024 22:36:24 GMT Content-Type: image/png Content-Length: 346 Last-Modified: Tue, 04 Jan 2022 14:44:28 GMT Connection: keep-alive ETag: "61d45d4c-15a" Expires: Wed, 06 Nov 2024 22:36:24 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 22 00 00 00 1d 08 03 00 00 00 f8 b5 4e 88 00 00 00 45 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 57 d4 34 b7 00 00 00 16 74 52 4e 53 00 51 a8 e4 9d fa 21 30 f4 13 ba 01 72 90 da 3e 7e 03 c7 5f 0a 88 8d 4f 23 a5 00 00 00 ae 49 44 41 54 28 cf 85 93 e1 12 83 20 0c 83 11 41 d4 82 0a 6a de ff 51 37 b7 dd 4e a4 94 ef 77 ae 85 34 51 e7 7e a8 06 2b c6 30 34 34 33 80 b9 8b 92 c4 e1 a2 df 26 41 a3 3f 1a 58 bd 92 3c e6 62 f1 b5 51 e6 af c1 68 1c a7 a0 c1 e2 46 62 5d 30 c8 e0 5c c8 c7 80 75 21 a0 e0 e1 02 4d 23 18 32 17 e8 04 cb dd 05 7e 4c ee 82 a9 48 ac 76 e2 63 b2 37 07 4e 90 f6 a8 a8 6e 0c ec e3 14 9a db 40 fc ad 7f 1b ca 84 cd c5 37 a9 88 ef 6d 03 1f 99 24 5c ef 4b 27 c7 e9 4d 5c 1a a1 54 6a 47 ab 25 47 df ec 9a 5f fc a1 a2 5c 58 6a 55 fa 05 63 50 20 91 7b 34 90 ee 00 00 00 00 [TRUNCATED] Data Ascii: PNGIHDR"NEPLTEGpLW4tRNSQ!0r>~_O#IDAT( AjQ7Nw4Q~+0443&A?X<bQhFb]0\u!M#2~LHvc7Nn@7m$\K'M\TjG%G_\XjUcP {4IENDB`
Oct 24, 2024 00:37:09.227967024 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.7	49709	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:16 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:17 UTC	561	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:17 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 21 Oct 2024 13:21:21 GMT ETag: "0x8DCF1D34132B902" x-ms-request-id: 04de7e24-801e-008f-0e20-242c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223617Z-16849878b786vsxz21496wc2qn00000006u000000000vdqs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:36:17 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-23 22:36:17 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-23 22:36:17 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-23 22:36:17 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-23 22:36:17 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-23 22:36:17 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-23 22:36:17 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-23 22:36:17 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-23 22:36:17 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-23 22:36:17 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49711	37.19.194.80	443	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:18 UTC	967	OUT	GET /delivery/js/cmp_en.min.js HTTP/1.1 Host: cdn.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ww1.frothylattestudio.com/?fp=2qoqDYI%2B0iJZGtPstQqccpYVxaI6ObJitI3FjXXWfpuGUlRgNWh70labVRMtFUQ5LVzoMsVoCWLxiQoM%2BdHqAmXOoXaKy6JyeBLBtnHKVd%2FGKCsWGnM13tv86SZzSImbUwvUTGR%2FwbvV68cR0%2FelwwHzPZHwooLRpm81LFvUEvjkylyIR3ZT0%2B2EYh1V8Mk1LHsmLJgCnP3oZ1aTXFi%2FizUqz%2BiqR4qxlPDtjH3Rv7mUkC7JKPeRf7k2n5uCk9QpAZKz65a1XlYxqE%2BvpXcQKkjEW4hITPhDocilO%2FelAu0%3D&poru=b%2F8ZxUo4ug61cKbUIWuWZ9hktTN0TXmB5ubOU%2BIkZsWE32eqR80OwRFFQvOBToKB&_opnslfp=1& Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:36:18 UTC	616	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:18 GMT Content-Type: application/javascript Content-Length: 453394 Connection: close Cross-Origin-Resource-Policy: cross-origin Last-Modified: Tue, 22 Oct 2024 16:18:01 GMT ETag: "6eb12-625131cf9c040" Cache-Control: max-age=86400 Expires: Wed, 23 Oct 2024 16:18:15 GMT Edge-Control: max-age=86400 Cross-Origin-Resource-Policy: cross-origin X-77-NZT: EgwBJRPCTwH3IVAAAAwBJRPCNAG3hgoAAA X-77-NZT-Ray: 0d1fa518d303c05f627a19672a0ed725 X-77-Cache: HIT X-77-Age: 20513 Vary: Accept-Encoding Server: CDN77-Turbo X-77-POP: frankfurtDE Accept-Ranges: bytes
2024-10-23 22:36:18 UTC	15768	IN	Data Raw: 77 69 6e 64 6f 77 2e 63 6d 70 63 63 73 76 65 72 73 69 6f 6e 62 75 69 6c 64 3d 22 32 30 32 34 2d 31 30 2d 31 32 2e 31 37 2e 35 39 22 3b 69 66 28 21 28 22 72 70 6c 22 20 69 6e 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 29 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 72 70 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 63 2e 73 70 6c 69 74 28 61 29 2e 6a 6f 69 6e 28 62 29 7d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 66 61 6c 73 65 7d 29 7d 69 66 28 21 28 22 63 6d 70 5f 75 6e 71 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 75 6e 71 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b Data Ascii: window.cmpccsversionbuild="2024-10-12.17.59";if(!("rpl" in String.prototype)){Object.defineProperty(String.prototype,"rpl",{value:function(a,b){var c=this;return c.split(a).join(b)},enumerable:false})}if(!("cmp_unq" in window)){window.cmp_unq=function(a){
2024-10-23 22:36:18 UTC	16384	IN	Data Raw: 64 28 22 4d 73 70 61 53 65 72 76 69 63 65 50 72 6f 76 69 64 65 72 4d 6f 64 65 22 2c 22 69 6e 74 22 2c 32 29 29 3b 61 2e 70 75 73 68 28 28 6e 65 77 20 63 6d 70 5f 67 70 70 6d 61 6e 69 66 65 73 74 28 39 2c 22 75 73 76 61 22 29 29 2e 61 64 64 46 69 65 6c 64 28 22 56 65 72 73 69 6f 6e 22 2c 22 69 6e 74 22 2c 36 29 2e 61 64 64 46 69 65 6c 64 28 22 53 68 61 72 69 6e 67 4e 6f 74 69 63 65 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 53 61 6c 65 4f 70 74 4f 75 74 4e 6f 74 69 63 65 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 54 61 72 67 65 74 65 64 41 64 76 65 72 74 69 73 69 6e 67 4f 70 74 4f 75 74 4e 6f 74 69 63 65 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 53 61 6c 65 4f 70 74 4f 75 74 22 2c 22 69 6e 74 22 Data Ascii: d("MspaServiceProviderMode","int",2));a.push((new cmp_gppmanifest(9,"usva")).addField("Version","int",6).addField("SharingNotice","int",2).addField("SaleOptOutNotice","int",2).addField("TargetedAdvertisingOptOutNotice","int",2).addField("SaleOptOut","int"
2024-10-23 22:36:18 UTC	16384	IN	Data Raw: 53 28 29 7d 69 66 28 74 68 69 73 2e 68 61 73 41 6c 6c 6f 77 65 64 56 65 6e 64 6f 72 73 29 7b 6c 3d 6e 65 77 20 63 6d 70 5f 77 72 69 74 65 72 28 29 3b 6c 2e 77 72 69 74 65 49 6e 74 28 32 2c 33 29 3b 6c 2e 77 72 69 74 65 42 69 74 46 69 65 6c 64 4f 72 52 61 6e 67 65 28 74 68 69 73 2e 41 6c 6c 6f 77 65 64 56 65 6e 64 6f 72 73 29 3b 6b 3d 6c 2e 67 65 74 42 61 73 65 36 34 43 53 28 29 7d 69 66 28 74 68 69 73 2e 68 61 73 50 75 62 6c 69 73 68 65 72 54 43 29 7b 6c 3d 6e 65 77 20 63 6d 70 5f 77 72 69 74 65 72 28 29 3b 6c 2e 77 72 69 74 65 49 6e 74 28 33 2c 33 29 3b 6c 2e 77 72 69 74 65 42 69 74 46 69 65 6c 64 28 74 68 69 73 2e 50 75 62 50 75 72 70 6f 73 65 73 43 6f 6e 73 65 6e 74 2c 32 34 29 3b 6c 2e 77 72 69 74 65 42 69 74 46 69 65 6c 64 28 74 68 69 73 2e 50 75 62 Data Ascii: S()}if(this.hasAllowedVendors){l=new cmp_writer();l.writeInt(2,3);l.writeBitFieldOrRange(this.AllowedVendors);k=l.getBase64CS()}if(this.hasPublisherTC){l=new cmp_writer();l.writeInt(3,3);l.writeBitField(this.PubPurposesConsent,24);l.writeBitField(this.Pub
2024-10-23 22:36:18 UTC	16384	IN	Data Raw: 75 62 73 74 72 28 30 2c 32 29 7d 69 66 28 67 2e 69 6e 64 65 78 4f 66 28 62 29 21 3d 2d 31 29 7b 68 2e 70 75 73 68 28 62 29 7d 7d 7d 69 66 28 68 2e 6c 65 6e 67 74 68 3d 3d 30 26 26 74 79 70 65 6f 66 28 63 6d 70 5f 67 65 74 6c 61 6e 67 2e 64 65 66 61 75 6c 74 6c 61 6e 67 29 3d 3d 22 73 74 72 69 6e 67 22 26 26 63 6d 70 5f 67 65 74 6c 61 6e 67 2e 64 65 66 61 75 6c 74 6c 61 6e 67 21 3d 3d 22 22 29 7b 72 65 74 75 72 6e 5b 63 6d 70 5f 67 65 74 6c 61 6e 67 2e 64 65 66 61 75 6c 74 6c 61 6e 67 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 7d 65 6c 73 65 7b 72 65 74 75 72 6e 20 68 2e 6c 65 6e 67 74 68 3e 30 3f 68 3a 5b 22 45 4e 22 5d 7d 7d 3b 77 69 6e 64 6f 77 2e 63 6d 70 5f 67 65 74 50 61 67 65 4c 61 6e 67 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 77 Data Ascii: ubstr(0,2)}if(g.indexOf(b)!=-1){h.push(b)}}}if(h.length==0&&typeof(cmp_getlang.defaultlang)=="string"&&cmp_getlang.defaultlang!==""){return[cmp_getlang.defaultlang.toUpperCase()]}else{return h.length>0?h:["EN"]}};window.cmp_getPageLangs=function(){var a=w
2024-10-23 22:36:19 UTC	16384	IN	Data Raw: 31 26 26 21 74 68 69 73 2e 63 6f 6e 73 65 6e 74 53 65 74 56 69 61 4c 49 7d 3b 74 68 69 73 2e 68 61 73 4c 49 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 68 61 73 4c 49 50 75 72 70 6f 73 65 73 28 29 26 26 28 74 68 69 73 2e 6c 69 53 74 61 74 75 73 3d 3d 31 7c 7c 28 74 68 69 73 2e 6c 69 53 74 61 74 75 73 3d 3d 2d 31 26 26 74 68 69 73 2e 63 6f 6e 73 65 6e 74 53 74 61 74 75 73 3d 3d 31 29 29 7d 3b 74 68 69 73 2e 68 61 73 50 75 72 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 6d 2c 6c 29 7b 6d 3d 6d 2b 22 22 3b 69 66 28 74 79 70 65 6f 66 28 6c 29 21 3d 22 62 6f 6f 6c 65 61 6e 22 29 7b 6c 3d 74 72 75 65 7d 76 61 72 20 6b 3d 66 61 6c 73 65 3b 69 66 28 6d 2e 73 75 62 73 74 72 28 30 2c 31 29 3d 3d 22 73 22 26 26 6c 29 7b 6b 3d 63 6d 70 5f 66 Data Ascii: 1&&!this.consentSetViaLI};this.hasLI=function(){return this.hasLIPurposes()&&(this.liStatus==1\|\|(this.liStatus==-1&&this.consentStatus==1))};this.hasPurpose=function(m,l){m=m+"";if(typeof(l)!="boolean"){l=true}var k=false;if(m.substr(0,1)=="s"&&l){k=cmp_f
2024-10-23 22:36:19 UTC	16384	IN	Data Raw: 64 6f 77 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 73 74 6f 72 61 67 65 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 44 61 74 61 5b 65 5d 3d 68 7d 7d 7d 65 6c 73 65 7b 69 66 28 69 3d 3d 22 63 6d 70 63 64 3a 6c 6f 61 64 3a 64 6f 6e 65 22 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 77 61 69 74 66 6f 72 63 72 6f 73 73 64 6f 6d 61 69 6e 3d 31 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 6d 70 5f 67 70 70 5f 68 65 6c 70 65 72 28 29 7b 74 68 69 73 2e 67 65 74 4d 61 74 63 68 65 64 47 50 50 46 69 65 6c 64 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 6b 29 7b 76 61 72 20 62 3d 66 2b 22 2e 22 2b 6b 3b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 70 75 72 70 6f 73 65 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 69 66 28 77 69 6e Data Ascii: dow){window.cmpmngr.storage.crossDomainData[e]=h}}}else{if(i=="cmpcd:load:done"){window.cmp_waitforcrossdomain=1}}}}function cmp_gpp_helper(){this.getMatchedGPPFieldIndex=function(f,k){var b=f+"."+k;for(var e=0;e<window.cmpmngr.purposes.length;e++){if(win
2024-10-23 22:36:19 UTC	16384	IN	Data Raw: 3d 74 68 69 73 2e 61 70 70 6c 79 55 53 43 41 28 63 29 7d 69 66 28 62 2e 69 6e 64 65 78 4f 66 28 22 75 73 63 6f 22 29 21 3d 2d 31 29 7b 63 3d 74 68 69 73 2e 61 70 70 6c 79 55 53 43 4f 28 63 29 7d 69 66 28 62 2e 69 6e 64 65 78 4f 66 28 22 75 73 63 74 22 29 21 3d 2d 31 29 7b 63 3d 74 68 69 73 2e 61 70 70 6c 79 55 53 43 54 28 63 29 7d 69 66 28 62 2e 69 6e 64 65 78 4f 66 28 22 75 73 75 74 22 29 21 3d 2d 31 29 7b 63 3d 74 68 69 73 2e 61 70 70 6c 79 55 53 55 54 28 63 29 7d 69 66 28 62 2e 69 6e 64 65 78 4f 66 28 22 75 73 76 61 22 29 21 3d 2d 31 29 7b 63 3d 74 68 69 73 2e 61 70 70 6c 79 55 53 56 41 28 63 29 7d 69 66 28 62 2e 69 6e 64 65 78 4f 66 28 22 75 73 66 6c 22 29 21 3d 2d 31 29 7b 63 3d 74 68 69 73 2e 61 70 70 6c 79 55 53 46 4c 28 63 29 7d 69 66 28 62 2e 69 Data Ascii: =this.applyUSCA(c)}if(b.indexOf("usco")!=-1){c=this.applyUSCO(c)}if(b.indexOf("usct")!=-1){c=this.applyUSCT(c)}if(b.indexOf("usut")!=-1){c=this.applyUSUT(c)}if(b.indexOf("usva")!=-1){c=this.applyUSVA(c)}if(b.indexOf("usfl")!=-1){c=this.applyUSFL(c)}if(b.i
2024-10-23 22:36:19 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 63 5b 30 5d 2c 63 5b 31 5d 2c 63 5b 32 5d 2c 66 29 7d 65 6c 73 65 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 64 65 66 61 75 6c 74 43 42 28 63 2c 66 29 7d 7d 62 72 65 61 6b 3b 63 61 73 65 22 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 3a 69 66 28 61 3d 3d 3d 32 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 42 79 49 64 28 63 2c 66 2c 63 29 7d 65 6c 73 65 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 63 29 26 26 63 2e 6c 65 6e 67 74 68 3d 3d 33 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 63 5b 30 5d 2c 63 5b 31 5d 2c 63 5b 32 5d 2c 66 29 Data Ascii: ){return this.addEventListener(c[0],c[1],c[2],f)}else{return this.defaultCB(c,f)}}break;case"removeEventListener":if(a===2){return this.removeEventListenerById(c,f,c)}else{if(Array.isArray(c)&&c.length==3){return this.removeEventListener(c[0],c[1],c[2],f)
2024-10-23 22:36:19 UTC	16384	IN	Data Raw: 6e 64 6f 77 26 26 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 2e 75 74 61 67 2e 6c 69 6e 6b 29 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 62 2e 74 65 61 6c 69 75 6d 5f 65 76 65 6e 74 3d 62 2e 65 76 65 6e 74 3b 77 69 6e 64 6f 77 2e 75 74 61 67 2e 6c 69 6e 6b 28 62 29 7d 65 6c 73 65 7b 69 66 28 22 70 61 67 65 5f 74 79 70 65 22 20 69 6e 20 77 69 6e 64 6f 77 2e 75 74 61 67 5f 64 61 74 61 29 7b 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 61 70 69 2e 73 65 74 44 61 74 61 4c 61 79 65 72 54 65 61 6c 69 75 6d 2c 33 30 30 2c 62 29 7d 7d 7d 3b 74 68 69 73 2e 66 62 54 69 6d 65 6f 75 74 3d 30 3b 74 68 69 73 2e 73 65 74 44 61 74 61 4c 61 79 65 72 46 61 63 65 62 6f 6f 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 63 Data Ascii: ndow&&typeof(window.utag.link)=="function"){b.tealium_event=b.event;window.utag.link(b)}else{if("page_type" in window.utag_data){window.setTimeout(window.cmpmngr.api.setDataLayerTealium,300,b)}}};this.fbTimeout=0;this.setDataLayerFacebook=function(){if("c
2024-10-23 22:36:19 UTC	16384	IN	Data Raw: 74 74 72 69 62 75 74 65 28 68 2c 22 64 61 74 61 2d 63 6d 70 2d 64 6f 6e 65 22 29 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 76 61 72 20 67 3d 6e 75 6c 6c 3b 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 6c 6f 67 28 22 55 6e 62 6c 6f 63 6b 69 6e 67 20 65 6c 65 6d 65 6e 74 22 2c 68 29 3b 68 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6d 70 2d 64 6f 6e 65 22 2c 31 29 3b 68 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6d 70 2d 61 62 22 2c 31 29 3b 69 66 28 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 75 74 69 6c 73 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 68 2c 22 64 61 74 61 2d 63 6d 70 2d 68 69 64 65 22 29 7c 7c 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 75 74 69 6c 73 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 68 2c Data Ascii: ttribute(h,"data-cmp-done")){return false}var g=null;window.cmpmngr.log("Unblocking element",h);h.setAttribute("data-cmp-done",1);h.setAttribute("data-cmp-ab",1);if(window.cmpmngr.utils.hasAttribute(h,"data-cmp-hide")\|\|window.cmpmngr.utils.hasAttribute(h,

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.7	49714	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:18 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:18 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 5e9af5f8-e01e-0099-17f4-24da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223618Z-15b8d89586f6nn8zquf2vw6t5400000003y000000000h19a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:18 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.7	49713	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:18 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:18 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:18 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 331d1c77-401e-0029-354e-229b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223618Z-16849878b78dsttbr1qw36rxs800000006y0000000003gsd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:36:18 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.7	49719	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:18 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:18 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223618Z-16849878b786vsxz21496wc2qn000000070g000000002rxr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:18 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.7	49717	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:18 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:18 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:18 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fdb61705-b01e-0001-2f09-2246e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223618Z-16849878b787psctgubawhx7k800000006sg000000001362 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:18 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.7	49718	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:18 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:18 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:18 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 394abe64-001e-0028-050b-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223618Z-16849878b784cpcc2dr9ch74ng000000070g000000002a54 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:18 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49720	87.230.98.78	443	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:18 UTC	1503	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww1.frothylattestudio.com%2F%3Ffp%3D2qoqDYI%252B0iJZGtPstQqccpYVxaI6ObJitI3FjXXWfpuGUlRgNWh70labVRMtFUQ5LVzoMsVoCWLxiQoM%252BdHqAmXOoXaKy6JyeBLBtnHKVd%252FGKCsWGnM13tv86SZzSImbUwvUTGR%252FwbvV68cR0%252FelwwHzPZHwooLRpm81LFvUEvjkylyIR3ZT0%252B2EYh1V8Mk1LHsmLJgCnP3oZ1aTXFi%252FizUqz%252BiqR4qxlPDtjH3Rv7mUkC7JKPeRf7k2n5uCk9QpAZKz65a1XlYxqE%252BvpXcQKkjEW4hITPhDocilO%252FelAu0%253D%26poru%3Db%252F8ZxUo4ug61cKbUIWuWZ9hktTN0TXmB5ubOU%252BIkZsWE32eqR80OwRFFQvOBToKB%26_opnslfp%3D1%26&&l=en&o=1729722976676 HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ww1.frothylattestudio.com/?fp=2qoqDYI%2B0iJZGtPstQqccpYVxaI6ObJitI3FjXXWfpuGUlRgNWh70labVRMtFUQ5LVzoMsVoCWLxiQoM%2BdHqAmXOoXaKy6JyeBLBtnHKVd%2FGKCsWGnM13tv86SZzSImbUwvUTGR%2FwbvV68cR0%2FelwwHzPZHwooLRpm81LFvUEvjkylyIR3ZT0%2B2EYh1V8Mk1LHsmLJgCnP3oZ1aTXFi%2FizUqz%2BiqR4qxlPDtjH3Rv7mUkC7JKPeRf7k2n5uCk9QpAZKz65a1XlYxqE%2BvpXcQKkjEW4hITPhDocilO%2FelAu0%3D&poru=b%2F8ZxUo4ug61cKbUIWuWZ9hktTN0TXmB5ubOU%2BIkZsWE32eqR80OwRFFQvOBToKB&_opnslfp=1& Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:36:19 UTC	547	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 22:36:18 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * cross-origin-resource-policy: cross-origin x-xss-protection: 0 set-cookie: __cmpcc=1; Expires=Sat, 22-Nov-2025 22:36:18 GMT; Path=/; SameSite=None; Secure last-modified: Wed, 23 Oct 2024 22:36:18 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-10-23 22:36:19 UTC	1473	IN	Data Raw: 35 42 35 0d 0a 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 29 7b 0d 0a 20 76 61 72 20 63 76 61 6c 20 3d 20 22 22 3b 0d 0a 20 74 72 79 7b 63 76 61 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3b 7d 63 61 74 63 68 28 65 29 7b 63 76 61 6c 20 3d 20 22 22 3b 7d 0d 0a 20 76 61 72 20 6c 20 3d 20 22 22 3b 20 69 66 28 22 63 6d 70 5f 67 65 74 6c 61 6e 67 22 20 69 6e 20 77 69 6e 64 6f 77 29 7b 20 6c 20 3d 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 67 65 74 6c 61 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 20 7d 0d 0a 20 76 61 72 20 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0d 0a 20 73 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 2f 2f 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 Data Ascii: 5B5(function (){ var cval = ""; try{cval = document.cookie;}catch(e){cval = "";} var l = ""; if("cmp_getlang" in window){ l = window.cmp_getlang().toLowerCase(); } var s = document.createElement("script"); s.src = "https://a.delivery.consent

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49724	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:19 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 22:36:20 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=65393 Date: Wed, 23 Oct 2024 22:36:19 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.7	49730	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:19 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:19 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 734838af-101e-0065-4be5-214088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223619Z-16849878b7862vlcc7m66axrs000000006u000000000kfe7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:19 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.7	49733	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:19 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:19 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:19 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 0a92035d-201e-00aa-57da-213928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223619Z-16849878b78fmrkt2ukpvh9wh400000006u000000000bpq1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:19 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.7	49731	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:19 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:19 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:19 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 8d314a1c-701e-0097-3ae5-21b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223619Z-16849878b789m94j7902zfvfr000000006m00000000111bx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:19 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.7	49732	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:19 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:19 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e1deb6d3-201e-006e-700b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223619Z-16849878b78c2tmb7nhatnd68s00000006xg000000005bfw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:19 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.7	49734	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:19 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:20 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: f5652952-501e-00a3-1ef2-24c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223620Z-r197bdfb6b4ld6jc5asqwvvz0w00000000s000000000kf9q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:20 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	49737	87.230.98.78	443	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:19 UTC	926	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww1.frothylattestudio.com%2F%3Ffp%3D2qoqDYI%252B0iJZGtPstQqccpYVxaI6ObJitI3FjXXWfpuGUlRgNWh70labVRMtFUQ5LVzoMsVoCWLxiQoM%252BdHqAmXOoXaKy6JyeBLBtnHKVd%252FGKCsWGnM13tv86SZzSImbUwvUTGR%252FwbvV68cR0%252FelwwHzPZHwooLRpm81LFvUEvjkylyIR3ZT0%252B2EYh1V8Mk1LHsmLJgCnP3oZ1aTXFi%252FizUqz%252BiqR4qxlPDtjH3Rv7mUkC7JKPeRf7k2n5uCk9QpAZKz65a1XlYxqE%252BvpXcQKkjEW4hITPhDocilO%252FelAu0%253D%26poru%3Db%252F8ZxUo4ug61cKbUIWuWZ9hktTN0TXmB5ubOU%252BIkZsWE32eqR80OwRFFQvOBToKB%26_opnslfp%3D1%26&&l=en&o=1729722976676 HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=1
2024-10-23 22:36:20 UTC	547	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 22:36:20 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * cross-origin-resource-policy: cross-origin x-xss-protection: 0 set-cookie: __cmpcc=2; Expires=Wed, 23-Oct-2024 22:42:20 GMT; Path=/; SameSite=None; Secure last-modified: Wed, 23 Oct 2024 22:36:20 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-10-23 22:36:20 UTC	5495	IN	Data Raw: 31 35 36 41 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 33 33 36 36 38 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 64 6e 22 3a 22 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 6d 6e 64 Data Ascii: 156Awindow.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":33668,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","cdn":"cdn.consentmanager.net","mnd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	49738	87.230.98.78	443	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:20 UTC	1535	OUT	GET /delivery/cmp.php?__cmpcc=1&id=68884&o=1729722978&h=http%3A%2F%2Fww1.frothylattestudio.com%2F%3Ffp%3D2qoqDYI%252B0iJZGtPstQqccpYVxaI6ObJitI3FjXXWfpuGUlRgNWh70labVRMtFUQ5LVzoMsVoCWLxiQoM%252BdHqAmXOoXaKy6JyeBLBtnHKVd%252FGKCsWGnM13tv86SZzSImbUwvUTGR%252FwbvV68cR0%252FelwwHzPZHwooLRpm81LFvUEvjkylyIR3ZT0%252B2EYh1V8Mk1LHsmLJgCnP3oZ1aTXFi%252FizUqz%252BiqR4qxlPDtjH3Rv7mUkC7JKPeRf7k2n5uCk9QpAZKz65a1XlYxqE%252BvpXcQKkjEW4hITPhDocilO%252FelAu0%253D%26poru%3Db%252F8ZxUo4ug61cKbUIWuWZ9hktTN0TXmB5ubOU%252BIkZsWE32eqR80OwRFFQvOBToKB%26_opnslfp%3D1%26&&l=en&odw=0&dlt=1&l=en HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ww1.frothylattestudio.com/?fp=2qoqDYI%2B0iJZGtPstQqccpYVxaI6ObJitI3FjXXWfpuGUlRgNWh70labVRMtFUQ5LVzoMsVoCWLxiQoM%2BdHqAmXOoXaKy6JyeBLBtnHKVd%2FGKCsWGnM13tv86SZzSImbUwvUTGR%2FwbvV68cR0%2FelwwHzPZHwooLRpm81LFvUEvjkylyIR3ZT0%2B2EYh1V8Mk1LHsmLJgCnP3oZ1aTXFi%2FizUqz%2BiqR4qxlPDtjH3Rv7mUkC7JKPeRf7k2n5uCk9QpAZKz65a1XlYxqE%2BvpXcQKkjEW4hITPhDocilO%2FelAu0%3D&poru=b%2F8ZxUo4ug61cKbUIWuWZ9hktTN0TXmB5ubOU%2BIkZsWE32eqR80OwRFFQvOBToKB&_opnslfp=1& Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=1
2024-10-23 22:36:20 UTC	547	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 22:36:20 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * cross-origin-resource-policy: cross-origin x-xss-protection: 0 set-cookie: __cmpcc=2; Expires=Wed, 23-Oct-2024 22:42:20 GMT; Path=/; SameSite=None; Secure last-modified: Wed, 23 Oct 2024 22:36:20 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-10-23 22:36:20 UTC	5490	IN	Data Raw: 31 35 36 41 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 33 33 36 36 38 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 64 6e 22 3a 22 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 6d 6e 64 Data Ascii: 156Awindow.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":33668,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","cdn":"cdn.consentmanager.net","mnd
2024-10-23 22:36:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	49740	195.181.170.18	443	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:20 UTC	371	OUT	GET /delivery/js/cmp_en.min.js HTTP/1.1 Host: cdn.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:36:20 UTC	616	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:20 GMT Content-Type: application/javascript Content-Length: 453394 Connection: close Cross-Origin-Resource-Policy: cross-origin Last-Modified: Tue, 22 Oct 2024 16:18:01 GMT ETag: "6eb12-625131cf9c040" Cache-Control: max-age=86400 Expires: Wed, 23 Oct 2024 16:18:15 GMT Edge-Control: max-age=86400 Cross-Origin-Resource-Policy: cross-origin X-77-NZT: EgwBw7WqEQH3TlMAAAwBJRPCNAG3UQIAAA X-77-NZT-Ray: 4c1562248d7ab91d647a1967bdf88525 X-77-Cache: HIT X-77-Age: 21326 Vary: Accept-Encoding Server: CDN77-Turbo X-77-POP: frankfurtDE Accept-Ranges: bytes
2024-10-23 22:36:20 UTC	15768	IN	Data Raw: 77 69 6e 64 6f 77 2e 63 6d 70 63 63 73 76 65 72 73 69 6f 6e 62 75 69 6c 64 3d 22 32 30 32 34 2d 31 30 2d 31 32 2e 31 37 2e 35 39 22 3b 69 66 28 21 28 22 72 70 6c 22 20 69 6e 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 29 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 72 70 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 63 2e 73 70 6c 69 74 28 61 29 2e 6a 6f 69 6e 28 62 29 7d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 66 61 6c 73 65 7d 29 7d 69 66 28 21 28 22 63 6d 70 5f 75 6e 71 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 75 6e 71 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b Data Ascii: window.cmpccsversionbuild="2024-10-12.17.59";if(!("rpl" in String.prototype)){Object.defineProperty(String.prototype,"rpl",{value:function(a,b){var c=this;return c.split(a).join(b)},enumerable:false})}if(!("cmp_unq" in window)){window.cmp_unq=function(a){
2024-10-23 22:36:20 UTC	16384	IN	Data Raw: 64 28 22 4d 73 70 61 53 65 72 76 69 63 65 50 72 6f 76 69 64 65 72 4d 6f 64 65 22 2c 22 69 6e 74 22 2c 32 29 29 3b 61 2e 70 75 73 68 28 28 6e 65 77 20 63 6d 70 5f 67 70 70 6d 61 6e 69 66 65 73 74 28 39 2c 22 75 73 76 61 22 29 29 2e 61 64 64 46 69 65 6c 64 28 22 56 65 72 73 69 6f 6e 22 2c 22 69 6e 74 22 2c 36 29 2e 61 64 64 46 69 65 6c 64 28 22 53 68 61 72 69 6e 67 4e 6f 74 69 63 65 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 53 61 6c 65 4f 70 74 4f 75 74 4e 6f 74 69 63 65 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 54 61 72 67 65 74 65 64 41 64 76 65 72 74 69 73 69 6e 67 4f 70 74 4f 75 74 4e 6f 74 69 63 65 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 53 61 6c 65 4f 70 74 4f 75 74 22 2c 22 69 6e 74 22 Data Ascii: d("MspaServiceProviderMode","int",2));a.push((new cmp_gppmanifest(9,"usva")).addField("Version","int",6).addField("SharingNotice","int",2).addField("SaleOptOutNotice","int",2).addField("TargetedAdvertisingOptOutNotice","int",2).addField("SaleOptOut","int"
2024-10-23 22:36:21 UTC	16384	IN	Data Raw: 53 28 29 7d 69 66 28 74 68 69 73 2e 68 61 73 41 6c 6c 6f 77 65 64 56 65 6e 64 6f 72 73 29 7b 6c 3d 6e 65 77 20 63 6d 70 5f 77 72 69 74 65 72 28 29 3b 6c 2e 77 72 69 74 65 49 6e 74 28 32 2c 33 29 3b 6c 2e 77 72 69 74 65 42 69 74 46 69 65 6c 64 4f 72 52 61 6e 67 65 28 74 68 69 73 2e 41 6c 6c 6f 77 65 64 56 65 6e 64 6f 72 73 29 3b 6b 3d 6c 2e 67 65 74 42 61 73 65 36 34 43 53 28 29 7d 69 66 28 74 68 69 73 2e 68 61 73 50 75 62 6c 69 73 68 65 72 54 43 29 7b 6c 3d 6e 65 77 20 63 6d 70 5f 77 72 69 74 65 72 28 29 3b 6c 2e 77 72 69 74 65 49 6e 74 28 33 2c 33 29 3b 6c 2e 77 72 69 74 65 42 69 74 46 69 65 6c 64 28 74 68 69 73 2e 50 75 62 50 75 72 70 6f 73 65 73 43 6f 6e 73 65 6e 74 2c 32 34 29 3b 6c 2e 77 72 69 74 65 42 69 74 46 69 65 6c 64 28 74 68 69 73 2e 50 75 62 Data Ascii: S()}if(this.hasAllowedVendors){l=new cmp_writer();l.writeInt(2,3);l.writeBitFieldOrRange(this.AllowedVendors);k=l.getBase64CS()}if(this.hasPublisherTC){l=new cmp_writer();l.writeInt(3,3);l.writeBitField(this.PubPurposesConsent,24);l.writeBitField(this.Pub
2024-10-23 22:36:21 UTC	16384	IN	Data Raw: 75 62 73 74 72 28 30 2c 32 29 7d 69 66 28 67 2e 69 6e 64 65 78 4f 66 28 62 29 21 3d 2d 31 29 7b 68 2e 70 75 73 68 28 62 29 7d 7d 7d 69 66 28 68 2e 6c 65 6e 67 74 68 3d 3d 30 26 26 74 79 70 65 6f 66 28 63 6d 70 5f 67 65 74 6c 61 6e 67 2e 64 65 66 61 75 6c 74 6c 61 6e 67 29 3d 3d 22 73 74 72 69 6e 67 22 26 26 63 6d 70 5f 67 65 74 6c 61 6e 67 2e 64 65 66 61 75 6c 74 6c 61 6e 67 21 3d 3d 22 22 29 7b 72 65 74 75 72 6e 5b 63 6d 70 5f 67 65 74 6c 61 6e 67 2e 64 65 66 61 75 6c 74 6c 61 6e 67 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 7d 65 6c 73 65 7b 72 65 74 75 72 6e 20 68 2e 6c 65 6e 67 74 68 3e 30 3f 68 3a 5b 22 45 4e 22 5d 7d 7d 3b 77 69 6e 64 6f 77 2e 63 6d 70 5f 67 65 74 50 61 67 65 4c 61 6e 67 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 77 Data Ascii: ubstr(0,2)}if(g.indexOf(b)!=-1){h.push(b)}}}if(h.length==0&&typeof(cmp_getlang.defaultlang)=="string"&&cmp_getlang.defaultlang!==""){return[cmp_getlang.defaultlang.toUpperCase()]}else{return h.length>0?h:["EN"]}};window.cmp_getPageLangs=function(){var a=w
2024-10-23 22:36:21 UTC	16384	IN	Data Raw: 31 26 26 21 74 68 69 73 2e 63 6f 6e 73 65 6e 74 53 65 74 56 69 61 4c 49 7d 3b 74 68 69 73 2e 68 61 73 4c 49 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 68 61 73 4c 49 50 75 72 70 6f 73 65 73 28 29 26 26 28 74 68 69 73 2e 6c 69 53 74 61 74 75 73 3d 3d 31 7c 7c 28 74 68 69 73 2e 6c 69 53 74 61 74 75 73 3d 3d 2d 31 26 26 74 68 69 73 2e 63 6f 6e 73 65 6e 74 53 74 61 74 75 73 3d 3d 31 29 29 7d 3b 74 68 69 73 2e 68 61 73 50 75 72 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 6d 2c 6c 29 7b 6d 3d 6d 2b 22 22 3b 69 66 28 74 79 70 65 6f 66 28 6c 29 21 3d 22 62 6f 6f 6c 65 61 6e 22 29 7b 6c 3d 74 72 75 65 7d 76 61 72 20 6b 3d 66 61 6c 73 65 3b 69 66 28 6d 2e 73 75 62 73 74 72 28 30 2c 31 29 3d 3d 22 73 22 26 26 6c 29 7b 6b 3d 63 6d 70 5f 66 Data Ascii: 1&&!this.consentSetViaLI};this.hasLI=function(){return this.hasLIPurposes()&&(this.liStatus==1\|\|(this.liStatus==-1&&this.consentStatus==1))};this.hasPurpose=function(m,l){m=m+"";if(typeof(l)!="boolean"){l=true}var k=false;if(m.substr(0,1)=="s"&&l){k=cmp_f
2024-10-23 22:36:21 UTC	16384	IN	Data Raw: 64 6f 77 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 73 74 6f 72 61 67 65 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 44 61 74 61 5b 65 5d 3d 68 7d 7d 7d 65 6c 73 65 7b 69 66 28 69 3d 3d 22 63 6d 70 63 64 3a 6c 6f 61 64 3a 64 6f 6e 65 22 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 77 61 69 74 66 6f 72 63 72 6f 73 73 64 6f 6d 61 69 6e 3d 31 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 6d 70 5f 67 70 70 5f 68 65 6c 70 65 72 28 29 7b 74 68 69 73 2e 67 65 74 4d 61 74 63 68 65 64 47 50 50 46 69 65 6c 64 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 6b 29 7b 76 61 72 20 62 3d 66 2b 22 2e 22 2b 6b 3b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 70 75 72 70 6f 73 65 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 69 66 28 77 69 6e Data Ascii: dow){window.cmpmngr.storage.crossDomainData[e]=h}}}else{if(i=="cmpcd:load:done"){window.cmp_waitforcrossdomain=1}}}}function cmp_gpp_helper(){this.getMatchedGPPFieldIndex=function(f,k){var b=f+"."+k;for(var e=0;e<window.cmpmngr.purposes.length;e++){if(win
2024-10-23 22:36:21 UTC	16384	IN	Data Raw: 3d 74 68 69 73 2e 61 70 70 6c 79 55 53 43 41 28 63 29 7d 69 66 28 62 2e 69 6e 64 65 78 4f 66 28 22 75 73 63 6f 22 29 21 3d 2d 31 29 7b 63 3d 74 68 69 73 2e 61 70 70 6c 79 55 53 43 4f 28 63 29 7d 69 66 28 62 2e 69 6e 64 65 78 4f 66 28 22 75 73 63 74 22 29 21 3d 2d 31 29 7b 63 3d 74 68 69 73 2e 61 70 70 6c 79 55 53 43 54 28 63 29 7d 69 66 28 62 2e 69 6e 64 65 78 4f 66 28 22 75 73 75 74 22 29 21 3d 2d 31 29 7b 63 3d 74 68 69 73 2e 61 70 70 6c 79 55 53 55 54 28 63 29 7d 69 66 28 62 2e 69 6e 64 65 78 4f 66 28 22 75 73 76 61 22 29 21 3d 2d 31 29 7b 63 3d 74 68 69 73 2e 61 70 70 6c 79 55 53 56 41 28 63 29 7d 69 66 28 62 2e 69 6e 64 65 78 4f 66 28 22 75 73 66 6c 22 29 21 3d 2d 31 29 7b 63 3d 74 68 69 73 2e 61 70 70 6c 79 55 53 46 4c 28 63 29 7d 69 66 28 62 2e 69 Data Ascii: =this.applyUSCA(c)}if(b.indexOf("usco")!=-1){c=this.applyUSCO(c)}if(b.indexOf("usct")!=-1){c=this.applyUSCT(c)}if(b.indexOf("usut")!=-1){c=this.applyUSUT(c)}if(b.indexOf("usva")!=-1){c=this.applyUSVA(c)}if(b.indexOf("usfl")!=-1){c=this.applyUSFL(c)}if(b.i
2024-10-23 22:36:21 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 63 5b 30 5d 2c 63 5b 31 5d 2c 63 5b 32 5d 2c 66 29 7d 65 6c 73 65 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 64 65 66 61 75 6c 74 43 42 28 63 2c 66 29 7d 7d 62 72 65 61 6b 3b 63 61 73 65 22 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 3a 69 66 28 61 3d 3d 3d 32 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 42 79 49 64 28 63 2c 66 2c 63 29 7d 65 6c 73 65 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 63 29 26 26 63 2e 6c 65 6e 67 74 68 3d 3d 33 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 63 5b 30 5d 2c 63 5b 31 5d 2c 63 5b 32 5d 2c 66 29 Data Ascii: ){return this.addEventListener(c[0],c[1],c[2],f)}else{return this.defaultCB(c,f)}}break;case"removeEventListener":if(a===2){return this.removeEventListenerById(c,f,c)}else{if(Array.isArray(c)&&c.length==3){return this.removeEventListener(c[0],c[1],c[2],f)
2024-10-23 22:36:21 UTC	16384	IN	Data Raw: 6e 64 6f 77 26 26 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 2e 75 74 61 67 2e 6c 69 6e 6b 29 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 62 2e 74 65 61 6c 69 75 6d 5f 65 76 65 6e 74 3d 62 2e 65 76 65 6e 74 3b 77 69 6e 64 6f 77 2e 75 74 61 67 2e 6c 69 6e 6b 28 62 29 7d 65 6c 73 65 7b 69 66 28 22 70 61 67 65 5f 74 79 70 65 22 20 69 6e 20 77 69 6e 64 6f 77 2e 75 74 61 67 5f 64 61 74 61 29 7b 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 61 70 69 2e 73 65 74 44 61 74 61 4c 61 79 65 72 54 65 61 6c 69 75 6d 2c 33 30 30 2c 62 29 7d 7d 7d 3b 74 68 69 73 2e 66 62 54 69 6d 65 6f 75 74 3d 30 3b 74 68 69 73 2e 73 65 74 44 61 74 61 4c 61 79 65 72 46 61 63 65 62 6f 6f 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 63 Data Ascii: ndow&&typeof(window.utag.link)=="function"){b.tealium_event=b.event;window.utag.link(b)}else{if("page_type" in window.utag_data){window.setTimeout(window.cmpmngr.api.setDataLayerTealium,300,b)}}};this.fbTimeout=0;this.setDataLayerFacebook=function(){if("c
2024-10-23 22:36:21 UTC	16384	IN	Data Raw: 74 74 72 69 62 75 74 65 28 68 2c 22 64 61 74 61 2d 63 6d 70 2d 64 6f 6e 65 22 29 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 76 61 72 20 67 3d 6e 75 6c 6c 3b 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 6c 6f 67 28 22 55 6e 62 6c 6f 63 6b 69 6e 67 20 65 6c 65 6d 65 6e 74 22 2c 68 29 3b 68 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6d 70 2d 64 6f 6e 65 22 2c 31 29 3b 68 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6d 70 2d 61 62 22 2c 31 29 3b 69 66 28 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 75 74 69 6c 73 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 68 2c 22 64 61 74 61 2d 63 6d 70 2d 68 69 64 65 22 29 7c 7c 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 75 74 69 6c 73 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 68 2c Data Ascii: ttribute(h,"data-cmp-done")){return false}var g=null;window.cmpmngr.log("Unblocking element",h);h.setAttribute("data-cmp-done",1);h.setAttribute("data-cmp-ab",1);if(window.cmpmngr.utils.hasAttribute(h,"data-cmp-hide")\|\|window.cmpmngr.utils.hasAttribute(h,

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.7	49742	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:20 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:20 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 1ae852e8-d01e-008e-29f5-24387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223620Z-15b8d89586f42m673h1quuee4s000000026g00000000e1f2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:21 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.7	49747	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:20 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:20 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7de7ed35-901e-005b-7c14-222005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223620Z-16849878b785jsrm4477mv3ezn00000006v0000000006ktn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:21 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.7	49743	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:20 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:21 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:20 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 13862abc-a01e-0053-5aa2-218603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223620Z-16849878b787psctgubawhx7k800000006h000000000z02y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:21 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.7	49744	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:20 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:20 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1b2fb3ba-201e-0033-65ce-20b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223620Z-16849878b785f8wh85a0w3ennn00000006r000000000ra9y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:21 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.7	49746	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:20 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:21 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:20 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 6ca7d158-d01e-0014-15ac-21ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223620Z-16849878b784cpcc2dr9ch74ng00000006vg00000000r5u6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:21 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.7	49748	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:21 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 22:36:21 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=65360 Date: Wed, 23 Oct 2024 22:36:21 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-23 22:36:21 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.7	49750	87.230.98.78	443	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:21 UTC	5973	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww1.frothylattestudio.com%2FFrothy_Bloat.cfm%3Ffp%3D2qoqDYI%252B0iJZGtPstQqccvV6mj3sWtCwuxlIlildqdntAr9vCYTVvHWakr2mYgOXvaI2w1lxQwNvQXQ9geMJWXl76t3S5yB%252BiBy%252BZCGz7fRNEfPfmlAL%252B069aOrJirw2FJnjwcPzaE3aWg0OVkAGQTIcS1usl4qXiQIt0xrHb3yncYN7pI0iAXPRcPni8exSan7QRmShFhmVmi8KFswxZrLXK%252BOUgJen18K1VzM4b1G1Lu5vHzl8ZYaBIW4hntdKakG3S9NtAbOds5CPuuOLB1pjsFT52eS2TmdodNxuSO8SdSiMpEHtXZO0Fn2iJEUzEPSdSn6fQwESLH%252BNGOM8Kg%253D%253D%26yep%3DM6FboBuP98sdvcRwAsDx%252FyxJST0KXfB41zVuwQ%252FG8zz5eBalqNa3nTw4xx9bTiMCTfZD4TNwdokKLB%252Fmq%252BOEwXZ6cOAIejqa5Fnt4Udux7%252Fe1WTTGF4DOwXSOEGa%252B%252BQ8%252Fl7bpeCjv5d7px2wcISuPrYfnpp2z53JwpuA7FMPq%252FQUAwG7sOU7pMoYRXtw9bP3TbMCayGOhwzbWjlUpS7GN4%252FllYasm5FrgM0zxUuTwV4jsjXJH6KNTwx%252F4DgHfnupPnNHnCLJ5x0MnzjocudPm81zh%252F50DsJt5moQXBeSSyAbLEtSyEZWmL%252FJcLlq9ryaz2kEpNgj7YQRSWKSHVoVsRnbg%252Bvib080YywKXc9uZEE69bp3nnEN7UTipMx0zPqF1G%252BE65tK2unYlh64NRz2m%252FiJbdG%252B4TBba7BXJht8BEWPEyXl%252BDflzhI2JSnIEg7gaUzlrs%252 [TRUNCATED] Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ww1.frothylattestudio.com/Frothy_Bloat.cfm?fp=2qoqDYI%2B0iJZGtPstQqccvV6mj3sWtCwuxlIlildqdntAr9vCYTVvHWakr2mYgOXvaI2w1lxQwNvQXQ9geMJWXl76t3S5yB%2BiBy%2BZCGz7fRNEfPfmlAL%2B069aOrJirw2FJnjwcPzaE3aWg0OVkAGQTIcS1usl4qXiQIt0xrHb3yncYN7pI0iAXPRcPni8exSan7QRmShFhmVmi8KFswxZrLXK%2BOUgJen18K1VzM4b1G1Lu5vHzl8ZYaBIW4hntdKakG3S9NtAbOds5CPuuOLB1pjsFT52eS2TmdodNxuSO8SdSiMpEHtXZO0Fn2iJEUzEPSdSn6fQwESLH%2BNGOM8Kg%3D%3D&yep=M6FboBuP98sdvcRwAsDx%2FyxJST0KXfB41zVuwQ%2FG8zz5eBalqNa3nTw4xx9bTiMCTfZD4TNwdokKLB%2Fmq%2BOEwXZ6cOAIejqa5Fnt4Udux7%2Fe1WTTGF4DOwXSOEGa%2B%2BQ8%2Fl7bpeCjv5d7px2wcISuPrYfnpp2z53JwpuA7FMPq%2FQUAwG7sOU7pMoYRXtw9bP3TbMCayGOhwzbWjlUpS7GN4%2FllYasm5FrgM0zxUuTwV4jsjXJH6KNTwx%2F4DgHfnupPnNHnCLJ5x0MnzjocudPm81zh%2F50DsJt5moQXBeSSyAbLEtSyEZWmL%2FJcLlq9ryaz2kEpNgj7YQRSWKSHVoVsRnbg%2Bvib080YywKXc9uZEE69bp3nnEN7UTipMx0zPqF1G%2BE65tK2unYlh64NRz2m%2FiJbdG%2B4TBba7BXJht8BEWPEyXl%2BDflzhI2JSnIEg7gaUzlrs%2Fl084s5kOgy2pSClnmP4Rb5DsrwxMqXzjp8qlcULhwyiim1m6AcQiHxsa6ZO9Ic8s1LD5fQDkWr1FFuQk8QOAkKb772scbyYCsuTrVHUi [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=2
2024-10-23 22:36:22 UTC	547	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 22:36:21 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * cross-origin-resource-policy: cross-origin x-xss-protection: 0 set-cookie: __cmpcc=3; Expires=Wed, 23-Oct-2024 22:42:21 GMT; Path=/; SameSite=None; Secure last-modified: Wed, 23 Oct 2024 22:36:21 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-10-23 22:36:22 UTC	5490	IN	Data Raw: 31 35 36 41 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 33 33 36 36 38 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 64 6e 22 3a 22 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 6d 6e 64 Data Ascii: 156Awindow.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":33668,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","cdn":"cdn.consentmanager.net","mnd
2024-10-23 22:36:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.7	49752	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:21 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:21 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:21 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 847e2871-001e-0079-66e3-2112e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223621Z-16849878b78p4hmjy4vha5ddqw00000006pg00000000p338 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:21 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.7	49753	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:21 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:21 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:21 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 4cd68789-d01e-0017-448e-21b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223621Z-16849878b78c5zx4gw8tcga1b400000006sg000000008y83 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:21 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.7	49754	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:21 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:21 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:21 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 241b467f-801e-0015-2b13-25f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223621Z-r197bdfb6b4t7wszdvrfk02ah4000000088000000000vchn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:21 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.7	49755	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:21 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:21 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: b478c109-d01e-00ad-3dad-24e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223621Z-15b8d89586fxdh48qknu9dqk2g0000000270000000001n1z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:21 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.7	49756	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:21 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:21 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:21 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 3edebaab-e01e-0033-21c8-214695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223621Z-16849878b78fmrkt2ukpvh9wh400000006s000000000mk61 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:21 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.7	49749	37.19.194.80	443	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:22 UTC	3167	OUT	GET /delivery/customdata/bV8xLndfNjg4ODQucl9VU1REUFNBLmxfZW4uZF8zMzY2OC54XzM3LnYucC50XzMzNjY4Lnh0XzMz.js HTTP/1.1 Host: cdn.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ww1.frothylattestudio.com/Frothy_Bloat.cfm?fp=2qoqDYI%2B0iJZGtPstQqccvV6mj3sWtCwuxlIlildqdntAr9vCYTVvHWakr2mYgOXvaI2w1lxQwNvQXQ9geMJWXl76t3S5yB%2BiBy%2BZCGz7fRNEfPfmlAL%2B069aOrJirw2FJnjwcPzaE3aWg0OVkAGQTIcS1usl4qXiQIt0xrHb3yncYN7pI0iAXPRcPni8exSan7QRmShFhmVmi8KFswxZrLXK%2BOUgJen18K1VzM4b1G1Lu5vHzl8ZYaBIW4hntdKakG3S9NtAbOds5CPuuOLB1pjsFT52eS2TmdodNxuSO8SdSiMpEHtXZO0Fn2iJEUzEPSdSn6fQwESLH%2BNGOM8Kg%3D%3D&yep=M6FboBuP98sdvcRwAsDx%2FyxJST0KXfB41zVuwQ%2FG8zz5eBalqNa3nTw4xx9bTiMCTfZD4TNwdokKLB%2Fmq%2BOEwXZ6cOAIejqa5Fnt4Udux7%2Fe1WTTGF4DOwXSOEGa%2B%2BQ8%2Fl7bpeCjv5d7px2wcISuPrYfnpp2z53JwpuA7FMPq%2FQUAwG7sOU7pMoYRXtw9bP3TbMCayGOhwzbWjlUpS7GN4%2FllYasm5FrgM0zxUuTwV4jsjXJH6KNTwx%2F4DgHfnupPnNHnCLJ5x0MnzjocudPm81zh%2F50DsJt5moQXBeSSyAbLEtSyEZWmL%2FJcLlq9ryaz2kEpNgj7YQRSWKSHVoVsRnbg%2Bvib080YywKXc9uZEE69bp3nnEN7UTipMx0zPqF1G%2BE65tK2unYlh64NRz2m%2FiJbdG%2B4TBba7BXJht8BEWPEyXl%2BDflzhI2JSnIEg7gaUzlrs%2Fl084s5kOgy2pSClnmP4Rb5DsrwxMqXzjp8qlcULhwyiim1m6AcQiHxsa6ZO9Ic8s1LD5fQDkWr1FFuQk8QOAkKb772scbyYCsuTrVHUi [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:36:22 UTC	593	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:22 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-XSS-Protection: 0 Expires: Wed, 23 Oct 2024 22:44:27 GMT Cache-Control: public, max-age=1800 Edge-Control: public, max-age=1800 Last-Modified: Wed, 23 Oct 2024 22:14:27 GMT X-77-NZT: EggBJRPCTwFBDAGckiEfAbcjBQAA X-77-NZT-Ray: 0d1fa518bf1c779d667a1967d9b5ef20 X-77-Cache: HIT X-77-Age: 1315 Vary: Accept-Encoding Server: CDN77-Turbo X-77-POP: frankfurtDE
2024-10-23 22:36:22 UTC	15791	IN	Data Raw: 37 62 38 39 0d 0a 69 66 28 21 28 22 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 7d 3b 7d 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 76 67 5f 6e 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 63 6d 70 5f 68 74 6d 6c 28 22 73 76 67 22 2c 7b 22 78 6d 6c 6e 73 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 78 6d 6c 6e 73 3a 73 76 67 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 76 69 65 77 42 6f 78 22 3a 22 30 20 30 20 31 34 38 20 36 33 22 7d 2c 20 22 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 78 29 7b 78 2e 63 Data Ascii: 7b89if(!("cmp_config_data" in window)){window.cmp_config_data={};}window.cmp_svg_no=function(){return new cmp_html("svg",{"xmlns":"http:\/\/www.w3.org\/2000\/svg","xmlns:svg":"http:\/\/www.w3.org\/2000\/svg","viewBox":"0 0 148 63"}, "", function (x){x.c
2024-10-23 22:36:22 UTC	16384	IN	Data Raw: 2e 35 31 34 36 39 20 2d 33 33 2e 32 33 34 38 31 2c 31 2e 33 35 36 30 38 20 7a 22 2c 22 69 64 22 3a 22 70 61 74 68 33 22 7d 29 2e 63 68 69 6c 64 28 22 70 61 74 68 22 2c 20 7b 22 73 74 79 6c 65 22 3a 22 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 66 69 6c 6c 3a 23 32 30 33 31 35 64 22 2c 22 64 22 3a 22 6d 20 2d 36 34 33 2e 35 36 35 33 37 2c 34 38 35 2e 39 36 37 33 35 20 76 20 2d 32 33 34 20 68 20 37 32 20 37 32 20 76 20 32 33 34 20 32 33 34 20 68 20 2d 37 32 20 2d 37 32 20 7a 20 6d 20 35 32 37 2c 32 31 34 20 63 20 30 2c 2d 31 31 20 2d 30 2e 31 37 38 31 33 2c 2d 32 30 20 2d 30 2e 33 39 35 38 35 2c 2d 32 30 20 2d 30 2e 32 31 37 37 32 2c 30 20 2d 34 2e 38 31 38 39 38 2c 32 2e 37 37 39 39 38 20 2d 31 30 2e 32 32 35 30 32 2c 36 2e 31 37 37 37 35 20 2d 33 35 2e Data Ascii: .51469 -33.23481,1.35608 z","id":"path3"}).child("path", {"style":"display:inline;fill:#20315d","d":"m -643.56537,485.96735 v -234 h 72 72 v 234 234 h -72 -72 z m 527,214 c 0,-11 -0.17813,-20 -0.39585,-20 -0.21772,0 -4.81898,2.77998 -10.22502,6.17775 -35.
2024-10-23 22:36:23 UTC	16384	IN	Data Raw: 6e 7d 5c 72 5c 6e 5c 72 5c 6e 2e 63 6d 70 62 6f 78 74 78 74 7b 5c 72 5c 6e 20 20 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 72 5c 6e 7d 5c 72 5c 6e 5c 72 5c 6e 2a 2e 63 6d 70 62 6f 78 68 6c 7b 5c 72 5c 6e 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 20 30 20 31 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 72 5c 6e 7d 5c 72 5c 6e 5c 72 5c 6e 2e 63 6d 70 62 6f 78 62 74 6e 73 7b 5c 72 5c 6e 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 72 5c 6e 7d 5c 72 5c 6e 5c 72 5c 6e 2e 63 6d 70 63 6c 6f 73 65 7b 5c 72 5c 6e 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 5c 72 5c 6e 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a Data Ascii: n}\r\n\r\n.cmpboxtxt{\r\n padding-right: 10px !important;\r\n}\r\n\r\n*.cmpboxhl{\r\n padding: 0 10px 0 10px !important;\r\n}\r\n\r\n.cmpboxbtns{\r\n margin-bottom: 10px !important;\r\n}\r\n\r\n.cmpclose{\r\n display: flex;\r\n align-items:
2024-10-23 22:36:23 UTC	16384	IN	Data Raw: 3a 30 2c 22 70 76 22 3a 30 2c 22 63 6f 22 3a 22 22 2c 22 6c 65 67 55 53 54 44 50 53 41 22 3a 30 7d 2c 7b 22 69 64 22 3a 22 63 34 39 39 30 39 22 2c 22 77 73 69 64 22 3a 36 38 38 38 34 2c 22 6e 22 3a 22 65 72 65 6e 6f 69 62 61 22 2c 22 6e 6f 6e 65 75 22 3a 30 2c 22 6c 22 3a 22 22 2c 22 70 73 22 3a 22 63 31 2c 31 30 22 2c 22 63 70 22 3a 22 22 2c 22 6c 70 22 3a 22 22 2c 22 66 70 22 3a 22 22 2c 22 73 70 22 3a 22 22 2c 22 66 22 3a 22 22 2c 22 73 66 22 3a 22 22 2c 22 69 33 69 64 22 3a 30 2c 22 69 63 61 69 64 22 3a 30 2c 22 63 70 63 61 22 3a 22 22 2c 22 6c 70 63 61 22 3a 22 22 2c 22 66 70 63 61 22 3a 22 22 2c 22 73 70 63 61 22 3a 22 22 2c 22 66 63 61 22 3a 22 22 2c 22 73 66 63 61 22 3a 22 22 2c 22 67 69 64 22 3a 30 2c 22 66 62 22 3a 30 2c 22 61 76 22 3a 22 22 2c Data Ascii: :0,"pv":0,"co":"","legUSTDPSA":0},{"id":"c49909","wsid":68884,"n":"erenoiba","noneu":0,"l":"","ps":"c1,10","cp":"","lp":"","fp":"","sp":"","f":"","sf":"","i3id":0,"icaid":0,"cpca":"","lpca":"","fpca":"","spca":"","fca":"","sfca":"","gid":0,"fb":0,"av":"",
2024-10-23 22:36:23 UTC	16384	IN	Data Raw: 53 55 43 50 41 22 3a 30 2c 22 6c 65 67 55 53 43 41 50 44 50 22 3a 30 2c 22 6c 65 67 41 50 50 49 22 3a 30 2c 22 6c 65 67 44 50 44 50 41 22 3a 30 2c 22 6c 65 67 55 53 54 44 50 53 41 22 3a 30 2c 22 6c 65 67 55 53 4f 43 44 50 41 22 3a 30 2c 22 6c 65 67 55 53 4d 54 43 44 50 41 22 3a 30 2c 22 6c 65 67 55 53 46 44 42 52 22 3a 30 2c 22 6c 65 67 55 53 57 41 44 41 22 3a 30 2c 22 6c 65 67 50 44 50 4c 53 41 22 3a 30 7d 2c 7b 22 69 64 22 3a 32 2c 22 77 73 69 64 22 3a 36 38 38 38 34 2c 22 6e 74 22 3a 22 44 65 6c 69 76 65 72 20 61 6e 64 20 70 72 65 73 65 6e 74 20 61 64 76 65 72 74 69 73 69 6e 67 20 61 6e 64 20 63 6f 6e 74 65 6e 74 22 2c 22 64 74 22 3a 22 43 65 72 74 61 69 6e 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 28 6c 69 6b 65 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 Data Ascii: SUCPA":0,"legUSCAPDP":0,"legAPPI":0,"legDPDPA":0,"legUSTDPSA":0,"legUSOCDPA":0,"legUSMTCDPA":0,"legUSFDBR":0,"legUSWADA":0,"legPDPLSA":0},{"id":2,"wsid":68884,"nt":"Deliver and present advertising and content","dt":"Certain information (like an IP address
2024-10-23 22:36:23 UTC	16384	IN	Data Raw: 30 2c 22 6c 65 67 44 53 47 4c 50 44 22 3a 30 2c 22 6c 65 67 47 44 50 52 55 4b 22 3a 30 2c 22 6c 65 67 55 53 56 43 44 50 41 22 3a 37 2c 22 6c 65 67 55 53 43 50 41 22 3a 37 2c 22 6c 65 67 55 53 55 43 50 41 22 3a 37 2c 22 6c 65 67 55 53 43 41 50 44 50 22 3a 37 2c 22 6c 65 67 41 50 50 49 22 3a 30 2c 22 6c 65 67 44 50 44 50 41 22 3a 30 2c 22 6c 65 67 55 53 54 44 50 53 41 22 3a 30 2c 22 6c 65 67 55 53 4f 43 44 50 41 22 3a 30 2c 22 6c 65 67 55 53 4d 54 43 44 50 41 22 3a 30 2c 22 6c 65 67 55 53 46 44 42 52 22 3a 30 2c 22 6c 65 67 55 53 57 41 44 41 22 3a 30 2c 22 6c 65 67 50 44 50 4c 53 41 22 3a 30 7d 2c 7b 22 69 64 22 3a 33 2c 22 77 73 69 64 22 3a 36 38 38 38 34 2c 22 6e 74 22 3a 22 50 72 6f 63 65 73 73 20 74 68 65 20 43 6f 6e 73 75 6d 65 72 5c 75 32 30 31 39 73 Data Ascii: 0,"legDSGLPD":0,"legGDPRUK":0,"legUSVCDPA":7,"legUSCPA":7,"legUSUCPA":7,"legUSCAPDP":7,"legAPPI":0,"legDPDPA":0,"legUSTDPSA":0,"legUSOCDPA":0,"legUSMTCDPA":0,"legUSFDBR":0,"legUSWADA":0,"legPDPLSA":0},{"id":3,"wsid":68884,"nt":"Process the Consumer\u2019s
2024-10-23 22:36:23 UTC	16384	IN	Data Raw: 22 7d 2c 7b 22 73 74 72 4c 61 6e 67 22 3a 22 45 4e 22 2c 22 73 74 72 54 79 70 65 22 3a 22 63 6f 6f 6b 69 65 73 61 6d 70 6c 65 22 2c 22 73 74 72 54 65 78 74 22 3a 22 53 61 6d 70 6c 65 20 76 61 6c 75 65 22 7d 2c 7b 22 73 74 72 4c 61 6e 67 22 3a 22 45 4e 22 2c 22 73 74 72 54 79 70 65 22 3a 22 65 78 70 69 72 65 22 2c 22 73 74 72 54 65 78 74 22 3a 22 45 78 70 69 72 65 22 7d 2c 7b 22 73 74 72 4c 61 6e 67 22 3a 22 45 4e 22 2c 22 73 74 72 54 79 70 65 22 3a 22 64 6f 6d 61 69 6e 22 2c 22 73 74 72 54 65 78 74 22 3a 22 44 6f 6d 61 69 6e 22 7d 2c 7b 22 73 74 72 4c 61 6e 67 22 3a 22 45 4e 22 2c 22 73 74 72 54 79 70 65 22 3a 22 63 6f 6f 6b 69 65 74 79 70 65 22 2c 22 73 74 72 54 65 78 74 22 3a 22 54 79 70 65 22 7d 2c 7b 22 73 74 72 4c 61 6e 67 22 3a 22 45 4e 22 2c 22 73 Data Ascii: "},{"strLang":"EN","strType":"cookiesample","strText":"Sample value"},{"strLang":"EN","strType":"expire","strText":"Expire"},{"strLang":"EN","strType":"domain","strText":"Domain"},{"strLang":"EN","strType":"cookietype","strText":"Type"},{"strLang":"EN","s
2024-10-23 22:36:23 UTC	27	IN	Data Raw: 5f 73 63 72 69 70 74 73 5b 69 5d 3b 7d 7d 29 28 29 3b 7d 20 0d 0a 30 0d 0a 0d 0a Data Ascii: _scripts[i];}})();} 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.7	49762	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:22 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:22 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: b140b4a4-501e-000a-80f9-240180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223622Z-15b8d89586fdmfsg1u7xrpfws000000002c000000000ds6z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:23 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.7	49763	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:22 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:22 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 1cb97257-a01e-0070-50f3-24573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223622Z-15b8d89586fwzdd8urmg0p1ebs00000008cg00000000948a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:23 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.7	49765	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:22 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:22 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 8e7d8b57-101e-007a-1df4-24047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223622Z-r197bdfb6b4b582bwynewx7zgn0000000bdg00000000v1da x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:23 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.7	49764	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:22 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:22 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: bb725c57-501e-005b-0eab-21d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223622Z-16849878b78dsttbr1qw36rxs800000006tg00000000pt21 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:23 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.7	49766	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:22 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:22 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 393bb9bf-001e-0028-2805-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223622Z-16849878b7842t5ke0k7mzbt3c00000006r00000000077sx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:23 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.7	49767	87.230.98.78	443	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:23 UTC	3251	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww1.frothylattestudio.com%2FFrothy_Bloat.cfm%3Ffp%3D2qoqDYI%252B0iJZGtPstQqccvV6mj3sWtCwuxlIlildqdntAr9vCYTVvHWakr2mYgOXvaI2w1lxQwNvQXQ9geMJWXl76t3S5yB%252BiBy%252BZCGz7fRNEfPfmlAL%252B069aOrJirw2FJnjwcPzaE3aWg0OVkAGQTIcS1usl4qXiQIt0xrHb3yncYN7pI0iAXPRcPni8exSan7QRmShFhmVmi8KFswxZrLXK%252BOUgJen18K1VzM4b1G1Lu5vHzl8ZYaBIW4hntdKakG3S9NtAbOds5CPuuOLB1pjsFT52eS2TmdodNxuSO8SdSiMpEHtXZO0Fn2iJEUzEPSdSn6fQwESLH%252BNGOM8Kg%253D%253D%26yep%3DM6FboBuP98sdvcRwAsDx%252FyxJST0KXfB41zVuwQ%252FG8zz5eBalqNa3nTw4xx9bTiMCTfZD4TNwdokKLB%252Fmq%252BOEwXZ6cOAIejqa5Fnt4Udux7%252Fe1WTTGF4DOwXSOEGa%252B%252BQ8%252Fl7bpeCjv5d7px2wcISuPrYfnpp2z53JwpuA7FMPq%252FQUAwG7sOU7pMoYRXtw9bP3TbMCayGOhwzbWjlUpS7GN4%252FllYasm5FrgM0zxUuTwV4jsjXJH6KNTwx%252F4DgHfnupPnNHnCLJ5x0MnzjocudPm81zh%252F50DsJt5moQXBeSSyAbLEtSyEZWmL%252FJcLlq9ryaz2kEpNgj7YQRSWKSHVoVsRnbg%252Bvib080YywKXc9uZEE69bp3nnEN7UTipMx0zPqF1G%252BE65tK2unYlh64NRz2m%252FiJbdG%252B4TBba7BXJht8BEWPEyXl%252BDflzhI2JSnIEg7gaUzlrs%252 [TRUNCATED] Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=3
2024-10-23 22:36:24 UTC	547	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 22:36:23 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * cross-origin-resource-policy: cross-origin x-xss-protection: 0 set-cookie: __cmpcc=4; Expires=Wed, 23-Oct-2024 22:42:23 GMT; Path=/; SameSite=None; Secure last-modified: Wed, 23 Oct 2024 22:36:23 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-10-23 22:36:24 UTC	3801	IN	Data Raw: 45 44 32 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 33 33 36 36 38 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 64 6e 22 3a 22 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 6d 6e 64 74 Data Ascii: ED2window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":33668,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","cdn":"cdn.consentmanager.net","mndt
2024-10-23 22:36:24 UTC	1695	IN	Data Raw: 36 39 38 0d 0a 65 2e 6c 6f 67 28 22 43 4d 50 20 4c 6f 61 64 53 63 72 69 70 74 20 73 74 61 72 74 69 6e 67 20 76 37 2e 31 36 22 29 7d 69 66 28 21 28 22 63 6d 70 5f 6c 6f 61 64 43 53 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 6c 6f 61 64 43 53 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 77 69 6e 64 6f 77 3b 76 61 72 20 68 3d 30 3b 76 61 72 20 63 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 62 2e 63 6d 70 5f 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 69 66 28 21 62 2e 63 6d 70 5f 73 63 72 69 70 74 73 5b 69 5d 2e 64 6f 6e 65 29 7b 68 2b 2b 3b 63 2e 70 75 73 68 28 62 2e 63 6d 70 5f 73 63 72 69 70 74 73 5b 69 5d 29 7d 7d 76 61 72 20 61 3d 66 61 6c 73 65 3b 69 66 28 22 63 6d 70 6d 6e 67 72 22 20 Data Ascii: 698e.log("CMP LoadScript starting v7.16")}if(!("cmp_loadCS" in window)){window.cmp_loadCS=function(){var b=window;var h=0;var c=[];for(var i=0;i<b.cmp_scripts.length;i++){if(!b.cmp_scripts[i].done){h++;c.push(b.cmp_scripts[i])}}var a=false;if("cmpmngr"
2024-10-23 22:36:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.7	49769	37.19.194.80	443	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:24 UTC	3155	OUT	GET /delivery/recall/logos/68884 HTTP/1.1 Host: cdn.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ww1.frothylattestudio.com/Frothy_Bloat.cfm?fp=2qoqDYI%2B0iJZGtPstQqccvV6mj3sWtCwuxlIlildqdntAr9vCYTVvHWakr2mYgOXvaI2w1lxQwNvQXQ9geMJWXl76t3S5yB%2BiBy%2BZCGz7fRNEfPfmlAL%2B069aOrJirw2FJnjwcPzaE3aWg0OVkAGQTIcS1usl4qXiQIt0xrHb3yncYN7pI0iAXPRcPni8exSan7QRmShFhmVmi8KFswxZrLXK%2BOUgJen18K1VzM4b1G1Lu5vHzl8ZYaBIW4hntdKakG3S9NtAbOds5CPuuOLB1pjsFT52eS2TmdodNxuSO8SdSiMpEHtXZO0Fn2iJEUzEPSdSn6fQwESLH%2BNGOM8Kg%3D%3D&yep=M6FboBuP98sdvcRwAsDx%2FyxJST0KXfB41zVuwQ%2FG8zz5eBalqNa3nTw4xx9bTiMCTfZD4TNwdokKLB%2Fmq%2BOEwXZ6cOAIejqa5Fnt4Udux7%2Fe1WTTGF4DOwXSOEGa%2B%2BQ8%2Fl7bpeCjv5d7px2wcISuPrYfnpp2z53JwpuA7FMPq%2FQUAwG7sOU7pMoYRXtw9bP3TbMCayGOhwzbWjlUpS7GN4%2FllYasm5FrgM0zxUuTwV4jsjXJH6KNTwx%2F4DgHfnupPnNHnCLJ5x0MnzjocudPm81zh%2F50DsJt5moQXBeSSyAbLEtSyEZWmL%2FJcLlq9ryaz2kEpNgj7YQRSWKSHVoVsRnbg%2Bvib080YywKXc9uZEE69bp3nnEN7UTipMx0zPqF1G%2BE65tK2unYlh64NRz2m%2FiJbdG%2B4TBba7BXJht8BEWPEyXl%2BDflzhI2JSnIEg7gaUzlrs%2Fl084s5kOgy2pSClnmP4Rb5DsrwxMqXzjp8qlcULhwyiim1m6AcQiHxsa6ZO9Ic8s1LD5fQDkWr1FFuQk8QOAkKb772scbyYCsuTrVHUi [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:36:24 UTC	555	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:24 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Expires: Thu, 24 Oct 2024 15:02:08 GMT Cache-Control: public, max-age=86400 Edge-Control: public, max-age=86400 Cross-Origin-Resource-Policy: cross-origin Edge-Control: max-age=2592000 Cross-Origin-Resource-Policy: cross-origin X-77-NZT: EggBJRPCTwFBDAHDta8GAbd4agAA X-77-NZT-Ray: 0d1fa5185405e1e0687a19674ab14633 X-77-Cache: HIT X-77-Age: 27256 Vary: Accept-Encoding Server: CDN77-Turbo X-77-POP: frankfurtDE
2024-10-23 22:36:24 UTC	4142	IN	Data Raw: 65 37 31 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0d 0a 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 35 38 20 32 35 38 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 77 69 64 74 68 3d 22 32 35 38 22 20 68 65 69 67 68 74 3d 22 32 35 38 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 0d 0a 20 20 20 20 20 78 6d 6c 6e 73 3a 73 76 67 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 20 3c 64 Data Ascii: e71<?xml version="1.0" encoding="UTF-8" standalone="no"?><svg viewBox="0 0 258 258" version="1.1" width="258" height="258" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns="http://www.w3.org/2000/svg" xmlns:svg="http://www.w3.org/2000/svg"> <d
2024-10-23 22:36:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.7	49772	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:24 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:24 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:24 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 1290ce53-d01e-002b-7905-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223624Z-16849878b78jfqwd1dsrhqg3aw00000006u000000000xbh6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:24 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.7	49774	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:24 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:24 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 80263b1c-901e-002a-38ad-247a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223624Z-15b8d89586frzkk2umu6w8qnt80000000d8000000000mzdu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:24 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.7	49771	87.230.98.78	443	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:24 UTC	3351	OUT	GET /delivery/info/?id=68884&did=3&cfdid=3&t=pv.d_ccpans.d_ll2.oonv.d_dnsx&h=http%3A%2F%2Fww1.frothylattestudio.com%2FFrothy_Bloat.cfm&o=1729722982805&l=EN&lv=107360&d=3&ct=14&e=&e2=&e3=&i=&sv=33&dv=37& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ww1.frothylattestudio.com/Frothy_Bloat.cfm?fp=2qoqDYI%2B0iJZGtPstQqccvV6mj3sWtCwuxlIlildqdntAr9vCYTVvHWakr2mYgOXvaI2w1lxQwNvQXQ9geMJWXl76t3S5yB%2BiBy%2BZCGz7fRNEfPfmlAL%2B069aOrJirw2FJnjwcPzaE3aWg0OVkAGQTIcS1usl4qXiQIt0xrHb3yncYN7pI0iAXPRcPni8exSan7QRmShFhmVmi8KFswxZrLXK%2BOUgJen18K1VzM4b1G1Lu5vHzl8ZYaBIW4hntdKakG3S9NtAbOds5CPuuOLB1pjsFT52eS2TmdodNxuSO8SdSiMpEHtXZO0Fn2iJEUzEPSdSn6fQwESLH%2BNGOM8Kg%3D%3D&yep=M6FboBuP98sdvcRwAsDx%2FyxJST0KXfB41zVuwQ%2FG8zz5eBalqNa3nTw4xx9bTiMCTfZD4TNwdokKLB%2Fmq%2BOEwXZ6cOAIejqa5Fnt4Udux7%2Fe1WTTGF4DOwXSOEGa%2B%2BQ8%2Fl7bpeCjv5d7px2wcISuPrYfnpp2z53JwpuA7FMPq%2FQUAwG7sOU7pMoYRXtw9bP3TbMCayGOhwzbWjlUpS7GN4%2FllYasm5FrgM0zxUuTwV4jsjXJH6KNTwx%2F4DgHfnupPnNHnCLJ5x0MnzjocudPm81zh%2F50DsJt5moQXBeSSyAbLEtSyEZWmL%2FJcLlq9ryaz2kEpNgj7YQRSWKSHVoVsRnbg%2Bvib080YywKXc9uZEE69bp3nnEN7UTipMx0zPqF1G%2BE65tK2unYlh64NRz2m%2FiJbdG%2B4TBba7BXJht8BEWPEyXl%2BDflzhI2JSnIEg7gaUzlrs%2Fl084s5kOgy2pSClnmP4Rb5DsrwxMqXzjp8qlcULhwyiim1m6AcQiHxsa6ZO9Ic8s1LD5fQDkWr1FFuQk8QOAkKb772scbyYCsuTrVHUi [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=3
2024-10-23 22:36:25 UTC	424	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 22:36:24 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * cross-origin-resource-policy: cross-origin x-xss-protection: 0 last-modified: Wed, 23 Oct 2024 22:36:24 GMT content-length: 43 content-type: image/gif connection: close
2024-10-23 22:36:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.7	49770	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:24 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:24 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:24 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 6ff76e76-001e-002b-21c5-2099f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223624Z-16849878b784cpcc2dr9ch74ng00000006w000000000p13p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:24 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.7	49773	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:24 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:24 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:24 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: ff743265-301e-000c-1ff2-24323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223624Z-r197bdfb6b4gdlhqw6kbe0ekvs00000009xg000000005ryq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:36:24 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.7	49775	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:24 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:24 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 131e52ce-d01e-002b-553b-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223624Z-16849878b7862vlcc7m66axrs000000006xg0000000054da x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:24 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.7	49779	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:25 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:25 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:25 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 1f9c3bb8-d01e-0014-220b-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223625Z-16849878b787c9z7hb8u9yysp0000000070g000000002as3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:25 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.7	49778	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:25 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:25 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: c4337264-b01e-0070-640b-221cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223625Z-16849878b78p4hmjy4vha5ddqw00000006pg00000000p38t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:25 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.7	49780	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:25 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:25 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 46af3d48-701e-0032-6627-21a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223625Z-16849878b78mhkkf6kbvry07q000000006r000000000es2t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:25 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.7	49781	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:26 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:26 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 27632888-301e-0096-61d8-21e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223626Z-16849878b787c9z7hb8u9yysp000000006zg0000000060pn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:26 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.7	49782	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:26 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:26 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:26 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: efc778c0-f01e-0052-4de5-219224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223626Z-16849878b78dghrpt8v731n7r400000006mg00000000xnm4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:26 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.7	49786	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:27 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:27 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 07f9ef03-d01e-0014-614d-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223627Z-16849878b788tnsxzb2smucwdc00000006v000000000gg4a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:27 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.7	49785	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:27 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:27 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:27 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 43d69f68-001e-00ad-61b4-24554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223627Z-15b8d89586f42m673h1quuee4s0000000280000000008yvu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:27 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.7	49784	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:27 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:27 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:27 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 2d861f62-501e-0064-3bf5-241f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223627Z-15b8d89586ff5l62quxsfe8ugg0000000d0000000000q4c5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:36:27 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.7	49783	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:27 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:27 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 221e1266-901e-0016-4cfc-24efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223627Z-r197bdfb6b4gdlhqw6kbe0ekvs00000009v000000000gb1d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:27 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.7	49787	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:27 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:27 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:27 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 3e897e27-701e-006f-014d-22afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223627Z-16849878b78hz7zj8u0h2zng1400000006tg00000000y9h8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:36:27 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.7	49777	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:27 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=5aEwkTfZgd1Wk41&MD=H4Keosmv HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-23 22:36:28 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 3a3c90dd-222a-49e4-b709-d3277f5a3348 MS-RequestId: 8e690ca5-341d-4a2c-852d-72d0a77d6f3f MS-CV: ThOVSp7BMUONx+lx.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 23 Oct 2024 22:36:27 GMT Connection: close Content-Length: 24490
2024-10-23 22:36:28 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-23 22:36:28 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.7	49790	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:27 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:28 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 40ca5ebb-901e-0048-7827-21b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223628Z-16849878b785f8wh85a0w3ennn00000006q000000000y454 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:28 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.7	49791	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:27 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:28 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 9658a421-401e-008c-7ff3-2486c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223628Z-15b8d89586f4zwgbz365q03b0c0000000dkg00000000ce7e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:28 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.7	49793	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:27 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:28 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 95c67357-201e-0051-60f5-247340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223628Z-15b8d89586fst84k5f3z220tec0000000deg00000000frpb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:28 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.7	49794	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:27 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:28 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:28 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 7a637aca-b01e-0002-3c05-221b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223628Z-16849878b789m94j7902zfvfr000000006p000000000rh1e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:28 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.7	49789	195.181.170.18	443	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:28 UTC	445	OUT	GET /delivery/customdata/bV8xLndfNjg4ODQucl9VU1REUFNBLmxfZW4uZF8zMzY2OC54XzM3LnYucC50XzMzNjY4Lnh0XzMz.js HTTP/1.1 Host: cdn.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:36:28 UTC	593	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:28 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-XSS-Protection: 0 Expires: Wed, 23 Oct 2024 22:44:27 GMT Cache-Control: public, max-age=1800 Edge-Control: public, max-age=1800 Last-Modified: Wed, 23 Oct 2024 22:14:27 GMT X-77-NZT: EggBw7WqEQFBDAGckiEfAbcpBQAA X-77-NZT-Ray: 4c156224f888a8bb6c7a19673e45d808 X-77-Cache: HIT X-77-Age: 1321 Vary: Accept-Encoding Server: CDN77-Turbo X-77-POP: frankfurtDE
2024-10-23 22:36:28 UTC	15791	IN	Data Raw: 31 39 39 62 0d 0a 69 66 28 21 28 22 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 7d 3b 7d 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 76 67 5f 6e 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 63 6d 70 5f 68 74 6d 6c 28 22 73 76 67 22 2c 7b 22 78 6d 6c 6e 73 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 78 6d 6c 6e 73 3a 73 76 67 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 76 69 65 77 42 6f 78 22 3a 22 30 20 30 20 31 34 38 20 36 33 22 7d 2c 20 22 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 78 29 7b 78 2e 63 Data Ascii: 199bif(!("cmp_config_data" in window)){window.cmp_config_data={};}window.cmp_svg_no=function(){return new cmp_html("svg",{"xmlns":"http:\/\/www.w3.org\/2000\/svg","xmlns:svg":"http:\/\/www.w3.org\/2000\/svg","viewBox":"0 0 148 63"}, "", function (x){x.c
2024-10-23 22:36:28 UTC	16384	IN	Data Raw: 2e 39 30 31 39 32 2c 32 2e 35 31 34 36 39 20 2d 33 33 2e 32 33 34 38 31 2c 31 2e 33 35 36 30 38 20 7a 22 2c 22 69 64 22 3a 22 70 61 74 68 33 22 7d 29 2e 63 68 69 6c 64 28 22 70 61 74 68 22 2c 20 7b 22 73 74 79 6c 65 22 3a 22 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 66 69 6c 6c 3a 23 32 30 33 31 35 64 22 2c 22 64 22 3a 22 6d 20 2d 36 34 33 2e 35 36 35 33 37 2c 34 38 35 2e 39 36 37 33 35 20 76 20 2d 32 33 34 20 68 20 37 32 20 37 32 20 76 20 32 33 34 20 32 33 34 20 68 20 2d 37 32 20 2d 37 32 20 7a 20 6d 20 35 32 37 2c 32 31 34 20 63 20 30 2c 2d 31 31 20 2d 30 2e 31 37 38 31 33 2c 2d 32 30 20 2d 30 2e 33 39 35 38 35 2c 2d 32 30 20 2d 30 2e 32 31 37 37 32 2c 30 20 2d 34 2e 38 31 38 39 38 2c 32 2e 37 37 39 39 38 20 2d 31 30 2e 32 32 35 30 32 2c 36 2e 31 37 Data Ascii: .90192,2.51469 -33.23481,1.35608 z","id":"path3"}).child("path", {"style":"display:inline;fill:#20315d","d":"m -643.56537,485.96735 v -234 h 72 72 v 234 234 h -72 -72 z m 527,214 c 0,-11 -0.17813,-20 -0.39585,-20 -0.21772,0 -4.81898,2.77998 -10.22502,6.17
2024-10-23 22:36:28 UTC	16384	IN	Data Raw: 6e 7d 5c 72 5c 6e 5c 72 5c 6e 2e 63 6d 70 62 6f 78 74 78 74 7b 5c 72 5c 6e 20 20 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 72 5c 6e 7d 5c 72 5c 6e 5c 72 5c 6e 2a 2e 63 6d 70 62 6f 78 68 6c 7b 5c 72 5c 6e 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 20 30 20 31 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 72 5c 6e 7d 5c 72 5c 6e 5c 72 5c 6e 2e 63 6d 70 62 6f 78 62 74 6e 73 7b 5c 72 5c 6e 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 72 5c 6e 7d 5c 72 5c 6e 5c 72 5c 6e 2e 63 6d 70 63 6c 6f 73 65 7b 5c 72 5c 6e 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 5c 72 5c 6e 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a Data Ascii: n}\r\n\r\n.cmpboxtxt{\r\n padding-right: 10px !important;\r\n}\r\n\r\n*.cmpboxhl{\r\n padding: 0 10px 0 10px !important;\r\n}\r\n\r\n.cmpboxbtns{\r\n margin-bottom: 10px !important;\r\n}\r\n\r\n.cmpclose{\r\n display: flex;\r\n align-items:
2024-10-23 22:36:28 UTC	16384	IN	Data Raw: 3a 22 22 2c 22 73 76 22 3a 30 2c 22 70 76 22 3a 30 2c 22 63 6f 22 3a 22 22 2c 22 6c 65 67 55 53 54 44 50 53 41 22 3a 30 7d 2c 7b 22 69 64 22 3a 22 63 34 39 39 30 39 22 2c 22 77 73 69 64 22 3a 36 38 38 38 34 2c 22 6e 22 3a 22 65 72 65 6e 6f 69 62 61 22 2c 22 6e 6f 6e 65 75 22 3a 30 2c 22 6c 22 3a 22 22 2c 22 70 73 22 3a 22 63 31 2c 31 30 22 2c 22 63 70 22 3a 22 22 2c 22 6c 70 22 3a 22 22 2c 22 66 70 22 3a 22 22 2c 22 73 70 22 3a 22 22 2c 22 66 22 3a 22 22 2c 22 73 66 22 3a 22 22 2c 22 69 33 69 64 22 3a 30 2c 22 69 63 61 69 64 22 3a 30 2c 22 63 70 63 61 22 3a 22 22 2c 22 6c 70 63 61 22 3a 22 22 2c 22 66 70 63 61 22 3a 22 22 2c 22 73 70 63 61 22 3a 22 22 2c 22 66 63 61 22 3a 22 22 2c 22 73 66 63 61 22 3a 22 22 2c 22 67 69 64 22 3a 30 2c 22 66 62 22 3a 30 2c Data Ascii: :"","sv":0,"pv":0,"co":"","legUSTDPSA":0},{"id":"c49909","wsid":68884,"n":"erenoiba","noneu":0,"l":"","ps":"c1,10","cp":"","lp":"","fp":"","sp":"","f":"","sf":"","i3id":0,"icaid":0,"cpca":"","lpca":"","fpca":"","spca":"","fca":"","sfca":"","gid":0,"fb":0,
2024-10-23 22:36:28 UTC	16384	IN	Data Raw: 3a 30 2c 22 6c 65 67 55 53 55 43 50 41 22 3a 30 2c 22 6c 65 67 55 53 43 41 50 44 50 22 3a 30 2c 22 6c 65 67 41 50 50 49 22 3a 30 2c 22 6c 65 67 44 50 44 50 41 22 3a 30 2c 22 6c 65 67 55 53 54 44 50 53 41 22 3a 30 2c 22 6c 65 67 55 53 4f 43 44 50 41 22 3a 30 2c 22 6c 65 67 55 53 4d 54 43 44 50 41 22 3a 30 2c 22 6c 65 67 55 53 46 44 42 52 22 3a 30 2c 22 6c 65 67 55 53 57 41 44 41 22 3a 30 2c 22 6c 65 67 50 44 50 4c 53 41 22 3a 30 7d 2c 7b 22 69 64 22 3a 32 2c 22 77 73 69 64 22 3a 36 38 38 38 34 2c 22 6e 74 22 3a 22 44 65 6c 69 76 65 72 20 61 6e 64 20 70 72 65 73 65 6e 74 20 61 64 76 65 72 74 69 73 69 6e 67 20 61 6e 64 20 63 6f 6e 74 65 6e 74 22 2c 22 64 74 22 3a 22 43 65 72 74 61 69 6e 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 28 6c 69 6b 65 20 61 6e 20 49 50 Data Ascii: :0,"legUSUCPA":0,"legUSCAPDP":0,"legAPPI":0,"legDPDPA":0,"legUSTDPSA":0,"legUSOCDPA":0,"legUSMTCDPA":0,"legUSFDBR":0,"legUSWADA":0,"legPDPLSA":0},{"id":2,"wsid":68884,"nt":"Deliver and present advertising and content","dt":"Certain information (like an IP
2024-10-23 22:36:28 UTC	16384	IN	Data Raw: 67 50 44 50 41 54 22 3a 30 2c 22 6c 65 67 44 53 47 4c 50 44 22 3a 30 2c 22 6c 65 67 47 44 50 52 55 4b 22 3a 30 2c 22 6c 65 67 55 53 56 43 44 50 41 22 3a 37 2c 22 6c 65 67 55 53 43 50 41 22 3a 37 2c 22 6c 65 67 55 53 55 43 50 41 22 3a 37 2c 22 6c 65 67 55 53 43 41 50 44 50 22 3a 37 2c 22 6c 65 67 41 50 50 49 22 3a 30 2c 22 6c 65 67 44 50 44 50 41 22 3a 30 2c 22 6c 65 67 55 53 54 44 50 53 41 22 3a 30 2c 22 6c 65 67 55 53 4f 43 44 50 41 22 3a 30 2c 22 6c 65 67 55 53 4d 54 43 44 50 41 22 3a 30 2c 22 6c 65 67 55 53 46 44 42 52 22 3a 30 2c 22 6c 65 67 55 53 57 41 44 41 22 3a 30 2c 22 6c 65 67 50 44 50 4c 53 41 22 3a 30 7d 2c 7b 22 69 64 22 3a 33 2c 22 77 73 69 64 22 3a 36 38 38 38 34 2c 22 6e 74 22 3a 22 50 72 6f 63 65 73 73 20 74 68 65 20 43 6f 6e 73 75 6d 65 Data Ascii: gPDPAT":0,"legDSGLPD":0,"legGDPRUK":0,"legUSVCDPA":7,"legUSCPA":7,"legUSUCPA":7,"legUSCAPDP":7,"legAPPI":0,"legDPDPA":0,"legUSTDPSA":0,"legUSOCDPA":0,"legUSMTCDPA":0,"legUSFDBR":0,"legUSWADA":0,"legPDPLSA":0},{"id":3,"wsid":68884,"nt":"Process the Consume
2024-10-23 22:36:28 UTC	16384	IN	Data Raw: 6b 69 65 20 6e 61 6d 65 22 7d 2c 7b 22 73 74 72 4c 61 6e 67 22 3a 22 45 4e 22 2c 22 73 74 72 54 79 70 65 22 3a 22 63 6f 6f 6b 69 65 73 61 6d 70 6c 65 22 2c 22 73 74 72 54 65 78 74 22 3a 22 53 61 6d 70 6c 65 20 76 61 6c 75 65 22 7d 2c 7b 22 73 74 72 4c 61 6e 67 22 3a 22 45 4e 22 2c 22 73 74 72 54 79 70 65 22 3a 22 65 78 70 69 72 65 22 2c 22 73 74 72 54 65 78 74 22 3a 22 45 78 70 69 72 65 22 7d 2c 7b 22 73 74 72 4c 61 6e 67 22 3a 22 45 4e 22 2c 22 73 74 72 54 79 70 65 22 3a 22 64 6f 6d 61 69 6e 22 2c 22 73 74 72 54 65 78 74 22 3a 22 44 6f 6d 61 69 6e 22 7d 2c 7b 22 73 74 72 4c 61 6e 67 22 3a 22 45 4e 22 2c 22 73 74 72 54 79 70 65 22 3a 22 63 6f 6f 6b 69 65 74 79 70 65 22 2c 22 73 74 72 54 65 78 74 22 3a 22 54 79 70 65 22 7d 2c 7b 22 73 74 72 4c 61 6e 67 22 Data Ascii: kie name"},{"strLang":"EN","strType":"cookiesample","strText":"Sample value"},{"strLang":"EN","strType":"expire","strText":"Expire"},{"strLang":"EN","strType":"domain","strText":"Domain"},{"strLang":"EN","strType":"cookietype","strText":"Type"},{"strLang"
2024-10-23 22:36:28 UTC	35	IN	Data Raw: 6e 64 6f 77 2e 63 6d 70 5f 73 63 72 69 70 74 73 5b 69 5d 3b 7d 7d 29 28 29 3b 7d 20 0d 0a 30 0d 0a 0d 0a Data Ascii: ndow.cmp_scripts[i];}})();} 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.7	49792	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:28 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:28 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:28 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 2d77a7fe-501e-0064-68ef-241f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223628Z-15b8d89586fs9clcgrr6f2d6vg00000000xg000000000sd4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:28 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.7	49796	195.181.170.18	443	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:28 UTC	373	OUT	GET /delivery/recall/logos/68884 HTTP/1.1 Host: cdn.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:36:28 UTC	555	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:28 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Expires: Thu, 24 Oct 2024 15:02:08 GMT Cache-Control: public, max-age=86400 Edge-Control: public, max-age=86400 Cross-Origin-Resource-Policy: cross-origin Edge-Control: max-age=2592000 Cross-Origin-Resource-Policy: cross-origin X-77-NZT: EggBw7WqEQFBDAHDta8GAbd8agAA X-77-NZT-Ray: 4c156224766c54c76c7a196702392f2a X-77-Cache: HIT X-77-Age: 27260 Vary: Accept-Encoding Server: CDN77-Turbo X-77-POP: frankfurtDE
2024-10-23 22:36:28 UTC	4142	IN	Data Raw: 65 37 31 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0d 0a 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 35 38 20 32 35 38 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 77 69 64 74 68 3d 22 32 35 38 22 20 68 65 69 67 68 74 3d 22 32 35 38 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 0d 0a 20 20 20 20 20 78 6d 6c 6e 73 3a 73 76 67 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 20 3c 64 Data Ascii: e71<?xml version="1.0" encoding="UTF-8" standalone="no"?><svg viewBox="0 0 258 258" version="1.1" width="258" height="258" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns="http://www.w3.org/2000/svg" xmlns:svg="http://www.w3.org/2000/svg"> <d
2024-10-23 22:36:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.7	49797	87.230.98.78	443	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:28 UTC	569	OUT	GET /delivery/info/?id=68884&did=3&cfdid=3&t=pv.d_ccpans.d_ll2.oonv.d_dnsx&h=http%3A%2F%2Fww1.frothylattestudio.com%2FFrothy_Bloat.cfm&o=1729722982805&l=EN&lv=107360&d=3&ct=14&e=&e2=&e3=&i=&sv=33&dv=37& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=4
2024-10-23 22:36:28 UTC	424	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 22:36:28 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * cross-origin-resource-policy: cross-origin x-xss-protection: 0 last-modified: Wed, 23 Oct 2024 22:36:28 GMT content-length: 43 content-type: image/gif connection: close
2024-10-23 22:36:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.7	49801	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:28 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:28 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 628e7349-b01e-003d-63fd-24d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223628Z-15b8d89586fwzdd8urmg0p1ebs00000008eg000000002vfc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:28 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.7	49799	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:28 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:28 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: f2a27b04-801e-0047-6ef4-247265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223628Z-r197bdfb6b4rkc6mhwyt3e61pc00000000u0000000009e48 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:28 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.7	49800	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:28 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:28 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:28 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 250cc9c1-301e-000c-4ec3-20323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223628Z-16849878b78dkr6tqerbnpg1zc00000006v000000000fxum x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:28 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.7	49802	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:28 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:28 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 94ed83ec-801e-0083-4bf2-24f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223628Z-15b8d89586f8l5961kfst8fpb0000000089000000000s9y3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:29 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.7	49803	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:28 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:29 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:29 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 33ade019-101e-0028-30f5-248f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223629Z-15b8d89586fxdh48qknu9dqk2g000000024000000000bf6t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:36:29 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.7	49805	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:29 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:29 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:29 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 13fbacc8-201e-0003-23f4-24f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223629Z-r197bdfb6b4lbgfqwkqbrm672s00000000qg000000000u31 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:36:29 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.7	49804	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:29 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:30 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 03f0aa2d-d01e-007a-29f2-24f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223630Z-15b8d89586f989rks44whx5v7s0000000dag000000003ukt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:30 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.7	49806	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:29 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:29 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:29 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 8e6df999-101e-007a-77ef-24047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223629Z-15b8d89586fcvr6p5956n5d0rc0000000400000000000pyh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:29 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.7	49808	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:29 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:29 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 09cb71da-201e-0033-6911-22b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223629Z-16849878b7862vlcc7m66axrs000000006rg00000000y2ny x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:30 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.7	49809	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:30 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:30 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:30 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 04ff5eee-d01e-0049-7af2-24e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223630Z-15b8d89586f989rks44whx5v7s0000000d90000000008kmv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:36:30 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.7	49810	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:30 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:30 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:30 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 7cfbc72c-d01e-0082-6d55-22e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223630Z-16849878b78p4hmjy4vha5ddqw00000006p000000000rgvk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:36:30 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.7	49807	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:30 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:30 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 3892b43a-301e-0051-71f4-2438bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223630Z-15b8d89586fbt6nf34bm5uw08n000000020g00000000bky4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:30 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.7	49811	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:30 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:30 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 217788b5-401e-0016-11a2-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223630Z-16849878b78p6ttkmyustyrk8s00000006tg000000005a85 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:30 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.7	49812	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:30 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:30 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: ee7a308c-c01e-00a1-620b-227e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223630Z-16849878b78rjhv97f3nhawr7s00000006vg000000004y8d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:30 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.7	49814	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:31 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:31 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: b1315031-501e-000a-22f5-240180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223631Z-r197bdfb6b49k6rsrbz098tg8000000004300000000034qb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:31 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.7	49813	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:31 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:31 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 6a9fe61e-e01e-001f-0a16-251633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223631Z-r197bdfb6b4kkm8440c459r6k80000000110000000002ggw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:31 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.7	49815	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:31 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:31 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 43134ec5-e01e-003c-4115-25c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223631Z-r197bdfb6b49k6rsrbz098tg800000000410000000009sm4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:31 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.7	49816	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:31 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:31 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 965686a0-401e-008c-4bf2-2486c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223631Z-15b8d89586flspj6y6m5fk442w00000003y0000000003xup x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:32 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.7	49817	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:31 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:31 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: e7a8c7ed-d01e-00ad-4ff5-24e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223631Z-r197bdfb6b4qpk6v9629ad4b5s0000000bf000000000a8qm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:31 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.7	49818	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:32 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:32 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: f2361012-b01e-003e-18e4-218e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223632Z-16849878b784cpcc2dr9ch74ng0000000710000000000mfm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:32 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.7	49819	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:32 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:32 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 34547014-f01e-003f-75cc-20d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223632Z-16849878b78hz7zj8u0h2zng1400000006vg00000000qz41 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:32 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.7	49820	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:32 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:32 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:32 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 18d6d76d-f01e-0052-73f2-249224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223632Z-15b8d89586fst84k5f3z220tec0000000dd000000000hcd1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:36:32 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.7	49821	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:32 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:32 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 931f542e-301e-000c-75f2-21323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223632Z-16849878b78k8q5pxkgux3mbgg00000006vg000000006egx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:32 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.7	49822	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:32 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:32 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 4fea5f70-201e-0071-57f4-24ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223632Z-r197bdfb6b4gdlhqw6kbe0ekvs00000009xg000000005sa8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:32 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.7	49823	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:33 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:33 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 135f94f0-d01e-002b-2a55-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223633Z-16849878b786vsxz21496wc2qn00000006x000000000g7eu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:33 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.7	49824	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:33 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:33 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:33 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: c561987e-801e-0015-0d0b-22f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223633Z-16849878b7862vlcc7m66axrs000000006t000000000sbdw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:33 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.7	49825	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:33 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:33 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: a983d246-401e-005b-124e-229c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223633Z-16849878b785jsrm4477mv3ezn00000006q000000000wqwh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:33 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.7	49826	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:33 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:33 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 41e4118e-001e-0017-175a-230c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223633Z-r197bdfb6b42sc4ddemybqpm140000000ne000000000ctx1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:33 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.7	49827	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:33 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:33 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 082cae3b-c01e-0079-2af2-24e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223633Z-r197bdfb6b4lkrtc7na2dkay28000000028g000000006gf5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:33 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.7	49712	87.230.98.78	443	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:33 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2024-10-23 22:36:33 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.7	49828	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:34 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:34 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2df5d45d-601e-003e-40f7-213248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223634Z-16849878b78hz7zj8u0h2zng1400000006yg00000000agtg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:34 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.7	49829	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:34 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:34 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:34 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 8c481607-b01e-0053-3f2b-21cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223634Z-16849878b78k8q5pxkgux3mbgg00000006q000000000vegm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:34 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.7	49830	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:34 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:34 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: e5d3cb58-101e-0046-3bf3-2491b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223634Z-r197bdfb6b42sc4ddemybqpm140000000nhg000000005yzc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:34 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.7	49832	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:34 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:34 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:34 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 8e096af2-401e-0015-41f3-240e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223634Z-r197bdfb6b4vlqfn9hfre6k1s80000000bpg000000008ndm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:34 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.7	49834	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:35 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:35 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:35 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 9c2fdade-c01e-002b-16f2-246e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223635Z-15b8d89586fvk4kmwqg9fgbkn800000002eg0000000067nr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:35 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.7	49833	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:35 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:35 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:35 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 4fe2bab2-201e-0071-71f2-24ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223635Z-r197bdfb6b4k6h5j1g5mvtmsmn0000000b6g00000000e3nu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:35 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.7	49835	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:35 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:35 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:35 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 7edb8da2-f01e-0099-33f3-249171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223635Z-15b8d89586fdmfsg1u7xrpfws000000002d000000000bf1a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:35 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.7	49831	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:35 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:35 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:35 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 0856d5df-001e-00ad-56f3-24554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223635Z-r197bdfb6b4ld6jc5asqwvvz0w00000000tg00000000bvaw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:36:35 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.7	49836	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:35 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:35 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:35 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c29108f7-201e-0000-1ff5-24a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223635Z-r197bdfb6b4k6h5j1g5mvtmsmn0000000b90000000004m1t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:35 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.7	49837	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:36 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:36 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:36 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 999b9529-701e-001e-53f4-24f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223636Z-r197bdfb6b4kzncf21qcaynxz8000000012000000000688s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:36 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.7	49838	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:36 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:36 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:36 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 55d9b643-201e-003f-330b-226d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223636Z-16849878b782558xg5kpzay6es00000006rg00000000pqt1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:36 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.7	49839	212.82.100.137	443	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:36 UTC	4331	OUT	GET /rdclk/dWU9M0U2MUFDMDUzQTkwNDcwNSZ1dD0xNzI5NzIyOTc5Mzc3JnVvPTc2OTY1OTk5ODM2MTIyJmx0PTImcz0yJmVzPUVSRktqbkVBaHV0Vzl5MERRbkNidm9TRkFET05pTGpxVFJnMm02ZzZXaXI2MDFQMDRmR2ZKT0tOZERMREgyYjA4NEdlSmlyVkZuQ085dy0t/RV=2/RE=1732314979/RO=14/RU=https%3a%2f%2fwww.bing.com%2faclick%3fld%3de8RPyPnS_03BcMny4P9QrU4zVUCUzQWs7_nfkTegDX9UXUe9ggNjRpHp9xUKperLOATX5eqIj0tW3bxcvmvhTONBMNxZmjNbDfDbwczUvG_rooSnA2OKnDr_SwgcyIru_jAIH9KbHEZNvRymGlHnEjPohilM45Au1YlF9k9qixFtvSvDYW%26u%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%26rlid%3d5151cc [TRUNCATED] Host: r.search.yahoo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: http://ww1.frothylattestudio.com/Frothy_Bloat.cfm?fp=2qoqDYI%2B0iJZGtPstQqccvV6mj3sWtCwuxlIlildqdntAr9vCYTVvHWakr2mYgOXvaI2w1lxQwNvQXQ9geMJWXl76t3S5yB%2BiBy%2BZCGz7fRNEfPfmlAL%2B069aOrJirw2FJnjwcPzaE3aWg0OVkAGQTIcS1usl4qXiQIt0xrHb3yncYN7pI0iAXPRcPni8exSan7QRmShFhmVmi8KFswxZrLXK%2BOUgJen18K1VzM4b1G1Lu5vHzl8ZYaBIW4hntdKakG3S9NtAbOds5CPuuOLB1pjsFT52eS2TmdodNxuSO8SdSiMpEHtXZO0Fn2iJEUzEPSdSn6fQwESLH%2BNGOM8Kg%3D%3D&yep=M6FboBuP98sdvcRwAsDx%2FyxJST0KXfB41zVuwQ%2FG8zz5eBalqNa3nTw4xx9bTiMCTfZD4TNwdokKLB%2Fmq%2BOEwXZ6cOAIejqa5Fnt4Udux7%2Fe1WTTGF4DOwXSOEGa%2B%2BQ8%2Fl7bpeCjv5d7px2wcISuPrYfnpp2z53JwpuA7FMPq%2FQUAwG7sOU7pMoYRXtw9bP3TbMCayGOhwzbWjlUpS7GN4%2FllYasm5FrgM0zxUuTwV4jsjXJH6KNTwx%2F4DgHfnupPnNHnCLJ5x0MnzjocudPm81zh%2F50DsJt5moQXBeSSyAbLEtSyEZWmL%2FJcLlq9ryaz2kEpNgj7YQRSWKSHVoVsRnbg%2Bvib080YywKXc9uZEE69bp3nnEN7UTipMx0zPqF1G%2BE65tK2unYlh64NRz2m%2FiJbdG%2B4TBba7BXJht8BEWPEyXl%2BDflzhI2JSnIEg7gaUzlrs%2Fl084s5kOgy2pSClnmP4Rb5DsrwxMqXzjp8qlcULhwyiim1m6AcQiHxsa6ZO9Ic8s1LD5fQDkWr1FFuQk8QOAkKb772scbyYCsuTrVHUi [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:36:36 UTC	1768	IN	HTTP/1.1 302 Found cache-control: no-store content-length: 0 location: https://www.bing.com/aclick?ld=e8RPyPnS_03BcMny4P9QrU4zVUCUzQWs7_nfkTegDX9UXUe9ggNjRpHp9xUKperLOATX5eqIj0tW3bxcvmvhTONBMNxZmjNbDfDbwczUvG_rooSnA2OKnDr_SwgcyIru_jAIH9KbHEZNvRymGlHnEjPohilM45Au1YlF9k9qixFtvSvDYW&u=aHR0cHMlM2ElMmYlMmZ3d3cuYW1hem9uLmNvbSUyZnMlMmYlM2ZpZSUzZFVURjglMjZrZXl3b3JkcyUzZGJsb2F0JTJicmVsaWVmJTI2aW5kZXglM2RhcHMlMjZ0YWclM2R0eHRzdGRiZ2R0LTIwJTI2cmVmJTNkcGRfc2xfOWs3eWZleTJlNF9wJTI2YWRncnBpZCUzZDEyMzE0NTMzMzMwODk4MTQlMjZodmFkaWQlM2Q3Njk2NTk5OTgzNjEyMiUyNmh2bmV0dyUzZHMlMjZodnFtdCUzZHAlMjZodmJtdCUzZGJwJTI2aHZkZXYlM2RjJTI2aHZsb2NpbnQlM2QlMjZodmxvY3BoeSUzZDY1MzAwJTI2aHZ0YXJnaWQlM2Rrd2QtNzY5NjYwNjcxMTE4NzElM2Fsb2MtMTkwJTI2aHlkYWRjciUzZDkzOTJfMTM2NDAzNDUlMjZsYW5ndWFnZSUzZGVuX1VTJTI2bXNjbGtpZCUzZDUxNTFjYzg3ZmZlYzE1NzRjZjQ5YWI5ZTg1OGY4YzYx&rlid=5151cc87ffec1574cf49ab9e858f8c61 date: Wed, 23 Oct 2024 22:36:36 GMT Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Server: ATS X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport Referrer-Policy: no-referrer-when-downgrade Set-Cookie: A1=d=AQABBHR6GWcCELq90cUQ6v_hueNDX4O-s6oFEgEBAQHLGmcjZ9xS0iMA_eMAAA&S=AQAAAmfjL5w_bFj7so3fM3sF4kk; Expires=Fri, 24 Oct 2025 04:36:36 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBHR6GWcCELq90cUQ6v_hueNDX4O-s6oFEgEBAQHLGmcjZ9xS0iMA_eMAAA&S=AQAAAmfjL5w_bFj7so3fM3sF4kk; Expires=Fri, 24 Oct 2025 04:36:36 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBHR6GWcCELq90cUQ6v_hueNDX4O-s6oFEgEBAQHLGmcjZ9xS0iMA_eMAAA&S=AQAAAmfjL5w_bFj7so3fM3sF4kk; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.7	49840	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:36 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:36 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:36 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 1f9beeb1-d01e-0014-170b-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223636Z-16849878b78dsttbr1qw36rxs800000006v000000000hd8n x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:36 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.7	49841	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:36 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:36 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:36 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 20049dc1-d01e-0014-1b33-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223636Z-16849878b78bkvbz1ry47zvsas00000006w000000000bc69 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:36 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.7	49842	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:36 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:36 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:36 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: b140c98b-501e-000a-75f9-240180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223636Z-15b8d89586ff5l62quxsfe8ugg0000000d0g00000000p5hv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:36:36 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.7	49844	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:37 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:37 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:37 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 8d011c5a-801e-0047-22f7-217265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223637Z-16849878b785g992cz2s9gk35c00000006ug00000000ha0y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:37 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.7	49843	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:37 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:37 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:37 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 81a8cf75-401e-0047-2d15-258597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223637Z-r197bdfb6b4kzncf21qcaynxz8000000012000000000689d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:37 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.7	49845	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:37 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:37 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:37 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 9791ae07-d01e-0066-7bf2-24ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223637Z-r197bdfb6b4kkm8440c459r6k800000001000000000061tg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:37 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.7	49846	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:37 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:37 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:37 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 18e0c3bd-301e-001f-11f3-24aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223637Z-r197bdfb6b4cz6xrsdncwtgzd40000000nq0000000001843 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:37 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.7	49847	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:37 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:37 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:37 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: b5c58150-601e-0070-04f2-24a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223637Z-r197bdfb6b4lkrtc7na2dkay28000000024g00000000q3br x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:37 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.7	49850	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:38 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:38 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:38 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 31e4fe8c-301e-0033-38f2-21fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223638Z-16849878b787psctgubawhx7k800000006mg00000000ny40 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:38 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.7	49849	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:38 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:38 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:38 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 816a6405-301e-001f-06d8-21aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223638Z-16849878b787c9z7hb8u9yysp000000006y000000000bbnb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:38 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.7	49851	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:38 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:38 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:38 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 2a979a5c-f01e-003f-77f7-21d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223638Z-16849878b78jfqwd1dsrhqg3aw00000006vg00000000qur6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:38 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.7	49852	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:38 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:38 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:38 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 67bef8b6-101e-008d-2df2-2492e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223638Z-15b8d89586f42m673h1quuee4s000000027g00000000as18 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:38 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.7	49853	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:38 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:38 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:38 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: cbb0b495-901e-005b-56e4-212005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223638Z-16849878b78k8q5pxkgux3mbgg00000006rg00000000py1r x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:38 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.7	49854	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:39 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:39 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:39 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e4dfd9e9-c01e-00ad-24f5-24a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223639Z-15b8d89586f8l5961kfst8fpb000000008f0000000005d86 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:39 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.7	49855	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:39 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:39 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:39 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: a2099384-101e-008d-760b-2292e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223639Z-16849878b785g992cz2s9gk35c00000006s000000000yaxs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:39 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.7	49856	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:39 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:39 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:39 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 4c920d0e-c01e-008d-4cca-202eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223639Z-16849878b78c2tmb7nhatnd68s00000006y0000000003q90 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:39 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.7	49857	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:39 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:39 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:39 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 9a0db76d-d01e-0017-4396-25b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223639Z-16849878b78fmrkt2ukpvh9wh400000006r000000000shsf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:39 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.7	49858	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:39 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:39 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:39 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 106adab5-b01e-0001-11da-2046e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223639Z-16849878b782h9tt5z2wa5rfxg00000006wg000000001cfb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:39 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.7	49859	99.86.8.42	443	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:39 UTC	1010	OUT	GET /s/?ie=UTF8&keywords=bloat+relief&index=aps&tag=txtstdbgdt-20&ref=pd_sl_9k7yfey2e4_p&adgrpid=1231453333089814&hvadid=76965999836122&hvnetw=s&hvqmt=p&hvbmt=bp&hvdev=c&hvlocint=&hvlocphy=65300&hvtargid=kwd-76966067111871:loc-190&hydadcr=9392_13640345&language=en_US&msclkid=5151cc87ffec1574cf49ab9e858f8c61 HTTP/1.1 Host: www.amazon.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: http://ww1.frothylattestudio.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:36:40 UTC	1557	IN	HTTP/1.1 200 OK Content-Type: text/html;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: Server Date: Wed, 23 Oct 2024 22:36:40 GMT x-amz-rid: YT8YJ4B94N98J9DNZQCH set-cookie: session-id=146-5727277-4453238; Domain=.amazon.com; Expires=Thu, 23-Oct-2025 22:36:40 GMT; Path=/; Secure set-cookie: session-id-time=2082787201l; Domain=.amazon.com; Expires=Thu, 23-Oct-2025 22:36:40 GMT; Path=/; Secure set-cookie: i18n-prefs=USD; Domain=.amazon.com; Expires=Thu, 23-Oct-2025 22:36:40 GMT; Path=/ set-cookie: lc-main=en_US; Domain=.amazon.com; Expires=Thu, 23-Oct-2025 22:36:40 GMT; Path=/ X-Content-Type-Options: nosniff X-XSS-Protection: 1; Content-Language: en-US Cache-Control: no-cache content-security-policy-report-only: default-src 'self' blob: https: data: mediastream: 'unsafe-eval' 'unsafe-inline';report-uri https://metrics.media-amazon.com/ Accept-CH-Lifetime: 86400 Content-Security-Policy: upgrade-insecure-requests;report-uri https://metrics.media-amazon.com/ Accept-CH: ect,rtt,downlink,device-memory,sec-ch-device-memory,viewport-width,sec-ch-viewport-width,dpr,sec-ch-dpr,sec-ch-ua-platform-version Pragma: no-cache Expires: -1 Strict-Transport-Security: max-age=47474747; includeSubDomains; preload Vary: Content-Type,Accept-Encoding,User-Agent X-Frame-Options: SAMEORIGIN X-Cache: Miss from cloudfront Via: 1.1 baa5702f7bd64fcbae1e3bd950d9a244.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: aYnMql9p8AwQ3pusbADXJYy4Kj_vAur_4NoaP0t4OgqWnQvyj-VBcQ==
2024-10-23 22:36:40 UTC	701	IN	Data Raw: 32 62 36 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 63 6c 61 73 73 3d 22 61 2d 6e 6f 2d 6a 73 22 20 64 61 74 61 2d 31 39 61 78 35 61 39 6a 66 3d 22 64 69 6e 67 6f 22 3e 3c 21 2d 2d 20 73 70 3a 66 65 61 74 75 72 65 3a 68 65 61 64 2d 73 74 61 72 74 20 2d 2d 3e 0a 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 61 50 61 67 65 53 74 61 72 74 20 3d 20 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0a 3c 21 2d 2d 20 73 70 3a 65 6e 64 2d 66 65 61 74 75 72 65 3a 68 65 61 64 2d 73 74 61 72 74 20 2d 2d 3e 0a 3c 21 2d 2d 20 73 70 3a 66 65 61 74 75 72 65 3a 63 73 6d 3a 68 65 61 64 Data Ascii: 2b6<!doctype html><html lang="en-us" class="a-no-js" data-19ax5a9jf="dingo">... sp:feature:head-start --><head><script>var aPageStart = (new Date()).getTime();</script><meta charset="utf-8"/>... sp:end-feature:head-start -->... sp:feature:csm:head
2024-10-23 22:36:40 UTC	10362	IN	Data Raw: 32 38 37 32 0d 0a 74 69 6d 69 7a 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 21 2d 2d 20 73 70 3a 66 65 61 74 75 72 65 3a 63 73 6d 3a 68 65 61 64 2d 6f 70 65 6e 2d 70 61 72 74 32 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3e 0a 77 69 6e 64 6f 77 2e 75 65 5f 69 68 62 20 3d 20 28 77 69 6e 64 6f 77 2e 75 65 5f 69 68 62 20 7c 7c 20 77 69 6e 64 6f 77 2e 75 65 69 6e 69 74 20 7c 7c 20 30 29 20 2b 20 31 3b 0a 69 66 20 28 77 69 6e 64 6f 77 2e 75 65 5f 69 68 62 20 3d 3d 3d 20 31 29 20 7b 0a 0a 76 61 72 20 75 65 5f 63 73 6d 20 3d 20 77 69 6e 64 6f 77 2c 0a 20 20 20 20 75 65 5f 68 6f 62 20 3d 20 2b 6e 65 77 20 44 61 74 65 28 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 65 3d 64 2e 75 65 3d 64 2e 75 65 Data Ascii: 2872timization -->... sp:feature:csm:head-open-part2 --><script type='text/javascript'>window.ue_ihb = (window.ue_ihb \|\| window.ueinit \|\| 0) + 1;if (window.ue_ihb === 1) {var ue_csm = window, ue_hob = +new Date();(function(d){var e=d.ue=d.ue
2024-10-23 22:36:40 UTC	16378	IN	Data Raw: 33 66 66 32 0d 0a 6f 70 65 6e 2d 70 61 72 74 32 20 2d 2d 3e 0a 3c 21 2d 2d 20 73 70 3a 66 65 61 74 75 72 65 3a 61 75 69 2d 61 73 73 65 74 73 20 2d 2d 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 2e 6d 65 64 69 61 2d 61 6d 61 7a 6f 6e 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 49 2f 31 31 45 49 51 35 49 47 71 61 4c 2e 5f 52 43 7c 30 31 65 35 6e 63 67 6c 78 79 4c 2e 63 73 73 2c 30 31 6c 46 32 6e 2d 70 50 61 4c 2e 63 73 73 2c 35 31 78 73 6c 59 56 51 41 71 4c 2e 63 73 73 2c 33 31 38 50 61 62 52 48 6e 45 4c 2e 63 73 73 2c 30 31 66 51 50 57 55 6a 6e 30 4c 2e 63 73 73 2c 31 31 47 45 50 71 58 61 72 74 4c 2e 63 73 73 2c 30 31 71 50 6c 34 68 78 61 79 4c 2e 63 73 73 2c 30 31 74 69 30 71 2b 32 32 31 Data Ascii: 3ff2open-part2 -->... sp:feature:aui-assets --><link rel="stylesheet" href="https://m.media-amazon.com/images/I/11EIQ5IGqaL._RC\|01e5ncglxyL.css,01lF2n-pPaL.css,51xslYVQAqL.css,318PabRHnEL.css,01fQPWUjn0L.css,11GEPqXartL.css,01qPl4hxayL.css,01ti0q+221
2024-10-23 22:36:40 UTC	16384	IN	Data Raw: 35 30 65 61 0d 0a 2e 70 75 73 68 28 63 29 2c 61 2e 70 75 73 68 28 22 6d 69 78 3a 22 2b 68 29 29 3a 28 70 2e 70 75 73 68 28 63 29 2c 76 2e 70 75 73 68 28 68 29 29 3a 28 6e 2e 70 75 73 68 28 63 29 2c 61 2e 70 75 73 68 28 68 2e 73 75 62 73 74 72 28 33 29 29 29 7d 6b 2e 77 68 65 6e 2e 61 70 70 6c 79 28 6b 2c 61 29 2e 72 65 67 69 73 74 65 72 28 22 6d 69 78 3a 22 2b 66 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 74 7c 7c 75 7c 7c 7e 6d 7c 7c 70 2e 6c 65 6e 67 74 68 3f 7b 63 61 70 61 62 69 6c 69 74 69 65 73 3a 76 2c 63 61 72 64 4d 6f 64 75 6c 65 46 61 63 74 6f 72 79 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 0a 63 29 7b 62 3d 67 28 61 2c 62 2c 63 29 3b 62 2e 50 3d Data Ascii: 50ea.push(c),a.push("mix:"+h)):(p.push(c),v.push(h)):(n.push(c),a.push(h.substr(3)))}k.when.apply(k,a).register("mix:"+f,function(){var a=[].slice.call(arguments);return t\|\|u\|\|~m\|\|p.length?{capabilities:v,cardModuleFactory:function(b,c){b=g(a,b,c);b.P=
2024-10-23 22:36:40 UTC	4338	IN	Data Raw: 22 63 66 22 29 3b 6b 2e 72 65 67 69 73 74 65 72 28 22 61 66 22 29 7d 2c 62 29 2c 75 3d 21 30 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 28 61 29 7b 76 61 72 20 62 3d 7b 7d 2c 65 3b 28 65 3d 61 2e 63 66 29 26 26 6d 28 65 2e 74 69 6d 65 29 26 26 6d 28 65 2e 63 6f 75 6e 74 65 72 29 26 26 28 62 2e 63 66 3d 65 29 3b 28 65 3d 61 2e 61 74 66 29 26 26 6d 28 65 2e 74 69 6d 65 29 26 26 6d 28 65 2e 63 6f 75 6e 74 65 72 29 26 26 6d 28 65 2e 70 69 78 65 6c 73 29 26 26 28 62 2e 61 74 66 3d 65 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 61 29 7b 66 6f 72 28 3b 61 26 26 61 2e 63 6c 61 73 73 4c 69 73 74 26 26 21 61 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 73 2d 72 65 73 75 6c 74 2d 69 74 65 6d 22 29 3b 29 61 3d 61 2e 70 61 72 65 6e Data Ascii: "cf");k.register("af")},b),u=!0)}}function y(a){var b={},e;(e=a.cf)&&m(e.time)&&m(e.counter)&&(b.cf=e);(e=a.atf)&&m(e.time)&&m(e.counter)&&m(e.pixels)&&(b.atf=e);return b}function z(a){for(;a&&a.classList&&!a.classList.contains("s-result-item");)a=a.paren
2024-10-23 22:36:40 UTC	4739	IN	Data Raw: 31 32 37 62 0d 0a 6f 73 74 2d 61 73 73 65 74 73 20 2d 2d 3e 0a 3c 21 2d 2d 20 73 70 3a 66 65 61 74 75 72 65 3a 65 6e 63 72 79 70 74 65 64 2d 73 6c 61 74 65 2d 74 6f 6b 65 6e 20 2d 2d 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 65 6e 63 72 79 70 74 65 64 2d 73 6c 61 74 65 2d 74 6f 6b 65 6e 27 20 63 6f 6e 74 65 6e 74 3d 27 41 6e 59 78 6d 2b 42 2f 2f 79 4e 46 4a 30 57 69 5a 57 32 58 64 75 76 64 58 57 73 4c 30 6b 39 7a 53 36 57 37 7a 4f 59 37 71 61 64 62 6a 31 39 66 36 75 4f 50 5a 37 62 52 70 6f 4d 41 78 57 56 71 37 57 48 7a 57 41 78 30 58 6d 74 33 56 42 31 36 41 2b 52 44 52 71 43 75 35 2b 67 41 71 62 79 71 79 4f 62 4c 42 42 79 68 6d 63 4e 4f 54 43 69 75 34 50 32 65 74 35 76 63 57 4a 34 59 4c 44 56 38 2f 4e 6a 4f 46 6a 62 33 75 37 4c 4e 67 57 64 5a 62 6e 79 73 Data Ascii: 127bost-assets -->... sp:feature:encrypted-slate-token --><meta name='encrypted-slate-token' content='AnYxm+B//yNFJ0WiZW2XduvdXWsL0k9zS6W7zOY7qadbj19f6uOPZ7bRpoMAxWVq7WHzWAx0Xmt3VB16A+RDRqCu5+gAqbyqyObLBByhmcNOTCiu4P2et5vcWJ4YLDV8/NjOFjb3u7LNgWdZbnys
2024-10-23 22:36:40 UTC	16384	IN	Data Raw: 33 66 66 61 0d 0a 73 74 61 72 74 2d 62 6f 64 79 20 2d 2d 3e 0a 3c 21 2d 2d 20 73 70 3a 66 65 61 74 75 72 65 3a 63 73 6d 3a 62 6f 64 79 2d 6f 70 65 6e 20 2d 2d 3e 0a 20 20 20 20 3c 69 6d 67 20 68 65 69 67 68 74 3d 22 31 22 20 77 69 64 74 68 3d 22 31 22 20 73 74 79 6c 65 3d 27 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 27 20 73 72 63 3d 27 2f 2f 66 6c 73 2d 6e 61 2e 61 6d 61 7a 6f 6e 2e 63 6f 6d 2f 31 2f 62 61 74 63 68 2f 31 2f 4f 50 2f 41 54 56 50 44 4b 49 4b 58 30 44 45 52 3a 31 34 36 2d 35 37 32 37 32 37 37 2d 34 34 35 33 32 33 38 3a 59 54 38 59 4a 34 42 39 34 4e 39 38 4a 39 44 4e 5a 51 43 48 24 75 65 64 61 74 61 3d 73 3a 25 32 46 72 64 25 32 46 75 65 64 61 74 61 25 33 46 73 74 61 74 69 63 62 25 32 36 69 Data Ascii: 3ffastart-body -->... sp:feature:csm:body-open --> <img height="1" width="1" style='display:none;visibility:hidden;' src='//fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:146-5727277-4453238:YT8YJ4B94N98J9DNZQCH$uedata=s:%2Frd%2Fuedata%3Fstaticb%26i
2024-10-23 22:36:40 UTC	2891	IN	Data Raw: 0d 0a 62 34 32 0d 0a 7d 29 7d 29 2c 61 2e 75 65 5f 63 73 61 5f 73 73 5f 74 61 67 7c 7c 6c 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 62 2e 6f 6e 28 22 24 63 73 6d 54 61 67 3a 22 2b 61 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 2e 74 61 67 26 26 63 2e 74 61 67 28 61 29 3b 28 63 2e 69 73 6c 7c 7c 67 29 26 26 66 28 22 61 74 22 2c 22 63 73 61 3a 22 2b 61 29 7d 2c 7b 62 75 66 66 65 72 65 64 3a 31 7d 29 7d 29 29 7d 29 3b 0a 0a 0a 77 69 6e 64 6f 77 2e 72 78 20 3d 20 7b 20 27 72 69 64 27 3a 27 59 54 38 59 4a 34 42 39 34 4e 39 38 4a 39 44 4e 5a 51 43 48 27 2c 20 27 73 69 64 27 3a 27 31 34 36 2d 35 37 32 37 32 37 37 2d 34 34 35 33 32 33 38 27 2c 20 27 63 27 3a 7b 20 20 27 72 78 70 27 3a 27 2f 72 64 2f 75 65 64 61 74 61 27 20 7d 7d 3b 0a 3c 2f 73 63 Data Ascii: b42})}),a.ue_csa_ss_tag\|\|l.forEach(function(a){b.on("$csmTag:"+a,function(){c.tag&&c.tag(a);(c.isl\|\|g)&&f("at","csa:"+a)},{buffered:1})}))});window.rx = { 'rid':'YT8YJ4B94N98J9DNZQCH', 'sid':'146-5727277-4453238', 'c':{ 'rxp':'/rd/uedata' }};</sc
2024-10-23 22:36:40 UTC	16384	IN	Data Raw: 33 66 66 61 0d 0a 76 2d 73 6b 65 6c 65 74 6f 6e 20 2d 2d 3e 0a 3c 21 2d 2d 20 73 70 3a 66 65 61 74 75 72 65 3a 6e 61 76 62 61 72 20 2d 2d 3e 0a 0a 3c 21 2d 2d 50 69 6c 75 20 2d 2d 3e 0a 0a 0a 20 20 3c 21 2d 2d 20 4e 41 56 59 41 41 4e 20 2d 2d 3e 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 3c 21 2d 2d 20 6e 61 76 6d 65 74 20 69 6e 69 74 69 61 6c 20 64 65 66 69 6e 69 74 69 6f 6e 20 2d 2d 3e 0a 0a 0a 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3e 0a 20 20 20 20 69 66 28 77 69 6e 64 6f 77 2e 6e 61 76 6d 65 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6e 61 76 6d 65 74 3d 5b 5d 3b 0a 20 20 20 20 20 20 69 66 20 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 20 26 26 Data Ascii: 3ffav-skeleton -->... sp:feature:navbar -->...Pilu --> ... NAVYAAN -->... navmet initial definition --><script type='text/javascript'> if(window.navmet===undefined) { window.navmet=[]; if (window.performance &&
2024-10-23 22:36:40 UTC	16384	IN	Data Raw: 0d 0a 35 66 65 30 0d 0a 72 61 76 65 6c 20 47 65 61 72 3c 2f 6f 70 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 65 61 72 63 68 2d 61 6c 69 61 73 3d 6c 75 78 75 72 79 22 3e 4c 75 78 75 72 79 20 53 74 6f 72 65 73 3c 2f 6f 70 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 65 61 72 63 68 2d 61 6c 69 61 73 3d 6d 61 67 61 7a 69 6e 65 73 22 3e 4d 61 67 61 7a 69 6e 65 20 53 75 62 73 63 72 69 70 74 69 6f 6e 73 3c 2f 6f 70 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 65 61 72 63 68 2d 61 6c 69 61 73 3d 6d 6f 76 69 65 73 2d 74 76 22 3e 4d 6f 76 69 65 73 20 26 20 54 56 3c 2f 6f 70 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 6f 70 74 69 Data Ascii: 5fe0ravel Gear</option> <option value="search-alias=luxury">Luxury Stores</option> <option value="search-alias=magazines">Magazine Subscriptions</option> <option value="search-alias=movies-tv">Movies & TV</option> <opti

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.7	49860	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:40 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:40 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:40 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 4e335343-a01e-000d-7cf4-24d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223640Z-r197bdfb6b429k2s6br3k49qn4000000040000000000bs9s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:40 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.7	49861	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:40 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:40 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:40 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 97ea84b8-d01e-005a-0430-217fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223640Z-16849878b785f8wh85a0w3ennn00000006r000000000rb1s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:40 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.7	49862	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:40 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:40 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:40 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 6ac6ea93-701e-0001-1898-25b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223640Z-15b8d89586f2hk28h0h6zye26c00000000ng000000009fm8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:36:40 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.7	49863	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:40 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:40 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:40 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: a7868e79-001e-0049-77f2-245bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223640Z-r197bdfb6b4cz6xrsdncwtgzd40000000npg0000000025e6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:40 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.7	49864	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:40 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:40 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:40 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 062c286a-b01e-005c-0c8e-214c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223640Z-16849878b78z5q7jpbgf6e9mcw000000070000000000486g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:40 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.7	49866	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:40 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:41 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:40 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 9f7c1011-d01e-0065-1a3b-22b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223640Z-16849878b782h9tt5z2wa5rfxg00000006w0000000003kum x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:41 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.7	49867	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:40 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:41 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:40 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 62a19e75-a01e-0032-1bf3-241949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223640Z-r197bdfb6b4ld6jc5asqwvvz0w00000000wg000000001qtu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:41 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.7	49865	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:40 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:41 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:40 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: b9c92f65-401e-0016-1c27-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223640Z-16849878b78lhh9t0fb3392enw00000006u0000000002r60 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:41 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.7	49868	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:40 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:41 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:41 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: a3259b44-001e-0065-2af2-240b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223640Z-r197bdfb6b4rkc6mhwyt3e61pc00000000tg00000000a44c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:36:41 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.7	49869	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:41 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:41 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:41 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 77e1448d-001e-0034-40f3-24dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223641Z-15b8d89586f42m673h1quuee4s00000002a000000000257y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:36:41 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.7	49870	151.101.1.16	443	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:41 UTC	1390	OUT	GET /images/I/11EIQ5IGqaL._RC%7C01e5ncglxyL.css,01lF2n-pPaL.css,51xslYVQAqL.css,318PabRHnEL.css,01fQPWUjn0L.css,11GEPqXartL.css,01qPl4hxayL.css,01ti0q+221L.css,413Vvv3GONL.css,11TIuySqr6L.css,01Rw4F+QU6L.css,115C34M4eKL.css,01DwiCRvNnL.css,01IdKcBuAdL.css,01dRHIoUjnL.css,216JhEla-AL.css,01lFHae5dSL.css,51pXp+P9GuL.css,01XPHJk60-L.css,11yW2wLgbZL.css,01QhqFH8I8L.css,01i8xapXUHL.css,21guB8pakaL.css,11G8RVHqS+L.css,21yWHgAzkkL.css,11DG4yr02+L.css,216LjtW6ADL.css,01CFUgsA-YL.css,31pGBgRFRdL.css,116t+WD27UL.css,11RvIU5HAoL.css,11lDoAr2PUL.css,11SbsdsyyJL.css,01Jlt0oEURL.css,01X+Gu6WK9L.css,21wzK4uL-JL.css,11Xwl-ZIbpL.css,01LzHhtXxxL.css,21hyIh8IHUL.css,110mkKR-MDL.css,11hvENnYNUL.css,11KWFgYmPtL.css,01890+Vwk8L.css,013tIj5f8aL.css,01cbS3UK11L.css,21F85am0yFL.css,016mfgi+D2L.css,01WslS8q5ML.css,113sefbl5fL.css,016Sx2kF1+L.css_.css?AUIClients/AmazonUI&vET8l+2h HTTP/1.1 Host: m.media-amazon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.amazon.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:36:41 UTC	695	IN	HTTP/1.1 200 OK Connection: close Content-Length: 221038 Content-Type: text/css; charset=utf-8 X-Amz-IR-Id: 1152ad34-ead7-4544-82f8-da45129f16bc Cache-Control: max-age=630720000,public Last-Modified: Thu, 04 Jun 2020 16:54:02 GMT Access-Control-Allow-Origin: * Expires: Thu, 15 Sep 2044 00:52:20 GMT X-Nginx-Cache-Status: HIT Accept-Ranges: bytes Age: 45779 Date: Wed, 23 Oct 2024 22:36:41 GMT X-Served-By: cache-iad-kcgs7200084-IAD, cache-dfw-kdal2120034-DFW Vary: Accept-Encoding Timing-Allow-Origin: https://www.amazon.com X-Cache: HIT from fastly, HIT from fastly Server-Timing: provider;desc="fy" alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 7d 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 7d 68 31 2c 68 32 2c 68 33 2c 68 34 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 34 70 78 7d 68 31 2c 68 32 2c 68 33 2c 68 34 7b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 6f 70 74 69 6d 69 7a 65 4c 65 67 69 62 69 6c 69 74 79 7d 68 31 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 68 32 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 68 33 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 68 34 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 30 7d 68 31 2e 61 2d 73 70 61 63 69 6e 67 2d 6e 6f 6e 65 2c 68 Data Ascii: button,input,select,textarea{font-family:inherit}h1,h2,h3,h4,h5,h6{padding:0;margin:0}h1,h2,h3,h4{padding-bottom:4px}h1,h2,h3,h4{text-rendering:optimizeLegibility}h1:last-child,h2:last-child,h3:last-child,h4:last-child{padding-bottom:0}h1.a-spacing-none,h
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 61 6e 74 7d 2e 61 2d 74 65 78 74 2d 6e 6f 72 6d 61 6c 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 2d 74 65 78 74 2d 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 2d 74 65 78 74 2d 69 74 61 6c 69 63 7b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 2d 74 65 78 74 2d 75 6e 64 65 72 6c 69 6e 65 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 Data Ascii: ant}.a-text-normal{font-weight:400!important;font-style:normal!important;text-transform:none!important;text-decoration:none!important}.a-text-bold{font-weight:700!important}.a-text-italic{font-style:italic!important}.a-text-underline{text-decoration:under
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 2d 73 69 7a 65 2d 62 61 73 65 2d 70 6c 75 73 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 2d 73 69 7a 65 2d 6d 65 64 69 75 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 2d 73 69 7a 65 2d 6d 65 64 69 75 6d 7b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 6f 70 74 69 6d 69 7a 65 4c 65 67 69 62 69 6c 69 74 79 7d 2e 61 2d 73 69 7a 65 2d 6c 61 72 67 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 21 69 6d 70 6f 72 74 61 Data Ascii: rtant;line-height:20px!important}.a-size-base-plus{font-size:16px!important;line-height:24px!important}.a-size-medium{font-size:18px!important;line-height:24px!important}.a-size-medium{text-rendering:optimizeLegibility}.a-size-large{font-size:24px!importa
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 64 65 72 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 29 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 36 70 78 20 73 6f 6c 69 64 20 23 33 46 36 39 39 38 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 30 3b 77 69 64 74 68 3a 30 3b 68 65 69 67 68 74 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 3a 31 30 70 78 7d 2e 61 2d 61 64 64 6f 6e 2d 62 61 64 67 65 3a 62 65 66 6f 72 65 2c 2e 61 2d 69 63 6f 6e 2d 61 64 64 6f 6e 3a 62 65 66 6f 72 65 7b Data Ascii: der-color:rgba(255,255,255,0);border-top:6px solid #3F6998;border-bottom-width:0;width:0;height:0;font-size:0;line-height:0;-webkit-transform:translate3d(0,0,0);transform:translate3d(0,0,0);border-top-width:10px}.a-addon-badge:before,.a-icon-addon:before{
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 34 32 70 78 20 2d 35 70 78 7d 2e 61 2d 69 63 6f 6e 2d 73 65 61 72 63 68 7b 6f 70 61 63 69 74 79 3a 2e 35 35 3b 77 69 64 74 68 3a 31 33 70 78 3b 68 65 69 67 68 74 3a 31 33 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 37 31 70 78 20 2d 38 36 70 78 7d 2e 61 2d 69 63 6f 6e 2d 63 68 65 63 6b 6d 61 72 6b 2d 69 6e 76 65 72 73 65 7b 77 69 64 74 68 3a 31 35 70 78 3b 68 65 69 67 68 74 3a 31 37 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 37 32 70 78 20 2d 38 32 70 78 3b 6f 70 61 63 69 74 79 3a 2e 36 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 36 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 2e 61 2d 69 63 Data Ascii: background-position:-142px -5px}.a-icon-search{opacity:.55;width:13px;height:13px;background-position:-271px -86px}.a-icon-checkmark-inverse{width:15px;height:17px;background-position:-172px -82px;opacity:.6;margin-right:.6em;vertical-align:baseline}.a-ic
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 2e 61 2d 69 63 6f 6e 2d 68 65 61 72 74 2d 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 6d 2e 6d 65 64 69 61 2d 61 6d 61 7a 6f 6e 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 53 2f 73 61 73 68 2f 32 4b 56 69 49 34 62 37 5a 5a 43 4e 74 72 33 2e 70 6e 67 29 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 35 31 32 70 78 20 35 31 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 35 31 32 70 78 20 35 31 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 68 65 69 67 68 74 3a 32 34 70 78 3b 77 69 64 74 68 3a 32 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: line-block;vertical-align:top}.a-icon-heart-on{background-image:url(https://m.media-amazon.com/images/S/sash/2KViI4b7ZZCNtr3.png);-webkit-background-size:512px 512px;background-size:512px 512px;background-repeat:no-repeat;height:24px;width:24px;background
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 6d 2e 6d 65 64 69 61 2d 61 6d 61 7a 6f 6e 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 53 2f 73 61 73 68 2f 32 4b 56 69 49 34 62 37 5a 5a 43 4e 74 72 33 2e 70 6e 67 29 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 35 31 32 70 78 20 35 31 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 35 31 32 70 78 20 35 31 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 68 65 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 32 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 30 38 70 78 20 2d 35 34 70 78 7d 2e 61 2d 68 69 72 65 73 20 2e 61 2d 69 63 6f 6e 2d 68 65 61 72 74 2d 6f 66 66 2e 61 Data Ascii: ground-image:url(https://m.media-amazon.com/images/S/sash/2KViI4b7ZZCNtr3.png);-webkit-background-size:512px 512px;background-size:512px 512px;background-repeat:no-repeat;height:20px;width:20px;background-position:-208px -54px}.a-hires .a-icon-heart-off.a
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 28 68 74 74 70 73 3a 2f 2f 6d 2e 6d 65 64 69 61 2d 61 6d 61 7a 6f 6e 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 53 2f 73 61 73 68 2f 32 4b 56 69 49 34 62 37 5a 5a 43 4e 74 72 33 2e 70 6e 67 29 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 35 31 32 70 78 20 35 31 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 35 31 32 70 78 20 35 31 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 68 65 69 67 68 74 3a 32 34 70 78 3b 77 69 64 74 68 3a 32 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 31 32 70 78 20 2d 31 38 38 70 78 7d 2e 61 2d 68 69 72 65 73 20 2e 61 2d 69 63 6f 6e 2d 68 65 61 72 74 2d 6f 66 66 2d 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: (https://m.media-amazon.com/images/S/sash/2KViI4b7ZZCNtr3.png);-webkit-background-size:512px 512px;background-size:512px 512px;background-repeat:no-repeat;height:24px;width:24px;background-position:-212px -188px}.a-hires .a-icon-heart-off-hover{background
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 6d 2e 6d 65 64 69 61 2d 61 6d 61 7a 6f 6e 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 53 2f 73 61 73 68 2f 32 4b 56 69 49 34 62 37 5a 5a 43 4e 74 72 33 2e 70 6e 67 29 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 35 31 32 70 78 20 35 31 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 35 31 32 70 78 20 35 31 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 68 65 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 32 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 30 38 70 78 20 2d 39 38 70 78 7d 2e 61 2d 68 69 72 65 73 20 2e 61 2d 69 63 6f 6e 2d 68 65 61 72 74 2d 6f 66 66 2d 61 63 74 69 76 Data Ascii: nd-image:url(https://m.media-amazon.com/images/S/sash/2KViI4b7ZZCNtr3.png);-webkit-background-size:512px 512px;background-size:512px 512px;background-repeat:no-repeat;height:20px;width:20px;background-position:-208px -98px}.a-hires .a-icon-heart-off-activ
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 72 74 2d 6f 6e 2d 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 6d 2e 6d 65 64 69 61 2d 61 6d 61 7a 6f 6e 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 53 2f 73 61 73 68 2f 32 4b 56 69 49 34 62 37 5a 5a 43 4e 74 72 33 2e 70 6e 67 29 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 35 31 32 70 78 20 35 31 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 35 31 32 70 78 20 35 31 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 68 65 69 67 68 74 3a 32 34 70 78 3b 77 69 64 74 68 3a 32 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 33 32 35 70 78 20 2d 32 36 36 70 78 7d 2e 61 2d 68 69 72 65 73 20 2e 61 Data Ascii: rt-on-hover{background-image:url(https://m.media-amazon.com/images/S/sash/2KViI4b7ZZCNtr3.png);-webkit-background-size:512px 512px;background-size:512px 512px;background-repeat:no-repeat;height:24px;width:24px;background-position:-325px -266px}.a-hires .a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.7	49873	151.101.1.16	443	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:41 UTC	822	OUT	GET /images/I/41-WpIOxHtL._RC%7C71hATdwg7nL.css,51dhHsnDssL.css,110cRm1b1WL.css,119KcSi-BAL.css,31-P1-9TebL.css,31YZpDCYJPL.css,21pkK7OQMnL.css,41EtvNY2OrL.css,110Nj+wUGYL.css,31K0jc2KvHL.css,01R53xsjpjL.css,11EKggV-DlL.css,415g7iDx4VL.css_.css?AUIClients/NavDesktopUberAsset&0BRhfZ9s HTTP/1.1 Host: images-na.ssl-images-amazon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.amazon.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:36:41 UTC	682	IN	HTTP/1.1 200 OK Connection: close Content-Length: 394332 Content-Type: text/css X-Amz-IR-Id: fb77d404-9510-4d4e-9d2b-43237ddb3789 Cache-Control: max-age=630720000,public Last-Modified: Tue, 29 Aug 2023 18:22:47 GMT Access-Control-Allow-Origin: * Expires: Sun, 11 Sep 2044 18:54:59 GMT X-Nginx-Cache-Status: HIT Accept-Ranges: bytes Age: 2566134 Date: Wed, 23 Oct 2024 22:36:41 GMT X-Served-By: cache-iad-kcgs7200137-IAD, cache-dfw-ktki8620029-DFW Vary: Accept-Encoding Timing-Allow-Origin: https://www.amazon.com X-Cache: HIT from fastly, HIT from fastly Server-Timing: provider;desc="fy" alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 2c 23 68 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 30 30 7d 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 64 69 76 2c 23 68 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 64 69 76 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 2e 68 6d 65 6e 75 2d 76 69 73 69 62 6c 65 2c 23 68 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 2e 68 6d 65 6e 75 2d 76 69 73 69 62 6c 65 7b 76 69 73 69 62 69 6c 69 Data Ascii: #accountMenu-container,#hmenu-container{position:fixed;top:0;left:0;right:0;bottom:0;visibility:hidden;z-index:100000}#accountMenu-container div,#hmenu-container div{display:flex}#accountMenu-container.hmenu-visible,#hmenu-container.hmenu-visible{visibili
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 28 30 2c 30 2c 30 2c 2e 38 29 7d 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 61 6e 76 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2e 68 6d 65 6e 75 2d 74 72 61 6e 73 69 74 69 6f 6e 2c 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 23 68 6d 65 6e 75 2d 63 61 6e 76 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2e 68 6d 65 6e 75 2d 74 72 61 6e 73 69 74 69 6f 6e 2c 23 68 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 61 6e 76 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2e 68 6d 65 6e 75 2d 74 72 61 6e 73 69 74 69 6f 6e 2c 23 68 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 23 68 6d 65 6e 75 2d 63 61 6e 76 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2e 68 Data Ascii: (0,0,0,.8)}#accountMenu-container #accountMenu-canvas-background.hmenu-transition,#accountMenu-container #hmenu-canvas-background.hmenu-transition,#hmenu-container #accountMenu-canvas-background.hmenu-transition,#hmenu-container #hmenu-canvas-background.h
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 67 72 6f 75 6e 64 20 2e 68 6d 65 6e 75 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 23 68 6d 65 6e 75 2d 63 61 6e 76 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 20 2e 68 6d 65 6e 75 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 23 68 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 61 6e 76 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 20 2e 68 6d 65 6e 75 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 23 68 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 23 68 6d 65 6e 75 2d 63 61 6e 76 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 20 2e 68 6d 65 6e 75 2d 63 6c 6f 73 65 2d 69 63 6f 6e 7b 72 69 67 68 74 3a 31 35 70 78 7d 7d 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 23 61 63 Data Ascii: ground .hmenu-close-icon,#accountMenu-container #hmenu-canvas-background .hmenu-close-icon,#hmenu-container #accountMenu-canvas-background .hmenu-close-icon,#hmenu-container #hmenu-canvas-background .hmenu-close-icon{right:15px}}#accountMenu-container #ac
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 74 69 76 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 33 31 61 32 32 7d 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 61 6e 76 61 73 20 23 68 6d 65 6e 75 2d 63 75 73 74 6f 6d 65 72 2d 70 72 6f 66 69 6c 65 20 23 68 6d 65 6e 75 2d 63 75 73 74 6f 6d 65 72 2d 70 72 6f 66 69 6c 65 2d 72 69 67 68 74 2c 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 61 6e 76 61 73 20 23 68 6d 65 6e 75 2d 63 75 73 74 6f 6d 65 72 2d 70 72 6f 66 69 6c 65 20 23 68 6d 65 6e 75 2d 68 6f 6d 65 2d 72 69 67 68 74 2c 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 23 68 6d 65 6e 75 2d 63 61 6e 76 61 73 20 23 68 6d 65 6e 75 Data Ascii: tive{background-color:#131a22}#accountMenu-container #accountMenu-canvas #hmenu-customer-profile #hmenu-customer-profile-right,#accountMenu-container #accountMenu-canvas #hmenu-customer-profile #hmenu-home-right,#accountMenu-container #hmenu-canvas #hmenu
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 65 6e 75 2d 63 75 73 74 6f 6d 65 72 2d 61 76 61 74 61 72 2d 69 6d 67 2c 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 23 68 6d 65 6e 75 2d 63 61 6e 76 61 73 20 23 68 6d 65 6e 75 2d 63 75 73 74 6f 6d 65 72 2d 70 72 6f 66 69 6c 65 20 23 68 6d 65 6e 75 2d 63 75 73 74 6f 6d 65 72 2d 70 72 6f 66 69 6c 65 2d 6c 65 66 74 20 23 68 6d 65 6e 75 2d 63 75 73 74 6f 6d 65 72 2d 61 76 61 74 61 72 20 23 68 6d 65 6e 75 2d 63 75 73 74 6f 6d 65 72 2d 61 76 61 74 61 72 2d 69 6d 67 2c 23 68 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 61 6e 76 61 73 20 23 68 6d 65 6e 75 2d 63 75 73 74 6f 6d 65 72 2d 70 72 6f 66 69 6c 65 20 23 68 6d 65 6e 75 2d 63 75 73 74 6f 6d 65 72 2d 70 72 6f 66 69 6c 65 2d 6c 65 66 74 20 23 Data Ascii: enu-customer-avatar-img,#accountMenu-container #hmenu-canvas #hmenu-customer-profile #hmenu-customer-profile-left #hmenu-customer-avatar #hmenu-customer-avatar-img,#hmenu-container #accountMenu-canvas #hmenu-customer-profile #hmenu-customer-profile-left #
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 6d 65 2d 72 69 67 68 74 20 23 68 6d 65 6e 75 2d 68 6f 6d 65 2d 73 74 72 69 6e 67 2c 23 68 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 61 6e 76 61 73 20 23 68 6d 65 6e 75 2d 63 75 73 74 6f 6d 65 72 2d 70 72 6f 66 69 6c 65 20 23 68 6d 65 6e 75 2d 63 75 73 74 6f 6d 65 72 2d 70 72 6f 66 69 6c 65 2d 72 69 67 68 74 20 23 68 6d 65 6e 75 2d 63 75 73 74 6f 6d 65 72 2d 6e 61 6d 65 2c 23 68 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 61 6e 76 61 73 20 23 68 6d 65 6e 75 2d 63 75 73 74 6f 6d 65 72 2d 70 72 6f 66 69 6c 65 20 23 68 6d 65 6e 75 2d 68 6f 6d 65 2d 72 69 67 68 74 20 23 68 6d 65 6e 75 2d 68 6f 6d 65 2d 73 74 72 69 6e 67 2c 23 68 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 Data Ascii: me-right #hmenu-home-string,#hmenu-container #accountMenu-canvas #hmenu-customer-profile #hmenu-customer-profile-right #hmenu-customer-name,#hmenu-container #accountMenu-canvas #hmenu-customer-profile #hmenu-home-right #hmenu-home-string,#hmenu-container
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 63 6f 6e 74 61 69 6e 65 72 20 23 68 6d 65 6e 75 2d 63 61 6e 76 61 73 20 23 68 6d 65 6e 75 2d 74 6f 70 2d 73 65 63 74 69 6f 6e 20 75 6c 20 6c 69 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 37 34 37 35 61 7d 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 61 6e 76 61 73 20 23 68 6d 65 6e 75 2d 74 6f 70 2d 73 65 63 74 69 6f 6e 20 75 6c 20 6c 69 3a 61 63 74 69 76 65 2c 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 23 68 6d 65 6e 75 2d 63 61 6e 76 61 73 20 23 68 6d 65 6e 75 2d Data Ascii: container #hmenu-canvas #hmenu-top-section ul li{list-style:none;margin-left:5px;flex-grow:1;text-align:center;background-color:#37475a}#accountMenu-container #accountMenu-canvas #hmenu-top-section ul li:active,#accountMenu-container #hmenu-canvas #hmenu-
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 68 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 23 68 6d 65 6e 75 2d 63 61 6e 76 61 73 20 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 6f 6e 74 65 6e 74 2c 23 68 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 23 68 6d 65 6e 75 2d 63 61 6e 76 61 73 20 23 68 6d 65 6e 75 2d 63 6f 6e 74 65 6e 74 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 6f 76 65 72 66 6c 6f 77 2d 73 63 72 6f 6c 6c 69 6e 67 3a 74 6f 75 63 68 7d 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 61 6e 76 61 73 20 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 6f 6e 74 65 6e 74 20 75 6c 2e 68 6d 65 6e 75 2c 23 61 63 63 Data Ascii: hmenu-container #hmenu-canvas #accountMenu-content,#hmenu-container #hmenu-canvas #hmenu-content{position:relative;overflow-x:hidden;height:100%;-webkit-overflow-scrolling:touch}#accountMenu-container #accountMenu-canvas #accountMenu-content ul.hmenu,#acc
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 75 2e 68 6d 65 6e 75 2d 76 69 73 69 62 6c 65 2c 23 68 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 23 68 6d 65 6e 75 2d 63 61 6e 76 61 73 20 23 68 6d 65 6e 75 2d 63 6f 6e 74 65 6e 74 20 75 6c 2e 68 6d 65 6e 75 2e 68 6d 65 6e 75 2d 76 69 73 69 62 6c 65 7b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 61 6e 76 61 73 20 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 6f 6e 74 65 6e 74 20 75 6c 2e 68 6d 65 6e 75 2e 68 6d 65 6e 75 2d 68 69 64 64 65 6e 2c 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 61 6e 76 61 73 20 23 68 6d 65 6e 75 2d 63 6f 6e 74 65 6e 74 20 75 6c 2e 68 6d 65 6e Data Ascii: u.hmenu-visible,#hmenu-container #hmenu-canvas #hmenu-content ul.hmenu.hmenu-visible{visibility:visible}#accountMenu-container #accountMenu-canvas #accountMenu-content ul.hmenu.hmenu-hidden,#accountMenu-container #accountMenu-canvas #hmenu-content ul.hmen
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 69 20 61 2c 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 61 6e 76 61 73 20 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 6f 6e 74 65 6e 74 20 75 6c 2e 68 6d 65 6e 75 20 6c 69 20 61 3a 68 6f 76 65 72 2c 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 61 6e 76 61 73 20 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 6f 6e 74 65 6e 74 20 75 6c 2e 68 6d 65 6e 75 20 6c 69 20 61 3a 76 69 73 69 74 65 64 2c 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 23 61 63 63 6f 75 6e 74 4d 65 6e 75 2d 63 61 6e 76 61 73 20 23 68 6d 65 6e 75 2d 63 6f 6e 74 65 6e 74 20 75 6c 2e 68 6d 65 6e 75 20 6c 69 20 61 2c 23 61 63 63 6f 75 6e 74 4d Data Ascii: i a,#accountMenu-container #accountMenu-canvas #accountMenu-content ul.hmenu li a:hover,#accountMenu-container #accountMenu-canvas #accountMenu-content ul.hmenu li a:visited,#accountMenu-container #accountMenu-canvas #hmenu-content ul.hmenu li a,#accountM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.7	49871	151.101.1.16	443	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:41 UTC	902	OUT	GET /images/I/01mI9NDJJTL._RC%7C01Hw8JIiKbL.css,11AQMRD3rsL.css,61VfgvRLcBL.css,01aTTaL5f8L.css,01NbgfyOxdL.css,01OfDy83BLL.css,11rNNhF9giL.css,41t-n4KOXvL.css,01AuLu1p0SL.css,01+A2nZ3DKL.css,11IaasccbKL.css,01m4HdUj51L.css,01LxUNzvnUL.css,11ABzUvcTsL.css,11a7luWQOCL.css,31J36LqHTUL.css,01e7DqahglL.css,01h5jb0krML.css,21O-2o3zNXL.css_.css?AUIClients/SearchAssets HTTP/1.1 Host: images-na.ssl-images-amazon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.amazon.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:36:41 UTC	697	IN	HTTP/1.1 200 OK Connection: close Content-Length: 179444 Content-Type: text/css; charset=utf-8 X-Amz-IR-Id: 6c39a575-069c-4655-abcd-01dc65b8a237 Cache-Control: max-age=630720000,public Last-Modified: Mon, 10 Sep 2018 21:38:49 GMT Access-Control-Allow-Origin: * Expires: Sun, 21 Aug 2044 13:51:02 GMT X-Nginx-Cache-Status: HIT Accept-Ranges: bytes Age: 3147093 Date: Wed, 23 Oct 2024 22:36:41 GMT X-Served-By: cache-iad-kjyo7100160-IAD, cache-dfw-kdal2120045-DFW Vary: Accept-Encoding Timing-Allow-Origin: https://www.amazon.com X-Cache: HIT from fastly, HIT from fastly Server-Timing: provider;desc="fy" alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 2e 61 6d 7a 6e 2d 73 61 66 65 2d 66 72 61 6d 65 2d 63 6f 6e 74 61 69 6e 65 72 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 61 6d 7a 6e 2d 73 61 66 65 2d 66 72 61 6d 65 2d 73 69 7a 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 2e 61 6d 7a 6e 2d 73 61 66 65 2d 66 72 61 6d 65 7b 62 6f 72 64 65 72 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 61 6d 7a 6e 2d 73 61 66 65 2d 66 72 61 6d 65 2d 66 6f 6f 74 65 72 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 35 65 6d 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 0a 2f 2a 20 2a 2a 2a 2a 2a 2a 2a 2a 20 2a 2f 0a 2e 73 2d 62 61 6e 6e 65 72 2d 62 61 64 67 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 36 70 78 3b 62 6f 72 64 65 72 2d 72 61 Data Ascii: .amzn-safe-frame-container{overflow:hidden;width:100%}.amzn-safe-frame-sizing{margin:0 auto}.amzn-safe-frame{border:0;width:100%}.amzn-safe-frame-footer{font-size:.85em;text-align:right}/* ******** */.s-banner-badge{color:#fff;margin-right:6px;border-ra
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 66 36 39 39 38 7d 2e 73 2d 62 61 6e 6e 65 72 2d 62 61 64 67 65 2e 73 2d 62 61 6e 6e 65 72 2d 62 61 64 67 65 2d 64 61 72 6b 2d 62 6c 75 65 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 23 33 66 36 39 39 38 7d 2e 73 2d 62 61 6e 6e 65 72 2d 62 61 64 67 65 2e 73 2d 62 61 6e 6e 65 72 2d 62 61 64 67 65 2d 64 61 72 6b 2d 62 6c 75 65 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 33 66 36 39 39 38 7d 2e 73 2d 62 61 6e 6e 65 72 2d 62 61 64 67 65 2e 73 2d 62 61 6e 6e 65 72 2d 62 61 64 67 65 2d 67 72 65 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 38 38 38 7d 2e 73 2d 62 61 6e 6e 65 72 2d 62 61 64 67 65 2e 73 2d 62 61 6e 6e 65 Data Ascii: {background-color:#3f6998}.s-banner-badge.s-banner-badge-dark-blue:before{border-bottom-color:#3f6998}.s-banner-badge.s-banner-badge-dark-blue:after{border-top-color:#3f6998}.s-banner-badge.s-banner-badge-grey{background-color:#888}.s-banner-badge.s-banne
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 73 2d 73 65 61 72 63 68 2d 72 65 73 75 6c 74 73 3e 2e 73 2d 77 69 64 67 65 74 2d 73 70 61 63 69 6e 67 2d 73 6d 61 6c 6c 2b 2e 73 2d 77 69 64 67 65 74 2d 73 70 61 63 69 6e 67 2d 6c 61 72 67 65 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 7d 2e 73 2d 73 65 61 72 63 68 2d 72 65 73 75 6c 74 73 3e 64 69 76 3a 6c 61 73 74 2d 63 68 69 6c 64 20 2e 70 75 69 73 2d 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2c 2e 73 2d 73 65 61 72 63 68 2d 72 65 73 75 6c 74 73 3e 64 69 76 3a 6c 61 73 74 2d 63 68 69 6c 64 20 2e 73 2d 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 73 2d 73 65 61 72 63 68 2d 72 65 73 75 6c 74 73 3e 64 69 76 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 2e 73 2d 6d 65 73 73 61 67 69 6e 67 2d 77 69 64 67 65 74 2d 72 65 73 Data Ascii: s-search-results>.s-widget-spacing-small+.s-widget-spacing-large{margin-top:8px}.s-search-results>div:last-child .puis-border-bottom,.s-search-results>div:last-child .s-border-bottom{border-bottom:0}.s-search-results>div:last-child>.s-messaging-widget-res
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 20 34 70 78 20 30 20 30 3b 68 65 69 67 68 74 3a 39 70 78 7d 2e 73 2d 61 6c 65 72 74 2d 65 78 70 61 6e 64 65 72 2d 62 6f 72 64 65 72 2d 74 6f 70 2d 77 61 72 6e 69 6e 67 3a 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 63 63 37 38 7d 2e 73 2d 61 6c 65 72 74 2d 65 78 70 61 6e 64 65 72 2d 62 6f 72 64 65 72 2d 74 6f 70 2d 73 75 63 63 65 73 73 3a 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 36 37 64 36 32 7d 2e 73 2d 61 6c 65 72 74 2d 65 78 70 61 6e 64 65 72 2d 62 6f 72 64 65 72 2d 74 6f 70 2d 69 6e 66 6f 3a 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 31 39 36 61 62 7d Data Ascii: tive;width:100%;top:0;left:0;border-radius:4px 4px 0 0;height:9px}.s-alert-expander-border-top-warning::before{background:#ffcc78}.s-alert-expander-border-top-success::before{background:#067d62}.s-alert-expander-border-top-info::before{background:#1196ab}
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 6f 66 2d 31 36 7b 77 69 64 74 68 3a 33 31 32 2e 35 70 78 7d 2e 73 67 2d 63 6f 6c 2d 36 2d 6f 66 2d 31 36 7b 77 69 64 74 68 3a 33 37 35 70 78 7d 2e 73 67 2d 63 6f 6c 2d 37 2d 6f 66 2d 31 36 7b 77 69 64 74 68 3a 34 33 37 2e 35 70 78 7d 2e 73 67 2d 63 6f 6c 2d 38 2d 6f 66 2d 31 36 7b 77 69 64 74 68 3a 35 30 30 70 78 7d 2e 73 67 2d 63 6f 6c 2d 39 2d 6f 66 2d 31 36 7b 77 69 64 74 68 3a 35 36 32 2e 35 70 78 7d 2e 73 67 2d 63 6f 6c 2d 31 30 2d 6f 66 2d 31 36 7b 77 69 64 74 68 3a 36 32 35 70 78 7d 2e 73 67 2d 63 6f 6c 2d 31 31 2d 6f 66 2d 31 36 7b 77 69 64 74 68 3a 36 38 37 2e 35 70 78 7d 2e 73 67 2d 63 6f 6c 2d 31 32 2d 6f 66 2d 31 36 7b 77 69 64 74 68 3a 37 35 30 70 78 7d 2e 73 67 2d 63 6f 6c 2d 31 33 2d 6f 66 2d 31 36 7b 77 69 64 74 68 3a 38 31 32 2e 35 70 78 Data Ascii: of-16{width:312.5px}.sg-col-6-of-16{width:375px}.sg-col-7-of-16{width:437.5px}.sg-col-8-of-16{width:500px}.sg-col-9-of-16{width:562.5px}.sg-col-10-of-16{width:625px}.sg-col-11-of-16{width:687.5px}.sg-col-12-of-16{width:750px}.sg-col-13-of-16{width:812.5px
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 63 61 6c 63 28 2e 31 32 35 20 2a 20 28 31 30 30 76 77 20 2d 20 32 38 70 78 29 29 3b 6d 69 6e 2d 77 69 64 74 68 3a 31 32 34 2e 35 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 31 38 37 70 78 7d 2e 73 67 2d 63 6f 6c 2d 33 2d 6f 66 2d 31 36 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 63 61 6c 63 28 2e 31 38 37 35 20 2a 20 28 31 30 30 76 77 20 2d 20 32 38 70 78 29 29 3b 6d 69 6e 2d 77 69 64 74 68 3a 31 38 36 2e 37 35 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 32 38 30 2e 35 70 78 7d 2e 73 67 2d 63 6f 6c 2d 34 2d 6f 66 2d 31 36 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 63 61 6c 63 28 2e 32 35 20 2a 20 28 31 30 30 76 77 20 2d 20 32 38 70 78 29 29 3b 6d 69 6e 2d 77 69 64 74 68 3a 32 34 39 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 33 37 Data Ascii: calc(.125 * (100vw - 28px));min-width:124.5px;max-width:187px}.sg-col-3-of-16{display:block;width:calc(.1875 * (100vw - 28px));min-width:186.75px;max-width:280.5px}.sg-col-4-of-16{display:block;width:calc(.25 * (100vw - 28px));min-width:249px;max-width:37
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 2d 31 36 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 20 2a 20 28 31 30 30 76 77 20 2d 20 32 38 70 78 29 29 3b 6d 69 6e 2d 77 69 64 74 68 3a 39 39 36 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 31 34 39 36 70 78 7d 2e 73 2d 77 69 64 65 2d 67 72 69 64 2d 73 74 79 6c 65 20 2e 73 67 2d 63 6f 6c 2d 30 2d 6f 66 2d 31 36 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 73 2d 77 69 64 65 2d 67 72 69 64 2d 73 74 79 6c 65 20 2e 73 67 2d 63 6f 6c 2d 31 2d 6f 66 2d 31 36 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 63 61 6c 63 28 2e 30 36 32 35 20 2a 20 28 31 30 30 76 77 20 2d 20 32 38 70 78 29 29 3b 6d 69 6e 2d 77 69 64 74 68 3a 36 32 2e 32 35 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 31 31 32 2e 32 35 70 78 7d 2e 73 2d 77 Data Ascii: -16{display:block;width:calc(1 * (100vw - 28px));min-width:996px;max-width:1496px}.s-wide-grid-style .sg-col-0-of-16{display:none}.s-wide-grid-style .sg-col-1-of-16{display:block;width:calc(.0625 * (100vw - 28px));min-width:62.25px;max-width:112.25px}.s-w
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 64 74 68 3a 63 61 6c 63 28 2e 36 38 37 35 20 2a 20 28 31 30 30 76 77 20 2d 20 32 38 70 78 29 29 3b 6d 69 6e 2d 77 69 64 74 68 3a 36 38 34 2e 37 35 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 31 32 33 34 2e 37 35 70 78 7d 2e 73 2d 77 69 64 65 2d 67 72 69 64 2d 73 74 79 6c 65 20 2e 73 67 2d 63 6f 6c 2d 31 32 2d 6f 66 2d 31 36 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 63 61 6c 63 28 2e 37 35 20 2a 20 28 31 30 30 76 77 20 2d 20 32 38 70 78 29 29 3b 6d 69 6e 2d 77 69 64 74 68 3a 37 34 37 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 31 33 34 37 70 78 7d 2e 73 2d 77 69 64 65 2d 67 72 69 64 2d 73 74 79 6c 65 20 2e 73 67 2d 63 6f 6c 2d 31 33 2d 6f 66 2d 31 36 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 63 61 6c 63 28 2e 38 31 32 35 20 Data Ascii: dth:calc(.6875 * (100vw - 28px));min-width:684.75px;max-width:1234.75px}.s-wide-grid-style .sg-col-12-of-16{display:block;width:calc(.75 * (100vw - 28px));min-width:747px;max-width:1347px}.s-wide-grid-style .sg-col-13-of-16{display:block;width:calc(.8125
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 69 64 74 68 3a 33 34 38 2e 36 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 35 32 33 2e 36 70 78 7d 2e 73 67 2d 63 6f 6c 2d 38 2d 6f 66 2d 32 30 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 63 61 6c 63 28 2e 34 20 2a 20 28 31 30 30 76 77 20 2d 20 32 38 70 78 29 29 3b 6d 69 6e 2d 77 69 64 74 68 3a 33 39 38 2e 34 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 35 39 38 2e 34 70 78 7d 2e 73 67 2d 63 6f 6c 2d 39 2d 6f 66 2d 32 30 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 63 61 6c 63 28 2e 34 35 20 2a 20 28 31 30 30 76 77 20 2d 20 32 38 70 78 29 29 3b 6d 69 6e 2d 77 69 64 74 68 3a 34 34 38 2e 32 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 36 37 33 2e 32 70 78 7d 2e 73 67 2d 63 6f 6c 2d 31 30 2d 6f 66 2d 32 30 7b 64 69 73 70 6c 61 79 3a 62 6c Data Ascii: idth:348.6px;max-width:523.6px}.sg-col-8-of-20{display:block;width:calc(.4 * (100vw - 28px));min-width:398.4px;max-width:598.4px}.sg-col-9-of-20{display:block;width:calc(.45 * (100vw - 28px));min-width:448.2px;max-width:673.2px}.sg-col-10-of-20{display:bl
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 73 2d 77 69 64 65 2d 67 72 69 64 2d 73 74 79 6c 65 20 2e 73 67 2d 63 6f 6c 2d 31 2d 6f 66 2d 32 30 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 63 61 6c 63 28 2e 30 35 20 2a 20 28 31 30 30 76 77 20 2d 20 32 38 70 78 29 29 3b 6d 69 6e 2d 77 69 64 74 68 3a 34 39 2e 38 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 38 39 2e 38 70 78 7d 2e 73 2d 77 69 64 65 2d 67 72 69 64 2d 73 74 79 6c 65 20 2e 73 67 2d 63 6f 6c 2d 32 2d 6f 66 2d 32 30 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 63 61 6c 63 28 2e 31 20 2a 20 28 31 30 30 76 77 20 2d 20 32 38 70 78 29 29 3b 6d 69 6e 2d 77 69 64 74 68 3a 39 39 2e 36 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 31 37 39 2e 36 70 78 7d 2e 73 2d 77 69 64 65 2d 67 72 Data Ascii: display:none}.s-wide-grid-style .sg-col-1-of-20{display:block;width:calc(.05 * (100vw - 28px));min-width:49.8px;max-width:89.8px}.s-wide-grid-style .sg-col-2-of-20{display:block;width:calc(.1 * (100vw - 28px));min-width:99.6px;max-width:179.6px}.s-wide-gr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.7	49874	151.101.1.16	443	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:41 UTC	1021	OUT	GET /images/I/21RZgaOpsqL._RC%7C01LNhrqAZmL.css,11mqgJVSK9L.css,01+6LDwsu8L.css,01ixfc-7StL.css,11ahlU8GWXL.css,01+neHskhqL.css,01U2pA95KSL.css,01fn6WRzO6L.css,21BUT35X5SL.css,01Sqn3dOuBL.css,01KrVAe0PrL.css,31wUat9O8SL.css,31gMGQBDl3L.css,01mP5ZKi0aL.css,01mEWw4285L.css,11OSAsJXa3L.css,01zG4X6TtRL.css,31FHXBkYr7L.css,11VKiAMd89L.css,11TWIoQuuIL.css,01K0fSFz6eL.css,014eilLW+IL.css,01MU0Cb7yFL.css,01UfLPWOEOL.css,01Gjv7o0taL.css,019L5P4oPhL.css_.css?AUIClients/SearchPartnerAssets HTTP/1.1 Host: images-na.ssl-images-amazon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.amazon.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:36:41 UTC	681	IN	HTTP/1.1 200 OK Connection: close Content-Length: 79229 Content-Type: text/css X-Amz-IR-Id: a77cac40-0f73-4eb2-9602-46e883a4638f Cache-Control: max-age=630720000,public Last-Modified: Wed, 03 Jul 2024 00:22:50 GMT Access-Control-Allow-Origin: * Expires: Wed, 05 Oct 2044 00:27:14 GMT X-Nginx-Cache-Status: HIT Accept-Ranges: bytes Age: 1199167 Date: Wed, 23 Oct 2024 22:36:41 GMT X-Served-By: cache-iad-kjyo7100058-IAD, cache-dfw-kdal2120075-DFW Vary: Accept-Encoding Timing-Allow-Origin: https://www.amazon.com X-Cache: HIT from fastly, HIT from fastly Server-Timing: provider;desc="fy" alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 2e 71 73 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 41 6d 61 7a 6f 6e 20 45 6d 62 65 72 22 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 39 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 71 73 2d 77 69 64 67 65 74 2d 63 68 65 63 6b 62 6f 78 2d 68 69 64 64 65 6e 3a 61 63 74 69 76 65 2b 2e 71 73 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 71 73 2d 77 69 64 67 65 74 2d 63 68 65 63 6b 62 6f 78 2d 68 69 64 64 65 6e 3a 61 63 74 69 76 65 2b 2e 71 73 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 71 73 2d 77 69 64 67 65 74 2d 73 70 69 6e 6e 65 72 7b 76 69 73 69 62 69 Data Ascii: .qs-widget-container{font-family:"Amazon Ember",Arial,sans-serif!important;line-height:19px!important}.qs-widget-checkbox-hidden:active+.qs-widget-container{visibility:hidden}.qs-widget-checkbox-hidden:active+.qs-widget-container>.qs-widget-spinner{visibi
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 68 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 69 6e 2d 77 69 64 74 68 3a 31 36 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 31 38 35 70 78 7d 2e 71 73 2d 77 69 64 67 65 74 2d 64 72 6f 70 64 6f 77 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 62 6f 72 64 65 72 3a 31 70 78 3b 77 69 64 74 68 3a 61 75 74 6f 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 34 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 33 29 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 71 73 2d 77 69 64 67 65 74 2d 64 72 6f 70 64 6f 77 6e 2d 77 72 61 70 70 65 Data Ascii: h:auto!important;min-width:160px;max-width:185px}.qs-widget-dropdown-container{position:absolute;padding:0;margin:0;max-width:none;top:0;left:0;border:1px;width:auto;box-shadow:0 2px 4px rgba(0,0,0,.13);text-align:left!important}.qs-widget-dropdown-wrappe
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 6d 6d 61 72 79 2d 61 74 63 7b 77 69 64 74 68 3a 31 35 35 70 78 7d 2e 71 73 2d 77 69 64 67 65 74 2d 73 75 6d 6d 61 72 79 2d 64 69 73 63 6c 61 69 6d 65 72 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 71 73 2d 77 69 64 67 65 74 2d 74 65 78 74 2d 69 6e 70 75 74 5b 64 61 74 61 2d 73 69 7a 65 3d 62 61 73 65 5d 7b 77 69 64 74 68 3a 35 35 70 78 7d 2e 71 73 2d 77 69 64 67 65 74 2d 74 65 78 74 2d 69 6e 70 75 74 5b 64 61 74 61 2d 73 69 7a 65 3d 73 6d 61 6c 6c 5d 7b 77 69 64 74 68 3a 35 35 70 78 3b 68 65 69 67 68 74 3a 32 31 70 78 7d 2e 71 73 2d 77 69 64 67 65 74 2d 71 75 61 6e 74 69 74 79 2d 69 6e 6c 69 6e 65 7b 64 69 73 70 6c 61 79 3a Data Ascii: mmary-atc{width:155px}.qs-widget-summary-disclaimer{display:block;font-style:italic;font-size:12px!important}.qs-widget-text-input[data-size=base]{width:55px}.qs-widget-text-input[data-size=small]{width:55px;height:21px}.qs-widget-quantity-inline{display:
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 2d 74 6f 70 3a 34 70 78 20 73 6f 6c 69 64 20 23 30 30 37 31 38 35 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 71 73 2d 77 69 64 67 65 74 2d 64 65 63 72 65 6d 65 6e 74 2d 6f 76 65 72 72 69 64 65 2d 61 75 69 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 33 46 33 46 33 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 37 70 78 20 30 20 30 20 37 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 44 35 44 39 44 39 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 34 30 70 78 3b 68 65 69 67 68 74 3a 33 31 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 71 73 2d 72 6f 75 6e 64 65 64 2d 73 74 65 70 70 65 Data Ascii: -top:4px solid #007185!important}.qs-widget-decrement-override-aui{display:flex!important;background:#F3F3F3!important;border-radius:7px 0 0 7px!important;border-color:#D5D9D9!important;border-right:none;width:40px;height:31px!important}.qs-rounded-steppe
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 71 73 2d 77 69 64 67 65 74 2d 69 6e 63 72 65 6d 65 6e 74 2d 6f 76 65 72 72 69 64 65 2d 61 75 69 20 2e 61 2d 62 75 74 74 6f 6e 2d 74 65 78 74 2e 61 2d 62 75 74 74 6f 6e 2d 74 65 78 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 68 65 69 67 68 74 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 71 73 2d 72 6f 75 6e 64 65 64 2d 73 74 65 70 70 65 72 20 2e 71 73 2d 77 69 64 67 65 74 2d 69 6e 63 72 65 6d 65 6e 74 2d 6f 76 65 72 72 69 64 65 2d 61 75 69 20 2e 61 2d 62 75 74 74 6f 6e 2d 74 65 78 74 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 36 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 68 74 6d 6c 5b 64 Data Ascii: 100%!important}.qs-widget-increment-override-aui .a-button-text.a-button-text{font-size:24px!important;height:100%!important;text-align:center!important}.qs-rounded-stepper .qs-widget-increment-override-aui .a-button-text{line-height:26px!important}html[d
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 73 2d 73 6c 69 64 65 72 2d 73 70 69 6e 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 2e 61 2d 6e 6f 2d 6a 73 20 2e 71 73 2d 73 6c 69 64 65 72 2d 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 61 2d 6e 6f 2d 6a 73 20 2e 71 73 2d 61 64 64 2d 74 6f 2d 63 61 72 74 2d 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 21 69 6d 70 6f 72 74 61 6e 74 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 2f 2a 20 2a 2a 2a 2a 2a 2a 2a 2a 20 2a 2f 0a 2e 61 2d 62 75 74 74 6f 6e 2e 61 2d 62 75 74 74 6f Data Ascii: s-slider-spinner{position:absolute;top:0;right:0;bottom:0;left:0;margin:auto;pointer-events:none}.a-no-js .qs-slider-button{display:none}.a-no-js .qs-add-to-cart-button{display:block!important;visibility:visible!important}/* ******** */.a-button.a-butto
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 6b 67 72 6f 75 6e 64 3a 23 65 62 66 35 64 36 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 2d 62 75 74 74 6f 6e 2e 61 2d 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2e 70 72 69 6d 61 72 79 2d 66 72 65 73 68 2d 62 74 6e 2d 66 6c 61 74 2e 61 2d 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2e 61 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 3a 61 66 74 65 72 2c 2e 61 2d 62 75 74 74 6f 6e 2e 70 72 69 6d 61 72 79 2d 66 72 65 73 68 2d 62 74 6e 2d 66 6c 61 74 2e 61 2d 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2e 61 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 62 66 35 64 36 20 23 65 62 66 35 64 36 20 23 64 38 64 65 63 63 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 2d 62 75 74 74 6f 6e 2e 61 2d 62 75 74 74 6f Data Ascii: kground:#ebf5d6!important}.a-button.a-button-primary.primary-fresh-btn-flat.a-button-primary.a-button-disabled:after,.a-button.primary-fresh-btn-flat.a-button-primary.a-button-disabled:after{border-color:#ebf5d6 #ebf5d6 #d8decc!important}.a-button.a-butto
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 66 33 2d 63 61 72 74 2d 66 61 76 6f 72 69 74 65 73 2d 69 74 65 6d 20 2e 61 2d 64 65 63 6c 61 72 61 74 69 76 65 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 7d 2e 66 33 2d 63 61 72 74 2d 66 61 76 6f 72 69 74 65 73 2d 69 74 65 6d 20 2e 61 2d 64 65 63 6c 61 72 61 74 69 76 65 3a 68 6f 76 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 66 69 6c 74 65 72 3a 62 72 69 67 68 74 6e 65 73 73 28 39 30 25 29 7d 2e 66 33 2d 63 61 72 74 2d 66 Data Ascii: flex;flex-direction:row;align-content:center;align-items:center;text-align:center;justify-content:flex-start}.f3-cart-favorites-item .a-declarative{flex:0 0 auto}.f3-cart-favorites-item .a-declarative:hover{cursor:pointer;filter:brightness(90%)}.f3-cart-f
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 20 2e 61 2d 63 61 72 6f 75 73 65 6c 2d 72 69 67 68 74 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 2e 69 6e 73 63 78 2d 67 75 69 64 65 64 2d 73 65 61 72 63 68 2d 72 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 2d 70 69 6c 6c 2d 63 6c 69 63 6b 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 64 34 64 34 64 38 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 31 70 78 20 31 70 78 20 32 70 78 20 30 20 72 67 62 61 28 31 35 2c 31 37 2c 31 37 2c 2e 32 29 7d 2e 69 6e 73 63 78 2d 67 75 69 64 65 64 2d 73 65 61 72 63 68 2d 72 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 2d 70 69 6c 6c 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 30 66 30 66 30 3b 62 6f Data Ascii: .a-carousel-right{padding-right:0}.inscx-guided-search-recommendation-pill-clicked{background:#d4d4d8!important;box-shadow:1px 1px 2px 0 rgba(15,17,17,.2)}.inscx-guided-search-recommendation-pill{cursor:pointer;box-sizing:border-box;background:#f0f0f0;bo
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 32 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 20 30 20 30 20 38 70 78 7d 2e 69 6e 73 63 78 2d 67 75 69 64 65 64 2d 73 65 61 72 63 68 2d 63 6f 6c 6f 72 70 69 6c 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 34 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 3b 77 69 64 74 68 3a 34 34 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 32 70 78 20 30 20 72 67 62 61 28 31 35 2c 31 37 2c 31 37 2c 2e 32 29 7d 0a 2f 2a 20 2a 2a 2a 2a 2a 2a 2a 2a 20 2a 2f 0a 2e 62 72 61 6e 64 2d 66 6f 6c 6c 6f 77 2d 62 75 74 74 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 62 72 61 6e 64 2d 66 6f 6c 6c 6f 77 2d 62 75 74 74 6f 6e 7b 6d 69 6e 2d Data Ascii: 2px;border-radius:8px 0 0 8px}.inscx-guided-search-colorpill{margin-bottom:4px;display:flex;border-radius:8px;width:44px;box-shadow:0 1px 2px 0 rgba(15,17,17,.2)}/* ******** */.brand-follow-button-container{display:inline-block}.brand-follow-button{min-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.7	49872	151.101.1.16	443	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:41 UTC	611	OUT	GET /images/I/31fNEss5igL.css?AUIClients/DetailPageAllOffersDisplayAssets HTTP/1.1 Host: images-na.ssl-images-amazon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.amazon.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:36:41 UTC	681	IN	HTTP/1.1 200 OK Connection: close Content-Length: 13959 Content-Type: text/css X-Amz-IR-Id: 36e5ee55-5034-429b-b3d1-7c9f8a0869ed Cache-Control: max-age=630720000,public Last-Modified: Fri, 27 Oct 2023 15:46:00 GMT Access-Control-Allow-Origin: * Expires: Tue, 01 Dec 2043 04:18:25 GMT X-Nginx-Cache-Status: HIT Accept-Ranges: bytes Age: 2096555 Date: Wed, 23 Oct 2024 22:36:41 GMT X-Served-By: cache-iad-kcgs7200044-IAD, cache-dfw-kdal2120075-DFW Vary: Accept-Encoding Timing-Allow-Origin: https://www.amazon.com X-Cache: HIT from fastly, HIT from fastly Server-Timing: provider;desc="fy" alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 23 61 6c 6c 2d 6f 66 66 65 72 73 2d 64 69 73 70 6c 61 79 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 21 69 6d 70 6f 72 74 61 6e 74 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 72 69 67 68 74 3a 2d 36 32 30 70 78 3b 77 69 64 74 68 3a 36 30 32 70 78 3b 62 6f 74 74 6f 6d 3a 30 3b 7a 2d 69 6e 64 65 78 3a 32 39 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 39 66 62 66 62 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 3b 74 6f 70 3a 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 2d 34 70 78 20 30 20 35 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 35 29 3b 2d 77 65 62 6b 69 74 2d 6f 76 65 72 66 6c 6f 77 2d 73 63 72 6f 6c 6c 69 6e 67 3a 74 6f 75 63 68 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 69 6e 69 74 69 61 6c 3b 66 6f Data Ascii: #all-offers-display{overflow:visible!important;position:fixed;right:-620px;width:602px;bottom:0;z-index:290;margin:0;background-color:#f9fbfb;border-width:0;top:0;box-shadow:-4px 0 5px rgba(0,0,0,.25);-webkit-overflow-scrolling:touch;text-align:initial;fo
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 23 61 6c 6c 2d 6f 66 66 65 72 73 2d 64 69 73 70 6c 61 79 20 2e 61 6f 64 2d 64 65 6c 69 76 65 72 79 2d 70 72 6f 6d 69 73 65 2d 74 72 75 6e 63 61 74 65 20 23 61 6d 61 7a 6f 6e 2d 64 61 79 2d 6d 65 73 73 61 67 65 2c 23 61 6c 6c 2d 6f 66 66 65 72 73 2d 64 69 73 70 6c 61 79 20 2e 61 6f 64 2d 64 65 6c 69 76 65 72 79 2d 70 72 6f 6d 69 73 65 2d 74 72 75 6e 63 61 74 65 20 23 64 65 6c 69 76 65 72 79 2d 6d 65 73 73 61 67 65 2c 23 61 6c 6c 2d 6f 66 66 65 72 73 2d 64 69 73 70 6c 61 79 20 2e 61 6f 64 2d 64 65 6c 69 76 65 72 79 2d 70 72 6f 6d 69 73 65 2d 74 72 75 6e 63 61 74 65 20 Data Ascii: rflow:hidden;position:relative;display:block;white-space:nowrap}#all-offers-display .aod-delivery-promise-truncate #amazon-day-message,#all-offers-display .aod-delivery-promise-truncate #delivery-message,#all-offers-display .aod-delivery-promise-truncate
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 78 74 2d 63 6c 61 73 73 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 7d 23 61 6c 6c 2d 6f 66 66 65 72 73 2d 64 69 73 70 6c 61 79 20 2e 62 32 62 2d 61 6f 64 2d 61 73 69 6e 2d 74 69 74 6c 65 2d 74 65 78 74 2d 63 6c 61 73 73 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 2d 63 6c 61 6d 70 3a 32 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 7d 23 61 6c 6c 2d 6f 66 66 65 72 73 2d 64 69 73 70 6c 61 79 20 2e 61 6f 64 2d 61 73 69 6e Data Ascii: xt-class{white-space:nowrap;overflow:hidden;text-overflow:ellipsis}#all-offers-display .b2b-aod-asin-title-text-class{overflow:hidden;text-overflow:ellipsis;display:-webkit-box;-webkit-line-clamp:2;-webkit-box-orient:vertical}#all-offers-display .aod-asin
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 64 2d 66 69 6c 74 65 72 2d 62 6c 6f 63 6b 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 61 2d 72 6f 77 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 21 69 6d 70 6f 72 74 61 6e 74 7d 23 61 6c 6c 2d 6f 66 66 65 72 73 2d 64 69 73 70 6c 61 79 20 23 61 6f 64 2d 66 69 6c 74 65 72 2d 68 69 64 65 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 58 28 31 38 30 64 65 67 29 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 61 6c 6c 2d 6f 66 66 65 72 73 2d 64 69 73 70 6c 61 79 20 2e 61 6f 64 2d 66 69 6c 74 65 72 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 31 38 70 78 3b 72 69 67 68 74 3a 32 30 70 78 7d 23 61 6c 6c 2d 6f 66 66 65 72 73 2d 64 69 73 70 6c 61 79 20 2e 62 32 62 2d 61 6f 64 2d 66 Data Ascii: d-filter-block-container .a-row:after{clear:both!important}#all-offers-display #aod-filter-hide{transform:rotateX(180deg);display:none}#all-offers-display .aod-filter-component-container{position:absolute;top:18px;right:20px}#all-offers-display .b2b-aod-f
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 21 69 6d 70 6f 72 74 61 6e 74 7d 23 61 6c 6c 2d 6f 66 66 65 72 73 2d 64 69 73 70 6c 61 79 20 2e 61 6f 64 2d 63 68 65 63 6b 62 6f 78 2d 63 6f 6c 3e 6c 61 62 65 6c 7b 74 6f 70 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 21 69 6d 70 6f 72 74 61 6e 74 3b 72 69 67 68 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 23 61 6c 6c 2d 6f 66 66 65 72 73 2d 64 69 73 70 6c 61 79 20 2e 61 6f 64 2d 63 68 65 63 6b 62 6f 78 2d 63 6f 6c 3e 6c 61 62 65 6c 3e 2e 61 2d 69 63 6f 6e 2d 63 68 65 63 6b 62 6f 78 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 23 61 6c 6c 2d 6f 66 66 65 72 73 2d 64 69 73 70 6c 61 79 20 2e 61 6f 64 2d 70 Data Ascii: !important}#all-offers-display .aod-checkbox-col>label{top:0!important;position:absolute!important;right:0!important}#all-offers-display .aod-checkbox-col>label>.a-icon-checkbox{position:relative!important;margin-top:0!important}#all-offers-display .aod-p
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 65 64 2d 6f 66 66 65 72 7b 74 6f 70 3a 30 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 30 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 7d 23 61 6c 6c 2d 6f 66 66 65 72 73 2d 64 69 73 70 6c 61 79 20 2e 61 6f 64 2d 73 74 69 63 6b 79 2d 70 69 6e 6e 65 64 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 36 30 32 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 30 30 30 7d 23 61 6c 6c 2d 6f 66 66 65 72 73 2d 64 69 73 70 6c 61 79 20 2e 61 6f 64 2d 73 74 69 63 6b 79 2d 70 69 6e 6e 65 64 2d 6f 66 66 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 77 69 64 74 68 3a 36 30 32 70 78 3b 74 6f 70 3a 2d 32 30 30 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 30 30 30 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 Data Ascii: ed-offer{top:0;z-index:1000000;background:#fff}#all-offers-display .aod-sticky-pinned-container{position:relative;width:602px;z-index:1000000}#all-offers-display .aod-sticky-pinned-offer{position:fixed;width:602px;top:-200px;z-index:100000000;background:#
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 6f 66 66 65 72 2d 63 6c 61 73 73 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 34 46 36 46 37 21 69 6d 70 6f 72 74 61 6e 74 3b 77 69 64 74 68 3a 31 30 30 76 77 7d 23 61 6c 6c 2d 6f 66 66 65 72 73 2d 64 69 73 70 6c 61 79 20 2e 61 6f 64 2d 70 6f 70 6f 76 65 72 7b 7a 2d 69 6e 64 65 78 3a 36 30 30 31 21 69 6d 70 6f 72 74 61 6e 74 7d 23 61 6c 6c 2d 6f 66 66 65 72 73 2d 64 69 73 70 6c 61 79 20 23 66 61 73 74 2d 74 72 61 63 6b 2d 6d 65 73 73 61 67 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 69 6e 68 65 72 69 74 7d 23 61 6c 6c 2d 6f 66 66 65 72 73 2d 64 69 73 70 6c 61 79 20 2e 61 6f 64 2d 68 64 70 2d 61 76 61 69 6c 61 62 69 6c 69 74 79 20 2e 61 2d 73 65 63 74 Data Ascii: offer-class{background:#F4F6F7!important;width:100vw}#all-offers-display .aod-popover{z-index:6001!important}#all-offers-display #fast-track-message{font-size:inherit;line-height:inherit;text-align:inherit}#all-offers-display .aod-hdp-availability .a-sect
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 72 65 2d 61 6c 69 67 6e 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 2e 61 6f 64 2d 73 68 69 70 73 2d 66 72 6f 6d 2d 63 6f 75 6e 74 72 79 3e 70 7b 6d 61 72 67 69 6e 3a 30 7d 2e 61 6f 64 2d 61 73 69 6e 2d 74 69 74 6c 65 2d 72 65 67 75 6c 61 72 2d 74 65 78 74 2c 2e 61 6f 64 2d 61 73 69 6e 2d 74 69 74 6c 65 2d 72 65 67 75 6c 61 72 2d 74 65 78 74 3a 6c 69 6e 6b 2c 2e 61 6f 64 2d 61 73 69 6e 2d 74 69 74 6c 65 2d 72 65 67 75 6c 61 72 2d 74 65 78 74 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 30 30 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 61 6f 64 2d 74 65 78 74 62 6f 6f 6b 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 7d 2e 61 6f 64 2d 72 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 73 2d 68 65 61 64 69 6e 67 2d 70 72 Data Ascii: re-align{vertical-align:top}.aod-ships-from-country>p{margin:0}.aod-asin-title-regular-text,.aod-asin-title-regular-text:link,.aod-asin-title-regular-text:visited{color:#000;text-decoration:none}.aod-textbook{display:inline}.aod-recommendations-heading-pr
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 2d 66 69 6c 74 65 72 2d 73 77 61 74 63 68 2d 63 6f 6e 74 65 6e 74 2d 74 65 78 74 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 35 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 23 61 6c 6c 2d 6f 66 66 65 72 73 2d 64 69 73 70 6c 61 79 20 2e 61 6f 64 2d 66 69 6c 74 65 72 2d 73 77 61 74 63 68 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 77 72 61 70 3b 77 69 64 74 68 3a 31 30 30 25 7d 23 61 6c 6c 2d 6f 66 66 65 72 73 2d 64 69 73 70 6c 61 79 20 23 61 6f 64 2d 66 69 6c 74 65 72 2d 73 77 61 74 63 68 2d 63 6f 6e 74 61 69 6e 65 72 2d 62 6f 74 74 6f 6d 3e 2e 61 6f 64 2d 66 69 6c 74 65 72 2d 73 77 61 74 63 68 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 36 70 78 21 69 6d 70 6f 72 74 61 6e Data Ascii: -filter-swatch-content-text{padding-right:5px!important;display:flex}#all-offers-display .aod-filter-swatch-container{display:flex;flex-flow:wrap;width:100%}#all-offers-display #aod-filter-swatch-container-bottom>.aod-filter-swatch{margin-top:6px!importan
2024-10-23 22:36:41 UTC	1378	IN	Data Raw: 65 3a 36 70 78 7d 2e 61 6f 64 2d 6c 6f 61 64 2d 74 65 78 74 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 30 70 78 7d 2e 61 6f 64 2d 73 70 69 6e 6e 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 69 6e 6e 65 72 7b 72 69 67 68 74 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 62 6f 74 74 6f 6d 3a 35 33 25 3b 74 6f 70 3a 34 37 25 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 61 6f 64 2d 62 32 62 2d 62 6f 74 74 6f 6d 2d 73 68 65 65 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 32 72 65 6d 3b 74 6f 70 3a 2d 33 2e 36 72 65 6d 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 23 61 6c 6c 2d 6f 66 66 65 72 73 2d 64 69 73 70 6c 61 79 20 2e 61 6f 64 2d 62 61 63 6b 2d 6d 6f Data Ascii: e:6px}.aod-load-text{margin-top:50px}.aod-spinner-container-inner{right:50%;left:50%;bottom:53%;top:47%;margin:auto;position:absolute}.aod-b2b-bottom-sheet-close-icon{position:absolute;right:2rem;top:-3.6rem;cursor:pointer}#all-offers-display .aod-back-mo

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.7	49879	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:41 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:41 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:41 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: c82cfbdf-e01e-00aa-7097-25ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223641Z-16849878b787psctgubawhx7k800000006qg00000000a2xq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:36:41 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.7	49878	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:41 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:41 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:41 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: e1e0bfc6-201e-006e-0e0b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223641Z-16849878b78lhh9t0fb3392enw00000006ng00000000snu6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:41 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.7	49877	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:41 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:41 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:41 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: baa41b4f-401e-00ac-2c28-210a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223641Z-16849878b78plcdqu15wsb886400000006p000000000yrwb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:41 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.7	49876	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:41 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:41 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:41 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 8b787db3-c01e-0046-5018-242db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223641Z-r197bdfb6b4rkc6mhwyt3e61pc00000000wg000000000rna x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:41 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.7	49880	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:42 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:42 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:42 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 8522a688-a01e-0084-2768-219ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223642Z-16849878b78p4hmjy4vha5ddqw00000006sg0000000094hg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:42 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.7	49883	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:42 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:42 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:42 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: b053902c-001e-0028-05ae-24c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223642Z-15b8d89586fqj7k5uht6e8nnew0000000czg00000000hfr2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:42 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.7	49884	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:42 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:42 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:42 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 8b373834-501e-008c-26e4-21cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223642Z-16849878b78p6ttkmyustyrk8s00000006ug000000001aek x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:42 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.7	49881	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:42 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:42 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:42 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 6158f20b-d01e-0028-2cf2-247896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223642Z-r197bdfb6b4lkrtc7na2dkay28000000026000000000ewqe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:36:42 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.7	49882	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:42 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:36:42 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:36:42 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: ada57496-d01e-005a-4ff2-247fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T223642Z-r197bdfb6b4lbgfqwkqbrm672s00000000eg00000000d2er x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:36:42 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.7	49886	151.101.1.16	443	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:43 UTC	652	OUT	GET /images/G/01/gno/sprites/nav-sprite-global-1x-reorg-privacy._CB587940754_.png HTTP/1.1 Host: m.media-amazon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.amazon.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:36:43 UTC	659	IN	HTTP/1.1 200 OK Connection: close Content-Length: 14256 Content-Type: image/png X-Amz-IR-Id: fa537843-25fb-477b-b66e-5cf8c63e151e Cache-Control: max-age=630720000,public Last-Modified: Thu, 01 Jun 2023 22:09:04 GMT Access-Control-Allow-Origin: * Expires: Fri, 28 Aug 2043 19:05:43 GMT X-Nginx-Cache-Status: HIT Accept-Ranges: bytes Date: Wed, 23 Oct 2024 22:36:43 GMT Age: 4952252 X-Served-By: cache-iad-kjyo7100125-IAD, cache-dfw-kdal2120038-DFW Timing-Allow-Origin: https://www.amazon.com X-Cache: HIT from fastly, HIT from fastly Server-Timing: provider;desc="fy" alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-23 22:36:43 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 5e 00 00 01 c2 08 03 00 00 00 90 51 51 10 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 02 f4 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff d4 d4 8d ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 91 8b 49 94 c1 43 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 98 98 98 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 99 cc 33 ff ff ff 10 10 10 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR^QQgAMAasRGBPLTEGpLIC3
2024-10-23 22:36:43 UTC	1378	IN	Data Raw: 0f 9f 3d 4c 13 6f 9b 86 b5 37 65 1d ef de d2 d2 cc 93 a1 11 e8 15 87 c4 a5 d9 25 f1 cd 80 38 34 24 6e e0 99 81 21 19 ef ae b8 34 b3 21 4e 50 06 f6 75 31 32 8f 11 4a 19 53 e2 96 b9 96 f6 6b 11 2a 3f c1 9a 01 bc d2 56 39 f8 dc f4 fb a8 1e 74 8c b5 06 a5 93 a9 da bb a3 e5 31 41 f8 f7 00 e0 f9 ce ed b5 0f f3 6b 8f 77 c6 00 c6 8e fe 99 9a 17 e6 9f 3f ff 57 10 3e ad 03 3c db 16 04 e1 69 9a a2 e1 0b a4 4e 37 6d bc 7f 89 9f 31 33 0c 23 5e f1 cd 30 7c 16 c5 89 45 a8 98 15 5f 9c c1 3b 22 ee d2 d6 6b f4 46 98 83 01 c4 5a 49 78 99 4a 83 ff fa 91 b8 0a 6c 4e d6 55 ea 08 32 0d 66 63 af 37 84 c7 1d a0 47 ee 93 11 66 25 bc ac df cf 58 57 ea c9 42 6c 9f be 22 c9 75 78 2c dc 9d 17 84 b5 db c2 5d 80 bb 82 f0 7e 1b f7 e6 c7 3e 09 c2 6d 58 bf 2b 6c df 3e 12 be 5c 79 37 a3 c1 Data Ascii: =Lo7e%84$n!4!NPu12JSk*?V9t1Akw?W><iN7m13#^0\|E_;"kFZIxJlNU2fc7Gf%XWBl"ux,]~>mX+l>\y7
2024-10-23 22:36:43 UTC	1378	IN	Data Raw: 2d f7 db 20 2b 66 0b 5f d2 98 1f b4 3a fb bb c3 3f f6 80 8c e3 e5 92 e5 a9 49 01 6f 71 42 52 37 8f 74 ad 82 ef 70 bc 9b c7 9b 84 17 2b 78 36 98 a5 fe ab e2 44 f3 85 a2 ae df 52 28 46 59 e3 0f 76 ef 3e 5f cb 2c de 40 c8 a2 f2 d2 37 2f 30 99 1c fc 15 a6 4d 7d 58 d4 4c 26 0a 0c f6 4d 49 3b 40 53 c8 44 dd 22 b6 fb 09 67 c4 92 8c c9 17 c7 94 6e 6b 6d 38 64 aa 04 f5 82 db 6c d9 b4 87 92 35 e4 e5 21 a9 c9 16 df d6 ea 72 c3 05 e7 d4 ae a6 18 b3 ff 4a 5d d7 72 d5 96 51 6b 2b 4b 29 e8 4d d3 b4 f7 83 e6 c3 d8 39 89 0e cf 59 aa 7b 14 5d ea 9c c6 6b bb 53 d0 4d 1d 5b 59 b4 0e 8c 73 82 75 73 05 a7 09 57 87 63 5b d8 32 42 dd b5 d6 42 4e e3 75 91 08 5b 6c 59 4d b4 36 36 ca b5 be 2b 11 f2 36 17 86 0e ad bc e7 c3 1a d3 82 dd 9d f1 b2 f8 43 63 6d 1a 16 29 ce 68 6a ee 60 4d Data Ascii: - +f_:?IoqBR7tp+x6DR(FYv>_,@7/0M}XL&MI;@SD"gnkm8dl5!rJ]rQk+K)M9Y{]kSM[YsusWc[2BBNu[lYM66+6Ccm)hj`M
2024-10-23 22:36:43 UTC	1378	IN	Data Raw: cf 3e 82 83 2d dc 0e 03 9b cd d5 45 e1 05 33 62 51 c5 ec 38 19 6f 0d 14 fe 10 92 43 87 8a af 47 4d 6a e3 b2 c6 06 70 ee 2a 91 70 a8 50 b0 ed ad 28 b6 25 14 bc 1a 86 57 94 88 83 46 23 0c af c1 3a 6a 66 0b be 9d 74 d2 fb c5 e3 f5 a8 76 02 28 66 d2 89 78 5d 90 4d e1 2e 50 cc 0c 18 ec f3 2f 41 f9 3d 9a 70 60 4f 08 a0 4a b4 94 08 6f 85 82 6d 4e 6a d7 25 69 b8 00 6f bd 55 3f 4d 25 66 b1 5a e3 d5 66 c9 da 37 40 53 c5 e3 b5 aa 4b 18 96 dd 77 9c 84 17 55 2e f0 28 80 01 d1 df 4d 54 73 19 34 af a4 13 a7 b4 47 35 d7 3c 42 c9 96 b6 8a 04 db 84 51 2a 0e f5 8f be 65 78 1f 2b 78 87 29 1f 1c 5d 6e a3 cd 1f ef d7 1b 12 74 d9 3a e4 2b 1e 2f 98 61 cd ce 18 16 04 d2 b0 70 02 5e 9c 97 8e be 98 e2 6a a8 d6 99 0b 02 d6 5e a8 1c a4 34 19 6b b3 2b 32 b8 74 9a 43 25 86 a9 cb 6f 36 Data Ascii: >-E3bQ8oCGMjppP(%WF#:jftv(fx]M.P/A=p`OJomNj%ioU?M%fZf7@SKwU.(MTs4G5<BQex+x)]nt:+/ap^j^4k+2tC%o6
2024-10-23 22:36:43 UTC	1378	IN	Data Raw: 2d 09 15 af 0b 85 e9 19 f0 42 bc b6 5e 0c a8 09 35 88 b5 39 af 98 c5 34 0e 8f c7 11 87 73 0a 71 e8 9a a9 55 ce 70 d5 f1 0a 98 e4 72 06 bc b5 aa 78 1e d2 28 ba 59 52 0d df 22 5e 7d ae 86 f3 06 9a c9 1a 36 d7 25 dd e5 c2 7b 70 50 55 7a bc 26 6c 5e 7a 06 bc 9d ec 9e 37 0f 46 72 2e ed 14 76 7e 55 f1 2e 31 1d 2e e2 f2 4d e1 39 db 28 75 34 a9 49 1e 57 76 a8 78 a7 99 2c f5 9d 05 af 10 c0 e5 ee 1b f3 39 9a c5 db ab a4 3c 72 ca 39 87 99 82 86 21 e0 ab 8d 77 28 d4 94 0a a0 56 70 06 bc c0 91 0f 4d 46 9b 2c 8a 8d 11 13 d9 cf 5b 73 c6 7e c0 db ce 26 6c b7 7e 20 a8 e0 bd a1 2a c3 57 1c af 32 e2 1d 67 c3 6b 96 0a b2 c1 49 5e 57 06 92 63 b4 40 f6 12 17 4f cb dc 8e ef 52 e0 35 42 b6 3c 44 09 c9 a4 28 0e 29 86 ae 28 7a cc a4 db 23 8a 9d 70 97 8b 22 98 68 16 51 84 b4 5b 5f Data Ascii: -B^594sqUprx(YR"^}6%{pPUz&l^z7Fr.v~U.1.M9(u4IWvx,9<r9!w(VpMF,[s~&l~ *W2gkI^Wc@OR5B<D()(z#p"hQ[_
2024-10-23 22:36:43 UTC	1378	IN	Data Raw: 7e d3 72 6e 08 5e e5 3b 53 0b 03 5c 8f 93 e6 a5 af f4 2c cc 0d 0c e8 40 df c0 f0 c2 ab 95 35 92 8a 3a 81 7c b3 73 44 e5 37 3c f1 f2 d4 50 27 59 df 38 42 6a 78 35 10 ef da dc 2d 67 72 dc 78 f6 bf b3 d7 15 bc 08 62 3b 75 d2 4d 3a b2 64 da 8a a7 ed 8d 5d e4 13 a8 09 bc 08 f0 74 2e 99 b7 b7 df d9 db 2b e7 f8 f6 92 8c f4 f7 23 73 aa be d9 39 b9 9c 9c 8c f7 7b 3a fd bb 27 5b 2f b8 d6 be 7d ff 89 ce 71 f0 ea f4 71 5a d9 e3 57 44 76 e9 ae a8 cc 34 6b 04 2f 72 11 79 79 d3 23 1f 64 97 3c a7 2e dd 3b 0f 45 f1 f4 5d cc 8b e2 3d ad e0 c5 8b 77 17 c8 52 d2 f3 36 c5 39 5c d8 51 61 11 4f 61 5a 44 f1 52 f3 c9 da c3 8b a3 88 9e c5 09 92 36 3d 32 38 ba 56 b9 ac 69 34 a6 3d 6c 23 e6 78 9f e0 3d be 13 ef 35 ec 93 cf 03 32 4b ff 37 f2 d3 57 a9 d1 92 1a 54 ad 4b e4 c1 b4 87 64 Data Ascii: ~rn^;S\,@5:\|sD7<P'Y8Bjx5-grxb;uM:d]t.+#s9{:'[/}qqZWDv4k/ryy#d<.;E]=wR69\QaOaZDR6=28Vi4=l#x=52K7WTKd
2024-10-23 22:36:43 UTC	1378	IN	Data Raw: 1c 84 f7 43 6e 08 d4 0c 5e 9d 2f 9d de 1e ee 4c e9 b4 dd b2 03 6f 64 e7 c9 32 35 2e 7d 11 2f 3a f2 4a 72 56 00 ae 31 33 0b a1 3f 93 c9 f8 4c 7c d4 95 4a 1a f5 99 94 75 0a 47 5d 3a a3 cb 0a ad 8e b8 ec 34 85 60 12 da 1c 7c c4 00 15 bc fa 8c 03 da 52 c6 83 6e c7 fb e6 67 b6 b2 d9 80 c7 e3 41 cc 66 3c 1e 3d d8 f0 8c 79 d0 09 cb 7c 00 87 13 81 0d 72 d9 fa 24 09 2e 3c 69 8a 97 db 24 fb 9e b2 01 7f c4 fd c1 7a a4 c1 2f e0 75 92 69 c5 a0 34 81 5e f4 3d 0b 6a e2 cd 25 8b 18 05 fa e2 82 6e 74 6c 0a 98 52 f2 89 24 31 53 5e de b3 da 14 bc 82 9c 41 6d 38 e0 1d 56 b3 8a c6 00 18 cb 66 d3 33 78 1b 19 eb a4 72 1c 5b f6 27 65 67 86 e0 9d 0c c8 bb 93 5c 99 7f a0 24 f5 8f f6 4b d2 82 3c 43 c3 44 c9 14 b8 4f 92 74 f2 b1 09 34 af d3 83 e1 7e 3a 6d 5b 53 13 af 80 f3 cc 83 5e Data Ascii: Cn^/Lod25.}/:JrV13?L\|JuG]:4`\|RngAf<=y\|r$.<i$z/ui4^=j%ntlR$1S^Am8Vf3xr['eg\$K<CDOt4~:m[S^
2024-10-23 22:36:43 UTC	1378	IN	Data Raw: b7 be fd ed 6f 5d f6 fe 74 56 9b 35 1f 5a 6d a3 1a cc 2c b3 51 78 f7 5e b9 f2 d5 56 c4 9b c2 72 46 b9 f1 aa 61 65 e4 00 a0 f7 3c 7a bf 5d b2 c1 be 77 4b e2 65 39 28 b3 59 dc 9b 97 11 18 af 72 54 bc d6 b8 37 77 ef e2 84 0e cf e4 86 5c 7f 78 f7 ee dd 22 78 69 2c 96 83 ef 05 2c 19 1d 21 d5 d2 4e 21 71 cc 76 cc 88 76 57 4a 55 89 2f ee 36 1d 6d cb 45 3c 26 f5 15 4e 89 fe e1 0c 21 f7 6e 92 7d 27 0f 7e b7 87 62 dc e3 70 5e 61 c3 bf 7b ee 98 bc 78 6f 5c c1 99 51 5b 25 20 53 d2 d6 58 b9 1e 8c a9 24 d5 4a 03 04 6a a0 ea 26 62 6e 00 a8 5c d7 3d e5 3a 9c bd d7 2f e1 64 05 a7 13 a7 a2 3b 9d 1f 9f 71 3a 0f ba 27 32 38 9d b9 1e bc fb 68 25 5c 61 d3 f9 b6 40 60 46 cf ff e2 56 a5 91 99 ec 61 68 e9 ef 00 e8 38 0e 2d f5 00 8a f5 dd d3 4d 36 0f 7a c7 59 a4 88 8f 8d fd cb 41 Data Ascii: o]tV5Zm,Qx^VrFae<z]wKe9(YrT7w\x"xi,,!N!qvvWJU/6mE<&N!n}'~bp^a{xo\Q[% SX$Jj&bn\=:/d;q:'28h%\a@`FVah8-M6zYA
2024-10-23 22:36:43 UTC	1378	IN	Data Raw: 39 e1 7a c8 39 45 aa cf 8f b8 ba 47 02 3e 7d fe b3 9f 87 6f df 76 8d 70 4c 91 fb 87 fb b3 ae d9 e1 4f fd 10 de 7d e2 f1 ac 6b 78 f7 7d 17 4f b1 b0 16 5d 7d 4c fd ab ab fb e1 c8 ed cf 3d 63 c2 bb 6f 7f 7a ee 22 5d d9 f5 33 21 17 1f 73 44 6b f4 c0 0c 30 aa ab bb fb 62 77 d7 ac f0 cf 17 23 f8 b4 c3 2e 9e b8 62 ed 2e 78 e4 a2 6b a9 ba 1e 7e c3 6c f9 c1 55 4e 67 3d b4 fb c4 d7 c3 dd b3 d4 70 67 bf 38 f2 70 e4 01 7f 66 04 17 17 17 17 17 d7 2a 05 7e 14 f2 33 25 9c 1b c7 cb c5 c5 c5 c5 c5 b5 ea cb 1f bf b4 71 bc 31 13 98 71 71 bc 5c 5c 5c fc d2 c6 f1 72 71 71 f1 c0 8c 8b e3 e5 e2 e2 e2 e2 e2 e2 e2 e2 e2 e2 e2 e2 e2 e2 e2 e2 e2 e2 e2 da fa 92 3c 09 b6 f5 4d 80 f5 16 d9 d2 ff 65 3c 13 aa 7f 7d 34 ff 34 f0 c6 d7 35 3f f9 a7 db a0 5c c2 57 26 6a 88 66 be cf c7 67 a6 Data Ascii: 9z9EG>}ovpLO}kx}O]}L=coz"]3!sDk0bw#.b.xk~lUNg=pg8pf*~3%q1qq\\\rqq<Me<}445?\W&jfg
2024-10-23 22:36:43 UTC	1378	IN	Data Raw: aa dd 31 c3 9f 6e bc ff 75 c7 0f d5 c1 f8 ce af 82 6e 60 f3 ed a7 eb 1b c3 3e b7 11 8e b8 ea 1a 5a 6f 6d b2 67 d1 b6 4a e3 15 6a 68 bb 9f f5 07 82 d5 4f 3d 88 69 05 e2 15 24 07 4a 89 2a d0 ec 74 49 e0 19 e6 6a f0 6b bd a0 26 41 ed f7 d0 2a 8e 08 8b 6e 5d b9 ba 30 6c e3 8d 10 ce ca 1a 5a 39 3f f7 ff ed 9d cd 4f 1a 69 1c c7 1f bb 88 42 75 60 51 71 15 a6 89 d6 95 a0 14 d6 da ac 15 d7 b8 86 80 07 63 62 82 17 13 d3 78 d2 f0 2f 78 dc 83 7f c2 de 9a 34 5e d6 13 09 9e 3c 35 de d4 db da 43 bb cd be e4 b9 c8 01 c1 55 bb 76 53 f7 b2 cf 33 30 30 cc 0c 03 f3 cc 20 2f fe 3e 69 35 a3 95 c2 e7 f9 f2 bc cc cc f3 73 82 d3 6a 1f 0f 7e 8c 82 78 5d 78 2b 06 d1 2c 1e d0 dd e7 07 0b 3a cb fb 5e ed a1 e4 d5 2f b5 d8 cd c7 77 5c 65 34 c6 fa 37 e0 b1 c8 51 b6 90 4d f1 d5 4d cd f6 Data Ascii: 1nun`>ZomgJjhO=i$JtIjk&An]0lZ9?OiBu`Qqcbx/x4^<5CUvS300 />i5sj~x]x+,:^/w\e47QMM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.7	49885	151.101.1.16	443	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:43 UTC	701	OUT	GET /images/G/01/digital/video/merch/Other/TNFL_24_SWM_700x78_POST_Final_noLocale_GSS00014519_GraphicalCountdown._CB544626030_.gif HTTP/1.1 Host: m.media-amazon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.amazon.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:36:43 UTC	658	IN	HTTP/1.1 200 OK Connection: close Content-Length: 47368 Content-Type: image/gif X-Amz-IR-Id: 295948df-0b22-434c-aa11-0a6cd3ce00b4 Cache-Control: max-age=630720000,public Last-Modified: Mon, 07 Oct 2024 15:36:37 GMT Access-Control-Allow-Origin: * Expires: Mon, 17 Oct 2044 19:11:09 GMT X-Nginx-Cache-Status: HIT Accept-Ranges: bytes Date: Wed, 23 Oct 2024 22:36:43 GMT Age: 85004 X-Served-By: cache-iad-kjyo7100070-IAD, cache-dfw-kdal2120085-DFW Timing-Allow-Origin: https://www.amazon.com X-Cache: MISS from fastly, HIT from fastly Server-Timing: provider;desc="fy" alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-23 22:36:43 UTC	1378	IN	Data Raw: 47 49 46 38 39 61 bc 02 4e 00 e6 7f 00 06 4a b4 ed c2 16 eb d5 96 f4 cf 72 f6 f8 fb b2 d3 fa ce d7 ea 09 73 e4 02 15 76 16 84 fc 08 65 d3 8e 6b 60 f1 c9 51 ce e2 fb 6e 8d a1 01 07 67 d4 b7 9d a3 86 70 c8 c8 c7 32 4b 60 a3 a7 ad c5 89 56 91 a6 d2 5f 5f 6d 29 55 8e fc ab 05 e9 e3 d5 e6 b7 49 e6 eb f3 d7 d8 d6 de e2 ee 03 23 87 75 b4 fe 9a 64 aa 89 90 bc 56 67 a9 ea bb 71 ed a8 21 07 57 c3 cf 95 6b 27 52 a9 ef c6 30 77 8b c1 6e 79 b0 8c 9a c7 05 3f a7 b0 b4 d2 9e 5c 38 c7 a3 4c 4a 52 92 04 34 9b 93 93 97 ed 9c 06 9f b1 d7 ed f2 f8 c9 98 3e 00 02 60 b9 b8 b9 84 9e ad b1 91 89 34 3f 8a da a5 71 51 76 8e 98 c7 fe 9e a3 c7 7b 7a 7c 86 bc fb 2a 3c 50 b4 c2 e0 02 1c 7f e8 de be f0 6a 0c ba a8 9f 60 28 14 19 24 79 59 8a cf 24 66 c4 de ac 3e 2d 10 07 c2 ca e0 c5 84 Data Ascii: GIF89aNJrsvek`Qngp2K`V__m)UI#udVgq!Wk'R0wny?\8LJR4>`4?qQv{z\|*<Pj`($yY$f>-
2024-10-23 22:36:43 UTC	1378	IN	Data Raw: bc bb ba b9 b8 b7 b6 b5 b4 b3 b2 b1 b0 af ae ad ac ab aa a9 a8 a7 a6 a5 a4 a3 a2 a1 a0 9f 9e 9d 9c 9b 9a 99 98 97 96 95 94 93 92 91 90 8f 8e 8d 8c 8b 8a 89 88 87 86 85 84 83 82 81 80 7f 7e 7d 7c 7b 7a 79 78 77 76 75 74 73 72 71 70 6f 6e 6d 6c 6b 6a 69 68 67 66 65 64 63 62 61 60 5f 5e 5d 5c 5b 5a 59 58 57 56 55 54 53 52 51 50 4f 4e 4d 4c 4b 4a 49 48 47 46 45 44 43 42 41 40 3f 3e 3d 3c 3b 3a 39 38 37 36 35 34 33 32 31 30 2f 2e 2d 2c 2b 2a 29 28 27 26 25 24 23 22 21 20 1f 1e 1d 1c 1b 1a 19 18 17 16 15 14 13 12 11 10 0f 0e 0d 0c 0b 0a 09 08 07 06 05 04 03 02 01 00 00 21 f9 04 05 aa 00 7f 00 2c 00 00 00 00 bc 02 4e 00 00 07 ff 80 7e 82 83 84 85 86 87 88 89 8a 8b 8c 8d 7e 43 52 0a 7c 93 94 95 96 97 98 99 9a 9b 9c 9b 3f 7d 7d 3c 7b a3 a4 a5 a6 a7 a3 0f aa ab ac Data Ascii: ~}\|{zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONMLKJIHGFEDCBA@?>=<;:9876543210/.-,+*)('&%$#"! !,N~~CR\|?}}<{
2024-10-23 22:36:43 UTC	1378	IN	Data Raw: f1 68 64 d0 51 0b ef a0 23 9a f1 00 72 7d 50 1b 48 20 e6 01 04 ac cb 03 03 94 92 0a 80 40 46 20 28 48 09 2d 1c 01 c4 c4 b0 8a 2a f1 07 08 21 aa 9c 0b 56 c1 bc 4d a5 83 76 48 cc a3 1e 95 52 19 25 4a 25 33 40 70 62 07 51 c0 1f 0f e8 48 0f fc 91 5c 8e 28 b7 1f 02 14 a1 67 a1 40 00 19 44 c7 02 04 80 50 36 7b 70 5d 40 a6 d6 b6 3c f1 c0 ff 75 5e b8 02 0f 44 70 b4 33 ed ab 72 6c 54 85 b4 1c 26 38 51 ed f1 95 b0 94 49 ee 6e 92 00 10 80 20 01 21 e3 1d 1a a2 20 48 e0 81 52 47 ae 73 81 8e d0 b0 a2 22 30 b2 91 4f 68 61 24 55 88 80 9b ed 21 8c 79 d2 a1 b4 b6 d4 9c ca 81 c2 06 ab c8 53 01 59 a1 b1 58 7a f3 9b 11 39 5f 5a d4 57 80 90 a9 ef 0e 51 48 67 2f 4f 39 29 e0 69 4a 7e 39 aa 23 0b 72 a4 2c 1f 6d a6 67 c8 5b db ce 76 55 39 20 38 af 72 58 22 a1 a4 46 d3 bf 8a 8d 03 Data Ascii: hdQ#r}PH @F (H-*!VMvHR%J%3@pbQH\(g@DP6{p]@<u^Dp3rlT&8QIn ! HRGs"0Oha$U!ySYXz9_ZWQHg/O9)iJ~9#r,mg[vU9 8rX"F
2024-10-23 22:36:43 UTC	1378	IN	Data Raw: 07 0a 5a 80 05 05 d0 00 3f a0 5e 3b 67 ff 09 58 f0 03 05 30 54 3b a8 65 89 a6 73 67 97 83 94 e0 65 41 75 83 d8 10 51 12 f8 7d 11 98 6d 06 63 03 02 05 0a 44 20 03 e4 07 2a 75 e4 6d 51 20 74 3b 73 7e 5b 22 75 8f 93 48 f8 b5 23 28 f8 27 5e c7 82 2e 78 86 a7 92 0d e2 e5 47 9a 30 27 62 b0 84 de 27 03 4b 18 31 e2 c7 02 32 70 51 75 64 54 51 50 67 3b 21 7e 17 f2 3b 45 90 67 61 28 86 63 48 72 40 61 7c 68 98 88 a4 a2 7c cb 87 70 6c 58 09 99 c1 02 70 28 81 72 c8 6d fb 51 03 54 e0 23 66 90 7e 49 22 03 ae 93 81 5b 40 04 35 60 01 10 c7 1f 5b 20 2d 22 80 06 aa 48 42 2a 00 3c ae 36 88 77 52 88 64 28 17 8a 58 8b df c2 88 96 b0 86 8f 78 09 f0 45 05 93 48 89 72 c0 1f 4b d0 02 75 b6 05 96 28 85 32 90 89 fc 61 06 14 55 8a 52 18 05 79 a2 07 19 65 24 c0 93 6e ac 06 8b 3a 22 8b Data Ascii: Z?^;gX0T;esgeAuQ}mcD umQ t;s~["uH#('^.xG0'b'K12pQudTQPg;!~;Ega(cHr@a\|h\|plXp(rmQT#f~I"[@5`[ -"HB<6wRd(XxEHrKu(2aURye$n:"
2024-10-23 22:36:43 UTC	1378	IN	Data Raw: b9 d8 50 54 9f 7b bc f2 da b7 10 c2 01 26 a0 bc fb c1 04 9e f9 a9 67 b0 b3 78 ba 84 00 d0 1f 28 50 9a 85 32 81 4b d9 1f 16 90 6d b7 7b 07 fa e3 81 51 60 92 28 09 3c 1c a9 59 f6 e5 35 bf 1b bc ee 7b 0c 45 4b bc 97 10 59 72 e0 b9 f6 0b b7 9f 9b a9 2a 2b 85 26 b0 94 cb 0a 97 ca 22 07 9f 6a 01 70 19 81 fe db 02 1c 39 ad 1b 59 39 54 80 66 ae c3 8c 3b 0b 9b f3 48 51 a2 b3 b0 b5 59 32 ef 9b c1 ee 00 99 f2 9b 0d e5 c2 04 f7 7b bf 26 80 bf f0 d5 1f 72 d0 bf fd a1 a9 ca ea bc b5 2b bd 45 49 a3 3b 6b 00 fd ba 1f dd f7 ff 7d e9 66 01 2a d0 42 df bb 05 06 e3 01 e1 86 7b 80 99 6e 6d 36 51 02 09 a1 80 a8 23 1a 9c c4 d1 c0 b6 1d ac 9c 6d 11 c2 50 ec b9 ca d2 a6 9a ca c2 7d 40 c5 9a 4a 42 1c 00 00 3b eb 01 9d d9 97 48 f7 9c 47 43 a7 c4 48 ab 32 70 ba 7d 50 03 e1 67 4d 5f Data Ascii: PT{&gx(P2Km{Q`(<Y5{EKYr+&"jp9Y9Tf;HQY2{&r+EI;k}fB{nm6Q#mP}@JB;HGCH2p}PgM_
2024-10-23 22:36:43 UTC	1378	IN	Data Raw: 9f 92 7a de 0d 49 88 aa 21 7e 28 f8 49 c2 38 b5 f1 e3 9c 52 f5 89 e1 9a 87 8b e7 d0 a3 c7 88 11 7d 85 2b e7 d0 55 ec 51 11 9d 55 ab 15 d2 f7 44 7f 0e 64 05 0f 5c 4a 44 18 50 45 80 c8 88 5b dc a3 03 11 11 63 0f 31 f0 d0 af e0 c0 0e 7d 4e 2f 3a e3 f1 40 cc 27 26 f0 66 e0 23 d3 74 20 88 0e 3b 04 11 15 72 10 46 c8 86 2a 1f 14 31 99 0a aa 64 a8 e1 72 40 68 68 5d 2b 22 68 28 c2 1e 6a 65 78 85 2b 62 68 c8 03 0f 1b 6a e8 02 1d b5 c4 50 e2 86 2e ec 41 0b 0e 33 6e e8 c1 0a 0f 04 a3 04 01 1a 8e 80 83 12 1b 0a c8 8b 0b 1a 3e 51 cc ff 27 07 1c e8 e4 22 40 0a e7 87 03 5c 70 80 84 69 11 66 99 5a 16 7d 74 50 c4 97 16 6e 85 64 8b 19 d2 b1 5e 86 3c fc 44 84 86 68 10 99 a1 0d ae 20 b0 21 02 2b 90 99 e1 13 36 5e 61 83 9d 7d b0 40 8b 9b 7c 02 d1 e3 2f 1d 7a c8 8b 07 41 f2 12 Data Ascii: zI!~(I8R}+UQUDd\JDPE[c1}N/:@'&f#t ;rF*1dr@hh]+"h(jex+bhjP.A3n>Q'"@\pifZ}tPnd^<Dh !+6^a}@\|/zA
2024-10-23 22:36:43 UTC	1378	IN	Data Raw: 00 f8 0a 81 ee 02 b6 09 83 4d e6 06 a0 10 01 95 26 36 1b 6b b8 83 0c 62 50 81 c7 4a f6 bd f0 85 ef 63 a1 b0 cd 26 10 92 a7 11 f8 c0 16 f8 b8 09 6f a9 60 b4 45 45 81 86 3c 00 26 3d 68 c8 87 5f 02 62 86 08 50 84 cc ad 02 01 64 70 22 ff 0b 10 80 54 7e ed 41 8b eb 73 5d fc 72 c4 03 2d 7a e1 0a 3c 10 81 e8 1a c5 b3 20 fe 96 16 04 83 da 17 3d 21 46 97 24 00 04 20 48 40 d7 ca c8 c6 0e b4 91 03 39 40 02 12 72 c0 85 1e db b8 03 3d f6 ae 1c 95 b9 4c 28 68 ec bc d8 48 ef 16 82 50 82 c8 c6 f7 c9 f1 7d 6c 19 a6 00 4e 71 2a 12 06 fa 05 ad 27 94 83 06 00 b7 d3 c3 60 d2 a2 0b c0 84 86 24 15 41 c1 0b 7e 42 55 1f 2c 55 04 4c 6e 0f b4 cd d1 58 09 c6 27 f3 04 51 15 36 a8 45 8e 0a 6a 8b ad 75 02 97 67 d9 65 01 ba d6 14 0e c8 f5 c7 d2 35 b4 a1 89 c9 e8 b9 72 80 0b 22 0d 6f 1d Data Ascii: M&6kbPJc&o`EE<&=h_bPdp"T~As]r-z< =!F$ H@9@r=L(hHP}lNq*'`$A~BU,ULnX'Q6Ejuge5r"o
2024-10-23 22:36:43 UTC	1378	IN	Data Raw: 80 04 0b 60 4d 30 48 4c 34 48 36 0b 10 07 31 59 9a 76 b0 00 0e b0 06 12 f0 95 a5 a0 1c 3a 49 08 75 a1 21 ac e8 2b 40 c9 0d b7 68 06 1a 60 94 bb 58 07 0c e0 84 92 25 8c 1b 40 06 f2 a6 09 38 c7 8c 33 30 03 54 c9 06 02 30 05 24 c0 00 ce f9 9c 0c 80 07 3c f0 7c 9b 70 43 3a 40 37 d8 49 7d 06 a6 21 16 c0 6a f0 f4 2d 51 80 5a 93 b4 02 6b c6 28 fe 56 04 df 39 6b 45 80 5c 40 50 66 7c a2 02 79 a1 97 b2 f1 15 7c 77 85 ce 50 46 8b b8 08 25 72 98 8d 89 98 86 28 91 7d f0 6c a0 c1 90 0d a9 0a 98 87 67 30 06 02 1f 78 98 cd c0 79 de e3 00 65 d0 89 a1 18 07 11 a0 01 28 37 5d 12 f0 02 2d 09 06 31 09 8a 60 c0 a1 60 20 01 48 20 73 d8 c0 93 aa 60 99 13 20 3a 1c 60 a2 76 52 11 db b0 06 7a 40 04 ba 68 94 5c d0 84 be 59 ff 02 2e 24 7c d8 28 08 68 b0 05 12 20 01 39 90 63 6c 80 9c Data Ascii: `M0HL4H61Yv:Iu!+@h`X%@830T0$<\|pC:@7I}!j-QZk(V9kE\@Pf\|y\|wPF%r(}lg0xye(7]-1`` H s` :`vRz@h\Y.$\|(h 9cl
2024-10-23 22:36:43 UTC	1378	IN	Data Raw: 14 b9 08 09 90 ae 57 8b d2 8c 80 91 20 67 d2 cf a0 16 39 30 04 dd eb cc c5 6c 7b b6 37 00 50 cc 00 4a fa c4 7f 35 b0 4d 80 07 eb db c5 93 9a 07 79 50 01 56 e0 be 28 45 75 a1 00 b1 1d 30 ce fc ab c6 1a e2 cb da b0 06 28 f0 04 73 cc 8b 36 ea 84 d3 98 02 11 00 cf 86 d0 a3 4f a0 c0 7e 2c 01 6b 2d 06 8f 0b d7 fe ac 01 ff cc 68 70 20 d0 86 40 6f 06 5d d0 8e cc d7 d8 79 34 36 50 6c aa 40 04 32 30 c9 cc 82 5c 06 c0 ff 6a 32 7b 39 96 cc 27 04 f6 25 ad 85 60 6c b8 d1 5c 81 a6 1e ed 07 d0 d0 81 ce 25 09 95 02 04 39 d0 06 6f f0 d3 55 30 da e1 8b 07 e6 3b 00 4f ec 57 cd 79 41 0c 50 01 4e 9d 04 e8 7b 02 4e 9d cd 27 f0 06 7f 4b d5 a0 60 d5 f3 1b ce 83 f0 79 2d 9a 0d b7 b8 02 17 cb 8b 75 90 02 4a 89 a3 2e 74 d6 39 87 02 cc cd dc 54 b0 05 ad da d6 24 bb 8b 3d 56 a3 8d d6 Data Ascii: W g90l{7PJ5MyPV(Eu0(s6O~,k-hp @o]y46Pl@20\j2{9'%`l\%9oU0;OWyAPN{N'K`y-uJ.t9T$=V
2024-10-23 22:36:43 UTC	1378	IN	Data Raw: 5c ae 72 b9 3d 08 80 2a 18 c8 d9 1d 3d 52 0d b4 24 e8 8c 2f 01 08 0e 06 b1 24 d0 75 8f 34 1f c4 1a 90 b0 d1 e1 c0 81 ff 0f 1f 6b 26 f8 98 a1 23 87 1a 06 1b 28 56 d1 08 7c 43 13 86 49 5e 8c dc 60 71 78 9b 91 0c 49 94 b1 e2 03 a8 f5 20 c5 7c e6 a4 40 78 54 96 0b d6 81 4e c0 40 be bc 79 f2 7a ec 1c 59 7f 24 03 8d f7 34 4a 80 b9 83 66 cd f9 f2 52 30 c8 34 34 1e 83 14 29 61 04 28 60 80 52 ec 37 88 04 7d d4 d1 d6 2b b1 00 80 02 13 0f a2 20 4b 0b 28 54 58 61 2c 16 a2 a0 c7 2c 7b c9 80 c2 0a 72 b0 a0 82 19 82 ed a5 a1 1e 28 36 13 05 8a 2c aa c8 62 8a 90 c5 98 cd 64 34 6e 63 d9 8d e0 cc 01 94 6b 9d 25 d0 40 31 05 08 d1 1a 67 09 68 21 c4 8f a3 70 70 8f 10 01 f1 c8 c7 28 5d 4c b0 d5 4c 3e b4 d1 44 0a cc 69 34 00 03 57 aa 51 01 09 15 e4 f1 42 19 0c 38 25 5d 48 56 e4 Data Ascii: \r=*=R$/$u4k&#(V\|CI^`qxI \|@xTN@yzY$4JfR044)a(`R7}+ K(TXa,,{r(6,bd4nck%@1gh!pp(]LL>Di4WQB8%]HV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.7	49887	151.101.1.16	443	6160	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:36:43 UTC	622	OUT	GET /images/G/01/ad-feedback/info_icon_1Xsprite.png HTTP/1.1 Host: m.media-amazon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.amazon.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:36:43 UTC	651	IN	HTTP/1.1 200 OK Connection: close Content-Length: 538 Content-Type: image/png X-Amz-IR-Id: d5189db1-f8c3-4f78-829a-75d78c2ff8c1 Cache-Control: max-age=86400,public Last-Modified: Mon, 11 May 2020 07:06:36 GMT Access-Control-Allow-Origin: * Expires: Wed, 27 Sep 2023 11:31:22 GMT X-Nginx-Cache-Status: HIT Accept-Ranges: bytes Date: Wed, 23 Oct 2024 22:36:43 GMT Age: 59943 X-Served-By: cache-iad-kiad7000068-IAD, cache-dfw-ktki8620071-DFW Timing-Allow-Origin: https://www.amazon.com X-Cache: HIT from fastly, HIT from fastly Server-Timing: provider;desc="fy" alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-23 22:36:43 UTC	538	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0d 00 00 00 19 08 06 00 00 00 ea ac a4 f1 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 e4 05 0b 07 06 05 7d 9f be c9 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 01 a7 49 44 41 54 38 cb 9d 92 b1 6e c2 30 14 45 d3 56 ed d6 09 c6 4a fd 88 fe 40 db 15 a9 1b 08 16 06 16 be 00 66 26 10 08 09 27 40 10 5b 99 32 30 32 f0 11 64 88 fa 13 24 2a 5b 3a 22 b9 f7 56 76 ea 98 80 aa 5a ba 7a b1 fd 4e ee b3 9f 1d c7 18 ad 56 eb 71 36 9b b9 be ef 87 50 ca b8 58 2c c4 72 b9 2c 3b 45 a3 d3 e9 bc b9 ae 9b 4c a7 53 89 c4 23 b4 63 04 c8 79 0c 3d e7 80 27 8c d1 68 f4 29 84 90 84 e0 e6 21 c9 01 e0 11 d2 60 ce b1 db ed be 03 92 93 c9 e4 07 42 52 84 84 0a 12 23 0d 29 Data Ascii: PNGIHDRpHYstIME}bKGDIDAT8n0EVJ@f&'@[202d$*[:"VvZzNVq6PX,r,;ELS#cy='h)!`BR#)

Target ID:	0
Start time:	18:36:05
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	18:36:11
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2004,i,6961824384990481302,3734602455398645056,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	18:36:13
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://frothylattestudio.com/"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	20:35:32
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4392 --field-trial-handle=2004,i,6961824384990481302,3734602455398645056,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://frothylattestudio.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Windows Analysis Report
http://frothylattestudio.com/