Edit tour

Windows Analysis Report
http://iwu.marketing/

Overview

General Information

Sample URL:	http://iwu.marketing/
Analysis ID:	1411162
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML page contains hidden URLs or javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5100 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4124 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=2008,i,17467844057206675136,12934562213064335950,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6516 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "http://iwu.marketing/ MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://rtgcloudsql.2trk.info/rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%3DeyJyYW5rN0EiOiIwIiwiYmFubmVyVHlwZSI6ImJhbm5lciIsImNyaXRlcmlhSWQiOiIxMDIzMTkxIiwidHkiOiIwIiwiZXh0cmFzS2V5IjoiNDdfNjQxODAtOTcwIiwicGxhdGZvcm1Ccm93c2VyIjoiQ2hyb21lIiwibWluQmlkVG9XaW4iOiIwIiwibWluYmlkIjoiMC4x...

HTTP Parser: Base64 decoded: {"rank7A":"0","bannerType":"banner","criteriaId":"1023191","ty":"0","extrasKey":"47_64180-970","platformBrowser":"Chrome","minBidToWin":"0","minbid":"0.12","maxbid":"6.0","programName":"pos_uec_us","pubId":"pub-5884294479391638","host":"preciso","rank6S":...

Source: http://iwu.marketing/	HTTP Parser: No favicon
Source: https://secure2.indwes.edu/Marketing/Project-Request/	HTTP Parser: No favicon
Source: https://secure2.indwes.edu/Marketing/Project-Request/	HTTP Parser: No favicon
Source: https://secure2.indwes.edu/Marketing/Project-Request/	HTTP Parser: No favicon
Source: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-mediagrid_n-adMediaV1_pm-db5_n-simpli.fi_n-baidu_n-Beeswax_ox-db5_smrt_n-inmobi_sovrn_3lift_n-Outbrain&dcc=t	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/ecm3?ex=smart.com&id=8457389007004702379&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/ecm3?ex=3lift.com&id=3712186363653833678472	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&redir=true&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/ecm3?ex=pubmatic.com&id=PM_UID26FC5BC4-C0EA-481E-AC6D-297EF4930E35	HTTP Parser: No favicon
Source: https://u.openx.net/w/1.0/cm?cc=1&id=e818ca1e-0c23-caa8-0dd3-096b0ada08b7&ph=2d1251ae-7f3a-47cf-bd2a-2f288854a0ba&plm=5&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dopenx.com%26id%3D%7BOPENX_ID%7D	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/ecm3?ex=inmobi.com&id=ID5-0668S2WwnJRQs2p4sNhVUM2uqkSgyt678tMIQz3xpw	HTTP Parser: No favicon
Source: https://ce.lijit.com/beacon/amazon?url=https://s.amazon-adsystem.com/ecm3?id=$UID&ex=sovrn.com	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/v3/pr?exlist=n-mediagrid_n-adMediaV1_pm-db5_n-simpli.fi_n-baidu_n-Beeswax_ox-db5_smrt_n-inmobi_sovrn_3lift_n-Outbrain&fv=1.0&a=cm&cm3ppd=1&dmt=3	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156011&s=165626&predirect=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dpubmatic.com%26id%3DPM_UID	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156011&s=165626&predirect=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dpubmatic.com%26id%3DPM_UID	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156011&s=165626&predirect=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dpubmatic.com%26id%3DPM_UID	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156011&s=165626&predirect=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dpubmatic.com%26id%3DPM_UID	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=9164480480629189644&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=ae5763be-e543-11ee-a76c-71e45aeeda27	HTTP Parser: No favicon
Source: https://rtgcloudsql.2trk.info/rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%3DeyJyYW5rN0EiOiIwIiwiYmFubmVyVHlwZSI6ImJhbm5lciIsImNyaXRlcmlhSWQiOiIxMDIzMTkxIiwidHkiOiIwIiwiZXh0cmFzS2V5IjoiNDdfNjQxODAtOTcwIiwicGxhdGZvcm1Ccm93c2VyIjoiQ2hyb21lIiwibWluQmlkVG9XaW4iOiIwIiwibWluYmlkIjoiMC4x...	HTTP Parser: No favicon
Source: https://rtgcloudsql.2trk.info/rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%3DeyJyYW5rN0EiOiIwIiwiYmFubmVyVHlwZSI6ImJhbm5lciIsImNyaXRlcmlhSWQiOiIxMDIzMTkxIiwidHkiOiIwIiwiZXh0cmFzS2V5IjoiNDdfNjQxODAtOTcwIiwicGxhdGZvcm1Ccm93c2VyIjoiQ2hyb21lIiwibWluQmlkVG9XaW4iOiIwIiwibWluYmlkIjoiMC4x...	HTTP Parser: No favicon
Source: https://rtgcloudsql.2trk.info/rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%3DeyJyYW5rN0EiOiIwIiwiYmFubmVyVHlwZSI6ImJhbm5lciIsImNyaXRlcmlhSWQiOiIxMDIzMTkxIiwidHkiOiIwIiwiZXh0cmFzS2V5IjoiNDdfNjQxODAtOTcwIiwicGxhdGZvcm1Ccm93c2VyIjoiQ2hyb21lIiwibWluQmlkVG9XaW4iOiIwIiwibWluYmlkIjoiMC4x...	HTTP Parser: No favicon
Source: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5884294479391638&output=html&h=90&slotname=3654094576&adk=228266070&adf=3493768505&pi=t.ma~as.3654094576&w=970&url=https%3A%2F%2Fbrowser-update.org%2F&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1710778930134&bpp=1204&bdt=1441&idt=2890&shv=r20240313&mjsv=m202403130201&ptt=5&saldr=sd&correlator=966864692783&frm=24&ife=3&pv=2&ga_vid=751177015.1710778933&ga_sid=1710778933&ga_hid=640648971&ga_fc=0&nhd=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=-12245933&bih=-12245933&isw=970&ish=90&ifk=1017635361&scr_x=-12245933&scr_y=-12245933&eid=44759875%2C44759926%2C44759842%2C31081793%2C95325975%2C95327950%2C95327954%2C31081901%2C95320376%2C95322388%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=862165079531677&t...	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AAARQ07L8NQAABPzJYe3uw&gdpr=0	HTTP Parser: No favicon
Source: http://iwu.marketing/#about	HTTP Parser: No favicon
Source: http://iwu.marketing/#services	HTTP Parser: No favicon
Source: http://iwu.marketing/#team	HTTP Parser: No favicon
Source: http://iwu.marketing/#resources	HTTP Parser: No favicon
Source: http://iwu.marketing/#contact	HTTP Parser: No favicon
Source: https://sync-tm.everesttech.net/ct/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=&_test=ZfhqUgABw8xG4wBi	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:Ru9JGeXJ1RMfLb5&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=kMV4FFfoUmxPTw0WMkb-TL9g48I&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=8259856715668781746	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35	HTTP Parser: No favicon
Source: https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49767 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKCache-Control: privateContent-Type: text/htmlContent-Encoding: gzipLast-Modified: Mon, 01 Feb 2021 16:10:15 GMTAccept-Ranges: bytesETag: "216245bab4f8d61:0"Vary: Accept-EncodingServer: Microsoft-IIS/8.5Date: Mon, 18 Mar 2024 16:21:50 GMTContent-Length: 518Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKCache-Control: privateContent-Type: text/htmlContent-Encoding: gzipLast-Modified: Mon, 01 Feb 2021 16:10:15 GMTAccept-Ranges: bytesETag: "216245bab4f8d61:0"Vary: Accept-EncodingServer: Microsoft-IIS/8.5Date: Mon, 18 Mar 2024 16:21:50 GMTContent-Length: 518Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKCache-Control: privateContent-Type: text/htmlContent-Encoding: gzipLast-Modified: Mon, 01 Feb 2021 16:10:15 GMTAccept-Ranges: bytesETag: "216245bab4f8d61:0"Vary: Accept-EncodingServer: Microsoft-IIS/8.5Date: Mon, 18 Mar 2024 16:21:51 GMTContent-Length: 518Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKCache-Control: privateContent-Type: text/htmlContent-Encoding: gzipLast-Modified: Mon, 01 Feb 2021 16:10:15 GMTAccept-Ranges: bytesETag: "216245bab4f8d61:0"Vary: Accept-EncodingServer: Microsoft-IIS/8.5Date: Mon, 18 Mar 2024 16:22:20 GMTContent-Length: 518Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKCache-Control: privateContent-Type: text/htmlContent-Encoding: gzipLast-Modified: Mon, 01 Feb 2021 16:10:15 GMTAccept-Ranges: bytesETag: "216245bab4f8d61:0"Vary: Accept-EncodingServer: Microsoft-IIS/8.5Date: Mon, 18 Mar 2024 16:22:20 GMTContent-Length: 518Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKCache-Control: privateContent-Type: text/htmlContent-Encoding: gzipLast-Modified: Mon, 01 Feb 2021 16:10:15 GMTAccept-Ranges: bytesETag: "216245bab4f8d61:0"Vary: Accept-EncodingServer: Microsoft-IIS/8.5Date: Mon, 18 Mar 2024 16:22:20 GMTContent-Length: 518Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKCache-Control: privateContent-Type: text/htmlContent-Encoding: gzipLast-Modified: Mon, 01 Feb 2021 16:10:15 GMTAccept-Ranges: bytesETag: "216245bab4f8d61:0"Vary: Accept-EncodingServer: Microsoft-IIS/8.5Date: Mon, 18 Mar 2024 16:22:25 GMTContent-Length: 518Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKCache-Control: privateContent-Type: text/htmlContent-Encoding: gzipLast-Modified: Mon, 01 Feb 2021 16:10:15 GMTAccept-Ranges: bytesETag: "216245bab4f8d61:0"Vary: Accept-EncodingServer: Microsoft-IIS/8.5Date: Mon, 18 Mar 2024 16:22:25 GMTContent-Length: 518Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKCache-Control: privateContent-Type: text/htmlContent-Encoding: gzipLast-Modified: Mon, 01 Feb 2021 16:10:15 GMTAccept-Ranges: bytesETag: "216245bab4f8d61:0"Vary: Accept-EncodingServer: Microsoft-IIS/8.5Date: Mon, 18 Mar 2024 16:22:25 GMTContent-Length: 518Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKCache-Control: privateContent-Type: text/htmlContent-Encoding: gzipLast-Modified: Mon, 01 Feb 2021 16:10:15 GMTAccept-Ranges: bytesETag: "216245bab4f8d61:0"Vary: Accept-EncodingServer: Microsoft-IIS/8.5Date: Mon, 18 Mar 2024 16:22:30 GMTContent-Length: 518Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKCache-Control: privateContent-Type: text/htmlContent-Encoding: gzipLast-Modified: Mon, 01 Feb 2021 16:10:15 GMTAccept-Ranges: bytesETag: "216245bab4f8d61:0"Vary: Accept-EncodingServer: Microsoft-IIS/8.5Date: Mon, 18 Mar 2024 16:22:30 GMTContent-Length: 518Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKCache-Control: privateContent-Type: text/htmlContent-Encoding: gzipLast-Modified: Mon, 01 Feb 2021 16:10:15 GMTAccept-Ranges: bytesETag: "216245bab4f8d61:0"Vary: Accept-EncodingServer: Microsoft-IIS/8.5Date: Mon, 18 Mar 2024 16:22:30 GMTContent-Length: 518Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKCache-Control: privateContent-Type: text/htmlContent-Encoding: gzipLast-Modified: Mon, 01 Feb 2021 16:10:15 GMTAccept-Ranges: bytesETag: "216245bab4f8d61:0"Vary: Accept-EncodingServer: Microsoft-IIS/8.5Date: Mon, 18 Mar 2024 16:22:32 GMTContent-Length: 518Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKCache-Control: privateContent-Type: text/htmlContent-Encoding: gzipLast-Modified: Mon, 01 Feb 2021 16:10:15 GMTAccept-Ranges: bytesETag: "216245bab4f8d61:0"Vary: Accept-EncodingServer: Microsoft-IIS/8.5Date: Mon, 18 Mar 2024 16:22:33 GMTContent-Length: 518Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKCache-Control: privateContent-Type: text/htmlContent-Encoding: gzipLast-Modified: Mon, 01 Feb 2021 16:10:15 GMTAccept-Ranges: bytesETag: "216245bab4f8d61:0"Vary: Accept-EncodingServer: Microsoft-IIS/8.5Date: Mon, 18 Mar 2024 16:22:33 GMTContent-Length: 518Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKCache-Control: privateContent-Type: text/htmlContent-Encoding: gzipLast-Modified: Mon, 01 Feb 2021 16:10:15 GMTAccept-Ranges: bytesETag: "216245bab4f8d61:0"Vary: Accept-EncodingServer: Microsoft-IIS/8.5Date: Mon, 18 Mar 2024 16:22:35 GMTContent-Length: 518Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKCache-Control: privateContent-Type: text/htmlContent-Encoding: gzipLast-Modified: Mon, 01 Feb 2021 16:10:15 GMTAccept-Ranges: bytesETag: "216245bab4f8d61:0"Vary: Accept-EncodingServer: Microsoft-IIS/8.5Date: Mon, 18 Mar 2024 16:22:35 GMTContent-Length: 518Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKCache-Control: privateContent-Type: text/htmlContent-Encoding: gzipLast-Modified: Mon, 01 Feb 2021 16:10:15 GMTAccept-Ranges: bytesETag: "216245bab4f8d61:0"Vary: Accept-EncodingServer: Microsoft-IIS/8.5Date: Mon, 18 Mar 2024 16:22:35 GMTContent-Length: 518Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=

Source: global traffic	HTTP traffic detected: GET /Marketing/Project-Request/ HTTP/1.1Host: secure2.indwes.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://iwu.marketing/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_css/indwesFormsColumns.css HTTP/1.1Host: secure2.indwes.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secure2.indwes.edu/Marketing/Project-Request/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_scripts/GoogleAnalytics/ga-secure.js HTTP/1.1Host: secure2.indwes.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure2.indwes.edu/Marketing/Project-Request/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/hdr_form_iwuLogo.gif HTTP/1.1Host: secure2.indwes.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure2.indwes.edu/Marketing/Project-Request/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/formHeadings/hdr_MD.gif HTTP/1.1Host: secure2.indwes.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure2.indwes.edu/Marketing/Project-Request/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /update.min.js HTTP/1.1Host: browser-update.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://iwu.marketing/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Marketing/Project-Request/WebResource.axd?d=PRiIs6mOtMtRlOJgHrMPuowRdjdCZFYN0fVvfLDr-wofI5YK65nPuyqX9Pggn5E6Ee4oLQKxW1oFtXVElWxfouPM8goxbIB2hLry3iCpcpg1&t=638393069798026697 HTTP/1.1Host: secure2.indwes.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure2.indwes.edu/Marketing/Project-Request/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /update.show.min.js HTTP/1.1Host: browser-update.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://iwu.marketing/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Marketing/Project-Request/ScriptResource.axd?d=N1YvUyNqW0L73jWWkHG8Q2j76Mx82NFmzNRQMnxnODvY7K-ZSKORZ0MB81NHSzxF-dDgdPZD9LXX-szea8XzdOrZowxhpSsfSBZZjAdUZBQdqkbUeTOS5Kz7quSZZPJJKyWeybnwswsSc1oepVOO2VDOZ4HqQIPC2btXaVzQuXs1&t=3e1b2a62 HTTP/1.1Host: secure2.indwes.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure2.indwes.edu/Marketing/Project-Request/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Marketing/Project-Request/ScriptResource.axd?d=T0VaWC5aFwLzNsW4kfM0Y5VkzcH6rIPd0pv-1CL4Dy_XiN6x5sx3PkYf3sexq64YkJRoDlgIkEiUN4AwioDB-vRUrNL4GfY6aTnep5OSyf88dGSi9Atycswoaue9vayAL20ek3B9p0Pmz1puwpE_SEhbflnicYNonlmniaV6trc1&t=511fa37d HTTP/1.1Host: secure2.indwes.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure2.indwes.edu/Marketing/Project-Request/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Marketing/Project-Request/ScriptResource.axd?d=E2lUT6wbt033uxREsuESVxB4DxgbJUlw5yEW8lQCs7oU1kEiezMUR7cfsCpSVfodXXGFcTAdhcgDzYQaN9YMr4UnCsyYbJ9Use1HrwHt8lk0xPMIsl_44PxA3JefaxK4ykHf1Ar06AAkNMn1Kja71QhuaEa2Rp180_J0Cl4qz8xa4VhiR1jlvmVzmHqDaH6F0&t=511fa37d HTTP/1.1Host: secure2.indwes.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure2.indwes.edu/Marketing/Project-Request/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_scripts/jquery-1.6.2.min.js HTTP/1.1Host: secure2.indwes.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure2.indwes.edu/Marketing/Project-Request/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_scripts/jquery-ui-1.8.9.custom.min.js HTTP/1.1Host: secure2.indwes.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure2.indwes.edu/Marketing/Project-Request/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/formHeadings/hdr_MD.gif HTTP/1.1Host: secure2.indwes.eduConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/hdr_form_iwuLogo.gif HTTP/1.1Host: secure2.indwes.eduConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /static/img/small/c.png HTTP/1.1Host: browser-update.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://iwu.marketing/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_scripts/jQueryPlugins/jquery.iwu.randomHeader.js HTTP/1.1Host: secure2.indwes.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure2.indwes.edu/Marketing/Project-Request/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/footer_IWU.gif HTTP/1.1Host: secure2.indwes.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure2.indwes.edu/Marketing/Project-Request/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/small/c.png HTTP/1.1Host: browser-update.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/footer_IWU.gif HTTP/1.1Host: secure2.indwes.eduConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/headerImages/generic_iwu/generic_iwu.jpg HTTP/1.1Host: secure2.indwes.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure2.indwes.edu/Marketing/Project-Request/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_services/Randomizer/Randomizer.asmx/RetrieveHeaderImage HTTP/1.1Host: secure2.indwes.eduConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/headerImages/generic_iwu/generic_iwu.jpg HTTP/1.1Host: secure2.indwes.eduConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /update-browser.html HTTP/1.1Host: browser-update.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/apps/head/dSTaMRtp7Uh77lw_sJp5-4w_sZY.js HTTP/1.1Host: browser-update.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://browser-update.org/update-browser.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0
Source: global traffic	HTTP traffic detected: GET /static/base2.css HTTP/1.1Host: browser-update.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://browser-update.org/update-browser.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0
Source: global traffic	HTTP traffic detected: GET /update.min.js HTTP/1.1Host: browser-update.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://browser-update.org/update-browser.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0
Source: global traffic	HTTP traffic detected: GET /static/fonts/open-sans-v17-latin_latin-ext_vietnamese_cyrillic_greek_cyrillic-ext-300.woff2 HTTP/1.1Host: browser-update.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://browser-update.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://browser-update.org/static/base2.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0
Source: global traffic	HTTP traffic detected: GET /static/fonts/open-sans-v17-latin_latin-ext_vietnamese_cyrillic_greek_cyrillic-ext-regular.woff2 HTTP/1.1Host: browser-update.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://browser-update.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://browser-update.org/static/base2.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0
Source: global traffic	HTTP traffic detected: GET /static/img/big/f.png HTTP/1.1Host: browser-update.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://browser-update.org/update-browser.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0
Source: global traffic	HTTP traffic detected: GET /static/img/big/o.png HTTP/1.1Host: browser-update.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://browser-update.org/update-browser.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0
Source: global traffic	HTTP traffic detected: GET /static/img/speed.png HTTP/1.1Host: browser-update.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://browser-update.org/update-browser.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause
Source: global traffic	HTTP traffic detected: GET /static/img/comfort.png HTTP/1.1Host: browser-update.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://browser-update.org/update-browser.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause
Source: global traffic	HTTP traffic detected: GET /tag/js/gpt.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://browser-update.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aax2/apstag.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://browser-update.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/compatibility.png HTTP/1.1Host: browser-update.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://browser-update.org/update-browser.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause
Source: global traffic	HTTP traffic detected: GET /static/img/security.png HTTP/1.1Host: browser-update.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://browser-update.org/update-browser.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause
Source: global traffic	HTTP traffic detected: GET /static/img/big/f.png HTTP/1.1Host: browser-update.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause
Source: global traffic	HTTP traffic detected: GET /static/img/big/c.png HTTP/1.1Host: browser-update.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://browser-update.org/update-browser.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0
Source: global traffic	HTTP traffic detected: GET /static/img/speed.png HTTP/1.1Host: browser-update.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause
Source: global traffic	HTTP traffic detected: GET /cnt?what=view&cv=base&tv=0&ref=iwu.marketing&from=c&fromv=117&dice=47&rnd=0.8140456435354542 HTTP/1.1Host: browser-update.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://browser-update.org/update-browser.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause
Source: global traffic	HTTP traffic detected: GET /static/img/big/o.png HTTP/1.1Host: browser-update.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause
Source: global traffic	HTTP traffic detected: GET /static/img/comfort.png HTTP/1.1Host: browser-update.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause
Source: global traffic	HTTP traffic detected: GET /pagead/managed/js/gpt/m202403140101/pubads_impl.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://browser-update.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/prebid/currency-file@1/latest.json?date=20240318 HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: /Origin: https://browser-update.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://browser-update.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://browser-update.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://browser-update.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/prod/config?src=600&u=https%3A%2F%2Fbrowser-update.org&pubid=8b48e249-e9e6-4a52-8b48-396ea93403e8 HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://browser-update.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://browser-update.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hbid/imp?lt=1710778925844&to=-60&aun=fuse-slot-22728806944-1&gpid=%2F71161633%2C1007669%2FBROWUPD_browserupdate%2Fsticky_footer%23single-1&t=282948&pi=2&schain=1.0%2C1!publift.com%2C01FY417JCJKFQDQNA30FCX4RZF%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.5.0%22%7D&ogu=null&ns=6963 HTTP/1.1Host: g2.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: /Origin: https://browser-update.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://browser-update.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hbid/imp?lt=1710778925845&to=-60&aun=fuse-slot-22728806944-1&gpid=%2F71161633%2C1007669%2FBROWUPD_browserupdate%2Fsticky_footer%23single-1&t=282949&pi=2&schain=1.0%2C1!publift.com%2C01FY417JCJKFQDQNA30FCX4RZF%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.5.0%22%7D&ogu=null&ns=6963 HTTP/1.1Host: g2.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: /Origin: https://browser-update.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://browser-update.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hbid/imp?lt=1710778925845&to=-60&aun=fuse-slot-22728807289-1&gpid=%2F71161633%2C1007669%2FBROWUPD_browserupdate%2Fupdate_vrec_1%23single-1&t=282943&pi=2&schain=1.0%2C1!publift.com%2C01FY417JCJKFQDQNA30FCX4RZF%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.5.0%22%7D&ogu=null&ns=6963 HTTP/1.1Host: g2.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: /Origin: https://browser-update.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://browser-update.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=600&u=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&pid=dELdySLbcyIwE&cb=0&ws=1280x907&v=24.305.1002&t=2000&slots=%5B%7B%22sd%22%3A%22fuse-slot-22728807289-1%22%2C%22s%22%3A%5B%22300x250%22%2C%22336x280%22%5D%2C%22sn%22%3A%22%2F71161633%2C1007669%2FBROWUPD_browserupdate%2Fupdate_vrec_1%22%7D%2C%7B%22sd%22%3A%22fuse-slot-22728806944-1%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%5D%2C%22sn%22%3A%22%2F71161633%2C1007669%2FBROWUPD_browserupdate%2Fsticky_footer%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22mobile%22%3A0%2C%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1!publift.com%2C01FY417JCJKFQDQNA30FCX4RZF%2C1%2C%2C%2C&sm=f401e106-9815-45f3-82fa-11a4f7f4db10&pubid=8b48e249-e9e6-4a52-8b48-396ea93403e8&gdprl=%7B%22status%22%3A%22no-cmp%22%2C%22cmpTimeout%22%3A0%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://browser-update.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://browser-update.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /configs/8b48e249-e9e6-4a52-8b48-396ea93403e8 HTTP/1.1Host: config.aps.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://browser-update.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=1702785379071819&correlator=202337239561750&eid=31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403140101&ptt=17&impl=fifs&iu_parts=71161633%3A1007669%2CBROWUPD_browserupdate%2Cweb_interstitial&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=1x1&ifi=1&sfv=1-0-40&ists=1&fas=8&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1710778926434&lmt=1710778926&adxs=-9&adys=-9&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=-1&ucis=1&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&vis=1&psz=0x-1&msz=0x-1&fws=2&ohw=0&ga_vid=1126053991.1710778926&ga_sid=1710778926&ga_hid=1902104362&ga_fc=false&td=1&topics=9&tps=9&htps=10&a3p=EhwKDWNyd2RjbnRybC5uZXQYhIn7kuUxSABSAghk&nt=1&psd=WzE1LFsyLFtbIi83MTE2MTYzMywxMDA3NjY5L0JST1dVUERfYnJvd3NlcnVwZGF0ZS93ZWJfaW50ZXJzdGl0aWFsIixbXV1dXSxudWxsLDNd&dlt=1710778923330&idt=2820&prev_scp=in2w_key20%3D1x09%2C1x0r%2C1x0x%26in2w_key15%3Du0&cust_params=in2w_key15%3Du0%26intowow_optimized%3Dfalse%26fuse_site%3Dbrowser-update.org%26fuse_path%3D%252Fupdate-browser.html%26fuse_query%3D%26fuse_category%3D%26fuse_industry_2%3DIAB19%26testmode%3Dfalse%26inskin_yes%3Dtrue%26fuse_uuid%3De77f8bfe-60b6-5c8b-a657-64bfafdad065%26fuse_publication_id%3D5%26fuse_flavour%3Ddefault%26GPT_READY_MS%3D4000-4999%26PREBID_READY_MS%3D3000-3499%26UAM_READY_MS%3D3500-3999%26CMP_DETERMINED_MS%3Ddisabled%26CMP_GDPR_CACHED%3Dfalse%26FUSE_LOADED_MS%3D2000-2499%26FIRST_ZONE_MS%3D3500-3999%26HB_AUCTION_START_MS%3D3500-3999%26CMP_JURISDICTION%3Dunknown%26CMP_ALLOW_PERSONAL%3Dtrue%26fuse_exp_0%3Dfalse%26fuse_exp_2%3Dtrue%26fuse_exp_3%3Dtrue%26fuse_exp_4%3Dtrue%26fuse_exp_5%3Dtrue%26fuse_exp_6%3Dtrue%26fuse_exp_7%3Dtrue%26fuse_exp_8%3Dtrue%26fuse_exp_9%3Dfalse%26fuse_exp_10%3Dfalse%26chrome_label%3Dstandard&adks=2017541439&frm=20 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Ad-Auction-Fetch: ?1Origin: https://browser-update.orgX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://browser-update.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/managed/js/gpt/m202403140101/pubads_impl_page_level_ads.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://browser-update.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/compatibility.png HTTP/1.1Host: browser-update.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770
Source: global traffic	HTTP traffic detected: GET /lt/c/16589/sync.min.js HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://browser-update.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/security.png HTTP/1.1Host: browser-update.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770
Source: global traffic	HTTP traffic detected: GET /tag?o=5708166709903360&upapi=true HTTP/1.1Host: btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://browser-update.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /safeframe/1-0-40/html/container.html HTTP/1.1Host: e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://browser-update.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/topics/topics_frame.html HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://browser-update.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-mediagrid_n-adMediaV1_pm-db5_n-simpli.fi_n-baidu_n-Beeswax_ox-db5_smrt_n-inmobi_sovrn_3lift_n-Outbrain HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://browser-update.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=1702785379071819&correlator=202337239561750&eid=31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403140101&ptt=17&impl=fifs&iu_parts=71161633%3A1007669%2CBROWUPD_browserupdate%2Cupdate_vrec_1%2Csticky_footer&enc_prev_ius=%2F0%2F1%2F2%2C%2F0%2F1%2F3&prev_iu_szs=320x50%7C300x250%7C336x280%2C728x90%7C970x90&fluid=height%2C0&ifi=2&sfv=1-0-40&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1710778927012&lmt=1710778927&adxs=875%2C268&adys=95%2C952&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0%7C1&ucis=2%7C3&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&vis=1&psz=350x0%7C0x-1&msz=300x0%7C728x-1&fws=128%2C644&ohw=0%2C1263&ga_vid=1126053991.1710778926&ga_sid=1710778926&ga_hid=1902104362&ga_fc=false&td=1&topics=9&tps=9&htps=10&a3p=EhwKDWNyd2RjbnRybC5uZXQYhIn7kuUxSABSAghk&nt=1&psd=WzE1LFsyLFtbIi83MTE2MTYzMywxMDA3NjY5L0JST1dVUERfYnJvd3NlcnVwZGF0ZS91cGRhdGVfdnJlY18xIixbXV0sWyIvNzExNjE2MzMsMTAwNzY2OS9CUk9XVVBEX2Jyb3dzZXJ1cGRhdGUvc3RpY2t5X2Zvb3RlciIsW11dXV0sbnVsbCwzXQ..&dlt=1710778923330&idt=2820&prev_scp=in2w_key20%3D1p09%2C1p0r%2C1p0x%26in2w_key21%3D2738828490%26amznbid%3D2%26amznp%3D2%26is_refresh%3Dfalse%26slot_prev_count%3D0%26adunit_prev_count%3D0%26in2w_key15%3Du0%7Cin2w_key20%3D1p09%2C1p0r%2C1p0x%26in2w_key21%3D549476650%26amznbid%3D2%26amznp%3D2%26is_refresh%3Dfalse%26slot_prev_count%3D0%26adunit_prev_count%3D0%26in2w_key15%3Du0&cust_params=in2w_key15%3Du0%26intowow_optimized%3Dfalse%26fuse_site%3Dbrowser-update.org%26fuse_path%3D%252Fupdate-browser.html%26fuse_query%3D%26fuse_category%3D%26fuse_industry_2%3DIAB19%26testmode%3Dfalse%26inskin_yes%3Dtrue%26fuse_uuid%3De77f8bfe-60b6-5c8b-a657-64bfafdad065%26fuse_publication_id%3D5%26fuse_flavour%3Ddefault%26GPT_READY_MS%3D4000-4999%26PREBID_READY_MS%3D3000-3499%26UAM_READY_MS%3D3500-3999%26CMP_DETERMINED_MS%3Ddisabled%26CMP_GDPR_CACHED%3Dfalse%26FUSE_LOADED_MS%3D2000-2499%26FIRST_ZONE_MS%3D3500-3999%26HB_AUCTION_START_MS%3D3500-3999%26CMP_JURISDICTION%3Dunknown%26CMP_ALLOW_PERSONAL%3Dtrue%26fuse_exp_0%3Dfalse%26fuse_exp_2%3Dtrue%26fuse_exp_3%3Dtrue%26fuse_exp_4%3Dtrue%26fuse_exp_5%3Dtrue%26fuse_exp_6%3Dtrue%26fuse_exp_7%3Dtrue%26fuse_exp_8%3Dtrue%26fuse_exp_9%3Dfalse%26fuse_exp_10%3Dfalse%26chrome_label%3Dstandard%26zone_count_above_vp%3D1%26GPT_AUCTION_START_MS%3D4000-4999&adks=2065841319%2C1568334319&frm=20 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accep
Source: global traffic	HTTP traffic detected: GET /js/ld/publishertag.prebid.136.js HTTP/1.1Host: static.criteo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://browser-update.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-mediagrid_n-adMediaV1_pm-db5_n-simpli.fi_n-baidu_n-Beeswax_ox-db5_smrt_n-inmobi_sovrn_3lift_n-Outbrain&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://browser-update.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AylOXD6udEkArigs61cOqe8\|t
Source: global traffic	HTTP traffic detected: GET /mw/state?bt_env=prod HTTP/1.1Host: api.btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://browser-update.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://browser-update.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://browser-update.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://browser-update.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/big/c.png HTTP/1.1Host: browser-update.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770
Source: global traffic	HTTP traffic detected: GET /cnt?what=view&cv=base&tv=0&ref=iwu.marketing&from=c&fromv=117&dice=47&rnd=0.8140456435354542 HTTP/1.1Host: browser-update.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770
Source: global traffic	HTTP traffic detected: GET /gh/prebid/currency-file@1/latest.json?date=20240318 HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.49315834659810265 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://browser-update.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=600&u=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&pid=dELdySLbcyIwE&cb=0&ws=1280x907&v=24.305.1002&t=2000&slots=%5B%7B%22sd%22%3A%22fuse-slot-22728807289-1%22%2C%22s%22%3A%5B%22300x250%22%2C%22336x280%22%5D%2C%22sn%22%3A%22%2F71161633%2C1007669%2FBROWUPD_browserupdate%2Fupdate_vrec_1%22%7D%2C%7B%22sd%22%3A%22fuse-slot-22728806944-1%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%5D%2C%22sn%22%3A%22%2F71161633%2C1007669%2FBROWUPD_browserupdate%2Fsticky_footer%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22mobile%22%3A0%2C%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1!publift.com%2C01FY417JCJKFQDQNA30FCX4RZF%2C1%2C%2C%2C&sm=f401e106-9815-45f3-82fa-11a4f7f4db10&pubid=8b48e249-e9e6-4a52-8b48-396ea93403e8&gdprl=%7B%22status%22%3A%22no-cmp%22%2C%22cmpTimeout%22%3A0%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AylOXD6udEkArigs61cOqe8\|t
Source: global traffic	HTTP traffic detected: GET /header/auction?lib=prebid&v=8.5.0&referrer=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&tmax=1500 HTTP/1.1Host: tlx.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=3712186363653833678472
Source: global traffic	HTTP traffic detected: GET /hbid/imp?lt=1710778925845&to=-60&aun=fuse-slot-22728807289-1&gpid=%2F71161633%2C1007669%2FBROWUPD_browserupdate%2Fupdate_vrec_1%23single-1&t=282943&pi=2&schain=1.0%2C1!publift.com%2C01FY417JCJKFQDQNA30FCX4RZF%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.5.0%22%7D&ogu=null&ns=6963 HTTP/1.1Host: g2.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true
Source: global traffic	HTTP traffic detected: GET /hbid/imp?lt=1710778925844&to=-60&aun=fuse-slot-22728806944-1&gpid=%2F71161633%2C1007669%2FBROWUPD_browserupdate%2Fsticky_footer%23single-1&t=282948&pi=2&schain=1.0%2C1!publift.com%2C01FY417JCJKFQDQNA30FCX4RZF%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.5.0%22%7D&ogu=null&ns=6963 HTTP/1.1Host: g2.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true
Source: global traffic	HTTP traffic detected: GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AylOXD6udEkArigs61cOqe8\|t
Source: global traffic	HTTP traffic detected: GET /ut/v3/prebid HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: icu=ChgIs8t_EAoYASABKAEwr9ThrwY4AUABSAEQr9ThrwYYAA..; uuid2=9164480480629189644
Source: global traffic	HTTP traffic detected: GET /rtb/prebid?cid=8CU995W35 HTTP/1.1Host: prebid.media.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/pr?exlist=n-mediagrid_n-adMediaV1_pm-db5_n-simpli.fi_n-baidu_n-Beeswax_ox-db5_smrt_n-inmobi_sovrn_3lift_n-Outbrain&fv=1.0&a=cm&cm3ppd=1&dmt=3 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-mediagrid_n-adMediaV1_pm-db5_n-simpli.fi_n-baidu_n-Beeswax_ox-db5_smrt_n-inmobi_sovrn_3lift_n-Outbrain&dcc=tAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /rtb/bid?src=prebid_prebid_8.5.0 HTTP/1.1Host: ap.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv
Source: global traffic	HTTP traffic detected: GET /hbid/imp?lt=1710778925845&to=-60&aun=fuse-slot-22728806944-1&gpid=%2F71161633%2C1007669%2FBROWUPD_browserupdate%2Fsticky_footer%23single-1&t=282949&pi=2&schain=1.0%2C1!publift.com%2C01FY417JCJKFQDQNA30FCX4RZF%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.5.0%22%7D&ogu=null&ns=6963 HTTP/1.1Host: g2.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true
Source: global traffic	HTTP traffic detected: GET /pagead/js/car.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveAccept: application/javascriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /sync?ssp=google&seller_network=google_&bid_id=7add3eaa-1fba-4245-b3d6-c9b0b0ed083e&initiator=me HTTP/1.1Host: rtb-use.mfadsrvr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0a0dde8b5c2c6b867ddb968a93f6fcd0.webp HTTP/1.1Host: de9a11s35xj3d.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=1702785379071819&correlator=202337239561750&eid=31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403140101&ptt=17&impl=fifs&iu_parts=71161633%3A1007669%2CBROWUPD_browserupdate%2Cweb_interstitial&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=1x1&ifi=1&sfv=1-0-40&ists=1&fas=8&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1710778926434&lmt=1710778926&adxs=-9&adys=-9&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=-1&ucis=1&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&vis=1&psz=0x-1&msz=0x-1&fws=2&ohw=0&ga_vid=1126053991.1710778926&ga_sid=1710778926&ga_hid=1902104362&ga_fc=false&td=1&topics=9&tps=9&htps=10&a3p=EhwKDWNyd2RjbnRybC5uZXQYhIn7kuUxSABSAghk&nt=1&psd=WzE1LFsyLFtbIi83MTE2MTYzMywxMDA3NjY5L0JST1dVUERfYnJvd3NlcnVwZGF0ZS93ZWJfaW50ZXJzdGl0aWFsIixbXV1dXSxudWxsLDNd&dlt=1710778923330&idt=2820&prev_scp=in2w_key20%3D1x09%2C1x0r%2C1x0x%26in2w_key15%3Du0&cust_params=in2w_key15%3Du0%26intowow_optimized%3Dfalse%26fuse_site%3Dbrowser-update.org%26fuse_path%3D%252Fupdate-browser.html%26fuse_query%3D%26fuse_category%3D%26fuse_industry_2%3DIAB19%26testmode%3Dfalse%26inskin_yes%3Dtrue%26fuse_uuid%3De77f8bfe-60b6-5c8b-a657-64bfafdad065%26fuse_publication_id%3D5%26fuse_flavour%3Ddefault%26GPT_READY_MS%3D4000-4999%26PREBID_READY_MS%3D3000-3499%26UAM_READY_MS%3D3500-3999%26CMP_DETERMINED_MS%3Ddisabled%26CMP_GDPR_CACHED%3Dfalse%26FUSE_LOADED_MS%3D2000-2499%26FIRST_ZONE_MS%3D3500-3999%26HB_AUCTION_START_MS%3D3500-3999%26CMP_JURISDICTION%3Dunknown%26CMP_ALLOW_PERSONAL%3Dtrue%26fuse_exp_0%3Dfalse%26fuse_exp_2%3Dtrue%26fuse_exp_3%3Dtrue%26fuse_exp_4%3Dtrue%26fuse_exp_5%3Dtrue%26fuse_exp_6%3Dtrue%26fuse_exp_7%3Dtrue%26fuse_exp_8%3Dtrue%26fuse_exp_9%3Dfalse%26fuse_exp_10%3Dfalse%26chrome_label%3Dstandard&adks=2017541439&frm=20 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /sync?ssp=intentiq&seller_network=google_&bid_id=7add3eaa-1fba-4245-b3d6-c9b0b0ed083e&initiator=me HTTP/1.1Host: rtb-use.mfadsrvr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /country HTTP/1.1Host: api.btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://browser-update.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://browser-update.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/ld/publishertag.prebid.136.js HTTP/1.1Host: static.criteo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2 HTTP/1.1Host: ad-delivery.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6/map HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=0; _cc_id=cd7195d98b33730cda0d063b9003130e
Source: global traffic	HTTP traffic detected: GET /pv?tid=cHQZoYwk&w=5070731193352192&o=5708166709903360&cv=2.1.38-3-g408da7f&widget=false&r=false&vr=1280x907&pageURL=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&sid=rxjhTnM0wo&pm=false&upapi=true HTTP/1.1Host: api.btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://browser-update.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://browser-update.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.49315834659810265 HTTP/1.1Host: ad-delivery.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=1702785379071819&correlator=202337239561750&eid=31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403140101&ptt=17&impl=fifs&iu_parts=71161633%3A1007669%2CBROWUPD_browserupdate%2Cupdate_vrec_1%2Csticky_footer&enc_prev_ius=%2F0%2F1%2F2%2C%2F0%2F1%2F3&prev_iu_szs=320x50%7C300x250%7C336x280%2C728x90%7C970x90&fluid=height%2C0&ifi=2&sfv=1-0-40&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1710778927012&lmt=1710778927&adxs=875%2C268&adys=95%2C952&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0%7C1&ucis=2%7C3&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&vis=1&psz=350x0%7C0x-1&msz=300x0%7C728x-1&fws=128%2C644&ohw=0%2C1263&ga_vid=1126053991.1710778926&ga_sid=1710778926&ga_hid=1902104362&ga_fc=false&td=1&topics=9&tps=9&htps=10&a3p=EhwKDWNyd2RjbnRybC5uZXQYhIn7kuUxSABSAghk&nt=1&psd=WzE1LFsyLFtbIi83MTE2MTYzMywxMDA3NjY5L0JST1dVUERfYnJvd3NlcnVwZGF0ZS91cGRhdGVfdnJlY18xIixbXV0sWyIvNzExNjE2MzMsMTAwNzY2OS9CUk9XVVBEX2Jyb3dzZXJ1cGRhdGUvc3RpY2t5X2Zvb3RlciIsW11dXV0sbnVsbCwzXQ..&dlt=1710778923330&idt=2820&prev_scp=in2w_key20%3D1p09%2C1p0r%2C1p0x%26in2w_key21%3D2738828490%26amznbid%3D2%26amznp%3D2%26is_refresh%3Dfalse%26slot_prev_count%3D0%26adunit_prev_count%3D0%26in2w_key15%3Du0%7Cin2w_key20%3D1p09%2C1p0r%2C1p0x%26in2w_key21%3D549476650%26amznbid%3D2%26amznp%3D2%26is_refresh%3Dfalse%26slot_prev_count%3D0%26adunit_prev_count%3D0%26in2w_key15%3Du0&cust_params=in2w_key15%3Du0%26intowow_optimized%3Dfalse%26fuse_site%3Dbrowser-update.org%26fuse_path%3D%252Fupdate-browser.html%26fuse_query%3D%26fuse_category%3D%26fuse_industry_2%3DIAB19%26testmode%3Dfalse%26inskin_yes%3Dtrue%26fuse_uuid%3De77f8bfe-60b6-5c8b-a657-64bfafdad065%26fuse_publication_id%3D5%26fuse_flavour%3Ddefault%26GPT_READY_MS%3D4000-4999%26PREBID_READY_MS%3D3000-3499%26UAM_READY_MS%3D3500-3999%26CMP_DETERMINED_MS%3Ddisabled%26CMP_GDPR_CACHED%3Dfalse%26FUSE_LOADED_MS%3D2000-2499%26FIRST_ZONE_MS%3D3500-3999%26HB_AUCTION_START_MS%3D3500-3999%26CMP_JURISDICTION%3Dunknown%26CMP_ALLOW_PERSONAL%3Dtrue%26fuse_exp_0%3Dfalse%26fuse_exp_2%3Dtrue%26fuse_exp_3%3Dtrue%26fuse_exp_4%3Dtrue%26fuse_exp_5%3Dtrue%26fuse_exp_6%3Dtrue%26fuse_exp_7%3Dtrue%26fuse_exp_8%3Dtrue%26fuse_exp_9%3Dfalse%26fuse_exp_10%3Dfalse%26chrome_label%3Dstandard%26zone_count_above_vp%3D1%26GPT_AUCTION_START_MS%3D4000-4999&adks=2065841319%2C1568334319&frm=20 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=google&seller_network=google_&bid_id=7add3eaa-1fba-4245-b3d6-c9b0b0ed083e&initiator=me HTTP/1.1Host: rtb-use.mfadsrvr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=309d4a29-7edd-4b82-bd2d-13d7a4d90b1e; c=1710778929; tuuid_lu=1710778929
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=e818ca1e-0c23-caa8-0dd3-096b0ada08b7&ph=2d1251ae-7f3a-47cf-bd2a-2f288854a0ba&plm=5&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dopenx.com%26id%3D%7BOPENX_ID%7D HTTP/1.1Host: u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=intentiq&seller_network=google_&bid_id=7add3eaa-1fba-4245-b3d6-c9b0b0ed083e&initiator=me HTTP/1.1Host: rtb-use.mfadsrvr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1710778929; tuuid_lu=1710778929; tuuid=2393ecfc-a9f7-4cbe-bbea-03c6f5980eff
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=2 HTTP/1.1Host: ssbsync-us.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ju/cs/amazon?callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dbaidu.com%26id%3D%24UID HTTP/1.1Host: trace.mediago.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sspsync/?ssp=1601&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dadmedia.com%26id%3D%5BUID%5D HTTP/1.1Host: pixel.s3xified.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /amazon/https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsimpli.fi%26id%3D HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsv6jmsRCojlbkN682r2XITg2fmg8pT12__nUiP792DJDQ2y6ttJ2KWuCkATeqVFZ8JjbUaah4Jgbk5zXp35WXvemlmYAAL1PGt5uOkbNxsHZv7HtOXPRejXKVLar5-L1wSbvaLFyChJDBvkfjFBMtbfMMU--YwAg5KlKDwdS3TctluaXKc02jnGKygWh3MaId4MgbDD_JTVjmkVglNaPMoT-JHn0esBNOjOQRBLN-YVS8D3h1IAkkEnmjTPCqZY9Ala-UaeHSXw1nIXtq7bayhEUVjl_AO3NxNQCSN9B2TcdXLAx9erlaezwmCkAl96CMmhnW3ZBC5Zdhmre4RJqWfg74GEsYpaj7BXBmLOaAOYRO8FvUGkYv5OCfuCyyJ2tC2I_vKUkqUEdteMSp-Srj59-QM&sai=AMfl-YRsFIwyPpKiEyF-gUBZCpZPceKWZ-wYwGvwudJpk_jk_w46BYOwoy2yf1ZHk0IvgiScQ2bx_O1VMvK2JL7HvvkN3igGk3U35Gz4c0zcwCleOpOjfc6JXLxwoJHZHRUwLWmC0OwYBkT-na52r5MGScwY&sig=Cg0ArKJSzJjgNueLoiPPEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjstm4CtLRJCVxa-gUCbNLYVuHIr7Ohfy1frk2cE3O1LthHOrMlqkSKb0OoJSJuk39-jOg-sEUZdDlT2TEL9nOiKxYPgIqI7QgSpqmBHobGLMILxSdWX05PyfCLaOm5GgzFM567x5UP3PGn4o15DQ6FJgE2bS6kqyCoVoMFDvC06r2kvVIJcp01jPbesvqyL-ZNc6dU00R1tXxZIjJnEwq3__tqtq__by0RbrqDatpA5j6KmDEhFaLPZl0tLQH9mrBasQUR7CHKhHO3tCAasKF6Ru-kkfXfKY2zahCYviIb5L16T2gqYT_I3idLjJYdkoXidcJSB1HUROW7DcLGfpHbLBlChOvKhBx5didi6MRPtFr4pdHupt1X_40XE_y6k77kvmkc9nQi4_w7j3PVwEhftq8A4&sai=AMfl-YSMIgkC2KRs8axSIj7Tic2S6pY_Fr-kOqsTR-c1bLVd3-HdJqDYgQcI4nxwQi1kUVvqUUqu1lgGfhAMlNQL_X16dvATca_Oi0d5Z1ier9YgppnIY1K-M1VYea75CzCfztSUMOgb0sUDrCs6t39vlryW&sig=Cg0ArKJSzJIZnHDrpwSgEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /cookie-sync/amzn?r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dbeeswax.com%26id%3D%24UID HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/amazon_tam/?cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__ HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /check_uuid/https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dmediagrid.com%26id%3D%24%7BBSW_UUID%7D HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /country HTTP/1.1Host: api.btloader.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon/amazon?url=https://s.amazon-adsystem.com/ecm3?id=$UID&ex=sovrn.com HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=media_force_communications_2007_ltd&google_hm=MJ1KKX7dS4K9LRPXpNkLHg==&no_redirect=1&google_cm=1&google_sc=1 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlwOKvmHNBSt4q4P7T7dRMlZTz-L1taujFMycBNUlPxVWgahBkaQBCHFXWT2Zo
Source: global traffic	HTTP traffic detected: GET /0a0dde8b5c2c6b867ddb968a93f6fcd0.webp HTTP/1.1Host: de9a11s35xj3d.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?cc=1&id=e818ca1e-0c23-caa8-0dd3-096b0ada08b7&ph=2d1251ae-7f3a-47cf-bd2a-2f288854a0ba&plm=5&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dopenx.com%26id%3D%7BOPENX_ID%7D HTTP/1.1Host: u.openx.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=32cdd8af-eb5f-02bb-2efb-838ca9f354b0\|1710778930
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=smart.com&id=8457389007004702379&gdpr=0&gdpr_consent= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=2393ecfc-a9f7-4cbe-bbea-03c6f5980eff HTTP/1.1Host: sync.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=admedia.com&id=363ffa6c7ef48a007acb27f47e31ee34 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?id=D1B83109A4A44EA780D9F28ECD179B12&ex=simpli.fi&status=ok HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /cookie-sync/amzn?r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dbeeswax.com%26id%3D%24UID&_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=baidu.com&id=22210ca7211caf792c9xmt00ltx5lqro HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /getuid?redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3D3lift.com%26id%3D%24UID HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluid=3712186363653833678472
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsv6jmsRCojlbkN682r2XITg2fmg8pT12__nUiP792DJDQ2y6ttJ2KWuCkATeqVFZ8JjbUaah4Jgbk5zXp35WXvemlmYAAL1PGt5uOkbNxsHZv7HtOXPRejXKVLar5-L1wSbvaLFyChJDBvkfjFBMtbfMMU--YwAg5KlKDwdS3TctluaXKc02jnGKygWh3MaId4MgbDD_JTVjmkVglNaPMoT-JHn0esBNOjOQRBLN-YVS8D3h1IAkkEnmjTPCqZY9Ala-UaeHSXw1nIXtq7bayhEUVjl_AO3NxNQCSN9B2TcdXLAx9erlaezwmCkAl96CMmhnW3ZBC5Zdhmre4RJqWfg74GEsYpaj7BXBmLOaAOYRO8FvUGkYv5OCfuCyyJ2tC2I_vKUkqUEdteMSp-Srj59-QM&sai=AMfl-YRsFIwyPpKiEyF-gUBZCpZPceKWZ-wYwGvwudJpk_jk_w46BYOwoy2yf1ZHk0IvgiScQ2bx_O1VMvK2JL7HvvkN3igGk3U35Gz4c0zcwCleOpOjfc6JXLxwoJHZHRUwLWmC0OwYBkT-na52r5MGScwY&sig=Cg0ArKJSzJjgNueLoiPPEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUl9ekYwss4eOcdLFF--Kr3rabI98v2UDLVCiR4sFsYeX-RuozpQeBbD-r3Dbgs
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjstm4CtLRJCVxa-gUCbNLYVuHIr7Ohfy1frk2cE3O1LthHOrMlqkSKb0OoJSJuk39-jOg-sEUZdDlT2TEL9nOiKxYPgIqI7QgSpqmBHobGLMILxSdWX05PyfCLaOm5GgzFM567x5UP3PGn4o15DQ6FJgE2bS6kqyCoVoMFDvC06r2kvVIJcp01jPbesvqyL-ZNc6dU00R1tXxZIjJnEwq3__tqtq__by0RbrqDatpA5j6KmDEhFaLPZl0tLQH9mrBasQUR7CHKhHO3tCAasKF6Ru-kkfXfKY2zahCYviIb5L16T2gqYT_I3idLjJYdkoXidcJSB1HUROW7DcLGfpHbLBlChOvKhBx5didi6MRPtFr4pdHupt1X_40XE_y6k77kvmkc9nQi4_w7j3PVwEhftq8A4&sai=AMfl-YSMIgkC2KRs8axSIj7Tic2S6pY_Fr-kOqsTR-c1bLVd3-HdJqDYgQcI4nxwQi1kUVvqUUqu1lgGfhAMlNQL_X16dvATca_Oi0d5Z1ier9YgppnIY1K-M1VYea75CzCfztSUMOgb0sUDrCs6t39vlryW&sig=Cg0ArKJSzJIZnHDrpwSgEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUl9ekYwss4eOcdLFF--Kr3rabI98v2UDLVCiR4sFsYeX-RuozpQeBbD-r3Dbgs
Source: global traffic	HTTP traffic detected: GET /usersync/amazon_tam/?cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__&s=2 HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=pjBc0Ie5PlrpUmpLY0ML
Source: global traffic	HTTP traffic detected: GET /ul_cb/check_uuid/https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dmediagrid.com%26id%3D%24%7BBSW_UUID%7D HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=2b28c092-dd0b-42bb-b143-c15d16fc69ab; c=1710778930; tuuid_lu=1710778930
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=1205808&p=156011&s=165626&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon/amazon?url=https://s.amazon-adsystem.com/ecm3?id=$UID&ex=sovrn.com HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv
Source: global traffic	HTTP traffic detected: GET /sync?ssp=google&no_redirect=1&google_gid=CAESEI8maQdry5oQlan8onqO4PA&google_cver=1 HTTP/1.1Host: rtb.mfadsrvr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1710778929; tuuid=2393ecfc-a9f7-4cbe-bbea-03c6f5980eff; tuuid_lu=1710778930; ssh=!intentiq,1710778930
Source: global traffic	HTTP traffic detected: GET /i/495/0.gif?gdpr_consent=&gdpr=&callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dinmobi.com%26id%3D%7BID5UID%7D HTTP/1.1Host: id5-sync.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=3lift.com&id=3712186363653833678472 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=pubmatic.com&id=PM_UID26FC5BC4-C0EA-481E-AC6D-297EF4930E35 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=openx.com&id=b9b79b8b-5e72-86b6-b423-c9f3a5e7acad HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=2393ecfc-a9f7-4cbe-bbea-03c6f5980eff&ckls=true&ci=DI2XbXq1hw&nc=false&trid=829089394 HTTP/1.1Host: sync1.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IQver=1.9; intentIQ=DI2XbXq1hw
Source: global traffic	HTTP traffic detected: GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=b9b79b8b-5e72-86b6-b423-c9f3a5e7acad HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=outbrain.com&id=pjBc0Ie5PlrpUmpLY0ML HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_hm=Y2QwZTM0M2MtOGJhZi02M2U4LTYxY2QtMTFkZDA3MzZhOTJk HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_cm&google_sc HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=D1B83109A4A44EA780D9F28ECD179B12
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pmeb&google_sc=1&google_hm=JvxbxMDqSB6sbSl-9JMONQ%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /ecm3?id=D1B83109A4A44EA780D9F28ECD179B12&ex=simpli.fi&status=ok HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pubmatic&google_hm=MjZGQzVCQzQtQzBFQS00ODFFLUFDNkQtMjk3RUY0OTMwRTM1&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /sync/openx/75a681b2-d274-af05-45fa-5d913283aa04?gdpr=0 HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=admedia.com&id=363ffa6c7ef48a007acb27f47e31ee34 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /track/cmf/openx?oxid=e161e7f6-42d8-3d4c-742d-4b64cdd4674d&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xuid?mid=7976&xuid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluid=3712186363653833678472; tluidp=3712186363653833678472
Source: global traffic	HTTP traffic detected: GET /sync/pubmatic/26FC5BC4-C0EA-481E-AC6D-297EF4930E35?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=baidu.com&id=22210ca7211caf792c9xmt00ltx5lqro HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=3371&partner_device_id=26FC5BC4-C0EA-481E-AC6D-297EF4930E35 HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?id=AAARQ07L8NQAABPzJYe3uw&ex=beeswax.com HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /sync?ssp=fmx&us_privacy=&gdpr=0&gdpr_consent= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=2b28c092-dd0b-42bb-b143-c15d16fc69ab; c=1710778930; tuuid_lu=1710778930
Source: global traffic	HTTP traffic detected: GET /l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx%2026FC5BC4-C0EA-481E-AC6D-297EF4930E35&rnd=RND HTTP/1.1Host: us01.z.antigena.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=google&no_redirect=1&google_gid=CAESEI8maQdry5oQlan8onqO4PA&google_cver=1 HTTP/1.1Host: rtb.mfadsrvr.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1710778929; tuuid=2393ecfc-a9f7-4cbe-bbea-03c6f5980eff; tuuid_lu=1710778930; ssh=!intentiq,1710778930
Source: global traffic	HTTP traffic detected: GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=b9b79b8b-5e72-86b6-b423-c9f3a5e7acad HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=mediagrid.com&id=2b28c092-dd0b-42bb-b143-c15d16fc69ab HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=outbrain.com&id=pjBc0Ie5PlrpUmpLY0ML HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /bh/rtset?pid=558511&ev=1&rurl=https%3A%2F%2Fce.lijit.com/merge?pid=49&3pid=%%VGUID%%&gdpr=0&gdpr_consent= HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=sovrn&gdpr=0&gdpr_consent= HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?id=IV6WABZHUuoYlIO2Qzydeftv&ex=sovrn.com&gdpr=0&gdpr_consent= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=2393ecfc-a9f7-4cbe-bbea-03c6f5980eff&ckls=true&ci=DI2XbXq1hw&nc=false&trid=829089394 HTTP/1.1Host: sync1.intentiq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IQver=1.9; intentIQ=DI2XbXq1hw; CSDT=UEQ6MTUzNThfMCZVN09JMzN2; IQPData=3210798018#1710778931073#0#1710778931073; intentIQCDate=1710778931075; ASDT=0
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:D1B83109A4A44EA780D9F28ECD179B12 HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; chkChromeAb67Sec=1; pi=156011:2; DPSync3=1711929600%3A201_263%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_54_250_71_220_21
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=openx.com&id=b9b79b8b-5e72-86b6-b423-c9f3a5e7acad HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=federatedmedia&gdpr=0&gdpr_consent= HTTP/1.1Host: data.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072991&val=CAESEE-eUtltZUO8fva0a6Jtqjs&google_cver=1 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=32cdd8af-eb5f-02bb-2efb-838ca9f354b0\|1710778930; pd=v2\|1710778930\|vMgavPkWgy
Source: global traffic	HTTP traffic detected: GET /c/495/0/0/1.gif?gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: id5-sync.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=8c82d760-97a6-7b38-a656-a04ba9b9cc68#1710778931072#1; callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dinmobi.com%26id%3D%7BID5UID%7D
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; chkChromeAb67Sec=1; pi=156011:2; DPSync3=1711929600%3A201_263%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_54_250_71_220_21
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEJj1o7j5msW-un8qiMIIebo&google_cver=1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; chkChromeAb67Sec=1; pi=156011:2; DPSync3=1711929600%3A201_263%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_54_250_71_220_21
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive/check?partner_id=3371&partner_device_id=26FC5BC4-C0EA-481E-AC6D-297EF4930E35 HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1710778931516; TapAd_DID=da9fa8fc-3c38-47c1-bced-e79257211d8c
Source: global traffic	HTTP traffic detected: GET /track/cmb/openx?oxid=e161e7f6-42d8-3d4c-742d-4b64cdd4674d&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=9892abd7-2a3a-4a40-95c8-94f2d71ac262; TDCPM=CAEYBSgCMgsIyIDtu8nc4zwQBTgB
Source: global traffic	HTTP traffic detected: GET /xuid?mid=7976&xuid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=3712186363653833678472; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fbrowser-update.org%2F&domain=browser-update.org&cw=1&pbt=1&lsw=1 HTTP/1.1Host: gum.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: /Origin: https://browser-update.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://browser-update.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/openx/75a681b2-d274-af05-45fa-5d913283aa04?gdpr=0 HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBDNq-GUCEG-AEIJP2mcrBVrLy_f3KDkFEgEBAQG7-WUCZgAAAAAA_eMAAA&S=AQAAAq-5NfuhHGhMR3ujrZ1pQ6Q
Source: global traffic	HTTP traffic detected: GET /track/cmb/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=476a305c-888e-468c-8d57-ea927e6c6f82; TDCPM=CAEYBSgCMgsIrp3AvMnc4zwQBTgB
Source: global traffic	HTTP traffic detected: GET /sync/pubmatic/26FC5BC4-C0EA-481E-AC6D-297EF4930E35?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBDNq-GUCENUobzGQ--2jA6azyBcFBNoFEgEBAQG7-WUCZgAAAAAA_eMAAA&S=AQAAAuXkNxtEOJumYMc0aVwelMY
Source: global traffic	HTTP traffic detected: GET /merge?pid=80&3pid=LTX5LRW4-V-IXJ1&gdpr=0 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv; ljtrtbexp=eJyrVrIwULIyNDc0tLSwMDU20FEysUTlW5ih8o0gfAMLIyNDMN8cIm9sYWxubFALAJvzEE8%3D
Source: global traffic	HTTP traffic detected: GET /merge?pid=49&3pid=x5v74EUGBRIZ&ev=1&pid=558511&gdpr_consent=&gdpr=0 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv; ljtrtbexp=eJyrVrIwULIyNDc0tLSwMDU20FEysUTlW5ih8o0gfAMLIyNDMN8cIm9sYWxubFALAJvzEE8%3D
Source: global traffic	HTTP traffic detected: GET /ecm3?id=AAARQ07L8NQAABPzJYe3uw&ex=beeswax.com HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /track/cmb/generic?ttd_pid=federatedmedia&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=bbb7c0a8-9303-4b39-93f6-f187e79feaa0; TDCPM=CAEYBSgCMgsI8seNv8nc4zwQBTgB
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=mediagrid.com&id=2b28c092-dd0b-42bb-b143-c15d16fc69ab HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?id=IV6WABZHUuoYlIO2Qzydeftv&ex=sovrn.com&gdpr=0&gdpr_consent= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /lb/v1 HTTP/1.1Host: lb.eu-1-id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: /Origin: https://browser-update.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://browser-update.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=bidswitch&bidswitch_ssp_id=fmx&bsw_custom_parameter=2b28c092-dd0b-42bb-b143-c15d16fc69ab HTTP/1.1Host: pool.admedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072971&val=9892abd7-2a3a-4a40-95c8-94f2d71ac262&ttd_puid=e161e7f6-42d8-3d4c-742d-4b64cdd4674d&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=32cdd8af-eb5f-02bb-2efb-838ca9f354b0\|1710778930; pd=v2\|1710778930\|vMgavPkWgy
Source: global traffic	HTTP traffic detected: GET /api/config/prebid HTTP/1.1Host: id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=8c82d760-97a6-7b38-a656-a04ba9b9cc68#1710778931072#1; callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dinmobi.com%26id%3D%7BID5UID%7D
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=sovrn&gdpr=0&gdpr_consent=&tc=1 HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=m6imPN51sdhz90c02QSX_1710778931757; ts=1710778931
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:D1B83109A4A44EA780D9F28ECD179B12 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; chkChromeAb67Sec=1; pi=156011:2; DPSync3=1711929600%3A201_263%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_54_250_71_220_21; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; PugT=1710778931
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; chkChromeAb67Sec=1; pi=156011:2; DPSync3=1711929600%3A201_263%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_54_250_71_220_21; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; PugT=1710778930
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072991&val=CAESEE-eUtltZUO8fva0a6Jtqjs&google_cver=1 HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=32cdd8af-eb5f-02bb-2efb-838ca9f354b0\|1710778930; pd=v2\|1710778930\|vMgavPkWgy
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEJj1o7j5msW-un8qiMIIebo&google_cver=1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; chkChromeAb67Sec=1; pi=156011:2; DPSync3=1711929600%3A201_263%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_54_250_71_220_21; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; PugT=1710778930
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=inmobi.com&id=ID5-0668S2WwnJRQs2p4sNhVUM2uqkSgyt678tMIQz3xpw HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=476a305c-888e-468c-8d57-ea927e6c6f82&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; chkChromeAb67Sec=1; pi=156011:2; DPSync3=1711929600%3A201_263%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_54_250_71_220_21; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; PugT=1710778930
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=da9fa8fc-3c38-47c1-bced-e79257211d8c%252C%252C&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=476a305c-888e-468c-8d57-ea927e6c6f82; TDCPM=CAESFwoIcHVibWF0aWMSCwjEv8CUs9zjPBAFGAUgASgCMgsIrp3AvMnc4zwQBTgB
Source: global traffic	HTTP traffic detected: GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fbrowser-update.org%2F&domain=browser-update.org&cw=1&pbt=1&lsw=1 HTTP/1.1Host: gum.criteo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /merge?pid=27&3pid=bbb7c0a8-9303-4b39-93f6-f187e79feaa0&gdpr=0&gdpr_consent= HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv; ljtrtbexp=eJyrVrIwULIyNDc0tLSwMDU20FEysUTlW5ih8o0gfAMLIyNDMN8cIm9sYWxubFALAJvzEE8%3D; _ljtrtb_80=LTX5LRW4-V-IXJ1; _ljtrtb_49=x5v74EUGBRIZ
Source: global traffic	HTTP traffic detected: GET /merge?pid=80&3pid=LTX5LRW4-V-IXJ1&gdpr=0 HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv; ljtrtbexp=eJyrVrIwULIyNDc0tLSwMDU20FEysUTlW5ih8o0gfAMLIyNDMN8cIm9sYWxubFALAJvzEE8%3D; _ljtrtb_80=LTX5LRW4-V-IXJ1; _ljtrtb_49=x5v74EUGBRIZ
Source: global traffic	HTTP traffic detected: GET /merge?pid=49&3pid=x5v74EUGBRIZ&ev=1&pid=558511&gdpr_consent=&gdpr=0 HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv; ljtrtbexp=eJyrVrIwULIyNDc0tLSwMDU20FEysUTlW5ih8o0gfAMLIyNDMN8cIm9sYWxubFALAJvzEE8%3D; _ljtrtb_80=LTX5LRW4-V-IXJ1; _ljtrtb_49=x5v74EUGBRIZ
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072971&val=9892abd7-2a3a-4a40-95c8-94f2d71ac262&ttd_puid=e161e7f6-42d8-3d4c-742d-4b64cdd4674d&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=32cdd8af-eb5f-02bb-2efb-838ca9f354b0\|1710778930; pd=v2\|1710778930\|vMgavPkWgy; univ_id=537072971\|9892abd7-2a3a-4a40-95c8-94f2d71ac262\|1710778932299885
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=1830&partner_device_id=476a305c-888e-468c-8d57-ea927e6c6f82&ttd_puid=da9fa8fc-3c38-47c1-bced-e79257211d8c%2C%2C HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1710778931516; TapAd_DID=da9fa8fc-3c38-47c1-bced-e79257211d8c; TapAd_3WAY_SYNCS=
Source: global traffic	HTTP traffic detected: GET /merge?pid=86&3pid=o2HIxaEGHLyIlgWmC9QyNMFpZi0f4iDXPjTtqxL-O6g&pi=sovrn&gdpr=0&gdpr_consent=&tc=1 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv; ljtrtbexp=eJyrVrIwULIyNDc0tLSwMDU20FEysUTlW5ih8o0gfAMLIyNDMN8cIm9sYWxubFALAJvzEE8%3D; _ljtrtb_80=LTX5LRW4-V-IXJ1; _ljtrtb_49=x5v74EUGBRIZ; ljtrtb=eJyrVjKxVLJSqjAtMzdxDXV3CvKMUtJRsjAAivmERJj6BIWb6IbpekZ4GSrVAgD7LgtG; _ljtrtb_27=bbb7c0a8-9303-4b39-93f6-f187e79feaa0
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=476a305c-888e-468c-8d57-ea927e6c6f82&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; chkChromeAb67Sec=1; pi=156011:2; DPSync3=1711929600%3A201_263%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_54_250_71_220_21; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; PugT=1710769339
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=bidswitch&bidswitch_ssp_id=fmx&bsw_custom_parameter=2b28c092-dd0b-42bb-b143-c15d16fc69ab HTTP/1.1Host: pool.admedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=eacb20b5-1654-4907-a3bb-abb94dd9e72c; c=1710778932; tuuid_lu=1710778932
Source: global traffic	HTTP traffic detected: GET /merge?pid=27&3pid=bbb7c0a8-9303-4b39-93f6-f187e79feaa0&gdpr=0&gdpr_consent= HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv; ljtrtbexp=eJyrVrIwULIyNDc0tLSwMDU20FEysUTlW5ih8o0gfAMLIyNDMN8cIm9sYWxubFALAJvzEE8%3D; _ljtrtb_80=LTX5LRW4-V-IXJ1; _ljtrtb_49=x5v74EUGBRIZ; ljtrtb=eJyrVjKxVLJSqjAtMzdxDXV3CvKMUtJRsjAAivmERJj6BIWb6IbpekZ4GSrVAgD7LgtG; _ljtrtb_27=bbb7c0a8-9303-4b39-93f6-f187e79feaa0
Source: global traffic	HTTP traffic detected: GET /lb/v1 HTTP/1.1Host: lb.eu-1-id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /merge?pid=86&3pid=o2HIxaEGHLyIlgWmC9QyNMFpZi0f4iDXPjTtqxL-O6g&pi=sovrn&gdpr=0&gdpr_consent=&tc=1 HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv; ljtrtbexp=eJyrVrIwULIyNDc0tLSwMDU20FEysUTlW5ih8o0gfAMLIyNDMN8cIm9sYWxubFALAJvzEE8%3D; _ljtrtb_80=LTX5LRW4-V-IXJ1; _ljtrtb_49=x5v74EUGBRIZ; _ljtrtb_27=bbb7c0a8-9303-4b39-93f6-f187e79feaa0; ljtrtb=eJyrVjKxVLJSqjAtMzdxDXV3CvKMUtJRMjIHiiUlJZknGyRa6FoaGxjrmiQZWwJZaWa6aYYW5qnmlmmpiYkGQLUWBkC1PiERpj5B4Sa6YbqeEV6GSrUA2pQWSw%3D%3D; _ljtrtb_86=o2HIxaEGHLyIlgWmC9QyNMFpZi0f4iDXPjTtqxL-O6g
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=23&expires=14&user_id=eacb20b5-1654-4907-a3bb-abb94dd9e72c&user_group=1&ssp=fmx&bsw_param=2b28c092-dd0b-42bb-b143-c15d16fc69ab HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=2b28c092-dd0b-42bb-b143-c15d16fc69ab; c=1710778930; tuuid_lu=1710778930
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156011&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: simage4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; chkChromeAb67Sec=1; pi=156011:2; DPSync3=1711929600%3A201_263%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_54_250_71_220_21; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; PugT=1710778931
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=1830&partner_device_id=476a305c-888e-468c-8d57-ea927e6c6f82&ttd_puid=da9fa8fc-3c38-47c1-bced-e79257211d8c%2C%2C HTTP/1.1Host: pixel.tapad.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1710778931516; TapAd_DID=da9fa8fc-3c38-47c1-bced-e79257211d8c; TapAd_3WAY_SYNCS=1!1888
Source: global traffic	HTTP traffic detected: GET /g/v2/1189.json HTTP/1.1Host: id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3pi=; id5=8c82d760-97a6-7b38-a656-a04ba9b9cc68#1710778931072#3
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=71058137&p=156011&s=165626&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; chkChromeAb67Sec=1; DPSync3=1711929600%3A201_263%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_54_250_71_220_21; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; PugT=1710778931
Source: global traffic	HTTP traffic detected: GET /merge?pid=26&3pid=2b28c092-dd0b-42bb-b143-c15d16fc69ab&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv; ljtrtbexp=eJyrVrIwULIyNDc0tLSwMDU20FEysUTlW5ih8o0gfAMLIyNDMN8cIm9sYWxubFALAJvzEE8%3D; _ljtrtb_80=LTX5LRW4-V-IXJ1; _ljtrtb_49=x5v74EUGBRIZ; _ljtrtb_27=bbb7c0a8-9303-4b39-93f6-f187e79feaa0; ljtrtb=eJyrVjKxVLJSqjAtMzdxDXV3CvKMUtJRMjIHiiUlJZknGyRa6FoaGxjrmiQZWwJZaWa6aYYW5qnmlmmpiYkGQLUWBkC1PiERpj5B4Sa6YbqeEV6GSrUA2pQWSw%3D%3D; _ljtrtb_86=o2HIxaEGHLyIlgWmC9QyNMFpZi0f4iDXPjTtqxL-O6g
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-5884294479391638&output=html&h=280&slotname=3654094576&adk=229048865&adf=3493768504&pi=t.ma~as.3654094576&w=336&url=https%3A%2F%2Fbrowser-update.org%2F&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1710778930128&bpp=1199&bdt=1523&idt=2831&shv=r20240313&mjsv=m202403130201&ptt=5&saldr=sd&correlator=4983246607908&frm=24&ife=3&pv=2&ga_vid=1057831115.1710778933&ga_sid=1710778933&ga_hid=1798790202&ga_fc=0&nhd=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=-12245933&bih=-12245933&isw=336&ish=280&ifk=2444235967&scr_x=-12245933&scr_y=-12245933&eid=44759875%2C44759926%2C44759842%2C44795922%2C95322746%2C95327951%2C95327954%2C31081901%2C95322184%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=2513308701797547&tmod=1386792793&uas=0&nvt=1&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C336%2C280&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=1.7nq73craib6t&fsb=1&dtd=2860 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-5884294479391638&output=html&h=90&slotname=3654094576&adk=228266070&adf=3493768505&pi=t.ma~as.3654094576&w=970&url=https%3A%2F%2Fbrowser-update.org%2F&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1710778930134&bpp=1204&bdt=1441&idt=2890&shv=r20240313&mjsv=m202403130201&ptt=5&saldr=sd&correlator=966864692783&frm=24&ife=3&pv=2&ga_vid=751177015.1710778933&ga_sid=1710778933&ga_hid=640648971&ga_fc=0&nhd=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=-12245933&bih=-12245933&isw=970&ish=90&ifk=1017635361&scr_x=-12245933&scr_y=-12245933&eid=44759875%2C44759926%2C44759842%2C31081793%2C95325975%2C95327950%2C95327954%2C31081901%2C95320376%2C95322388%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=862165079531677&tmod=1386792793&uas=0&nvt=1&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C970%2C90&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=1.bp47bps3drp4&fsb=1&dtd=2937 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /cookie-sync/pm?gdpr=0&gdpr_consent= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAARQ07L8NQAABPzJYe3uw; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=sc-qkOWOy4X_p3mD-LWUzAd-XDCZQmscLkmizNrfavkuQbEqumPcpRbLQP5MYfuaYQ8bCCHdAwNtUmwS86qSDkNpL-Zwzckxzo46gNxy6nM.; icu=ChgIs8t_EAoYASABKAEwr9ThrwY4AUABSAEQr9ThrwYYAA..; receive-cookie-deprecation=1; uuid2=9164480480629189644
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=540245193&val=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=32cdd8af-eb5f-02bb-2efb-838ca9f354b0\|1710778930; pd=v2\|1710778930\|vMgavPkWgy; univ_id=537072971\|9892abd7-2a3a-4a40-95c8-94f2d71ac262\|1710778932718470
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=pubmatic.com&id=PM_UID26FC5BC4-C0EA-481E-AC6D-297EF4930E35 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /merge?pid=26&3pid=2b28c092-dd0b-42bb-b143-c15d16fc69ab&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv; ljtrtbexp=eJyrVrIwULIyNDc0tLSwMDU20FEysUTlW5ih8o0gfAMLIyNDMN8cIm9sYWxubFALAJvzEE8%3D; _ljtrtb_80=LTX5LRW4-V-IXJ1; _ljtrtb_49=x5v74EUGBRIZ; _ljtrtb_27=bbb7c0a8-9303-4b39-93f6-f187e79feaa0; _ljtrtb_86=o2HIxaEGHLyIlgWmC9QyNMFpZi0f4iDXPjTtqxL-O6g; ljtrtb=eJwVylsLgjAYgOH%2Fsus%2BmG7u0GVlulgn0RzebeHEKCqImET%2FvXX38vB%2BEJVojkL25jRvikWlOjRDKY%2FmnONnbAVIgglQR2Qsz8Angvdc%2Bt5aHF%2BB46trk%2BmqpXACZTbJn1nke1qqYPOi1JO6Du1tKY%2FTbrt%2BdCP2dFyZw6V%2BPYOGPRvQ9wfKjSYk; _ljtrtb_26=2b28c092-dd0b-42bb-b143-c15d16fc69ab
Source: global traffic	HTTP traffic detected: GET /ups/58292/sync?_origin=1&uid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBDNq-GUCENUobzGQ--2jA6azyBcFBNoFEgEBAQG7-WUCZgAAAAAA_eMAAA&S=AQAAAuXkNxtEOJumYMc0aVwelMY
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFBUlEwN0w4TlFBQUJQekpZZTN1dw&gdpr=0&gdpr_consent=&bee_sync_partners=sas%2Cpp%2Csyn%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /insync?vxii_pid=10067&vxii_pdid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent= HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/dsync/Martin?exid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent= HTTP/1.1Host: crb.kargo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?pid=187&uid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.bfmio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=9164480480629189644&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; PugT=1710778931; SPugT=1710729153; chkChromeAb67Sec=2; pi=156011:4; DPSync3=1711929600%3A263_262_261_260_259_201%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_250_166_3_104_165_54_71_220_21%7C1711324800%3A15_223
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=540245193&val=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=32cdd8af-eb5f-02bb-2efb-838ca9f354b0\|1710778930; pd=v2\|1710778930\|vMgavPkWgy; univ_id=537072971\|9892abd7-2a3a-4a40-95c8-94f2d71ac262\|1710778932718470
Source: global traffic	HTTP traffic detected: GET /insync?gdpr=0&gdpr_consent=&vxii_pdid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&vxii_pid=12&vxii_pid1=10067&vxii_rcid=cdd5ca24-47b1-4f3e-8cc1-d0019f951b2e HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6ImNkZDVjYTI0LTQ3YjEtNGYzZS04Y2MxLWQwMDE5Zjk1MWIyZSIsImwiOjE3MTA3Nzg5MzQ2NjIsInQiOjF9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsvgATh2nFLFTfxuA-Mg0ekaVvnQPG0p7BrqgOy6ed_6SfglkqoU-z69fs__aSdCe4LJChSZpnJMLIiA42k2EnU0HIUsrAK3_xZhVFyjvXm2vBa2vz767u-d9IWsftf332Cvp1zYcC9o1FZgyGPY-WE5uwHrLZ_TUu_59W4IDRPwmuU0O84LZYbbjS1Q-ZXaxZroess3QRM8xxe5IjdB_MBYU-jRJadYMM_prxH_2c-TLkkP1GwJCewJU32FqpudTRtxdzpWwLQM53DV3g0C8gOfanERMZGzLD9DCjYLnYDo7yrFqNxr1Tz_odNErrqIyCFfVt77M8soObqlkRtnUOQdriYuYXmKfwlFKxG3dL6erm5BNT98gHbVccZ7t4CnELVyrszjC6WG_xSz6nydvt-C-SSGfQ&sai=AMfl-YQi4KNVWDgMvKUem5u6y-h6U3l3I8pwfkD1PehlICl36Z-2YvWyTA5iJ2-tJblfYa44X5BrjmPuKYBLBVaQO-1-tZz5d0pCP7K_5fZC3CF3ae63Z8WJjzSoTipstui5s-f6s8NXtuAvEJiOozJpj1J9&sig=Cg0ArKJSzKU_qg5PlfFjEAE&uach_m=%5BUACH%5D&urlfix=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partners=sas%2Cpp%2Csyn%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAARQ07L8NQAABPzJYe3uw; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /api/v1/dsync/Martin?exid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent= HTTP/1.1Host: crb.kargo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ktcid=ac33492d-ca38-0673-52a3-85410777d329
Source: global traffic	HTTP traffic detected: GET /rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%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
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=ae5763be-e543-11ee-a76c-71e45aeeda27 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; SPugT=1710729153; chkChromeAb67Sec=2; pi=156011:4; DPSync3=1711929600%3A263_262_261_260_259_201%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_250_166_3_104_165_54_71_220_21%7C1711324800%3A15_223; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; PugT=1710778933
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaRAjDi2mZf5UapnLsaTbVfpKyj7ikAJSDKkjulwTtMQqZgC_QY2SxxinCwzmatuOv-whbS-9a5omzc_Z5KmKFPv6Tqd4Q HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156078&xid=y-17tUrjJE2uUN58rhQTKtQw5Aw2CG9jI-~A&gdpr=0 HTTP/1.1Host: image4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; PugT=1710778931; SPugT=1710729153; chkChromeAb67Sec=2; pi=156011:4; DPSync3=1711929600%3A263_262_261_260_259_201%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_250_166_3_104_165_54_71_220_21%7C1711324800%3A15_223
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=2b5667c9-681a-4026-b198-22bfa86cb93f&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; PugT=1710778931; SPugT=1710729153; chkChromeAb67Sec=2; pi=156011:4; DPSync3=1711929600%3A263_262_261_260_259_201%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_250_166_3_104_165_54_71_220_21%7C1711324800%3A15_223
Source: global traffic	HTTP traffic detected: GET /insync?gdpr=0&gdpr_consent=&vxii_pdid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&vxii_pid=12&vxii_pid1=10067&vxii_rcid=cdd5ca24-47b1-4f3e-8cc1-d0019f951b2e HTTP/1.1Host: thrtle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6ImNkZDVjYTI0LTQ3YjEtNGYzZS04Y2MxLWQwMDE5Zjk1MWIyZSIsImwiOjE3MTA3Nzg5MzUwNDgsInQiOjF9
Source: global traffic	HTTP traffic detected: GET /redir?partneruserid=AAARQ07L8NQAABPzJYe3uw&partnerid=127&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dpp%252Csyn%252Cpm%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2%26userid%3DSMART_USER_ID&gdpr=0 HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=8457389007004702379
Source: global traffic	HTTP traffic detected: GET /rtgstat/50version/css/logico-three.css HTTP/1.1Host: cdn.2trk.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://rtgcloudsql.2trk.info/rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%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
Source: global traffic	HTTP traffic detected: GET /rtgstat/50version/css/slider.css HTTP/1.1Host: cdn.2trk.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://rtgcloudsql.2trk.info/rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%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
Source: global traffic	HTTP traffic detected: GET /rtgstat/50version/css/promo.css HTTP/1.1Host: cdn.2trk.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://rtgcloudsql.2trk.info/rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%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
Source: global traffic	HTTP traffic detected: GET /rtgstat/script/jquery.min.js HTTP/1.1Host: cdn.2trk.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://rtgcloudsql.2trk.info/rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%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
Source: global traffic	HTTP traffic detected: GET /rtgstat/50version/js/slider.js HTTP/1.1Host: cdn.2trk.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://rtgcloudsql.2trk.info/rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%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
Source: global traffic	HTTP traffic detected: GET /rtgbannerimage/2024-03-11-0723162901024.png HTTP/1.1Host: cdn.2trk.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtgcloudsql.2trk.info/rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%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
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsvgATh2nFLFTfxuA-Mg0ekaVvnQPG0p7BrqgOy6ed_6SfglkqoU-z69fs__aSdCe4LJChSZpnJMLIiA42k2EnU0HIUsrAK3_xZhVFyjvXm2vBa2vz767u-d9IWsftf332Cvp1zYcC9o1FZgyGPY-WE5uwHrLZ_TUu_59W4IDRPwmuU0O84LZYbbjS1Q-ZXaxZroess3QRM8xxe5IjdB_MBYU-jRJadYMM_prxH_2c-TLkkP1GwJCewJU32FqpudTRtxdzpWwLQM53DV3g0C8gOfanERMZGzLD9DCjYLnYDo7yrFqNxr1Tz_odNErrqIyCFfVt77M8soObqlkRtnUOQdriYuYXmKfwlFKxG3dL6erm5BNT98gHbVccZ7t4CnELVyrszjC6WG_xSz6nydvt-C-SSGfQ&sai=AMfl-YQi4KNVWDgMvKUem5u6y-h6U3l3I8pwfkD1PehlICl36Z-2YvWyTA5iJ2-tJblfYa44X5BrjmPuKYBLBVaQO-1-tZz5d0pCP7K_5fZC3CF3ae63Z8WJjzSoTipstui5s-f6s8NXtuAvEJiOozJpj1J9&sig=Cg0ArKJSzKU_qg5PlfFjEAE&uach_m=%5BUACH%5D&urlfix=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=2b5667c9-681a-4026-b198-22bfa86cb93f&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; chkChromeAb67Sec=2; pi=156011:4; DPSync3=1711929600%3A263_262_261_260_259_201%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_250_166_3_104_165_54_71_220_21%7C1711324800%3A15_223; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; SPugT=1710778935; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; PugT=1710778933
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAGHVotKVdnRwM0DdtRAAAAAAA&expiration=1710865335&nuid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; chkChromeAb67Sec=2; pi=156011:4; DPSync3=1711929600%3A263_262_261_260_259_201%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_250_166_3_104_165_54_71_220_21%7C1711324800%3A15_223; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; SPugT=1710778935; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; PugT=1710778933
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156078&xid=y-17tUrjJE2uUN58rhQTKtQw5Aw2CG9jI-~A&gdpr=0 HTTP/1.1Host: image4.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; chkChromeAb67Sec=2; pi=156011:4; DPSync3=1711929600%3A263_262_261_260_259_201%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_250_166_3_104_165_54_71_220_21%7C1711324800%3A15_223; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; SPugT=1710778935; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; PugT=1710778933
Source: global traffic	HTTP traffic detected: GET /cookie-sync?gdpr=0&bee_sync_partners=pp%2Csyn%2Cpm&bee_sync_current_partner=sas&bee_sync_initiator=adx&bee_sync_hop_count=2&userid=8457389007004702379&gdpr=0&gdpr_consent= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAARQ07L8NQAABPzJYe3uw; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAGHVotKVdnRwM0DdtRAAAAAAA&expiration=1710865335&nuid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; chkChromeAb67Sec=2; pi=156011:4; DPSync3=1711929600%3A263_262_261_260_259_201%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_250_166_3_104_165_54_71_220_21%7C1711324800%3A15_223; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; SPugT=1710778935; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; PugT=1710778934
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156011&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: simage4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; chkChromeAb67Sec=2; pi=156011:4; DPSync3=1711929600%3A263_262_261_260_259_201%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_250_166_3_104_165_54_71_220_21%7C1711324800%3A15_223; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; SPugT=1710778935; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; PugT=1710778934
Source: global traffic	HTTP traffic detected: GET /rtgbannerimage/2024-03-11-0723162901024.png HTTP/1.1Host: cdn.2trk.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
Source: global traffic	HTTP traffic detected: GET /bh/rtset?ev=AAARQ07L8NQAABPzJYe3uw&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D8457389007004702379%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dsyn%252Cpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3&gdpr=0 HTTP/1.1Host: bh.contextweb.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: V=x5v74EUGBRIZ; pb_rtb_ev=3-1qaz\|7dW.0.1; INGRESSCOOKIE=d91942d279e46aae
Source: global traffic	HTTP traffic detected: GET /rtgbannerimage/2023-11-10-042550749ecoflow.png HTTP/1.1Host: cdn.2trk.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtgcloudsql.2trk.info/rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%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
Source: global traffic	HTTP traffic detected: GET /imageresize?url=width=336::height=336::imgurl=https%253A%252F%252Fcdn.shopify.com%252Fs%252Ffiles%252F1%252F1996%252F9707%252Ffiles%252Fecoflow-us-ecoflow-portable-camping-chair-30383581397065.png%253Fv%253D1689747202::campaignId=64180 HTTP/1.1Host: rtgcdn.2trk.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtgcloudsql.2trk.info/rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%3DeyJyYW5rN0EiOiIwIiwiYmFubmVyVHlwZSI6ImJhbm5lciIsImNyaXRlcmlhSWQiOiIxMDIzMTkxIiwidHkiOiIwIiwiZXh0cmFzS2V5IjoiNDdfNjQxODAtOTcwIiwicGxhdGZvcm1Ccm93c2VyIjoiQ2hyb21lIiwibWluQmlkVG9XaW4iOiIwIiwibWluYmlkIjoiMC4xMiIsIm1heGJpZCI6IjYuMCIsInByb2dyYW1OYW1lIjoicG9zX3VlY191cyIsInB1YklkIjoicHViLTU4ODQyOTQ0NzkzOTE2MzgiLCJob3N0IjoicHJlY2lzbyIsInJhbms2UyI6IjAuMCIsInBsYWNlbWVudEJ1bmRsZU5hbWUiOiJicm93c2VyLXVwZGF0ZS5vcmciLCJiYW5uZXJVcGRhdGVPbiI6IjE4LzAzLzIwMjQgMTY6MDI6MTQiLCJkYXkiOiIyMDI0LTAzLTE4IiwiUGFnZVR5cGUiOiJnZW5lcmljIiwiaGVpZ2h0IjoiOTAiLCJlY3BhIjoiMCIsImN0ciI6IjIuNjU4MTYwNUUtNCIsInJlbUFnQnVkQ2FwIjoiNjIyOS43NDc0IiwiYmtIb3VycyI6IjAiLCJiaWxsaW5naWQiOiIxMTA4ODY5NzI5NTkiLCJ2aXNpYmlsaXR5IjoiQkVMT1dfVEhFX0ZPTEQiLCJpbnRlcnN0aXRpYWwiOiJmYWxzZSIsIkRhaWx5QnVkZ2V0IjoiMzIiLCJkZWFsVHlwZSI6Ik9BIiwiRnJlcXVlbmN5Y2FwIjoiMTAiLCJhciI6Ik5BIiwiY3BtTWljcm9zIjoiMCIsInBsYXRmb3JtT3MiOiJXaW5kb3dzIiwiZXgiOiJwZHgiLCJhZFNsb3RSYW5rNSI6IjE4NTIiLCJkb21haW4iOiJodHRwczovL2Jyb3dzZXItdXBkYXRlK2Qrb3JnIiwibG9nSSI6IiBJMToxLjAsSTI6MS4wLEk1OjEuMCxJNjoxLjAsSTc6MS4wIiwiZ3VpZCI6IkNBRVNFTzR4aWQ3bzh1UjlFblZiUmU4N05layIsIm1haW5hZENvbnNlbnRTdGF0dXMiOiJmYWxzZSIsImxvZ1IiOiIgUjE6MTAwLFIyOjEwMDAsUjU6MTg1MixSNnM6MC4wLFI2YzowLjAsUjZzQjowLjAsUjZjQjowLjAsUjdhOjAiLCJyZWdpb24iOiJ1cy1lYXN0NC1hIiwiZGV2aWNlIjoicGMiLCJkZXZpZCI6IjAiLCJ2aWV3YWJpbGl0eSI6Ii0xIiwiaXNDb25zZW50TmVlZGVkIjoiZmFsc2UiLCJpbkFwcCI6ImZhbHNlIiwiY2FtcGFpZ25pZCI6IjY0MTgwIiwiZW52aXJvbm1lbnRUeXBlIjoiV2ViIiwiYmlkcHJpY2UiOiIwLjEyIiwiYmsiOiIwIiwiVXNlclN0cmF0
Source: global traffic	HTTP traffic detected: GET /dpixel?a=p-n5vvLvRdjg0ek&eid=0&qc_google_push=&google_gid=CAESEDf-KmwndYmbhC_Ghpb5Gk4&google_cver=1&google_push=AXcoOmS7sTLRMI21elo2udyioFfMgpvvI0jpl8qslBdZHSPKThPWGOxrxMhBej3iCkmZYxmVtIEhZnop-lyx36XbeYfviz-zJTw HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/attr?d=AHNF13LsgtITa1ARQP4Bcql4buMGdRN8PjreIfenlTdpv44smHX9eK0UJbBsU7b-uYmyi_yvHD63qobE HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /dsp/google/pixelmatch?google_gid=CAESEEJnhmfcEjjoIgTpQqCQJfI&google_cver=1&google_push=AXcoOmRBhOkc4CQBijA_uVLMq63d_Hmzeiv428I6IxmXQKJNWikWpoFRWaBlWqXY3n_XtwSVeBsXHqLVjTbLAzJOf5ElQmIq4Ts HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv; ljtrtbexp=eJyrVrIwULIyNDc0tLSwMDU20FEysUTlW5ih8o0gfAMLIyNDMN8cIm9sYWxubFALAJvzEE8%3D; _ljtrtb_80=LTX5LRW4-V-IXJ1; _ljtrtb_49=x5v74EUGBRIZ; _ljtrtb_27=bbb7c0a8-9303-4b39-93f6-f187e79feaa0; _ljtrtb_86=o2HIxaEGHLyIlgWmC9QyNMFpZi0f4iDXPjTtqxL-O6g; _ljtrtb_26=2b28c092-dd0b-42bb-b143-c15d16fc69ab; ljtrtb=eJwVzl0LgjAYhuH%2FsuNe2ObcXIeVqbG%2BpFI826tOjKKCCCX6782zh4v74PkSLsmccORRTTWHpqEIgiMCMhFAzcKGSVdLbZHMiNC%2BHcKPEvE5WeRZ5Y0rb4ioamoj0AENQGCg%2FXISHItUq7RrraW%2BjahvzakMTV4IuEBWbtjE04UHT7PBxklqxuzWFfelPo677fpZ9dSJflUerqf3azCwlx35%2FQHGQTE3
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=adxab&google_nid=rtb_house_us&google_gid=CAESEIhasK4mZsNIs-PD6FQmJPo&google_cver=1&google_push=AXcoOmTzjEBi1UV2I9JJEaJ5_L5fTT7cQV3wrJO_tEzCFlCuhF1vKxhxfuayF9bBJaxUwoQYS9XXkK9qaut7R7bI6QVgRdtyQnL_ HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=m6imPN51sdhz90c02QSX_1710778931757; ts=1710778931
Source: global traffic	HTTP traffic detected: GET /cookie-sync?gdpr=0&userid=8457389007004702379&gdpr=0&gdpr_consent=&bee_sync_partners=syn%2Cpm&bee_sync_current_partner=pp&bee_sync_initiator=adx&bee_sync_hop_count=3&ev=AAARQ07L8NQAABPzJYe3uw&pid=558502&do=add&gdpr=0 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAARQ07L8NQAABPzJYe3uw; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /ju/cs/google?google_gid=CAESEH-4kttJFK0AGtozBUf4P8w&google_cver=1&google_push=AXcoOmTyRBsK4N-BKKXlOPXZO_jFsWo2S1ruc4RCcqcElEFn8xPp2T2l8ut_W689BpFYMZc2uFI9O_SDZHTE8cv3uV3BMYU4G3sG HTTP/1.1Host: gtrace.mediago.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __mguid_=22210ca7211caf792c9xmt00ltx5lqro
Source: global traffic	HTTP traffic detected: GET /sync?exchange=11&google_gid=CAESENkrspHNyMIhkYNinb2s-6U&google_cver=1&google_push=AXcoOmRHIuYnNYmsy0Z_gNPsNzwlvDtMNyUw7iNTqgOpZI5LrFyBaLnedgfLvobEkvt8An6sNNdFJGFu75PygYHMm5nDFaD-2Ng HTTP/1.1Host: dsp.adkernel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gp_match?google_gid=CAESELbKuSc0cZErEiQLazMlx3s&google_cver=1&google_push=AXcoOmTFNla6Hw2h9aKfvF63BybpjLoIszIEu_rWQibVbccfBDwBwo1WW40QV9L5rWgZLFRnkHVGid7aSs69DTzdjTuVRINES1g HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=D1B83109A4A44EA780D9F28ECD179B12
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /rtgstat/adchoice-links/nai_smallpreciso.png HTTP/1.1Host: cdn.2trk.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtgcloudsql.2trk.info/rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%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
Source: global traffic	HTTP traffic detected: GET /rtgstat/adchoice-links/nai_bigpreciso.png HTTP/1.1Host: cdn.2trk.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtgcloudsql.2trk.info/rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%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
Source: global traffic	HTTP traffic detected: GET /imageresize?url=width=336::height=336::imgurl=https%253A%252F%252Fcdn.shopify.com%252Fs%252Ffiles%252F1%252F1996%252F9707%252Ffiles%252Fecoflow-ecoflow-double-voltage-hub-power-input-output-delta-pro-30641334714441.png%253Fv%253D1704179963::campaignId=64180 HTTP/1.1Host: rtgcdn.2trk.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtgcloudsql.2trk.info/rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%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
Source: global traffic	HTTP traffic detected: GET /imageresize?url=width=336::height=336::imgurl=https%253A%252F%252Fcdn.shopify.com%252Fs%252Ffiles%252F1%252F1996%252F9707%252Ffiles%252Fecoflow-us-ecoflow-wave-2-portable-air-conditioner-delta-pro-portable-power-station-30313001386057.png%253Fv%253D1683344965::campaignId=64180 HTTP/1.1Host: rtgcdn.2trk.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtgcloudsql.2trk.info/rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%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
Source: global traffic	HTTP traffic detected: GET /imageresize?url=width=336::height=336::imgurl=https%253A%252F%252Fcdn.shopify.com%252Fs%252Ffiles%252F1%252F1996%252F9707%252Ffiles%252Fecoflow-us-ecoflow-delta-mini-portable-power-station-refurbished-standalone-30382791786569.png%253Fv%253D1689584309::campaignId=64180 HTTP/1.1Host: rtgcdn.2trk.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtgcloudsql.2trk.info/rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%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
Source: global traffic	HTTP traffic detected: GET /imageresize?url=width=336::height=336::imgurl=https%253A%252F%252Fcdn.shopify.com%252Fs%252Ffiles%252F1%252F1996%252F9707%252Fproducts%252Fecoflow-ecoflow-delta-max-bag-30058309091401.png%253Fv%253D1667891976::campaignId=64180 HTTP/1.1Host: rtgcdn.2trk.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtgcloudsql.2trk.info/rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%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
Source: global traffic	HTTP traffic detected: GET /imageresize?url=width=336::height=336::imgurl=https%253A%252F%252Fcdn.shopify.com%252Fs%252Ffiles%252F1%252F1996%252F9707%252Ffiles%252Fecoflow-us-ecoflow-blade-robotic-lawn-mower-blade-robotic-lawn-mower-30305163903049.png%253Fv%253D1682662842::campaignId=64180 HTTP/1.1Host: rtgcdn.2trk.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtgcloudsql.2trk.info/rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%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
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=sovrn&google_push=AXcoOmRBhOkc4CQBijA_uVLMq63d_Hmzeiv428I6IxmXQKJNWikWpoFRWaBlWqXY3n_XtwSVeBsXHqLVjTbLAzJOf5ElQmIq4Ts&google_hm=IV6WABZHUuoYlIO2Qzydeftv HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=adkernel&google_hm=QTY5MDg5MzAxMDY3MTI1OTg5NjE&google_push=AXcoOmRHIuYnNYmsy0Z_gNPsNzwlvDtMNyUw7iNTqgOpZI5LrFyBaLnedgfLvobEkvt8An6sNNdFJGFu75PygYHMm5nDFaD-2Ng HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=zeta_interactive&google_push=AXcoOmRYiLIKT1LSQ1dkkpqKwk33oMg7DeXixc2GWjt_kOj9GBU8pmtxtUSmhcXJwPyG5VAPuogsXBZu42ViSe2xiKlxCk9zSM4&google_hm=ODI1OTg1NjcxNTY2ODc4MTc0Ng== HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=simplifi&google_hm=D1B83109A4A44EA780D9F28ECD179B12&google_push=AXcoOmTFNla6Hw2h9aKfvF63BybpjLoIszIEu_rWQibVbccfBDwBwo1WW40QV9L5rWgZLFRnkHVGid7aSs69DTzdjTuVRINES1g HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /pixel?google_ula=5153224&google_hm=o2HIxaEGHLyIlgWmC9QyNMFpZi0f4iDXPjTtqxL-O6g&pi=adx&tdc=ams&pi=adxab&google_nid=rtb_house_us&google_gid=CAESEIhasK4mZsNIs-PD6FQmJPo&google_cver=1&google_push=AXcoOmTzjEBi1UV2I9JJEaJ5_L5fTT7cQV3wrJO_tEzCFlCuhF1vKxhxfuayF9bBJaxUwoQYS9XXkK9qaut7R7bI6QVgRdtyQnL_ HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=baidu_mediago&google_push=AXcoOmTyRBsK4N-BKKXlOPXZO_jFsWo2S1ruc4RCcqcElEFn8xPp2T2l8ut_W689BpFYMZc2uFI9O_SDZHTE8cv3uV3BMYU4G3sG&google_hm=22210ca7211caf792c9xmt00ltx5lqro HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CEm6bNmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMQBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0cA14nLNdYNA2tHUPKCzdLObYUZIZ2ZVSPZpS37KSXq2ZP1C4BdGoAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAOACgP6CwIIAYAMAdAVAYAXAbIXHAoaEhRwdWItNTg4NDI5NDQ3OTM5MTYzOBiZ0iE&sigh=1rQ19qL1_fY&uach_m=%5BUACH%5D&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQVGAE&cbvp=2&vis=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5884294479391638&output=html&h=90&slotname=3654094576&adk=228266070&adf=3493768505&pi=t.ma~as.3654094576&w=970&url=https%3A%2F%2Fbrowser-update.org%2F&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1710778930134&bpp=1204&bdt=1441&idt=2890&shv=r20240313&mjsv=m202403130201&ptt=5&saldr=sd&correlator=966864692783&frm=24&ife=3&pv=2&ga_vid=751177015.1710778933&ga_sid=1710778933&ga_hid=640648971&ga_fc=0&nhd=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=-12245933&bih=-12245933&isw=970&ish=90&ifk=1017635361&scr_x=-12245933&scr_y=-12245933&eid=44759875%2C44759926%2C44759842%2C31081793%2C95325975%2C95327950%2C95327954%2C31081901%2C95320376%2C95322388%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=862165079531677&tmod=1386792793&uas=0&nvt=1&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C970%2C90&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=1.bp47bps3drp4&fsb=1&dtd=2937Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /services?uid=AAARQ07L8NQAABPzJYe3uw&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D8457389007004702379%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&gdpr=0 HTTP/1.1Host: sync.technoratimedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtgbannerimage/2023-11-10-042550749ecoflow.png HTTP/1.1Host: cdn.2trk.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
Source: global traffic	HTTP traffic detected: GET /rtgstat/adchoice-links/nai_smallpreciso.png HTTP/1.1Host: cdn.2trk.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
Source: global traffic	HTTP traffic detected: GET /impression?v1ImpParams=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&price=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q&bs=49a8ccc8-4e10-415f-b3cc-85fda009ccda&cbvp=2 HTTP/1.1Host: bid.2trk.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
Source: global traffic	HTTP traffic detected: GET /imageresize?url=width=336::height=336::imgurl=https%253A%252F%252Fcdn.shopify.com%252Fs%252Ffiles%252F1%252F1996%252F9707%252Ffiles%252Fecoflow-us-ecoflow-portable-camping-chair-30383581397065.png%253Fv%253D1689747202::campaignId=64180 HTTP/1.1Host: rtgcdn.2trk.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
Source: global traffic	HTTP traffic detected: GET /imageresize?url=width=336::height=336::imgurl=https%253A%252F%252Fcdn.shopify.com%252Fs%252Ffiles%252F1%252F1996%252F9707%252Ffiles%252Fecoflow-us-ecoflow-delta-mini-portable-power-station-refurbished-standalone-30382791786569.png%253Fv%253D1689584309::campaignId=64180 HTTP/1.1Host: rtgcdn.2trk.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
Source: global traffic	HTTP traffic detected: GET /imageresize?url=width=336::height=336::imgurl=https%253A%252F%252Fcdn.shopify.com%252Fs%252Ffiles%252F1%252F1996%252F9707%252Fproducts%252Fecoflow-ecoflow-delta-max-bag-30058309091401.png%253Fv%253D1667891976::campaignId=64180 HTTP/1.1Host: rtgcdn.2trk.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
Source: global traffic	HTTP traffic detected: GET /imageresize?url=width=336::height=336::imgurl=https%253A%252F%252Fcdn.shopify.com%252Fs%252Ffiles%252F1%252F1996%252F9707%252Ffiles%252Fecoflow-us-ecoflow-wave-2-portable-air-conditioner-delta-pro-portable-power-station-30313001386057.png%253Fv%253D1683344965::campaignId=64180 HTTP/1.1Host: rtgcdn.2trk.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
Source: global traffic	HTTP traffic detected: GET /imageresize?url=width=336::height=336::imgurl=https%253A%252F%252Fcdn.shopify.com%252Fs%252Ffiles%252F1%252F1996%252F9707%252Ffiles%252Fecoflow-ecoflow-double-voltage-hub-power-input-output-delta-pro-30641334714441.png%253Fv%253D1704179963::campaignId=64180 HTTP/1.1Host: rtgcdn.2trk.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
Source: global traffic	HTTP traffic detected: GET /dpixel?a=p-n5vvLvRdjg0ek&eid=0&qc_google_push=&google_gid=CAESEDf-KmwndYmbhC_Ghpb5Gk4&google_cver=1&google_push=AXcoOmS7sTLRMI21elo2udyioFfMgpvvI0jpl8qslBdZHSPKThPWGOxrxMhBej3iCkmZYxmVtIEhZnop-lyx36XbeYfviz-zJTw HTTP/1.1Host: cms.quantserve.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: d=EAABCQGzK4EA; mc=65f86a39-0bce5-d0ea9-092f1
Source: global traffic	HTTP traffic detected: GET /imageresize?url=width=336::height=336::imgurl=https%253A%252F%252Fcdn.shopify.com%252Fs%252Ffiles%252F1%252F1996%252F9707%252Ffiles%252Fecoflow-us-ecoflow-blade-robotic-lawn-mower-blade-robotic-lawn-mower-30305163903049.png%253Fv%253D1682662842::campaignId=64180 HTTP/1.1Host: rtgcdn.2trk.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
Source: global traffic	HTTP traffic detected: GET /rtgstat/adchoice-links/nai_bigpreciso.png HTTP/1.1Host: cdn.2trk.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssqF0Xg6pTIfNQoxZkHZSQmUSslTInJ7DOTTaYQvu2bu2f8dWcPScqJ8zKbS2kol-r8d5GY7NvjuURbXz9PqKDxlPQVkxqCP61C2fi_r7Upz9oeV9JMY-BF4ZFKgCD1OgQaXuYGs-Vg8o2uqK3GI9E-9b4aGGQj202Oi5wujsrW9Bx6vLiJnb_w_xLEBDuWgg86P2PTi3P_5V6_kJ_5Qta15B2EUW78mZbuV9IfDoJTgzl_aEKW_lYJ4ORsSisHYNuEfXRR7hgRI3uTpVyH1lEPG0zXWt3v4Xgh96yZLHPJUKbkBXUab1Aahg_lhVs8xJr5xh6mszxq44RF9gxi8rn1-IE92R2u1xGtTuKwnhVArTzXyTkKDyCk36Yuv2NyG9ExKRf2kbdE2w4ho-oCjhbIjcMhuA&sai=AMfl-YQ1f6_kTUqVUUo3HlNhmzKom8QZbQFb9UHZ7v4qX2xeXRQc0no59o4F0WJAPt94ldRzih_Ar3UP6Lv0p6mjLVV6zSu47Ayuvqvcw1ZGGdjsiCcjlVv0ml5VY0MqUKx4yuUgwPhHcCmyZGyg0lJM3KlJ&sig=Cg0ArKJSzPcrrzx6pW8mEAE&uach_m=%5BUACH%5D&urlfix=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /impression?v1ImpParams=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&price=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q&bs=49a8ccc8-4e10-415f-b3cc-85fda009ccda&cbvp=2 HTTP/1.1Host: bid.2trk.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CEm6bNmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMQBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0cA14nLNdYNA2tHUPKCzdLObYUZIZ2ZVSPZpS37KSXq2ZP1C4BdGoAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAOACgP6CwIIAYAMAdAVAYAXAbIXHAoaEhRwdWItNTg4NDI5NDQ3OTM5MTYzOBiZ0iE&sigh=1rQ19qL1_fY&uach_m=%5BUACH%5D&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQVGAE&cbvp=2&vis=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /usermatchredir?s=191740&cb=https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26nuid%3D33A008D0E14543A2A207D07731F02C5F%26att%3D1%26pid%3D82%26cb%3Dhttps%253A%252F%252Fmatch.prod.bidr.io%252Fcookie-sync%253Fgdpr%253D0%2526userid%253D8457389007004702379%2526gdpr%253D0%2526gdpr%253D0%2526bee_sync_partners%253Dpm%2526bee_sync_current_partner%253Dsyn%2526bee_sync_initiator%253Dadx%2526bee_sync_hop_count%253D4%26uid%3D HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usermatchredir?cb=https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26nuid%3D33A008D0E14543A2A207D07731F02C5F%26att%3D1%26pid%3D82%26cb%3Dhttps%253A%252F%252Fmatch.prod.bidr.io%252Fcookie-sync%253Fgdpr%253D0%2526userid%253D8457389007004702379%2526gdpr%253D0%2526gdpr%253D0%2526bee_sync_partners%253Dpm%2526bee_sync_current_partner%253Dsyn%2526bee_sync_initiator%253Dadx%2526bee_sync_hop_count%253D4%26uid%3D&s=191740&C=1 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZfhqOtHM5zQAAHHFALRbLAAA; CMPS=1361; CMPRO=1361
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssqF0Xg6pTIfNQoxZkHZSQmUSslTInJ7DOTTaYQvu2bu2f8dWcPScqJ8zKbS2kol-r8d5GY7NvjuURbXz9PqKDxlPQVkxqCP61C2fi_r7Upz9oeV9JMY-BF4ZFKgCD1OgQaXuYGs-Vg8o2uqK3GI9E-9b4aGGQj202Oi5wujsrW9Bx6vLiJnb_w_xLEBDuWgg86P2PTi3P_5V6_kJ_5Qta15B2EUW78mZbuV9IfDoJTgzl_aEKW_lYJ4ORsSisHYNuEfXRR7hgRI3uTpVyH1lEPG0zXWt3v4Xgh96yZLHPJUKbkBXUab1Aahg_lhVs8xJr5xh6mszxq44RF9gxi8rn1-IE92R2u1xGtTuKwnhVArTzXyTkKDyCk36Yuv2NyG9ExKRf2kbdE2w4ho-oCjhbIjcMhuA&sai=AMfl-YQ1f6_kTUqVUUo3HlNhmzKom8QZbQFb9UHZ7v4qX2xeXRQc0no59o4F0WJAPt94ldRzih_Ar3UP6Lv0p6mjLVV6zSu47Ayuvqvcw1ZGGdjsiCcjlVv0ml5VY0MqUKx4yuUgwPhHcCmyZGyg0lJM3KlJ&sig=Cg0ArKJSzPcrrzx6pW8mEAE&uach_m=%5BUACH%5D&urlfix=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /services?srv=cs&nuid=33A008D0E14543A2A207D07731F02C5F&att=1&pid=82&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D8457389007004702379%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&uid=ZfhqOtHM5zQAAHHFALRbLAAA%261361 HTTP/1.1Host: sync.technoratimedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tads_uidp_73=AAARQ07L8NQAABPzJYe3uw; tads_uid=33A008D0E14543A2A207D07731F02C5F; tads_uid_cd=20240318162217+0000; tads_zora=2
Source: global traffic	HTTP traffic detected: GET /cookie-sync?gdpr=0&userid=8457389007004702379&gdpr=0&gdpr=0&bee_sync_partners=pm&bee_sync_current_partner=syn&bee_sync_initiator=adx&bee_sync_hop_count=4 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAARQ07L8NQAABPzJYe3uw; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AAARQ07L8NQAABPzJYe3uw&gdpr=0 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; chkChromeAb67Sec=2; pi=156011:4; DPSync3=1711929600%3A263_262_261_260_259_201%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_250_166_3_104_165_54_71_220_21%7C1711324800%3A15_223; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; SPugT=1710728775; PugT=1710778935
Source: global traffic	HTTP traffic detected: GET /syncframe?origin=publishertag&topUrl=browser-update.org HTTP/1.1Host: gum.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://browser-update.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sid/json?origin=publishertag&domain=browser-update.org&sn=ChromeSyncframe&so=3&topUrl=browser-update.org&bundle=dTQwXF8wRkVwRWwwMEN3bE9TanNMMU4zM255TDZtenJFMm96ZTFNZ3FOZzBXaENTTTg3cE1QV3Rla1QwJTJGTHhwZENUQVZPU0J0UDMlMkJjaXVCdU9RZVNybVdzRGU5a2lhRmRLSUN2ViUyQjdIV1lMeFNDdEI2bHJFRnhPWWRXU0RkcE1tc01Ucw&cw=1&lsw=1&topicsavail=1&fledgeavail=1 HTTP/1.1Host: gum.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gum.criteo.com/syncframe?origin=publishertag&topUrl=browser-update.orgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=093ace46-161d-4e4e-95d2-1bedb200f6ec
Source: global traffic	HTTP traffic detected: GET /static/img/favicon.png HTTP/1.1Host: browser-update.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://browser-update.org/update-browser.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bundle=dTQwXF8wRkVwRWwwMEN3bE9TanNMMU4zM255TDZtenJFMm96ZTFNZ3FOZzBXaENTTTg3cE1QV3Rla1QwJTJGTHhwZENUQVZPU0J0UDMlMkJjaXVCdU9RZVNybVdzRGU5a2lhRmRLSUN2ViUyQjdIV1lMeFNDdEI2bHJFRnhPWWRXU0RkcE1tc01Ucw; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA
Source: global traffic	HTTP traffic detected: GET /sid/json?origin=publishertag&domain=browser-update.org&sn=ChromeSyncframe&so=3&topUrl=browser-update.org&bundle=dTQwXF8wRkVwRWwwMEN3bE9TanNMMU4zM255TDZtenJFMm96ZTFNZ3FOZzBXaENTTTg3cE1QV3Rla1QwJTJGTHhwZENUQVZPU0J0UDMlMkJjaXVCdU9RZVNybVdzRGU5a2lhRmRLSUN2ViUyQjdIV1lMeFNDdEI2bHJFRnhPWWRXU0RkcE1tc01Ucw&cw=1&lsw=1&topicsavail=1&fledgeavail=1 HTTP/1.1Host: gum.criteo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=093ace46-161d-4e4e-95d2-1bedb200f6ec
Source: global traffic	HTTP traffic detected: GET /static/img/favicon.png HTTP/1.1Host: browser-update.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA; cto_bundle=VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE5DeE1QUDZrQ1p1REU2QzUzMm9iS3pISWVKOFREZG8lM0Q
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /Marketing/Project-Request/ HTTP/1.1Host: secure2.indwes.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://iwu.marketing/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5884294479391638&output=html&h=90&slotname=3654094576&adk=228266070&adf=3493768505&pi=t.ma~as.3654094576&w=970&url=https%3A%2F%2Fbrowser-update.org%2F&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1710778930134&bpp=1204&bdt=1441&idt=2890&shv=r20240313&mjsv=m202403130201&ptt=5&saldr=sd&correlator=966864692783&frm=24&ife=3&pv=2&ga_vid=751177015.1710778933&ga_sid=1710778933&ga_hid=640648971&ga_fc=0&nhd=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=-12245933&bih=-12245933&isw=970&ish=90&ifk=1017635361&scr_x=-12245933&scr_y=-12245933&eid=44759875%2C44759926%2C44759842%2C31081793%2C95325975%2C95327950%2C95327954%2C31081901%2C95320376%2C95322388%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=862165079531677&tmod=1386792793&uas=0&nvt=1&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C970%2C90&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=1.bp47bps3drp4&fsb=1&dtd=2937Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /images/button.png HTTP/1.1Host: d31otfhas71ais.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /update.min.js HTTP/1.1Host: browser-update.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://iwu.marketing/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Sat, 02 Mar 2024 10:00:09 GMT
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /images/button.png HTTP/1.1Host: d31otfhas71ais.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /_services/Randomizer/Randomizer.asmx/RetrieveHeaderImage HTTP/1.1Host: secure2.indwes.eduConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5884294479391638&output=html&h=90&slotname=3654094576&adk=228266070&adf=3493768505&pi=t.ma~as.3654094576&w=970&url=https%3A%2F%2Fbrowser-update.org%2F&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1710778930134&bpp=1204&bdt=1441&idt=2890&shv=r20240313&mjsv=m202403130201&ptt=5&saldr=sd&correlator=966864692783&frm=24&ife=3&pv=2&ga_vid=751177015.1710778933&ga_sid=1710778933&ga_hid=640648971&ga_fc=0&nhd=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=-12245933&bih=-12245933&isw=970&ish=90&ifk=1017635361&scr_x=-12245933&scr_y=-12245933&eid=44759875%2C44759926%2C44759842%2C31081793%2C95325975%2C95327950%2C95327954%2C31081901%2C95320376%2C95322388%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=862165079531677&tmod=1386792793&uas=0&nvt=1&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C970%2C90&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=1.bp47bps3drp4&fsb=1&dtd=2937Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /Marketing/Project-Request/ HTTP/1.1Host: secure2.indwes.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://iwu.marketing/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /update.min.js HTTP/1.1Host: browser-update.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://iwu.marketing/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Sat, 02 Mar 2024 10:00:09 GMT
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5884294479391638&output=html&h=90&slotname=3654094576&adk=228266070&adf=3493768505&pi=t.ma~as.3654094576&w=970&url=https%3A%2F%2Fbrowser-update.org%2F&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1710778930134&bpp=1204&bdt=1441&idt=2890&shv=r20240313&mjsv=m202403130201&ptt=5&saldr=sd&correlator=966864692783&frm=24&ife=3&pv=2&ga_vid=751177015.1710778933&ga_sid=1710778933&ga_hid=640648971&ga_fc=0&nhd=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=-12245933&bih=-12245933&isw=970&ish=90&ifk=1017635361&scr_x=-12245933&scr_y=-12245933&eid=44759875%2C44759926%2C44759842%2C31081793%2C95325975%2C95327950%2C95327954%2C31081901%2C95320376%2C95322388%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=862165079531677&tmod=1386792793&uas=0&nvt=1&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C970%2C90&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=1.bp47bps3drp4&fsb=1&dtd=2937Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /_services/Randomizer/Randomizer.asmx/RetrieveHeaderImage HTTP/1.1Host: secure2.indwes.eduConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /Marketing/Project-Request/ HTTP/1.1Host: secure2.indwes.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://iwu.marketing/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /update.min.js HTTP/1.1Host: browser-update.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://iwu.marketing/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Sat, 02 Mar 2024 10:00:09 GMT
Source: global traffic	HTTP traffic detected: GET /_services/Randomizer/Randomizer.asmx/RetrieveHeaderImage HTTP/1.1Host: secure2.indwes.eduConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/headerImages/generic_iwu/generic_iwu3.jpg HTTP/1.1Host: secure2.indwes.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure2.indwes.edu/Marketing/Project-Request/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Marketing/Project-Request/ HTTP/1.1Host: secure2.indwes.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://iwu.marketing/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /update.min.js HTTP/1.1Host: browser-update.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://iwu.marketing/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Sat, 02 Mar 2024 10:00:09 GMT
Source: global traffic	HTTP traffic detected: GET /_img/headerImages/generic_iwu/generic_iwu3.jpg HTTP/1.1Host: secure2.indwes.eduConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/headerImages/generic_iwu/generic_iwu2.jpg HTTP/1.1Host: secure2.indwes.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure2.indwes.edu/Marketing/Project-Request/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_services/Randomizer/Randomizer.asmx/RetrieveHeaderImage HTTP/1.1Host: secure2.indwes.eduConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /update.min.js HTTP/1.1Host: browser-update.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://iwu.marketing/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Sat, 02 Mar 2024 10:00:09 GMT
Source: global traffic	HTTP traffic detected: GET /Marketing/Project-Request/ HTTP/1.1Host: secure2.indwes.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://iwu.marketing/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/headerImages/generic_iwu/generic_iwu2.jpg HTTP/1.1Host: secure2.indwes.eduConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_services/Randomizer/Randomizer.asmx/RetrieveHeaderImage HTTP/1.1Host: secure2.indwes.eduConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /56 HTTP/1.1Host: indwes.tfaforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=9859246&p=156011&s=165626&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; chkChromeAb67Sec=2; pi=156011:4; DPSync3=1711929600%3A263_262_261_260_259_201%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_250_166_3_104_165_54_71_220_21%7C1711324800%3A15_223; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; SPugT=1710728775; KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; PugT=1710778939
Source: global traffic	HTTP traffic detected: GET /imp_s2s/v3/n8UGQb8oRsoLuVNWaPOgOcGz9MQJ9n-mDyOm5Rwc2mCEe0IoMJKkiishgKAVPr7vW-Op5SqLPpvNhaf7JZgScNC5JJ-Tn8GN9JhXOZAvpMRY-8oKI8g7qkcN6ho-rIH6LmuEMRJWGzNVn2S8k48_-d9U_JFzkQONalz8aatPtkRDWNImaA2IOx3bGXgdpWfLOHQiw1hlMyCqrbWsdAOopnr0PCR9rMyIhTa_Z7lbDM2QFaA3TjmDUf_I7m9vGvRB875GQcl81Rb9AYuAFLbMRl85wKx_yx8mCfK1M-jlot0aJemgW_Jyz1dzBjdBiLyCLNwOw6YDnksQpk9ijcM3QvoSdqz43bIQf9j03Xc_0ite4hlwDut-0pga_paq-WI6XTIFqdpPP1fI_TPcCRstoPDNsC7XhW1bAbRf6gu3j8YBB4BjlWPTSJFhvyTyBSRrWGYyMwdhLFsAC1ADM_8IQhqdfcD8RtRA8whROeatyjMXRqQu6Og513Zv_qaWKxWfoOva0YKTwupRHQ/ZfhqLwAOBfUIg6-yAAhcO_kHV4_h8kd_xzRsDw?q=1&cbvp=2 HTTP/1.1Host: rtb-use.mfadsrvr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1710778929; tuuid=2393ecfc-a9f7-4cbe-bbea-03c6f5980eff; tuuid_lu=1710778930; ssh=!intentiq,1710778930
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsu2efMI-QAuO9Nc6NowBZFGMbNB_HL8VKq_AHTk0RBhGvteX_sro2NF4DPMoneo-MFNVjmaYJqeKYGBFX9UFEx_B1uYKnohFxH99ZC85uKLNtjXh58iDOTVTu4WnhJvlQp6xRWPB3j2BWJifI8sEo118b9xnhbmv95pNbYv41mJHWe8DXeFxwrrytEBYGhGfKAadBFA4PcHbOqaBsARfaOp1KdL4WonbEtb39snDwmESVpPV8_j1RJ76EdCfXvzv8E0mimdc8KI4Z_xlZ7CY9yXt57BPSOeQ09In7lPgqL138lHC5IcdqfELfMV2r3byGdwPc-jySZYi5ecsabZxwsMUXCVhll-wTyQ8sx_pFoQoQJlbOtPxH72Lo-tcUJxJXwUwhqU_yeuewOz6ZyfhpjyUR0moCQ4K09l4l03HoZQJuoSyfRy3PSz5osQ0NYaaqZcvk2Ye41euSa-zKr_ti4G6jvuo55XBdYcY_ybb0T3f9uoaMdvtp_zSAwFASBu8-OKCj0IHVs1w5Uh2u7cONZ2hMSMOWGqtHO9kAzigwgsnGvVem7PGdU4N62b1Wlg7TybACvbqIXm4rMNbudaaJkWSLPnRCyK4aVFLM5MEK0eMV37_iP7Ks7jJr2ScBVghGbRwSfEFAH-c3h7YQ5KNeOLe5GAWPrZN99QkibgMyOKNcIPIDVJp5MXINBZb-Pc8DA5C8V7bcprNWcIVOqMIHBctIB5Sv1ZxdOe-EisXEEfk85sEKTWlmtkDt0tRpaSYxKL8HcdToFh7qVZCixi0hLjyzv6yx9WheHdTCDwdAVvyhsmxabPelkhcW4FGxJzphFdi_hkKzF7nh8-w6Q00KDKCKfUtoiXHqpuUsa_ggjiefXia5rROQF-oMsMuwnKTOqV3yhvxVZrmlYaZdmOymhItvNXpxsUwwvgINxszNZJEboZvFL2HpX95Kyl6kkcTjWgnWgIi4EorEscwDOb1iUV0y9PkAI3R3saO340DxUgSYksN4rFZouLdKyzxq-qSfNnEdypvJYM6c2K95qYJzzFpsClhBbnrVTnPnqH99xBzsNzvM5lDp_u9pe4QffeXKQnbwiMVTne5gLEjt7x3hw-7qEMUza1UtAOXK7cT0WCz_wDvNIKMObXS6dqwASo0eo_RmouLFpFeOvpRjjZsjMTJ0ojHXjkbfDGryQKa2q4L1MqGFl54Gsn-C6hCbwUx5I3WiEbqMfhn0-D7WXVV8F1f-QU0WkXy9hXVwNsTCyQbS1xgImgs-n5EwtnBhu5L9I_aLyV0L7kRKt2PXT3l2Cr4NdPjgqpJV7Gz3BTXntuuCZK-S_2odRoEOJeUvZpJEeyAuwvYCCIowdwfz9Mv-iw7NQ2GZ_CKVUuKBC3jdoBaLrH2xXAidtXO6SRCxel4OJgBHjWbqnrHUJtq8zO2UB4ohaEBjvgSJJxQx75R14P5ooY_EZtX_nlfXpPC_aVcwElVyDrP2Ra95_LD-YU&sai=AMfl-YQ7LYSGcYmu68xh_hXheICVAQYcRnl7sb026DIE4p2p-J3bLmzjD8ak2cniBGN7Nyk8mhQGggdh66TzgAUMOI3-UukEMpNsNOjTNvRPgEcyZvYLH5KqbvwidVSZDKjZY74tdQpxnl3Qvf19CI41Ys__s6Tqnjc4xqqLrmA6M1YgpYSj-f8-uEH0D3UqYsDFbZT7aICaG3ZR8uymEjeE1npwPp8rKtYNXc6Er-Gkt2HITDZXeQof6zgjztr0GACnOITAfgMAlP8EhyAaCHmNl7A2UOAqW83_CVpwrjccj5h0dfspqMtbcmTrtaImrVT_HMCF8IpKig2fgAA&sig=Cg0ArKJSzDphJ07OXkX1EAE&uach_m=%5BUACH%5D&urlfix=1&cbvp=2&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /usersync/141?gdpr=0&gdpr_consent= HTTP/1.1Host: match.deepintent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5884294479391638&output=html&h=90&slotname=3654094576&adk=228266070&adf=3493768505&pi=t.ma~as.3654094576&w=970&url=https%3A%2F%2Fbrowser-update.org%2F&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1710778930134&bpp=1204&bdt=1441&idt=2890&shv=r20240313&mjsv=m202403130201&ptt=5&saldr=sd&correlator=966864692783&frm=24&ife=3&pv=2&ga_vid=751177015.1710778933&ga_sid=1710778933&ga_hid=640648971&ga_fc=0&nhd=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=-12245933&bih=-12245933&isw=970&ish=90&ifk=1017635361&scr_x=-12245933&scr_y=-12245933&eid=44759875%2C44759926%2C44759842%2C31081793%2C95325975%2C95327950%2C95327954%2C31081901%2C95320376%2C95322388%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=862165079531677&tmod=1386792793&uas=0&nvt=1&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C970%2C90&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=1.bp47bps3drp4&fsb=1&dtd=2937Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /js/FA__DOMContentLoadedEventDispatcher.js HTTP/1.1Host: indwes.tfaforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://indwes.tfaforms.net/56Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FORMASSEMBLY=6a4809387c058e25edd85f81ecc72a5f; FASRV=8e78f24973a4e556
Source: global traffic	HTTP traffic detected: GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: d=EAABCQGzK4EA; mc=65f86a39-0bce5-d0ea9-092f1
Source: global traffic	HTTP traffic detected: GET /dist/form-builder/5.0.0/wforms-layout.css?v=8b5c9ffd0b6fc88dc72529725004f6b69b9e0ae8 HTTP/1.1Host: indwes.tfaforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://indwes.tfaforms.net/56Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FORMASSEMBLY=6a4809387c058e25edd85f81ecc72a5f; FASRV=8e78f24973a4e556
Source: global traffic	HTTP traffic detected: GET /uploads/themes/theme-55.css HTTP/1.1Host: indwes.tfaforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://indwes.tfaforms.net/56Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FORMASSEMBLY=6a4809387c058e25edd85f81ecc72a5f; FASRV=8e78f24973a4e556
Source: global traffic	HTTP traffic detected: GET /css/kalendae.css HTTP/1.1Host: indwes.tfaforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://indwes.tfaforms.net/56Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FORMASSEMBLY=6a4809387c058e25edd85f81ecc72a5f; FASRV=8e78f24973a4e556
Source: global traffic	HTTP traffic detected: GET /wForms/3.11/js/wforms.js?v=8b5c9ffd0b6fc88dc72529725004f6b69b9e0ae8 HTTP/1.1Host: indwes.tfaforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://indwes.tfaforms.net/56Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FORMASSEMBLY=6a4809387c058e25edd85f81ecc72a5f; FASRV=8e78f24973a4e556
Source: global traffic	HTTP traffic detected: GET /js/kalendae/kalendae.standalone.min.js HTTP/1.1Host: indwes.tfaforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://indwes.tfaforms.net/56Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FORMASSEMBLY=6a4809387c058e25edd85f81ecc72a5f; FASRV=8e78f24973a4e556
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/4.4.0/css/font-awesome.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://indwes.tfaforms.net/56Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wForms/3.11/js/wforms_calendar.js HTTP/1.1Host: indwes.tfaforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://indwes.tfaforms.net/56Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FORMASSEMBLY=6a4809387c058e25edd85f81ecc72a5f; FASRV=8e78f24973a4e556
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; pi=156011:4; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; SPugT=1710728775; KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; PugT=1710778939; chkChromeAb67Sec=3; DPSync3=1711324800%3A265%7C1711756800%3A257%7C1711929600%3A262_256_263_261_260_259_201_258%7C1710806400%3A248_255; SyncRTB3=1711929600%3A22_8_166_104_54_48_13_165_231_178_249_250_3_220_71_21%7C1711324800%3A15_223
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=pubmatic.com&id=PM_UID26FC5BC4-C0EA-481E-AC6D-297EF4930E35 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent= HTTP/1.1Host: synchroscript.deliveryengine.adswizz.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /712188.gif?partner_uid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent= HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsu2efMI-QAuO9Nc6NowBZFGMbNB_HL8VKq_AHTk0RBhGvteX_sro2NF4DPMoneo-MFNVjmaYJqeKYGBFX9UFEx_B1uYKnohFxH99ZC85uKLNtjXh58iDOTVTu4WnhJvlQp6xRWPB3j2BWJifI8sEo118b9xnhbmv95pNbYv41mJHWe8DXeFxwrrytEBYGhGfKAadBFA4PcHbOqaBsARfaOp1KdL4WonbEtb39snDwmESVpPV8_j1RJ76EdCfXvzv8E0mimdc8KI4Z_xlZ7CY9yXt57BPSOeQ09In7lPgqL138lHC5IcdqfELfMV2r3byGdwPc-jySZYi5ecsabZxwsMUXCVhll-wTyQ8sx_pFoQoQJlbOtPxH72Lo-tcUJxJXwUwhqU_yeuewOz6ZyfhpjyUR0moCQ4K09l4l03HoZQJuoSyfRy3PSz5osQ0NYaaqZcvk2Ye41euSa-zKr_ti4G6jvuo55XBdYcY_ybb0T3f9uoaMdvtp_zSAwFASBu8-OKCj0IHVs1w5Uh2u7cONZ2hMSMOWGqtHO9kAzigwgsnGvVem7PGdU4N62b1Wlg7TybACvbqIXm4rMNbudaaJkWSLPnRCyK4aVFLM5MEK0eMV37_iP7Ks7jJr2ScBVghGbRwSfEFAH-c3h7YQ5KNeOLe5GAWPrZN99QkibgMyOKNcIPIDVJp5MXINBZb-Pc8DA5C8V7bcprNWcIVOqMIHBctIB5Sv1ZxdOe-EisXEEfk85sEKTWlmtkDt0tRpaSYxKL8HcdToFh7qVZCixi0hLjyzv6yx9WheHdTCDwdAVvyhsmxabPelkhcW4FGxJzphFdi_hkKzF7nh8-w6Q00KDKCKfUtoiXHqpuUsa_ggjiefXia5rROQF-oMsMuwnKTOqV3yhvxVZrmlYaZdmOymhItvNXpxsUwwvgINxszNZJEboZvFL2HpX95Kyl6kkcTjWgnWgIi4EorEscwDOb1iUV0y9PkAI3R3saO340DxUgSYksN4rFZouLdKyzxq-qSfNnEdypvJYM6c2K95qYJzzFpsClhBbnrVTnPnqH99xBzsNzvM5lDp_u9pe4QffeXKQnbwiMVTne5gLEjt7x3hw-7qEMUza1UtAOXK7cT0WCz_wDvNIKMObXS6dqwASo0eo_RmouLFpFeOvpRjjZsjMTJ0ojHXjkbfDGryQKa2q4L1MqGFl54Gsn-C6hCbwUx5I3WiEbqMfhn0-D7WXVV8F1f-QU0WkXy9hXVwNsTCyQbS1xgImgs-n5EwtnBhu5L9I_aLyV0L7kRKt2PXT3l2Cr4NdPjgqpJV7Gz3BTXntuuCZK-S_2odRoEOJeUvZpJEeyAuwvYCCIowdwfz9Mv-iw7NQ2GZ_CKVUuKBC3jdoBaLrH2xXAidtXO6SRCxel4OJgBHjWbqnrHUJtq8zO2UB4ohaEBjvgSJJxQx75R14P5ooY_EZtX_nlfXpPC_aVcwElVyDrP2Ra95_LD-YU&sai=AMfl-YQ7LYSGcYmu68xh_hXheICVAQYcRnl7sb026DIE4p2p-J3bLmzjD8ak2cniBGN7Nyk8mhQGggdh66TzgAUMOI3-UukEMpNsNOjTNvRPgEcyZvYLH5KqbvwidVSZDKjZY74tdQpxnl3Qvf19CI41Ys__s6Tqnjc4xqqLrmA6M1YgpYSj-f8-uEH0D3UqYsDFbZT7aICaG3ZR8uymEjeE1npwPp8rKtYNXc6Er-Gkt2HITDZXeQof6zgjztr0GACnOITAfgMAlP8EhyAaCHmNl7A2UOAqW83_CVpwrjccj5h0dfspqMtbcmTrtaImrVT_HMCF8IpKig2fgAA&sig=Cg0ArKJSzDphJ07OXkX1EAE&uach_m=%5BUACH%5D&urlfix=1&cbvp=2&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /imp_s2s/v3/n8UGQb8oRsoLuVNWaPOgOcGz9MQJ9n-mDyOm5Rwc2mCEe0IoMJKkiishgKAVPr7vW-Op5SqLPpvNhaf7JZgScNC5JJ-Tn8GN9JhXOZAvpMRY-8oKI8g7qkcN6ho-rIH6LmuEMRJWGzNVn2S8k48_-d9U_JFzkQONalz8aatPtkRDWNImaA2IOx3bGXgdpWfLOHQiw1hlMyCqrbWsdAOopnr0PCR9rMyIhTa_Z7lbDM2QFaA3TjmDUf_I7m9vGvRB875GQcl81Rb9AYuAFLbMRl85wKx_yx8mCfK1M-jlot0aJemgW_Jyz1dzBjdBiLyCLNwOw6YDnksQpk9ijcM3QvoSdqz43bIQf9j03Xc_0ite4hlwDut-0pga_paq-WI6XTIFqdpPP1fI_TPcCRstoPDNsC7XhW1bAbRf6gu3j8YBB4BjlWPTSJFhvyTyBSRrWGYyMwdhLFsAC1ADM_8IQhqdfcD8RtRA8whROeatyjMXRqQu6Og513Zv_qaWKxWfoOva0YKTwupRHQ/ZfhqLwAOBfUIg6-yAAhcO_kHV4_h8kd_xzRsDw?q=1&cbvp=2 HTTP/1.1Host: rtb-use.mfadsrvr.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1710778929; tuuid=2393ecfc-a9f7-4cbe-bbea-03c6f5980eff; tuuid_lu=1710778930; ssh=!intentiq,1710778930
Source: global traffic	HTTP traffic detected: GET /wForms/3.11/js/localization-en_US.js?v=8b5c9ffd0b6fc88dc72529725004f6b69b9e0ae8 HTTP/1.1Host: indwes.tfaforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://indwes.tfaforms.net/56Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FORMASSEMBLY=6a4809387c058e25edd85f81ecc72a5f; FASRV=8e78f24973a4e556
Source: global traffic	HTTP traffic detected: GET /dist/jquery/jquery.js HTTP/1.1Host: indwes.tfaforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://indwes.tfaforms.net/56Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FORMASSEMBLY=6a4809387c058e25edd85f81ecc72a5f; FASRV=8e78f24973a4e556
Source: global traffic	HTTP traffic detected: GET /js/typeahead/v1.2.0/typeahead.bundle.js HTTP/1.1Host: indwes.tfaforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://indwes.tfaforms.net/56Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FORMASSEMBLY=6a4809387c058e25edd85f81ecc72a5f; FASRV=8e78f24973a4e556
Source: global traffic	HTTP traffic detected: GET /dist/open-telemetry/open-telemetry.3e6c1bedaa7fb4452dd0.js HTTP/1.1Host: indwes.tfaforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://indwes.tfaforms.net/56Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FORMASSEMBLY=6a4809387c058e25edd85f81ecc72a5f; FASRV=8e78f24973a4e556
Source: global traffic	HTTP traffic detected: GET /js/iframe_message_helper_internal.js?v=2 HTTP/1.1Host: indwes.tfaforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://indwes.tfaforms.net/56Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FORMASSEMBLY=6a4809387c058e25edd85f81ecc72a5f; FASRV=8e78f24973a4e556
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /1000.gif?memo=CPy7KxIwCiwIARCFpQoaJDI2RkM1QkM0LUMwRUEtNDgxRS1BQzZELTI5N0VGNDkzMEUzNRAAGg0I09ThrwYSBQjoBxAAQgBKAA HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=to/OuTGAApiQL97C9UEJZf5XeWOA0Xxfg28Ykd/FzJ0=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://indwes.tfaforms.net/uploads/themes/theme-55.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent= HTTP/1.1Host: synchroscript.deliveryengine.adswizz.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /map/c=14701/tp=MTAI/tpid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35/gdpr=0/gdpr_consent= HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=0; _cc_id=cd7195d98b33730cda0d063b9003130e
Source: global traffic	HTTP traffic detected: GET /api/sync?pid=5324&it=1&iv=5737758c10a90c387ccf8a08ce2db777776e72e4674bede82ca0e8392d345f71791426b5417dce21&_=2 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=3203&partner_device_id=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1710778931516; TapAd_DID=da9fa8fc-3c38-47c1-bced-e79257211d8c; TapAd_3WAY_SYNCS=1!1888
Source: global traffic	HTTP traffic detected: GET /dist/form-builder/5.0.0/wforms-jsonly.css?v=8b5c9ffd0b6fc88dc72529725004f6b69b9e0ae8 HTTP/1.1Host: indwes.tfaforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://indwes.tfaforms.net/56Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FORMASSEMBLY=6a4809387c058e25edd85f81ecc72a5f; FASRV=8e78f24973a4e556
Source: global traffic	HTTP traffic detected: GET /map/c=14701/tp=MTAI/tpid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35/gdpr=0/gdpr_consent= HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=0; _cc_id=cd7195d98b33730cda0d063b9003130e
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5884294479391638&output=html&h=90&slotname=3654094576&adk=228266070&adf=3493768505&pi=t.ma~as.3654094576&w=970&url=https%3A%2F%2Fbrowser-update.org%2F&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1710778930134&bpp=1204&bdt=1441&idt=2890&shv=r20240313&mjsv=m202403130201&ptt=5&saldr=sd&correlator=966864692783&frm=24&ife=3&pv=2&ga_vid=751177015.1710778933&ga_sid=1710778933&ga_hid=640648971&ga_fc=0&nhd=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=-12245933&bih=-12245933&isw=970&ish=90&ifk=1017635361&scr_x=-12245933&scr_y=-12245933&eid=44759875%2C44759926%2C44759842%2C31081793%2C95325975%2C95327950%2C95327954%2C31081901%2C95320376%2C95322388%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=862165079531677&tmod=1386792793&uas=0&nvt=1&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C970%2C90&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=1.bp47bps3drp4&fsb=1&dtd=2937Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156011&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: simage4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; pi=156011:4; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; SPugT=1710728775; KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; chkChromeAb67Sec=3; DPSync3=1711324800%3A265%7C1711756800%3A257%7C1711929600%3A262_256_263_261_260_259_201_258%7C1710806400%3A248_255; SyncRTB3=1711929600%3A22_8_166_104_54_48_13_165_231_178_249_250_3_220_71_21%7C1711324800%3A15_223; KRTBCOOKIE_153=1923-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&19420-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&22979-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&23462-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF; PugT=1710778961
Source: global traffic	HTTP traffic detected: GET /sn.ashx?&gdpr=0&gdpr_consent= HTTP/1.1Host: pmp.mxptint.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /CookieSyncPubMatic&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb.adentifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/get_image/1/MqqGsVxq5heqLeiklT0qTYKa21Fex14qTlVGnmtc08YnIBwpyPMWpGlSrWqrBYae-MasterLogo_white.png HTTP/1.1Host: indwes.tfaforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://indwes.tfaforms.net/uploads/themes/theme-55.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FORMASSEMBLY=6a4809387c058e25edd85f81ecc72a5f; FASRV=8e78f24973a4e556
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/4.4.0/fonts/fontawesome-webfont.woff2?v=4.4.0 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://indwes.tfaforms.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.4.0/css/font-awesome.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R35CA5_112946CAA_57D5D193&r=https://pmp.mxptint.net/sn.ashx?ak=1 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; pi=156011:4; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; chkChromeAb67Sec=3; DPSync3=1711324800%3A265%7C1711756800%3A257%7C1711929600%3A262_256_263_261_260_259_201_258%7C1710806400%3A248_255; SyncRTB3=1711929600%3A22_8_166_104_54_48_13_165_231_178_249_250_3_220_71_21%7C1711324800%3A15_223; KRTBCOOKIE_153=1923-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&19420-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&22979-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&23462-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF; PugT=1710778961; SPugT=1710778964
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=3203&partner_device_id=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel.tapad.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1710778931516; TapAd_DID=da9fa8fc-3c38-47c1-bced-e79257211d8c; TapAd_3WAY_SYNCS=1!1888
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /_shared-resources/_hannonhill/_files/images/favicons/favicon-32x32.png?v=GvJKryKOzM HTTP/1.1Host: www.indwes.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://indwes.tfaforms.net/56Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sn.ashx?ak=1 HTTP/1.1Host: pmp.mxptint.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mxpim=R35CA5_112946CAA_57D5D193.1.000000000000000065F86A54
Source: global traffic	HTTP traffic detected: GET /_shared-resources/_hannonhill/_files/images/favicons/favicon-32x32.png?v=GvJKryKOzM HTTP/1.1Host: www.indwes.eduConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/get_image/1/MqqGsVxq5heqLeiklT0qTYKa21Fex14qTlVGnmtc08YnIBwpyPMWpGlSrWqrBYae-MasterLogo_white.png HTTP/1.1Host: indwes.tfaforms.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FORMASSEMBLY=6a4809387c058e25edd85f81ecc72a5f; FASRV=8e78f24973a4e556
Source: global traffic	HTTP traffic detected: GET /sn.ashx?ak=1 HTTP/1.1Host: pmp.mxptint.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mxpim=R35CA5_112946CAA_57D5D193.1.000000000000000065F86A54
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=62310470&p=156011&s=165626&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; pi=156011:4; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; chkChromeAb67Sec=3; DPSync3=1711324800%3A265%7C1711756800%3A257%7C1711929600%3A262_256_263_261_260_259_201_258%7C1710806400%3A248_255; SyncRTB3=1711929600%3A22_8_166_104_54_48_13_165_231_178_249_250_3_220_71_21%7C1711324800%3A15_223; KRTBCOOKIE_153=1923-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&19420-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&22979-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&23462-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF; SPugT=1710778964; KRTBCOOKIE_52=22772-R35CA5_112946CAA_57D5D193&KRTB&23092-R35CA5_112946CAA_57D5D193; PugT=1710778964
Source: global traffic	HTTP traffic detected: GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=2b28c092-dd0b-42bb-b143-c15d16fc69ab; c=1710778930; tuuid_lu=1710778930
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=pubmatic.com&id=PM_UID26FC5BC4-C0EA-481E-AC6D-297EF4930E35 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /sync?nid=11&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/75145?bidder_id=195755&bidder_uuid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/?id=20909&user_id=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent= HTTP/1.1Host: bpi.rtactivate.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?bidswitch_ssp_id=pubmatic&bsw_custom_parameter=2b28c092-dd0b-42bb-b143-c15d16fc69ab HTTP/1.1Host: r.bidswitch.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=2b28c092-dd0b-42bb-b143-c15d16fc69ab; c=1710778930; tuuid_lu=1710778930
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?scc=1&ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1Host: pm.w55c.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wfivefivec=Ru9JGeXJ1RMfLb5
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=8259856715668781746 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; pi=156011:4; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; KRTBCOOKIE_153=1923-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&19420-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&22979-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&23462-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF; SPugT=1710778964; KRTBCOOKIE_52=22772-R35CA5_112946CAA_57D5D193&KRTB&23092-R35CA5_112946CAA_57D5D193; PugT=1710778964; chkChromeAb67Sec=4; DPSync3=1711929600%3A261_260_258_236_256_263_201_245_262_259%7C1710806400%3A248_255%7C1711756800%3A257%7C1711324800%3A253_252_265; SyncRTB3=1711929600%3A3_220_21_46_166_54_250_178_5_233_104_48_165_231_55_22_8_13_249_71%7C1711584000%3A63%7C1711324800%3A223_2_15
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=kMV4FFfoUmxPTw0WMkb-TL9g48I&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; pi=156011:4; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; KRTBCOOKIE_153=1923-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&19420-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&22979-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&23462-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF; SPugT=1710778964; KRTBCOOKIE_52=22772-R35CA5_112946CAA_57D5D193&KRTB&23092-R35CA5_112946CAA_57D5D193; PugT=1710778964; chkChromeAb67Sec=4; DPSync3=1711929600%3A261_260_258_236_256_263_201_245_262_259%7C1710806400%3A248_255%7C1711756800%3A257%7C1711324800%3A253_252_265; SyncRTB3=1711929600%3A3_220_21_46_166_54_250_178_5_233_104_48_165_231_55_22_8_13_249_71%7C1711584000%3A63%7C1711324800%3A223_2_15
Source: global traffic	HTTP traffic detected: GET /s/75145?bidder_id=195755&bidder_uuid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&_li_chk=true&previous_uuid=c32b96b973584442be1423432a0e89b0 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=c32b96b9-7358-4442-be14-23432a0e89b0
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=3205&partner_device_id=2b28c092-dd0b-42bb-b143-c15d16fc69ab&partner_url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D393%26user_id%3D0%26ssp%3Dpubmatic%26bsw_param%3D2b28c092-dd0b-42bb-b143-c15d16fc69ab HTTP/1.1Host: pixel.tapad.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1710778931516; TapAd_DID=da9fa8fc-3c38-47c1-bced-e79257211d8c; TapAd_3WAY_SYNCS=1!1888
Source: global traffic	HTTP traffic detected: GET /tag/?id=20909&user_id=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent= HTTP/1.1Host: bpi.rtactivate.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:Ru9JGeXJ1RMfLb5&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; pi=156011:4; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; KRTBCOOKIE_153=1923-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&19420-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&22979-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&23462-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF; SPugT=1710778964; KRTBCOOKIE_52=22772-R35CA5_112946CAA_57D5D193&KRTB&23092-R35CA5_112946CAA_57D5D193; PugT=1710778964; chkChromeAb67Sec=4; DPSync3=1711929600%3A261_260_258_236_256_263_201_245_262_259%7C1710806400%3A248_255%7C1711756800%3A257%7C1711324800%3A253_252_265; SyncRTB3=1711929600%3A3_220_21_46_166_54_250_178_5_233_104_48_165_231_55_22_8_13_249_71%7C1711584000%3A63%7C1711324800%3A223_2_15
Source: global traffic	HTTP traffic detected: GET /qmap?c=240&tp=PUBM&tpid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=0; _cc_id=cd7195d98b33730cda0d063b9003130e
Source: global traffic	HTTP traffic detected: GET /sync?c=0aa2530f29e4f4a05b5d5d9bb35d60c2&p=93c1662463a616a7155169889dd99651&pid=c32b96b9-7358-4442-be14-23432a0e89b0 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /qmap?c=240&tp=PUBM&tpid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=0; _cc_id=cd7195d98b33730cda0d063b9003130e
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Freceive%3Fpartner_id%3DAPPNEXUS%26partner_device_id%3D%24UID%26pt%3Dda9fa8fc-3c38-47c1-bced-e79257211d8c%252Chttps%25253A%25252F%25252Fx.bidswitch.net%25252Fsync%25253Fdsp_id%25253D393%252526user_id%25253D0%252526ssp%25253Dpubmatic%252526bsw_param%25253D2b28c092-dd0b-42bb-b143-c15d16fc69ab%252C HTTP/1.1Host: secure.adnxs.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=sc-qkOWOy4X_p3mD-LWUzAd-XDCZQmscLkmizNrfavkuQbEqumPcpRbLQP5MYfuaYQ8bCCHdAwNtUmwS86qSDkNpL-Zwzckxzo46gNxy6nM.; icu=ChgIs8t_EAoYASABKAEwr9ThrwY4AUABSAEQr9ThrwYYAA..; receive-cookie-deprecation=1; uuid2=9164480480629189644
Source: global traffic	HTTP traffic detected: GET /?companyId=673&id=pubmatic_id:26FC5BC4-C0EA-481E-AC6D-297EF4930E35 HTTP/1.1Host: io.narrative.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?io.narrative.guid.v2=c3bb5df0-e543-11ee-b039-16c962239a11&companyId=673&id=pubmatic_id:26FC5BC4-C0EA-481E-AC6D-297EF4930E35 HTTP/1.1Host: io.narrative.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: io.narrative.guid.v2=c3bb5df0-e543-11ee-b039-16c962239a11
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=APPNEXUS&partner_device_id=9164480480629189644&pt=da9fa8fc-3c38-47c1-bced-e79257211d8c%2Chttps%253A%252F%252Fx.bidswitch.net%252Fsync%253Fdsp_id%253D393%2526user_id%253D0%2526ssp%253Dpubmatic%2526bsw_param%253D2b28c092-dd0b-42bb-b143-c15d16fc69ab%2C HTTP/1.1Host: pixel.tapad.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1710778931516; TapAd_DID=da9fa8fc-3c38-47c1-bced-e79257211d8c; TapAd_3WAY_SYNCS=1!1888
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=8259856715668781746&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De90cf1c2-fac0-4c1a-9d96-09b4ab0b6774%253A1710778970.333378%26pid%3D500040%26it%3D1%26iv%3De90cf1c2-fac0-4c1a-9d96-09b4ab0b6774%253A1710778970.333378%26_%3D1710778970.3372326 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e90cf1c2-fac0-4c1a-9d96-09b4ab0b6774:1710778970.333378; sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiZTkwY2YxYzItZmFjMC00YzFhLTlkOTYtMDliNGFiMGI2Nzc0OjE3MTA3Nzg5NzAuMzMzMzc4In0.ZfhqWg.fKr8c_QMekhOy0foxtDKnmjFw1Y
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=393&user_id=0&ssp=pubmatic&bsw_param=2b28c092-dd0b-42bb-b143-c15d16fc69ab HTTP/1.1Host: x.bidswitch.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=2b28c092-dd0b-42bb-b143-c15d16fc69ab; c=1710778930; tuuid_lu=1710778930
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=2b28c092-dd0b-42bb-b143-c15d16fc69ab&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; pi=156011:4; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; KRTBCOOKIE_153=1923-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&19420-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&22979-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&23462-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF; SPugT=1710778964; KRTBCOOKIE_52=22772-R35CA5_112946CAA_57D5D193&KRTB&23092-R35CA5_112946CAA_57D5D193; chkChromeAb67Sec=4; DPSync3=1711929600%3A261_260_258_236_256_263_201_245_262_259%7C1710806400%3A248_255%7C1711756800%3A257%7C1711324800%3A253_252_265; SyncRTB3=1711929600%3A3_220_21_46_166_54_250_178_5_233_104_48_165_231_55_22_8_13_249_71%7C1711584000%3A63%7C1711324800%3A223_2_15; KRTBCOOKIE_860=16335-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23334-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23417-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23426-kMV4FFfoUmxPTw0WMkb-TL9g48I; KRTBCOOKIE_18=22947-8259856715668781746; KRTBCOOKIE_107=1471-uid:Ru9JGeXJ1RMfLb5&KRTB&23421-uid:Ru9JGeXJ1RMfLb5; PugT=1710726664
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156011&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: simage4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; pi=156011:4; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; KRTBCOOKIE_153=1923-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&19420-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&22979-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&23462-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF; SPugT=1710778964; KRTBCOOKIE_52=22772-R35CA5_112946CAA_57D5D193&KRTB&23092-R35CA5_112946CAA_57D5D193; chkChromeAb67Sec=4; DPSync3=1711929600%3A261_260_258_236_256_263_201_245_262_259%7C1710806400%3A248_255%7C1711756800%3A257%7C1711324800%3A253_252_265; SyncRTB3=1711929600%3A3_220_21_46_166_54_250_178_5_233_104_48_165_231_55_22_8_13_249_71%7C1711584000%3A63%7C1711324800%3A223_2_15; KRTBCOOKIE_860=16335-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23334-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23417-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23426-kMV4FFfoUmxPTw0WMkb-TL9g48I; KRTBCOOKIE_18=22947-8259856715668781746; KRTBCOOKIE_107=1471-uid:Ru9JGeXJ1RMfLb5&KRTB&23421-uid:Ru9JGeXJ1RMfLb5; PugT=1710726664
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=e90cf1c2-fac0-4c1a-9d96-09b4ab0b6774%3A1710778970.333378&pid=500040&it=1&iv=e90cf1c2-fac0-4c1a-9d96-09b4ab0b6774%3A1710778970.333378&_=1710778970.3372326 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgiiARC8Fw; lidid=c32b96b9-7358-4442-be14-23432a0e89b0
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5884294479391638&output=html&h=90&slotname=3654094576&adk=228266070&adf=3493768505&pi=t.ma~as.3654094576&w=970&url=https%3A%2F%2Fbrowser-update.org%2F&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1710778930134&bpp=1204&bdt=1441&idt=2890&shv=r20240313&mjsv=m202403130201&ptt=5&saldr=sd&correlator=966864692783&frm=24&ife=3&pv=2&ga_vid=751177015.1710778933&ga_sid=1710778933&ga_hid=640648971&ga_fc=0&nhd=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=-12245933&bih=-12245933&isw=970&ish=90&ifk=1017635361&scr_x=-12245933&scr_y=-12245933&eid=44759875%2C44759926%2C44759842%2C31081793%2C95325975%2C95327950%2C95327954%2C31081901%2C95320376%2C95322388%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=862165079531677&tmod=1386792793&uas=0&nvt=1&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C970%2C90&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=1.bp47bps3drp4&fsb=1&dtd=2937Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?cookieQ=1&nid=3&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=691baf7a-d9e5-4c92-bd01-b05ff60933fe#1710778971689
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1710778970.3372326&iv=e90cf1c2-fac0-4c1a-9d96-09b4ab0b6774:1710778970.333378 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: did=4rRGlOIxzUDuSNPR; didts=1710778964; nnls=; pxrc=CNTU4a8GEgYIgr0rEAA=
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=3317571013507089770&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; pi=156011:4; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; KRTBCOOKIE_153=1923-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&19420-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&22979-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&23462-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF; KRTBCOOKIE_52=22772-R35CA5_112946CAA_57D5D193&KRTB&23092-R35CA5_112946CAA_57D5D193; chkChromeAb67Sec=4; DPSync3=1711929600%3A261_260_258_236_256_263_201_245_262_259%7C1710806400%3A248_255%7C1711756800%3A257%7C1711324800%3A253_252_265; SyncRTB3=1711929600%3A3_220_21_46_166_54_250_178_5_233_104_48_165_231_55_22_8_13_249_71%7C1711584000%3A63%7C1711324800%3A223_2_15; KRTBCOOKIE_860=16335-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23334-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23417-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23426-kMV4FFfoUmxPTw0WMkb-TL9g48I; KRTBCOOKIE_18=22947-8259856715668781746; KRTBCOOKIE_107=1471-uid:Ru9JGeXJ1RMfLb5&KRTB&23421-uid:Ru9JGeXJ1RMfLb5; KRTBCOOKIE_466=16530-2b28c092-dd0b-42bb-b143-c15d16fc69ab; PugT=1710778970; SPugT=1710778972
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=691baf7a-d9e5-4c92-bd01-b05ff60933fe-65f86a5b-5553&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; pi=156011:4; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; KRTBCOOKIE_153=1923-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&19420-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&22979-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&23462-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF; KRTBCOOKIE_52=22772-R35CA5_112946CAA_57D5D193&KRTB&23092-R35CA5_112946CAA_57D5D193; chkChromeAb67Sec=4; DPSync3=1711929600%3A261_260_258_236_256_263_201_245_262_259%7C1710806400%3A248_255%7C1711756800%3A257%7C1711324800%3A253_252_265; SyncRTB3=1711929600%3A3_220_21_46_166_54_250_178_5_233_104_48_165_231_55_22_8_13_249_71%7C1711584000%3A63%7C1711324800%3A223_2_15; KRTBCOOKIE_860=16335-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23334-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23417-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23426-kMV4FFfoUmxPTw0WMkb-TL9g48I; KRTBCOOKIE_18=22947-8259856715668781746; KRTBCOOKIE_107=1471-uid:Ru9JGeXJ1RMfLb5&KRTB&23421-uid:Ru9JGeXJ1RMfLb5; KRTBCOOKIE_466=16530-2b28c092-dd0b-42bb-b143-c15d16fc69ab; SPugT=1710778972; KRTBCOOKIE_22=14911-3317571013507089770&KRTB&23150-3317571013507089770&KRTB&23527-3317571013507089770; PugT=1710728953
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=3317571013507089770&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; pi=156011:4; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; KRTBCOOKIE_153=1923-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&19420-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&22979-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&23462-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF; KRTBCOOKIE_52=22772-R35CA5_112946CAA_57D5D193&KRTB&23092-R35CA5_112946CAA_57D5D193; chkChromeAb67Sec=4; DPSync3=1711929600%3A261_260_258_236_256_263_201_245_262_259%7C1710806400%3A248_255%7C1711756800%3A257%7C1711324800%3A253_252_265; SyncRTB3=1711929600%3A3_220_21_46_166_54_250_178_5_233_104_48_165_231_55_22_8_13_249_71%7C1711584000%3A63%7C1711324800%3A223_2_15; KRTBCOOKIE_860=16335-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23334-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23417-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23426-kMV4FFfoUmxPTw0WMkb-TL9g48I; KRTBCOOKIE_18=22947-8259856715668781746; KRTBCOOKIE_107=1471-uid:Ru9JGeXJ1RMfLb5&KRTB&23421-uid:Ru9JGeXJ1RMfLb5; KRTBCOOKIE_466=16530-2b28c092-dd0b-42bb-b143-c15d16fc69ab; SPugT=1710778972; KRTBCOOKIE_22=14911-3317571013507089770&KRTB&23150-3317571013507089770&KRTB&23527-3317571013507089770; PugT=1710728953
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1710778970.3372326&iv=e90cf1c2-fac0-4c1a-9d96-09b4ab0b6774:1710778970.333378 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: did=4rRGlOIxzUDuSNPR; didts=1710778964; nnls=; pxrc=CNTU4a8GEgYIgr0rEAA=
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5884294479391638&output=html&h=90&slotname=3654094576&adk=228266070&adf=3493768505&pi=t.ma~as.3654094576&w=970&url=https%3A%2F%2Fbrowser-update.org%2F&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1710778930134&bpp=1204&bdt=1441&idt=2890&shv=r20240313&mjsv=m202403130201&ptt=5&saldr=sd&correlator=966864692783&frm=24&ife=3&pv=2&ga_vid=751177015.1710778933&ga_sid=1710778933&ga_hid=640648971&ga_fc=0&nhd=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=-12245933&bih=-12245933&isw=970&ish=90&ifk=1017635361&scr_x=-12245933&scr_y=-12245933&eid=44759875%2C44759926%2C44759842%2C31081793%2C95325975%2C95327950%2C95327954%2C31081901%2C95320376%2C95322388%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=862165079531677&tmod=1386792793&uas=0&nvt=1&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C970%2C90&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=1.bp47bps3drp4&fsb=1&dtd=2937Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=691baf7a-d9e5-4c92-bd01-b05ff60933fe-65f86a5b-5553&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; pi=156011:4; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; KRTBCOOKIE_153=1923-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&19420-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&22979-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&23462-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF; KRTBCOOKIE_52=22772-R35CA5_112946CAA_57D5D193&KRTB&23092-R35CA5_112946CAA_57D5D193; chkChromeAb67Sec=4; DPSync3=1711929600%3A261_260_258_236_256_263_201_245_262_259%7C1710806400%3A248_255%7C1711756800%3A257%7C1711324800%3A253_252_265; SyncRTB3=1711929600%3A3_220_21_46_166_54_250_178_5_233_104_48_165_231_55_22_8_13_249_71%7C1711584000%3A63%7C1711324800%3A223_2_15; KRTBCOOKIE_860=16335-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23334-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23417-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23426-kMV4FFfoUmxPTw0WMkb-TL9g48I; KRTBCOOKIE_18=22947-8259856715668781746; KRTBCOOKIE_107=1471-uid:Ru9JGeXJ1RMfLb5&KRTB&23421-uid:Ru9JGeXJ1RMfLb5; KRTBCOOKIE_466=16530-2b28c092-dd0b-42bb-b143-c15d16fc69ab; SPugT=1710778972; KRTBCOOKIE_22=14911-3317571013507089770&KRTB&23150-3317571013507089770&KRTB&23527-3317571013507089770; KRTBCOOKIE_188=3189-691baf7a-d9e5-4c92-bd01-b05ff60933fe-65f86a5b-5553&KRTB&23418-691baf7a-d9e5-4c92-bd01-b05ff60933fe-65f86a5b-5553; PugT=1710778974
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5884294479391638&output=html&h=90&slotname=3654094576&adk=228266070&adf=3493768505&pi=t.ma~as.3654094576&w=970&url=https%3A%2F%2Fbrowser-update.org%2F&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1710778930134&bpp=1204&bdt=1441&idt=2890&shv=r20240313&mjsv=m202403130201&ptt=5&saldr=sd&correlator=966864692783&frm=24&ife=3&pv=2&ga_vid=751177015.1710778933&ga_sid=1710778933&ga_hid=640648971&ga_fc=0&nhd=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=-12245933&bih=-12245933&isw=970&ish=90&ifk=1017635361&scr_x=-12245933&scr_y=-12245933&eid=44759875%2C44759926%2C44759842%2C31081793%2C95325975%2C95327950%2C95327954%2C31081901%2C95320376%2C95322388%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=862165079531677&tmod=1386792793&uas=0&nvt=1&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C970%2C90&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=1.bp47bps3drp4&fsb=1&dtd=2937Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: browser-update.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA; cto_bundle=VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE5DeE1QUDZrQ1p1REU2QzUzMm9iS3pISWVKOFREZG8lM0Q
Source: global traffic	HTTP traffic detected: GET /static/img/shot%20update.png HTTP/1.1Host: browser-update.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://browser-update.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA; cto_bundle=VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE5DeE1QUDZrQ1p1REU2QzUzMm9iS3pISWVKOFREZG8lM0Q
Source: global traffic	HTTP traffic detected: GET /update.min.js HTTP/1.1Host: browser-update.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://browser-update.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA; cto_bundle=VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE5DeE1QUDZrQ1p1REU2QzUzMm9iS3pISWVKOFREZG8lM0QIf-Modified-Since: Sat, 02 Mar 2024 10:00:09 GMT
Source: global traffic	HTTP traffic detected: GET /static/img/dialog-warning.gif HTTP/1.1Host: browser-update.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://browser-update.org/static/base2.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA; cto_bundle=VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE5DeE1QUDZrQ1p1REU2QzUzMm9iS3pISWVKOFREZG8lM0Q
Source: global traffic	HTTP traffic detected: GET /static/img/big/e.png HTTP/1.1Host: browser-update.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://browser-update.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA; cto_bundle=VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE5DeE1QUDZrQ1p1REU2QzUzMm9iS3pISWVKOFREZG8lM0Q
Source: global traffic	HTTP traffic detected: GET /static/img/big/s.png HTTP/1.1Host: browser-update.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://browser-update.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA; cto_bundle=VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE5DeE1QUDZrQ1p1REU2QzUzMm9iS3pISWVKOFREZG8lM0Q
Source: global traffic	HTTP traffic detected: GET /static/img/shot%20update.png HTTP/1.1Host: browser-update.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA; cto_bundle=VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE5DeE1QUDZrQ1p1REU2QzUzMm9iS3pISWVKOFREZG8lM0Q
Source: global traffic	HTTP traffic detected: GET /static/img/dialog-warning.gif HTTP/1.1Host: browser-update.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA; cto_bundle=VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE5DeE1QUDZrQ1p1REU2QzUzMm9iS3pISWVKOFREZG8lM0Q
Source: global traffic	HTTP traffic detected: GET /static/img/big/e.png HTTP/1.1Host: browser-update.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA; cto_bundle=VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE5DeE1QUDZrQ1p1REU2QzUzMm9iS3pISWVKOFREZG8lM0Q
Source: global traffic	HTTP traffic detected: GET /static/img/big/s.png HTTP/1.1Host: browser-update.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA; cto_bundle=VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE5DeE1QUDZrQ1p1REU2QzUzMm9iS3pISWVKOFREZG8lM0Q
Source: global traffic	HTTP traffic detected: GET /contact.html HTTP/1.1Host: browser-update.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA; cto_bundle=VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE5DeE1QUDZrQ1p1REU2QzUzMm9iS3pISWVKOFREZG8lM0Q
Source: global traffic	HTTP traffic detected: GET /static/img/wmp_logo.png HTTP/1.1Host: browser-update.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://browser-update.org/contact.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA; cto_bundle=VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE5DeE1QUDZrQ1p1REU2QzUzMm9iS3pISWVKOFREZG8lM0Q
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1Host: browser-update.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://browser-update.org/contact.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA; cto_bundle=VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE5DeE1QUDZrQ1p1REU2QzUzMm9iS3pISWVKOFREZG8lM0Q
Source: global traffic	HTTP traffic detected: GET /static/img/blog/logo-browserstack.png HTTP/1.1Host: browser-update.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://browser-update.org/contact.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA; cto_bundle=VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE5DeE1QUDZrQ1p1REU2QzUzMm9iS3pISWVKOFREZG8lM0Q
Source: global traffic	HTTP traffic detected: GET /static/img/wmp_logo.png HTTP/1.1Host: browser-update.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA; cto_bundle=VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE5DeE1QUDZrQ1p1REU2QzUzMm9iS3pISWVKOFREZG8lM0Q
Source: global traffic	HTTP traffic detected: GET /static/img/blog/logo-browserstack.png HTTP/1.1Host: browser-update.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA; cto_bundle=VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE5DeE1QUDZrQ1p1REU2QzUzMm9iS3pISWVKOFREZG8lM0Q
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5884294479391638&output=html&h=90&slotname=3654094576&adk=228266070&adf=3493768505&pi=t.ma~as.3654094576&w=970&url=https%3A%2F%2Fbrowser-update.org%2F&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1710778930134&bpp=1204&bdt=1441&idt=2890&shv=r20240313&mjsv=m202403130201&ptt=5&saldr=sd&correlator=966864692783&frm=24&ife=3&pv=2&ga_vid=751177015.1710778933&ga_sid=1710778933&ga_hid=640648971&ga_fc=0&nhd=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=-12245933&bih=-12245933&isw=970&ish=90&ifk=1017635361&scr_x=-12245933&scr_y=-12245933&eid=44759875%2C44759926%2C44759842%2C31081793%2C95325975%2C95327950%2C95327954%2C31081901%2C95320376%2C95322388%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=862165079531677&tmod=1386792793&uas=0&nvt=1&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C970%2C90&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=1.bp47bps3drp4&fsb=1&dtd=2937Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=75737307&p=156011&s=165626&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; pi=156011:4; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; KRTBCOOKIE_153=1923-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&19420-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&22979-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&23462-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF; KRTBCOOKIE_52=22772-R35CA5_112946CAA_57D5D193&KRTB&23092-R35CA5_112946CAA_57D5D193; chkChromeAb67Sec=4; DPSync3=1711929600%3A261_260_258_236_256_263_201_245_262_259%7C1710806400%3A248_255%7C1711756800%3A257%7C1711324800%3A253_252_265; SyncRTB3=1711929600%3A3_220_21_46_166_54_250_178_5_233_104_48_165_231_55_22_8_13_249_71%7C1711584000%3A63%7C1711324800%3A223_2_15; KRTBCOOKIE_860=16335-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23334-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23417-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23426-kMV4FFfoUmxPTw0WMkb-TL9g48I; KRTBCOOKIE_18=22947-8259856715668781746; KRTBCOOKIE_107=1471-uid:Ru9JGeXJ1RMfLb5&KRTB&23421-uid:Ru9JGeXJ1RMfLb5; KRTBCOOKIE_466=16530-2b28c092-dd0b-42bb-b143-c15d16fc69ab; SPugT=1710778972; KRTBCOOKIE_22=14911-3317571013507089770&KRTB&23150-3317571013507089770&KRTB&23527-3317571013507089770; KRTBCOOKIE_188=3189-691baf7a-d9e5-4c92-bd01-b05ff60933fe-65f86a5b-5553&KRTB&23418-691baf7a-d9e5-4c92-bd01-b05ff60933fe-65f86a5b-5553;
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=093ace46-161d-4e4e-95d2-1bedb200f6ec
Source: global traffic	HTTP traffic detected: GET /i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1Host: a.tribalfusion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=$UID HTTP/1.1Host: beacon.lynx.cognitivlabs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tum?umid=6 HTTP/1.1Host: ums.acuityplatform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adscores/g.pixel?sid=9212308278&puid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35 HTTP/1.1Host: aa.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=pubmatic.com&id=PM_UID26FC5BC4-C0EA-481E-AC6D-297EF4930E35 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=91635b6e-8347-4069-9237-61dd42a5b7ac&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID} HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; pi=156011:4; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; KRTBCOOKIE_153=1923-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&19420-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&22979-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&23462-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF; KRTBCOOKIE_52=22772-R35CA5_112946CAA_57D5D193&KRTB&23092-R35CA5_112946CAA_57D5D193; KRTBCOOKIE_860=16335-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23334-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23417-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23426-kMV4FFfoUmxPTw0WMkb-TL9g48I; KRTBCOOKIE_18=22947-8259856715668781746; KRTBCOOKIE_107=1471-uid:Ru9JGeXJ1RMfLb5&KRTB&23421-uid:Ru9JGeXJ1RMfLb5; KRTBCOOKIE_466=16530-2b28c092-dd0b-42bb-b143-c15d16fc69ab; SPugT=1710778972; KRTBCOOKIE_22=14911-3317571013507089770&KRTB&23150-3317571013507089770&KRTB&23527-3317571013507089770; KRTBCOOKIE_188=3189-691baf7a-d9e5-4c92-bd01-b05ff60933fe-65f86a5b-5553&KRTB&23418-691baf7a-d9e5-4c92-bd01-b05ff60933fe-65f86a5b-5553; PugT=1710778973; chkChromeAb67Sec=5; DPSync3=1711929600%3A260_226_228_261_236_263_245_262_
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; pi=156011:4; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; KRTBCOOKIE_153=1923-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&19420-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&22979-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&23462-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF; KRTBCOOKIE_52=22772-R35CA5_112946CAA_57D5D193&KRTB&23092-R35CA5_112946CAA_57D5D193; KRTBCOOKIE_860=16335-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23334-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23417-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23426-kMV4FFfoUmxPTw0WMkb-TL9g48I; KRTBCOOKIE_18=22947-8259856715668781746; KRTBCOOKIE_107=1471-uid:Ru9JGeXJ1RMfLb5&KRTB&23421-uid:Ru9JGeXJ1RMfLb5; KRTBCOOKIE_466=16530-2b28c092-dd0b-42bb-b143-c15d16fc69ab; SPugT=1710778972; KRTBCOOKIE_22=14911-3317571013507089770&KRTB&23150-3317571013507089770&KRTB&23527-3317571013507089770; KRTBCOOKIE_188=3189-691baf7a-d9e5-4c92-bd01-b05ff60933fe-65f86a5b-5553&KRTB&23418-691baf7a-d9e5-4c92-bd01-b05ff60933fe-65f86a5b-5553; PugT=1710778973; chkChromeAb67Sec=5; DPSync3=1711929600%3A260_226_228_261_236_263_245_262_235_258_201_259_219_256%7C1711324800%3A252_265_253%7C1711756800%3A257%7C1710806400%3A248_255; SyncRTB3
Source: global traffic	HTTP traffic detected: GET /z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1Host: s.tribalfusion.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ANON_ID=aunoeUwl6hnbQQw9RCEJQ4KE7PVa29HqJIqbmHET
Source: global traffic	HTTP traffic detected: GET /adscores/g.pixel?sid=9212308278&puid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35 HTTP/1.1Host: aa.agkn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3A2jYyReqQhZXvsaM7ma5pAxLE%2B7Mx1Naq
Source: global traffic	HTTP traffic detected: GET /match?gdpr=0&gdpr_consent=&p=M1717054901&uid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35 HTTP/1.1Host: a.audrte.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pbmtc.gif?puid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35 HTTP/1.1Host: beacon.lynx.cognitivlabs.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pubmatic/1/info?sType=sync&sExtCookieId=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipglob.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=ar101281&google_hm=ZDdsUUVwWUVUNUNSMVNvZVhNZktTUGhLQQ%3D%3D&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fa.audrte.com%2Fddp%3Fred%3DeyJ1IjoiaHR0cHM6Ly9hLmF1ZHJ0ZS5jb206NDQzL3AiLCJkIjpbeyJuYW1lIjoiYWRmb3JtIn1dfQ%253D%253D HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /pubmatic/1/info2?sType=sync&sExtCookieId=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipglob.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SEUNCY=33934688FF1329DE
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /ddp?red=eyJ1IjoiaHR0cHM6Ly9hLmF1ZHJ0ZS5jb206NDQzL3AiLCJkIjpbeyJuYW1lIjoiYWRmb3JtIn1dfQ%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: a.audrte.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: arcki2=d7lQEpYET5CR1SoeXMfKSPhKA!20220908!1710778994598!ip#191.96.227.194; arcki2_pubmatic=26FC5BC4-C0EA-481E-AC6D-297EF4930E35!20220908!1710778994598
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5884294479391638&output=html&h=90&slotname=3654094576&adk=228266070&adf=3493768505&pi=t.ma~as.3654094576&w=970&url=https%3A%2F%2Fbrowser-update.org%2F&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1710778930134&bpp=1204&bdt=1441&idt=2890&shv=r20240313&mjsv=m202403130201&ptt=5&saldr=sd&correlator=966864692783&frm=24&ife=3&pv=2&ga_vid=751177015.1710778933&ga_sid=1710778933&ga_hid=640648971&ga_fc=0&nhd=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=-12245933&bih=-12245933&isw=970&ish=90&ifk=1017635361&scr_x=-12245933&scr_y=-12245933&eid=44759875%2C44759926%2C44759842%2C31081793%2C95325975%2C95327950%2C95327954%2C31081901%2C95320376%2C95322388%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=862165079531677&tmod=1386792793&uas=0&nvt=1&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C970%2C90&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=1.bp47bps3drp4&fsb=1&dtd=2937Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
Source: global traffic	HTTP traffic detected: GET /pubmatic/1/info2?sType=sync&sExtCookieId=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipglob.semasio.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SEUNCY=33934688FF1329DE
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: iwu.marketingConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/bootstrap.min.css HTTP/1.1Host: iwu.marketingConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://iwu.marketing/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012
Source: global traffic	HTTP traffic detected: GET /font-awesome/css/font-awesome.min.css HTTP/1.1Host: iwu.marketingConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://iwu.marketing/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012
Source: global traffic	HTTP traffic detected: GET /css/magnific-popup.css HTTP/1.1Host: iwu.marketingConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://iwu.marketing/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012
Source: global traffic	HTTP traffic detected: GET /css/creative.css HTTP/1.1Host: iwu.marketingConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://iwu.marketing/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012
Source: global traffic	HTTP traffic detected: GET /img/iwu.marketing-logo.png HTTP/1.1Host: iwu.marketingConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://iwu.marketing/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012
Source: global traffic	HTTP traffic detected: GET /js/jquery.js HTTP/1.1Host: iwu.marketingConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://iwu.marketing/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012
Source: global traffic	HTTP traffic detected: GET /js/bootstrap.min.js HTTP/1.1Host: iwu.marketingConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://iwu.marketing/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012
Source: global traffic	HTTP traffic detected: GET /js/scrollreveal.min.js HTTP/1.1Host: iwu.marketingConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://iwu.marketing/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012
Source: global traffic	HTTP traffic detected: GET /js/jquery.easing.min.js HTTP/1.1Host: iwu.marketingConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://iwu.marketing/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012
Source: global traffic	HTTP traffic detected: GET /js/jquery.fittext.js HTTP/1.1Host: iwu.marketingConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://iwu.marketing/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012
Source: global traffic	HTTP traffic detected: GET /js/jquery.magnific-popup.min.js HTTP/1.1Host: iwu.marketingConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://iwu.marketing/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012
Source: global traffic	HTTP traffic detected: GET /js/creative.js HTTP/1.1Host: iwu.marketingConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://iwu.marketing/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012
Source: global traffic	HTTP traffic detected: GET /img/iwu.marketing-logo.png HTTP/1.1Host: iwu.marketingConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012
Source: global traffic	HTTP traffic detected: GET /img/campus.jpg HTTP/1.1Host: iwu.marketingConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://iwu.marketing/css/creative.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012
Source: global traffic	HTTP traffic detected: GET /font-awesome/fonts/fontawesome-webfont.woff2?v=4.3.0 HTTP/1.1Host: iwu.marketingConnection: keep-aliveOrigin: http://iwu.marketingUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://iwu.marketing/font-awesome/css/font-awesome.min.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: blocked.by.waap.networkConnection: keep-aliveOrigin: http://iwu.marketingUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://iwu.marketing/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/campus.jpg HTTP/1.1Host: iwu.marketingConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012
Source: global traffic	HTTP traffic detected: GET /font-awesome/fonts/fontawesome-webfont.woff?v=4.3.0 HTTP/1.1Host: iwu.marketingConnection: keep-aliveOrigin: http://iwu.marketingUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://iwu.marketing/font-awesome/css/font-awesome.min.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: blocked.by.waap.networkConnection: keep-aliveOrigin: http://iwu.marketingUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://iwu.marketing/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /font-awesome/fonts/fontawesome-webfont.ttf?v=4.3.0 HTTP/1.1Host: iwu.marketingConnection: keep-aliveOrigin: http://iwu.marketingUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://iwu.marketing/font-awesome/css/font-awesome.min.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; browserupdateorg=pause
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: blocked.by.waap.networkConnection: keep-aliveOrigin: http://iwu.marketingUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://iwu.marketing/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: iwu.marketingConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://iwu.marketing/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; browserupdateorg=pause
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: iwu.marketingConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; browserupdateorg=pause
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: iwu.marketingConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; browserupdateorg=pauseIf-None-Match: "9b43d5-45df5b9d871f"

Source: unknown

DNS traffic detected: queries for: iwu.marketing

Source: unknown

HTTP traffic detected: POST /_services/Randomizer/Randomizer.asmx/RetrieveHeaderImage HTTP/1.1Host: secure2.indwes.eduConnection: keep-aliveContent-Length: 25sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, */*; q=0.01Content-Type: application/json; charset=UTF-8X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://secure2.indwes.eduSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://secure2.indwes.edu/Marketing/Project-Request/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: Microsoft-Azure-Application-Gateway/v2Date: Mon, 18 Mar 2024 16:22:11 GMTContent-Type: text/htmlContent-Length: 581Connection: close

Source: chromecache_256.2.dr	String found in binary or memory: http://aboutads.info
Source: chromecache_256.2.dr	String found in binary or memory: http://browserstack.com
Source: chromecache_256.2.dr	String found in binary or memory: http://creativecommons.org/licenses/by-sa/2.5/
Source: chromecache_383.2.dr	String found in binary or memory: http://daverupert.com
Source: chromecache_468.2.dr	String found in binary or memory: http://dev.cmsmadesimple.org/projects/browserupdate
Source: chromecache_447.2.dr	String found in binary or memory: http://dimsemenov.com/plugins/magnific-popup/
Source: chromecache_407.2.dr	String found in binary or memory: http://docs.jquery.com/UI
Source: chromecache_407.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Accordion
Source: chromecache_407.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Autocomplete
Source: chromecache_407.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Button
Source: chromecache_407.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Datepicker
Source: chromecache_407.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Dialog
Source: chromecache_407.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Draggables
Source: chromecache_407.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Droppables
Source: chromecache_407.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Effects/
Source: chromecache_407.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Effects/Blind
Source: chromecache_407.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Effects/Bounce
Source: chromecache_407.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Effects/Clip
Source: chromecache_407.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Effects/Drop
Source: chromecache_407.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Effects/Explode
Source: chromecache_407.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Effects/Fade
Source: chromecache_407.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Effects/Fold
Source: chromecache_407.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Effects/Highlight
Source: chromecache_407.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Effects/Pulsate
Source: chromecache_407.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Effects/Scale
Source: chromecache_407.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Effects/Shake
Source: chromecache_407.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Effects/Slide
Source: chromecache_407.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Effects/Transfer
Source: chromecache_407.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Mouse
Source: chromecache_407.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Position
Source: chromecache_407.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Progressbar
Source: chromecache_407.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Resizables
Source: chromecache_407.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Selectables
Source: chromecache_407.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Slider
Source: chromecache_407.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Sortables
Source: chromecache_407.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Tabs
Source: chromecache_407.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Widget
Source: chromecache_440.2.dr, chromecache_194.2.dr, chromecache_389.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_440.2.dr, chromecache_194.2.dr, chromecache_389.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_432.2.dr, chromecache_344.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_294.2.dr	String found in binary or memory: http://github.com/ChiperSoft/Kalendae
Source: chromecache_320.2.dr	String found in binary or memory: http://google.com
Source: chromecache_320.2.dr	String found in binary or memory: http://googleads.g.doubleclick.net
Source: chromecache_473.2.dr	String found in binary or memory: http://gsgd.co.uk/sandbox/jquery/easing/
Source: chromecache_237.2.dr	String found in binary or memory: http://iwu.marketing/js/bootstrap.min.js
Source: chromecache_237.2.dr	String found in binary or memory: http://iwu.marketing/js/creative.js
Source: chromecache_237.2.dr	String found in binary or memory: http://iwu.marketing/js/jquery.easing.min.js
Source: chromecache_237.2.dr	String found in binary or memory: http://iwu.marketing/js/jquery.fittext.js
Source: chromecache_237.2.dr	String found in binary or memory: http://iwu.marketing/js/jquery.js
Source: chromecache_237.2.dr	String found in binary or memory: http://iwu.marketing/js/jquery.magnific-popup.min.js
Source: chromecache_237.2.dr	String found in binary or memory: http://iwu.marketing/js/scrollreveal.min.js
Source: chromecache_373.2.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_407.2.dr, chromecache_373.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_407.2.dr	String found in binary or memory: http://jqueryui.com/about)
Source: chromecache_320.2.dr	String found in binary or memory: http://mathiasbynens.be/
Source: chromecache_468.2.dr	String found in binary or memory: http://modules.processwire.com/modules/markup-browser-update/
Source: chromecache_468.2.dr	String found in binary or memory: http://modxcms.com/extras/package/737
Source: chromecache_320.2.dr	String found in binary or memory: http://pagead2.googlesyndication.com
Source: chromecache_303.2.dr	String found in binary or memory: http://portableapps.com/apps/internet
Source: chromecache_468.2.dr	String found in binary or memory: http://rapidweaver.marathia.com/stacks/BrowserUpdate/
Source: chromecache_383.2.dr	String found in binary or memory: http://sam.zoy.org/wtfpl/
Source: chromecache_373.2.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_342.2.dr	String found in binary or memory: http://stackoverflow.com/questions/1716183/html-fieldset-allows-children-to-expand-indefinitely
Source: chromecache_342.2.dr	String found in binary or memory: http://stackoverflow.com/questions/20524815/ie-11-bug-image-inside-label-inside-form
Source: chromecache_402.2.dr, chromecache_260.2.dr	String found in binary or memory: http://startbootstrap.com/template-overviews/creative)
Source: chromecache_256.2.dr	String found in binary or memory: http://tango.freedesktop.org/Tango_Icon_Library
Source: chromecache_468.2.dr	String found in binary or memory: http://trac.habariproject.org/habari-extras/browser/plugins/browserupdate
Source: chromecache_468.2.dr	String found in binary or memory: http://typo3.org/extensions/repository/view/browserupdnotify/current/
Source: chromecache_468.2.dr	String found in binary or memory: http://wordpress.org/extend/plugins/wp-browser-update
Source: chromecache_366.2.dr, chromecache_464.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_400.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_468.2.dr	String found in binary or memory: http://www.concrete5.org/marketplace/addons/scala-it-browser-update-notification/
Source: chromecache_368.2.dr	String found in binary or memory: http://www.indwes.edu
Source: chromecache_256.2.dr	String found in binary or memory: http://www.maxmind.com
Source: chromecache_468.2.dr	String found in binary or memory: http://www.vbulletin.org/forum/showthread.php?t=239559
Source: chromecache_256.2.dr	String found in binary or memory: http://www.webmasterpro.de/
Source: chromecache_468.2.dr	String found in binary or memory: http://xenforo.com/community/resources/customisable-browser-update-org-widget.764/
Source: chromecache_403.2.dr	String found in binary or memory: https://ad.mrtnsvr.com/sync/pubmatic?gdpr=0&gdpr_consent=
Source: chromecache_268.2.dr	String found in binary or memory: https://ad.turn.com/r/cs?pid=1&gdpr=0&gdpr_consent=
Source: chromecache_218.2.dr	String found in binary or memory: https://adsense.com.
Source: chromecache_216.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_403.2.dr	String found in binary or memory: https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35/gdpr=0/gdpr_
Source: chromecache_268.2.dr	String found in binary or memory: https://bpi.rtactivate.com/tag/?id=20909&user_id=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_co
Source: chromecache_303.2.dr	String found in binary or memory: https://browser.yandex.com
Source: chromecache_320.2.dr	String found in binary or memory: https://cdn.ampproject.org/amp4ads-host-v0.js
Source: chromecache_320.2.dr	String found in binary or memory: https://cdn.ampproject.org/rtv/$
Source: chromecache_303.2.dr	String found in binary or memory: https://cdn.fuseplatform.net/publift/tags/2/2789/fuse.js
Source: chromecache_358.2.dr	String found in binary or memory: https://cm.adgrx.com/bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent=
Source: chromecache_291.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_sc
Source: chromecache_291.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=Y2QwZTM0M2MtOGJhZi02M2U4LTYxY2QtMTFkZD
Source: chromecache_277.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=JvxbxMDqSB6sbSl-9JMONQ%3D%3
Source: chromecache_277.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=
Source: chromecache_277.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=MjZGQzVCQzQtQzBFQS00ODFFLUFDNkQtMjk
Source: chromecache_403.2.dr	String found in binary or memory: https://cms.quantserve.com/pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent=
Source: chromecache_468.2.dr	String found in binary or memory: https://contao.org/de/extension-list/view/browser_update.html
Source: chromecache_358.2.dr	String found in binary or memory: https://crb.kargo.com/api/v1/dsync/Martin?exid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_cons
Source: chromecache_256.2.dr	String found in binary or memory: https://crowdin.com/page/quick-start
Source: chromecache_256.2.dr	String found in binary or memory: https://crowdin.com/project/browser-update
Source: chromecache_320.2.dr	String found in binary or memory: https://cse.google.com/cse.js
Source: chromecache_468.2.dr	String found in binary or memory: https://drupal.org/project/bu
Source: chromecache_277.2.dr	String found in binary or memory: https://eb2.3lift.com/xuid?mid=7976&xuid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&dongle=u6nf&gdpr=0&gdp
Source: chromecache_468.2.dr	String found in binary or memory: https://emberobserver.com/addons/ember-browser-update
Source: chromecache_468.2.dr	String found in binary or memory: https://extensions.joomla.org/extension/browser-update/
Source: chromecache_320.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Google
Source: chromecache_320.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Google
Source: chromecache_237.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Merriweather:400
Source: chromecache_367.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Muli
Source: chromecache_237.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-cSZMZ-Y.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-ciZMZ-Y.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-cyZMZ-Y.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-eCZMZ-Y.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-fCZM.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR71Wvf1jvzRPA.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR71Wvf2jvzRPA.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR71Wvf3jvzRPA.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR71Wvf4jvw.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR71Wvf8jvzRPA.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR7NWPf1jvzRPA.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR7NWPf2jvzRPA.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR7NWPf3jvzRPA.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR7NWPf4jvw.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR7NWPf8jvzRPA.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR7lXff1jvzRPA.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR7lXff2jvzRPA.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR7lXff3jvzRPA.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR7lXff4jvw.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR7lXff8jvzRPA.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4m0qyriQwlOrhSvowK_l5-eRZAf-LHrw.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4m0qyriQwlOrhSvowK_l5-eRZBf-LHrw.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4m0qyriQwlOrhSvowK_l5-eRZDf-LHrw.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4m0qyriQwlOrhSvowK_l5-eRZKf-LHrw.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4m0qyriQwlOrhSvowK_l5-eRZOf-I.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l521wRZV8f6lvg.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l521wRZVcf6lvg.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l521wRZVsf6lvg.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l521wRZWMf6.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l521wRZXMf6lvg.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52_wFZV8f6lvg.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52_wFZVcf6lvg.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52_wFZVsf6lvg.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52_wFZWMf6.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52_wFZXMf6lvg.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52xwNZV8f6lvg.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52xwNZVcf6lvg.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52xwNZVsf6lvg.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52xwNZWMf6.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52xwNZXMf6lvg.woff2)
Source: chromecache_444.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/muli/v29/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk30eg.woff2)
Source: chromecache_444.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/muli/v29/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk40eiNxw.woff2)
Source: chromecache_444.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/muli/v29/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk50eiNxw.woff2)
Source: chromecache_349.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqW106F15M.woff2)
Source: chromecache_349.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWt06F15M.woff2)
Source: chromecache_349.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtE6F15M.woff2)
Source: chromecache_349.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtU6F15M.woff2)
Source: chromecache_349.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtk6F15M.woff2)
Source: chromecache_349.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWu06F15M.woff2)
Source: chromecache_349.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2)
Source: chromecache_349.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuk6F15M.woff2)
Source: chromecache_349.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6F15M.woff2)
Source: chromecache_349.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWxU6F15M.woff2)
Source: chromecache_349.2.dr, chromecache_379.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_349.2.dr, chromecache_379.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_349.2.dr, chromecache_379.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_349.2.dr, chromecache_379.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_349.2.dr, chromecache_379.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_349.2.dr, chromecache_379.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_349.2.dr, chromecache_379.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_349.2.dr, chromecache_379.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_349.2.dr, chromecache_379.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_349.2.dr, chromecache_379.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_241.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_241.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_241.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_241.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_241.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_241.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_241.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_241.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_241.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_241.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_241.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_241.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_241.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_241.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_241.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_241.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_241.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_241.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_241.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_241.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_241.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_197.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufA5qW54A.woff2)
Source: chromecache_197.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufB5qW54A.woff2)
Source: chromecache_197.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufC5qW54A.woff2)
Source: chromecache_197.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufD5qW54A.woff2)
Source: chromecache_197.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufJ5qW54A.woff2)
Source: chromecache_197.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2)
Source: chromecache_197.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufO5qW54A.woff2)
Source: chromecache_320.2.dr	String found in binary or memory: https://fundingchoicesmessages.google.com/i/%
Source: chromecache_402.2.dr, chromecache_260.2.dr	String found in binary or memory: https://github.com/BlackrockDigital/startbootstrap/blob/gh-pages/LICENSE)
Source: chromecache_459.2.dr	String found in binary or memory: https://github.com/ChiperSoft/Kalendae
Source: chromecache_239.2.dr	String found in binary or memory: https://github.com/andris9/simpleStorage
Source: chromecache_256.2.dr	String found in binary or memory: https://github.com/browser-update/browser-update
Source: chromecache_468.2.dr	String found in binary or memory: https://github.com/browser-update/browser-update/blob/master/LICENSE.txt
Source: chromecache_256.2.dr	String found in binary or memory: https://github.com/browser-update/browser-update/issues
Source: chromecache_468.2.dr	String found in binary or memory: https://github.com/browser-update/browser-update/wiki/Details-on-configuration#notifying-insecure-br
Source: chromecache_468.2.dr	String found in binary or memory: https://github.com/browser-update/browser-update/wiki/Details-on-configuration#notifying-unsupported
Source: chromecache_468.2.dr	String found in binary or memory: https://github.com/browser-update/browser-update/wiki/Self-hosting
Source: chromecache_465.2.dr	String found in binary or memory: https://github.com/google/safevalues/issues
Source: chromecache_344.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_251.2.dr	String found in binary or memory: https://github.com/twitter/typeahead.js
Source: chromecache_468.2.dr	String found in binary or memory: https://github.com/vishy93/Browser_Update_Magento_Plugin
Source: chromecache_218.2.dr, chromecache_320.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_218.2.dr, chromecache_320.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/$
Source: chromecache_196.2.dr	String found in binary or memory: https://gum.criteo.com/sid/json?origin=prebid
Source: chromecache_239.2.dr	String found in binary or memory: https://help.formassembly.com/knowledgebase/articles/340359-publish-with-an-iframe
Source: chromecache_268.2.dr	String found in binary or memory: https://i.liadm.com/s/75145?bidder_id=195755&bidder_uuid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35
Source: chromecache_358.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4
Source: chromecache_403.2.dr	String found in binary or memory: https://idsync.rlcdn.com/712188.gif?partner_uid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_con
Source: chromecache_237.2.dr	String found in binary or memory: https://indwes.tfaforms.net/56
Source: chromecache_268.2.dr	String found in binary or memory: https://io.narrative.io/?companyId=673&id=pubmatic_id:26FC5BC4-C0EA-481E-AC6D-297EF4930E35
Source: chromecache_277.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent=
Source: chromecache_291.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/openx?oxid=e161e7f6-42d8-3d4c-742d-4b64cdd4674d&gdpr=0
Source: chromecache_403.2.dr	String found in binary or memory: https://match.deepintent.com/usersync/141?gdpr=0&gdpr_consent=
Source: chromecache_358.2.dr	String found in binary or memory: https://match.prod.bidr.io/cookie-sync/pm?gdpr=0&gdpr_consent=
Source: chromecache_303.2.dr	String found in binary or memory: https://opera.com
Source: chromecache_268.2.dr	String found in binary or memory: https://p.rfihub.com/cm?pub=224&in=1&getuid=https%3A//image2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0
Source: chromecache_320.2.dr, chromecache_455.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_302.2.dr, chromecache_448.2.dr, chromecache_454.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/%
Source: chromecache_320.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/getconfig/sodar
Source: chromecache_320.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204
Source: chromecache_366.2.dr, chromecache_464.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=7&v=
Source: chromecache_366.2.dr, chromecache_464.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&name=invalid_geo&context=10
Source: chromecache_366.2.dr, chromecache_464.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=extra&rnd=
Source: chromecache_464.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&lidartos
Source: chromecache_345.2.dr, chromecache_458.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=fccs&
Source: chromecache_218.2.dr, chromecache_320.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=plmetrics
Source: chromecache_236.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=rcs_internal
Source: chromecache_454.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=224
Source: chromecache_302.2.dr, chromecache_448.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=225
Source: chromecache_320.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/html/$
Source: chromecache_320.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/$
Source: chromecache_236.2.dr, chromecache_320.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
Source: chromecache_320.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=
Source: chromecache_218.2.dr, chromecache_320.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/err_rep.js
Source: chromecache_218.2.dr, chromecache_320.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/logging_library.js
Source: chromecache_320.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/managed/js/adsense/$
Source: chromecache_395.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping
Source: chromecache_218.2.dr, chromecache_320.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping?e=1
Source: chromecache_409.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?
Source: chromecache_454.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=224
Source: chromecache_302.2.dr, chromecache_448.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225
Source: chromecache_320.2.dr	String found in binary or memory: https://partner.googleadservices.com/gampad/cookie.js
Source: chromecache_268.2.dr	String found in binary or memory: https://pixel-sync.sitescout.com/dmp/pixelSync?nid=3&gdpr=0&gdpr_consent=
Source: chromecache_403.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=26FC5BC4-C0EA-481E-AC6D-
Source: chromecache_277.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner_device_id=26FC5BC4-C0EA-481E-AC6D-
Source: chromecache_468.2.dr	String found in binary or memory: https://plugins.bludit.com/plugin/header-content
Source: chromecache_268.2.dr	String found in binary or memory: https://pm.w55c.net/ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=
Source: chromecache_403.2.dr	String found in binary or memory: https://pmp.mxptint.net/sn.ashx?&gdpr=0&gdpr_consent=
Source: chromecache_291.2.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/openx/75a681b2-d274-af05-45fa-5d913283aa04?gdpr=0
Source: chromecache_277.2.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/pubmatic/26FC5BC4-C0EA-481E-AC6D-297EF4930E35?gdpr=0&gdpr_consent=
Source: chromecache_358.2.dr	String found in binary or memory: https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=26FC5BC4-C0EA-
Source: chromecache_403.2.dr	String found in binary or memory: https://rtb.adentifi.com/CookieSyncPubMatic&gdpr=0&gdpr_consent=
Source: chromecache_277.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=26FC5BC4-C0EA-481E-AC6
Source: chromecache_291.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=b9b79b8b-5e72-86b6-b42
Source: chromecache_291.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/ecm3?ex=openx.com&id=b9b79b8b-5e72-86b6-b423-c9f3a5e7acad
Source: chromecache_439.2.dr, chromecache_390.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-mediagrid_n-adMediaV1_pm-db5_n-simp
Source: chromecache_237.2.dr	String found in binary or memory: https://secure2.indwes.edu/Marketing/Project-Request/
Source: chromecache_329.2.dr	String found in binary or memory: https://secure2.indwes.edu/_img/headerImages/generic_iwu/generic_iwu.jpg
Source: chromecache_329.2.dr	String found in binary or memory: https://secure2.indwes.edu/_services/Randomizer/Randomizer.asmx/RetrieveHeaderImage
Source: chromecache_465.2.dr, chromecache_395.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/car.js
Source: chromecache_320.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Source: chromecache_216.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_236.2.dr	String found in binary or memory: https://support.google.com/adsense/answer/9190028.
Source: chromecache_403.2.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vco
Source: chromecache_358.2.dr	String found in binary or memory: https://sync.bfmio.com/sync?pid=187&uid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent=
Source: chromecache_268.2.dr	String found in binary or memory: https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_
Source: chromecache_358.2.dr	String found in binary or memory: https://sync.ipredictive.com/d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=b
Source: chromecache_268.2.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=11&gdpr=0&gdpr_consent=
Source: chromecache_403.2.dr	String found in binary or memory: https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&part
Source: chromecache_216.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_358.2.dr	String found in binary or memory: https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_
Source: chromecache_402.2.dr	String found in binary or memory: https://titan.indwes.edu/img/bg.jpg
Source: chromecache_448.2.dr	String found in binary or memory: https://tpc.googlesyndication.com
Source: chromecache_320.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/$
Source: chromecache_302.2.dr, chromecache_448.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Source: chromecache_277.2.dr	String found in binary or memory: https://um.simpli.fi/pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJm
Source: chromecache_358.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58292/sync?_origin=1&uid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&re
Source: chromecache_358.2.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/sd?id=540245193&val=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_co
Source: chromecache_277.2.dr	String found in binary or memory: https://us01.z.antigena.com/l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4B
Source: chromecache_216.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_216.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_216.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_448.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_216.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_218.2.dr	String found in binary or memory: https://www.google.com/adsense
Source: chromecache_320.2.dr	String found in binary or memory: https://www.google.com/adsense/search/async-ads.js
Source: chromecache_303.2.dr	String found in binary or memory: https://www.google.com/chrome/browser/desktop/
Source: chromecache_302.2.dr, chromecache_448.2.dr, chromecache_320.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: chromecache_320.2.dr	String found in binary or memory: https://www.google.com/s2/favicons?sz=64&domain_url=
Source: chromecache_366.2.dr, chromecache_464.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/managed/js/activeview/
Source: chromecache_216.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_320.2.dr	String found in binary or memory: https://www.gstatic.com
Source: chromecache_320.2.dr	String found in binary or memory: https://www.gstatic.com/adsense/autoads/icons/arrow_left_24px_grey_800.svg
Source: chromecache_320.2.dr	String found in binary or memory: https://www.gstatic.com/adsense/autoads/icons/close_24px_grey_700.svg
Source: chromecache_320.2.dr	String found in binary or memory: https://www.gstatic.com/adsense/autoads/icons/gpp_good_24px_blue_600.svg
Source: chromecache_320.2.dr	String found in binary or memory: https://www.gstatic.com/adsense/autoads/icons/gpp_good_24px_grey_800.svg
Source: chromecache_320.2.dr	String found in binary or memory: https://www.gstatic.com/prose/protected/%
Source: chromecache_303.2.dr	String found in binary or memory: https://www.mozilla.org/firefox/new
Source: chromecache_468.2.dr	String found in binary or memory: https://www.npmjs.com/package/
Source: chromecache_468.2.dr	String found in binary or memory: https://www.npmjs.com/package/browser-update
Source: chromecache_468.2.dr	String found in binary or memory: https://www.npmjs.com/package/ember-cli-browser-update
Source: chromecache_468.2.dr	String found in binary or memory: https://www.npmjs.com/package/ng-browser-update
Source: chromecache_468.2.dr	String found in binary or memory: https://www.woltlab.com/pluginstore/index.php/File/1363-Warnhinheis-bei-veralteten-Browsern/
Source: chromecache_237.2.dr	String found in binary or memory: https://www.wrike.com/frontend/requestforms/index.html?token=eyJhY2NvdW50SWQiOjI4NjA1NjIsInRhc2tGb3J
Source: chromecache_268.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy=#US_PRIVACY

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 50335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 50339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50358
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50370
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 50384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 50343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 50318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 50242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50280
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50282
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50286
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50289
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50288
Source: unknown	Network traffic detected: HTTP traffic on port 50375 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50290
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50292
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50291
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50294
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50293
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50311 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50357 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50380 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443

Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49767 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@50/476@366/100

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=2008,i,17467844057206675136,12934562213064335950,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "http://iwu.marketing/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=2008,i,17467844057206675136,12934562213064335950,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	5 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	6 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://iwu.marketing/	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://sync.ipredictive.com/d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent=	0%	URL Reputation	safe
http://gsgd.co.uk/sandbox/jquery/easing/	0%	URL Reputation	safe
https://cdn.2trk.info/rtgstat/50version/js/slider.js	0%	Avira URL Cloud	safe
http://iwu.marketing/font-awesome/fonts/fontawesome-webfont.woff?v=4.3.0	0%	Avira URL Cloud	safe
https://cdn.2trk.info/rtgstat/50version/css/logico-three.css	0%	Avira URL Cloud	safe
https://ad-delivery.net/px.gif?ch=2	0%	Avira URL Cloud	safe
http://getbootstrap.com)	0%	Avira URL Cloud	safe
https://id5-sync.com/g/v2/1189.json	0%	Avira URL Cloud	safe
https://id5-sync.com/c/495/0/0/1.gif?gdpr=0&gdpr_consent=&us_privacy=	0%	Avira URL Cloud	safe
http://iwu.marketing/js/jquery.js	0%	Avira URL Cloud	safe
https://rtb-use.mfadsrvr.com/imp_s2s/v3/n8UGQb8oRsoLuVNWaPOgOcGz9MQJ9n-mDyOm5Rwc2mCEe0IoMJKkiishgKAVPr7vW-Op5SqLPpvNhaf7JZgScNC5JJ-Tn8GN9JhXOZAvpMRY-8oKI8g7qkcN6ho-rIH6LmuEMRJWGzNVn2S8k48_-d9U_JFzkQONalz8aatPtkRDWNImaA2IOx3bGXgdpWfLOHQiw1hlMyCqrbWsdAOopnr0PCR9rMyIhTa_Z7lbDM2QFaA3TjmDUf_I7m9vGvRB875GQcl81Rb9AYuAFLbMRl85wKx_yx8mCfK1M-jlot0aJemgW_Jyz1dzBjdBiLyCLNwOw6YDnksQpk9ijcM3QvoSdqz43bIQf9j03Xc_0ite4hlwDut-0pga_paq-WI6XTIFqdpPP1fI_TPcCRstoPDNsC7XhW1bAbRf6gu3j8YBB4BjlWPTSJFhvyTyBSRrWGYyMwdhLFsAC1ADM_8IQhqdfcD8RtRA8whROeatyjMXRqQu6Og513Zv_qaWKxWfoOva0YKTwupRHQ/ZfhqLwAOBfUIg6-yAAhcO_kHV4_h8kd_xzRsDw?q=1&cbvp=2	0%	Avira URL Cloud	safe
https://sync.technoratimedia.com/services?uid=AAARQ07L8NQAABPzJYe3uw&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D8457389007004702379%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&gdpr=0	0%	Avira URL Cloud	safe
http://iwu.marketing/js/bootstrap.min.js	0%	Avira URL Cloud	safe
https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=2393ecfc-a9f7-4cbe-bbea-03c6f5980eff	0%	Avira URL Cloud	safe
http://blocked.by.waap.network/	0%	Avira URL Cloud	safe
https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_	0%	Avira URL Cloud	safe
http://iwu.marketing/font-awesome/css/font-awesome.min.css	0%	Avira URL Cloud	safe
https://api.btloader.com/pv?tid=cHQZoYwk&w=5070731193352192&o=5708166709903360&cv=2.1.38-3-g408da7f&widget=false&r=false&vr=1280x907&pageURL=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&sid=rxjhTnM0wo&pm=false&upapi=true	0%	Avira URL Cloud	safe
https://a.audrte.com/match?gdpr=0&gdpr_consent=&p=M1717054901&uid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35	0%	Avira URL Cloud	safe
http://iwu.marketing/font-awesome/fonts/fontawesome-webfont.ttf?v=4.3.0	0%	Avira URL Cloud	safe
https://r.bidswitch.net/sync?bidswitch_ssp_id=pubmatic&bsw_custom_parameter=2b28c092-dd0b-42bb-b143-c15d16fc69ab	0%	Avira URL Cloud	safe
http://iwu.marketing/img/campus.jpg	0%	Avira URL Cloud	safe
https://match.prod.bidr.io/cookie-sync/pm?gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
de9a11s35xj3d.cloudfront.net	18.238.79.139	true	false	high
um.simpli.fi	35.236.220.17	true	false	high
rtb-csync-use1.smartadserver.com	216.22.16.8	true	false	high
ny5-prebid.a-mx.net	147.75.198.144	true	false	unknown
d31otfhas71ais.cloudfront.net	13.225.66.186	true	false	high
global.px.quantserve.com	192.184.68.134	true	false	high
us-east-eb2.3lift.com	35.71.139.29	true	false	high
id5-sync.com	162.19.138.120	true	false	unknown
prebid.media.net	34.120.63.153	true	false	high
live.rezync.com	18.164.116.23	true	false	high
cdn.w55c.net	54.145.134.218	true	false	high
bidder.va1.vip.prod.criteo.com	74.119.119.129	true	false	high
crb.kargo.com	34.196.130.100	true	false	high
us-east-tlx.3lift.com	34.199.60.123	true	false	high
lga-direct-bgp.contextweb.com	198.148.27.131	true	false	high
www.google.com	142.250.81.228	true	false	high
sync.intentiq.com	18.173.132.107	true	false	unknown
bid.2trk.info	104.21.82.186	true	false	unknown
lb.eu-1-id5-sync.com	162.19.138.119	true	false	unknown
rtgcloudsql.2trk.info	172.67.161.117	true	false	unknown
bcp.crwdcntrl.net	44.205.216.19	true	false	high
sync1.intentiq.com	18.173.132.107	true	false	unknown
match.adsrvr.org	15.197.193.217	true	false	high
rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com	3.215.42.230	true	false	high
match.prod.bidr.io	54.144.102.188	true	false	unknown
pagead-googlehosted.l.google.com	142.250.80.1	true	false	high
chidc2.outbrain.org	50.31.142.191	true	false	unknown
creativecdn.com	185.184.8.90	true	false	high
widget.va1.vip.prod.criteo.com	74.119.119.150	true	false	high
m.deepintent.com	8.18.47.7	true	false	unknown
pixel-sync.sitescout.com	34.36.216.150	true	false	high
ec-elbec-wg945jtfutnz-913366995.us-east-1.elb.amazonaws.com	35.170.17.215	true	false	high
d1ykf07e75w7ss.cloudfront.net	108.138.115.149	true	false	high
gtrace.mediago.io	35.208.249.213	true	false	unknown
ssum-sec.casalemedia.com	104.18.36.155	true	false	high
googleads.g.doubleclick.net	142.251.35.162	true	false	high
config.aps.amazon-adsystem.com	108.138.106.108	true	false	high
api.btloader.com	130.211.23.194	true	false	unknown
pool-bid-gce-us.dorpat.iponweb.net	35.207.24.140	true	false	unknown
gum.da1.vip.prod.criteo.com	74.119.118.149	true	false	high
idsync.rlcdn.com	35.244.154.8	true	false	high
rtb.adentifi.com	34.197.235.192	true	false	unknown
ad.mrtnsvr.com	34.102.163.6	true	false	unknown
synchroscript.deliveryengine.adswizz.com	18.238.55.58	true	false	high
sync.srv.stackadapt.com	54.174.97.40	true	false	high
thrtle.com	52.204.113.215	true	false	unknown
io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com	52.22.88.168	true	false	high
pixel.tapad.com	34.111.113.62	true	false	high
stackpath.bootstrapcdn.com	104.18.11.207	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
pippio.com	107.178.254.65	true	false	high
sync.ipredictive.com	52.2.85.165	true	false	unknown
s.amazon-adsystem.com	209.54.182.161	true	false	high
ad.doubleclick.net	142.251.40.230	true	false	high
raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com	52.86.98.54	true	false	high
ssbsync-use1.smartadserver.com	23.105.12.116	true	false	high
ad-delivery.net	104.26.2.70	true	false	unknown
trace.mediago.io	35.208.249.213	true	false	unknown
ib.anycast.adnxs.com	68.67.160.114	true	false	high
us01.z.antigena.com	40.76.134.238	true	false	unknown
uipus.semasio.net	50.57.31.206	true	false	high
jsdelivr.map.fastly.net	151.101.65.229	true	false	unknown
d20qwf0wrdtevy.cloudfront.net	108.138.128.44	true	false	high
sync.crwdcntrl.net	44.205.216.19	true	false	high
gob-njr3.pubmnet.com	104.36.115.111	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	high
cm.g.doubleclick.net	142.250.176.194	true	false	high
pug-vac.pubmnet.com	8.28.7.83	true	false	unknown
ds-pr-bh.ybp.gysm.yahoodns.net	34.200.142.234	true	false	unknown
idaas-ext.cph.liveintent.com	52.22.221.65	true	false	high
iwu.marketing	216.21.12.179	true	false	unknown
us-u.openx.net	35.244.159.8	true	false	high
securepubads46.g.doubleclick.net	142.250.80.98	true	false	high
pool-use-gce-sc.reims.iponweb.net	35.211.118.13	true	false	unknown
indwes.edu	216.54.215.75	true	false	high
browser-update.org	104.26.12.241	true	false	high
d1jvc9b8z3vcjs.cloudfront.net	108.138.122.147	true	false	high
blocked.by.waap.network	199.38.148.58	true	false	unknown
dorpat.geo.iponweb.net	35.207.24.140	true	false	unknown
a.tribalfusion.com	104.18.25.173	true	false	high
spug-vac.pubmnet.com	8.28.7.84	true	false	unknown
io.narrative.io	52.22.81.24	true	false	high
btloader.com	104.22.75.216	true	false	unknown
gum.va1.vip.prod.criteo.com	74.119.119.139	true	false	high
user-data-us-east.bidswitch.net	35.211.178.172	true	false	unknown
adizio.geo.iponweb.net	35.210.53.219	true	false	unknown
s.tribalfusion.com	104.18.24.173	true	false	high
g2.gumgum.com	44.207.26.76	true	false	high
cdn.2trk.info	172.67.161.117	true	false	unknown
u.openx.net	35.244.159.8	true	false	high
dsp.adkernel.com	174.137.133.49	true	false	high
blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com	54.208.230.72	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
pixel.s3xified.com	67.231.251.190	true	false	unknown
us-east-1-otel.formassembly.com	52.86.124.2	true	false	high
rtgcdn.2trk.info	104.21.82.186	true	false	unknown
secure2.indwes.edu	199.8.17.71	true	false	high
a.audrte.com	34.251.192.134	true	false	unknown
ums.acuityplatform.com	69.90.254.78	true	false	unknown
pugm88000nfc.pubmnet.com	104.36.115.113	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://image4.pubmatic.com/AdServer/SPug?partnerID=156078&xid=y-17tUrjJE2uUN58rhQTKtQw5Aw2CG9jI-~A&gdpr=0	false		high
https://secure2.indwes.edu/_img/footer_IWU.gif	false		high
https://de9a11s35xj3d.cloudfront.net/0a0dde8b5c2c6b867ddb968a93f6fcd0.webp	false		high
https://rtb-use.mfadsrvr.com/imp_s2s/v3/n8UGQb8oRsoLuVNWaPOgOcGz9MQJ9n-mDyOm5Rwc2mCEe0IoMJKkiishgKAVPr7vW-Op5SqLPpvNhaf7JZgScNC5JJ-Tn8GN9JhXOZAvpMRY-8oKI8g7qkcN6ho-rIH6LmuEMRJWGzNVn2S8k48_-d9U_JFzkQONalz8aatPtkRDWNImaA2IOx3bGXgdpWfLOHQiw1hlMyCqrbWsdAOopnr0PCR9rMyIhTa_Z7lbDM2QFaA3TjmDUf_I7m9vGvRB875GQcl81Rb9AYuAFLbMRl85wKx_yx8mCfK1M-jlot0aJemgW_Jyz1dzBjdBiLyCLNwOw6YDnksQpk9ijcM3QvoSdqz43bIQf9j03Xc_0ite4hlwDut-0pga_paq-WI6XTIFqdpPP1fI_TPcCRstoPDNsC7XhW1bAbRf6gu3j8YBB4BjlWPTSJFhvyTyBSRrWGYyMwdhLFsAC1ADM_8IQhqdfcD8RtRA8whROeatyjMXRqQu6Og513Zv_qaWKxWfoOva0YKTwupRHQ/ZfhqLwAOBfUIg6-yAAhcO_kHV4_h8kd_xzRsDw?q=1&cbvp=2	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_sc	false		high
https://ad-delivery.net/px.gif?ch=2	false	Avira URL Cloud: safe	unknown
https://sync.ipredictive.com/d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent=	false	URL Reputation: safe	unknown
https://pippio.com/api/sync?pid=5324&it=1&iv=5737758c10a90c387ccf8a08ce2db777776e72e4674bede82ca0e8392d345f71791426b5417dce21&_=2	false		high
http://iwu.marketing/font-awesome/fonts/fontawesome-webfont.woff?v=4.3.0	false	Avira URL Cloud: safe	unknown
https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESEE-eUtltZUO8fva0a6Jtqjs&google_cver=1	false		high
https://indwes.tfaforms.net/wForms/3.11/js/wforms.js?v=8b5c9ffd0b6fc88dc72529725004f6b69b9e0ae8	false		high
https://ap.lijit.com/beacon/amazon?url=https://s.amazon-adsystem.com/ecm3?id=$UID&ex=sovrn.com	false		high
http://iwu.marketing/js/jquery.js	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=JvxbxMDqSB6sbSl-9JMONQ%3D%3D&gdpr=0&gdpr_consent=	false		high
https://cdn.2trk.info/rtgstat/50version/css/logico-three.css	false	Avira URL Cloud: safe	unknown
https://b1sync.zemanta.com/usersync/amazon_tam/?cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__	false		high
https://pm.w55c.net/ping_match.gif?scc=1&ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent=	false		high
https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AAARQ07L8NQAABPzJYe3uw&gdpr=0	false		high
https://id5-sync.com/c/495/0/0/1.gif?gdpr=0&gdpr_consent=&us_privacy=	false	Avira URL Cloud: safe	unknown
https://crb.kargo.com/api/v1/dsync/Martin?exid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent=	false		high
https://sync.technoratimedia.com/services?uid=AAARQ07L8NQAABPzJYe3uw&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D8457389007004702379%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&gdpr=0	false	Avira URL Cloud: safe	unknown
https://secure.adnxs.com/getuid?https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Freceive%3Fpartner_id%3DAPPNEXUS%26partner_device_id%3D%24UID%26pt%3Dda9fa8fc-3c38-47c1-bced-e79257211d8c%252Chttps%25253A%25252F%25252Fx.bidswitch.net%25252Fsync%25253Fdsp_id%25253D393%252526user_id%25253D0%252526ssp%25253Dpubmatic%252526bsw_param%25253D2b28c092-dd0b-42bb-b143-c15d16fc69ab%252C	false		high
https://tags.crwdcntrl.net/lt/c/16589/sync.min.js	false		high
https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent=	false		high
https://id5-sync.com/g/v2/1189.json	false	Avira URL Cloud: safe	unknown
https://cdn.2trk.info/rtgstat/50version/js/slider.js	false	Avira URL Cloud: safe	unknown
http://iwu.marketing/js/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
https://secure2.indwes.edu/_img/headerImages/generic_iwu/generic_iwu2.jpg	false		high
https://pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=3&gdpr=0&gdpr_consent=	false		high
https://secure2.indwes.edu/Marketing/Project-Request/ScriptResource.axd?d=T0VaWC5aFwLzNsW4kfM0Y5VkzcH6rIPd0pv-1CL4Dy_XiN6x5sx3PkYf3sexq64YkJRoDlgIkEiUN4AwioDB-vRUrNL4GfY6aTnep5OSyf88dGSi9Atycswoaue9vayAL20ek3B9p0Pmz1puwpE_SEhbflnicYNonlmniaV6trc1&t=511fa37d	false		high
https://prebid.media.net/rtb/prebid?cid=8CU995W35	false		high
https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=2393ecfc-a9f7-4cbe-bbea-03c6f5980eff	false	Avira URL Cloud: safe	unknown
https://rtb-csync.smartadserver.com/redir?partneruserid=AAARQ07L8NQAABPzJYe3uw&partnerid=127&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dpp%252Csyn%252Cpm%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2%26userid%3DSMART_USER_ID&gdpr=0	false		high
https://gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fbrowser-update.org%2F&domain=browser-update.org&cw=1&pbt=1&lsw=1	false		high
https://dsp.adkernel.com/sync?exchange=11&google_gid=CAESENkrspHNyMIhkYNinb2s-6U&google_cver=1&google_push=AXcoOmRHIuYnNYmsy0Z_gNPsNzwlvDtMNyUw7iNTqgOpZI5LrFyBaLnedgfLvobEkvt8An6sNNdFJGFu75PygYHMm5nDFaD-2Ng	false		high
http://iwu.marketing/font-awesome/css/font-awesome.min.css	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel/attr?d=AHNF13LsgtITa1ARQP4Bcql4buMGdRN8PjreIfenlTdpv44smHX9eK0UJbBsU7b-uYmyi_yvHD63qobE	false		high
https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=	false		high
https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=62310470&p=156011&s=165626&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=	false		high
https://ce.lijit.com/beacon/amazon?url=https://s.amazon-adsystem.com/ecm3?id=$UID&ex=sovrn.com	false		high
https://cm.g.doubleclick.net/pixel?google_nid=adkernel&google_hm=QTY5MDg5MzAxMDY3MTI1OTg5NjE&google_push=AXcoOmRHIuYnNYmsy0Z_gNPsNzwlvDtMNyUw7iNTqgOpZI5LrFyBaLnedgfLvobEkvt8An6sNNdFJGFu75PygYHMm5nDFaD-2Ng	false		high
https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=71058137&p=156011&s=165626&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=	false		high
http://blocked.by.waap.network/	false	Avira URL Cloud: safe	unknown
https://secure2.indwes.edu/_scripts/jquery-ui-1.8.9.custom.min.js	false		high
https://browser-update.org/static/img/big/o.png	false		high
http://iwu.marketing/img/campus.jpg	false	Avira URL Cloud: safe	unknown
https://i.liadm.com/s/56409?bidder_id=200442&bidder_uuid=e90cf1c2-fac0-4c1a-9d96-09b4ab0b6774%3A1710778970.333378&pid=500040&it=1&iv=e90cf1c2-fac0-4c1a-9d96-09b4ab0b6774%3A1710778970.333378&_=1710778970.3372326	false		high
http://iwu.marketing/font-awesome/fonts/fontawesome-webfont.ttf?v=4.3.0	false	Avira URL Cloud: safe	unknown
https://r.bidswitch.net/sync?bidswitch_ssp_id=pubmatic&bsw_custom_parameter=2b28c092-dd0b-42bb-b143-c15d16fc69ab	false	Avira URL Cloud: safe	unknown
http://iwu.marketing/#about	false		unknown
https://um.simpli.fi/amazon/https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsimpli.fi%26id%3D	false		high
https://a.audrte.com/match?gdpr=0&gdpr_consent=&p=M1717054901&uid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35	false	Avira URL Cloud: safe	unknown
https://s.amazon-adsystem.com/ecm3?ex=3lift.com&id=3712186363653833678472	false		high
https://tlx.3lift.com/header/auction?lib=prebid&v=8.5.0&referrer=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&tmax=1500	false		high
https://browser-update.org/	false		high
https://browser-update.org/contact.html	false		high
https://gum.criteo.com/sid/json?origin=publishertag&domain=browser-update.org&sn=ChromeSyncframe&so=3&topUrl=browser-update.org&bundle=dTQwXF8wRkVwRWwwMEN3bE9TanNMMU4zM255TDZtenJFMm96ZTFNZ3FOZzBXaENTTTg3cE1QV3Rla1QwJTJGTHhwZENUQVZPU0J0UDMlMkJjaXVCdU9RZVNybVdzRGU5a2lhRmRLSUN2ViUyQjdIV1lMeFNDdEI2bHJFRnhPWWRXU0RkcE1tc01Ucw&cw=1&lsw=1&topicsavail=1&fledgeavail=1	false		high
https://indwes.tfaforms.net/js/kalendae/kalendae.standalone.min.js	false		high
https://dis.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@	false		high
https://s.amazon-adsystem.com/v3/pr?exlist=n-mediagrid_n-adMediaV1_pm-db5_n-simpli.fi_n-baidu_n-Beeswax_ox-db5_smrt_n-inmobi_sovrn_3lift_n-Outbrain&fv=1.0&a=cm&cm3ppd=1&dmt=3	false		high
https://api.btloader.com/pv?tid=cHQZoYwk&w=5070731193352192&o=5708166709903360&cv=2.1.38-3-g408da7f&widget=false&r=false&vr=1280x907&pageURL=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&sid=rxjhTnM0wo&pm=false&upapi=true	false	Avira URL Cloud: safe	unknown
https://secure2.indwes.edu/Marketing/Project-Request/	false		high
https://c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fbrowser-update.org&pubid=8b48e249-e9e6-4a52-8b48-396ea93403e8	false		high
https://match.prod.bidr.io/cookie-sync/pm?gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://creativecommons.org/licenses/by-sa/2.5/	chromecache_256.2.dr	false		high
https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=MjZGQzVCQzQtQzBFQS00ODFFLUFDNkQtMjk	chromecache_277.2.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_216.2.dr	false		high
https://support.google.com/adsense/answer/9190028.	chromecache_236.2.dr	false		high
https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-mediagrid_n-adMediaV1_pm-db5_n-simp	chromecache_439.2.dr, chromecache_390.2.dr	false		high
https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner_device_id=26FC5BC4-C0EA-481E-AC6D-	chromecache_277.2.dr	false		high
https://fundingchoicesmessages.google.com/i/%	chromecache_320.2.dr	false		high
http://getbootstrap.com)	chromecache_432.2.dr, chromecache_344.2.dr	false	Avira URL Cloud: safe	low
https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=26FC5BC4-C0EA-481E-AC6	chromecache_277.2.dr	false		high
http://xenforo.com/community/resources/customisable-browser-update-org-widget.764/	chromecache_468.2.dr	false		high
http://mathiasbynens.be/	chromecache_320.2.dr	false		high
https://github.com/browser-update/browser-update/wiki/Self-hosting	chromecache_468.2.dr	false		high
http://googleads.g.doubleclick.net	chromecache_320.2.dr	false		high
http://www.maxmind.com	chromecache_256.2.dr	false		high
https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_	chromecache_358.2.dr	false	Avira URL Cloud: safe	unknown
https://gum.criteo.com/sid/json?origin=prebid	chromecache_196.2.dr	false		high
https://github.com/google/safevalues/issues	chromecache_465.2.dr	false		high
http://docs.jquery.com/UI/Resizables	chromecache_407.2.dr	false		high
http://docs.jquery.com/UI/Effects/Shake	chromecache_407.2.dr	false		high
http://docs.jquery.com/UI/Droppables	chromecache_407.2.dr	false		high
https://crowdin.com/project/browser-update	chromecache_256.2.dr	false		high
http://modules.processwire.com/modules/markup-browser-update/	chromecache_468.2.dr	false		high
http://browserstack.com	chromecache_256.2.dr	false		high
http://wordpress.org/extend/plugins/wp-browser-update	chromecache_468.2.dr	false		high
https://www.npmjs.com/package/ember-cli-browser-update	chromecache_468.2.dr	false		high
https://cse.google.com/cse.js	chromecache_320.2.dr	false		high
https://github.com/twitter/typeahead.js	chromecache_251.2.dr	false		high
https://cdn.ampproject.org/rtv/$	chromecache_320.2.dr	false		high
https://github.com/ChiperSoft/Kalendae	chromecache_459.2.dr	false		high
http://docs.jquery.com/UI/Effects/Fade	chromecache_407.2.dr	false		high
https://www.npmjs.com/package/ng-browser-update	chromecache_468.2.dr	false		high
http://docs.jquery.com/UI/Slider	chromecache_407.2.dr	false		high
http://docs.jquery.com/UI/Effects/Pulsate	chromecache_407.2.dr	false		high
http://gsgd.co.uk/sandbox/jquery/easing/	chromecache_473.2.dr	false	URL Reputation: safe	unknown
http://aboutads.info	chromecache_256.2.dr	false		high
https://contao.org/de/extension-list/view/browser_update.html	chromecache_468.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
147.75.198.144	ny5-prebid.a-mx.net	Switzerland	54825	PACKETUS	false
18.238.48.238	unknown	United States	16509	AMAZON-02US	false
172.67.161.117	rtgcloudsql.2trk.info	United States	13335	CLOUDFLARENETUS	false
74.119.119.139	gum.va1.vip.prod.criteo.com	United States	19750	AS-CRITEOUS	false
35.210.53.219	adizio.geo.iponweb.net	United States	19527	GOOGLE-2US	false
74.119.119.131	static.va1.vip.prod.criteo.net	United States	19750	AS-CRITEOUS	false
3.222.162.217	unknown	United States	14618	AMAZON-AESUS	false
35.244.154.8	idsync.rlcdn.com	United States	15169	GOOGLEUS	false
38.68.201.140	pmp.mxptint.net	United States	39988	INTELLIGENT-TECHNOLOGY-SOLUTIONSUS	false
130.211.23.194	api.btloader.com	United States	15169	GOOGLEUS	false
216.22.16.8	rtb-csync-use1.smartadserver.com	United States	30633	LEASEWEB-USA-WDCUS	false
108.138.122.147	d1jvc9b8z3vcjs.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.80.1	pagead-googlehosted.l.google.com	United States	15169	GOOGLEUS	false
35.236.220.17	um.simpli.fi	United States	15169	GOOGLEUS	false
44.210.155.144	unknown	United States	14618	AMAZON-AESUS	false
68.67.179.153	unknown	United States	29990	ASN-APPNEXUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.26.2.70	ad-delivery.net	United States	13335	CLOUDFLARENETUS	false
54.145.134.218	cdn.w55c.net	United States	14618	AMAZON-AESUS	false
35.211.118.13	pool-use-gce-sc.reims.iponweb.net	United States	19527	GOOGLE-2US	false
3.215.42.230	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
54.208.230.72	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
68.67.160.75	unknown	United States	29990	ASN-APPNEXUS	false
107.178.254.65	pippio.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.22.88.168	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
150.136.25.38	adserver.technoratimedia.com	United States	31898	ORACLE-BMC-31898US	false
44.217.137.122	unknown	United States	14618	AMAZON-AESUS	false
67.231.251.190	pixel.s3xified.com	United States	40244	TURNKEY-INTERNETUS	false
18.238.55.58	synchroscript.deliveryengine.adswizz.com	United States	16509	AMAZON-02US	false
141.95.98.65	unknown	Germany	680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
3.225.218.10	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud	United States	14618	AMAZON-AESUS	false
34.197.235.192	rtb.adentifi.com	United States	14618	AMAZON-AESUS	false
44.207.26.76	g2.gumgum.com	United States	14618	AMAZON-AESUS	false
52.2.85.165	sync.ipredictive.com	United States	14618	AMAZON-AESUS	false
142.251.40.226	unknown	United States	15169	GOOGLEUS	false
142.251.40.230	ad.doubleclick.net	United States	15169	GOOGLEUS	false
13.225.66.186	d31otfhas71ais.cloudfront.net	United States	16509	AMAZON-02US	false
104.26.13.241	unknown	United States	13335	CLOUDFLARENETUS	false
162.19.138.120	id5-sync.com	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
18.164.116.23	live.rezync.com	United States	3	MIT-GATEWAYSUS	false
142.251.40.194	unknown	United States	15169	GOOGLEUS	false
199.38.148.58	blocked.by.waap.network	United States	53334	TUT-ASUS	false
18.238.55.69	unknown	United States	16509	AMAZON-02US	false
52.86.124.2	us-east-1-otel.formassembly.com	United States	14618	AMAZON-AESUS	false
108.138.128.124	tags.crwdcntrl.net	United States	16509	AMAZON-02US	false
18.173.132.13	unknown	United States	3	MIT-GATEWAYSUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
23.22.53.123	unknown	United States	14618	AMAZON-AESUS	false
34.36.216.150	pixel-sync.sitescout.com	United States	2686	ATGS-MMD-ASUS	false
142.250.81.228	www.google.com	United States	15169	GOOGLEUS	false
107.23.193.229	unknown	United States	14618	AMAZON-AESUS	false
18.173.132.107	sync.intentiq.com	United States	3	MIT-GATEWAYSUS	false
52.223.22.214	unknown	United States	8987	AMAZONEXPANSIONGB	false
34.102.163.6	ad.mrtnsvr.com	United States	15169	GOOGLEUS	false
141.95.33.120	unknown	Germany	680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
192.184.68.134	global.px.quantserve.com	United States	27281	QUANTCASTUS	false
142.250.81.230	unknown	United States	15169	GOOGLEUS	false
162.19.138.119	lb.eu-1-id5-sync.com	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
54.144.102.188	match.prod.bidr.io	United States	14618	AMAZON-AESUS	false
108.138.106.108	config.aps.amazon-adsystem.com	United States	16509	AMAZON-02US	false
209.54.182.161	s.amazon-adsystem.com	United States	21719	CHLUS	false
162.19.138.118	unknown	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
142.251.35.162	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
34.120.63.153	prebid.media.net	United States	15169	GOOGLEUS	false
52.86.98.54	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
142.250.65.162	unknown	United States	15169	GOOGLEUS	false
151.101.193.229	unknown	United States	54113	FASTLYUS	false
35.207.24.140	pool-bid-gce-us.dorpat.iponweb.net	United States	19527	GOOGLE-2US	false
192.184.68.228	unknown	United States	27281	QUANTCASTUS	false
35.211.178.172	user-data-us-east.bidswitch.net	United States	19527	GOOGLE-2US	false
8.28.7.84	spug-vac.pubmnet.com	United States	62713	AS-PUBMATICUS	false
8.18.47.7	m.deepintent.com	United States	32662	GMCRUS	false
8.28.7.83	pug-vac.pubmnet.com	United States	62713	AS-PUBMATICUS	false
104.21.82.186	bid.2trk.info	United States	13335	CLOUDFLARENETUS	false
18.238.79.139	de9a11s35xj3d.cloudfront.net	United States	16509	AMAZON-02US	false
104.36.115.113	pugm88000nfc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
52.46.155.104	unknown	United States	16509	AMAZON-02US	false
174.137.133.49	dsp.adkernel.com	United States	27257	WEBAIR-INTERNETUS	false
40.76.134.238	us01.z.antigena.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
3.33.220.150	unknown	United States	8987	AMAZONEXPANSIONGB	false
216.54.215.75	indwes.edu	United States	3549	LVLT-3549US	false
18.238.79.3	unknown	United States	16509	AMAZON-02US	false
74.119.118.149	gum.da1.vip.prod.criteo.com	United States	19750	AS-CRITEOUS	false
104.18.36.155	ssum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
104.36.115.111	gob-njr3.pubmnet.com	United States	62713	AS-PUBMATICUS	false
185.184.8.90	creativecdn.com	Poland	204995	RTB-HOUSE-AMSNL	false
35.170.17.215	ec-elbec-wg945jtfutnz-913366995.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
3.234.96.174	unknown	United States	14618	AMAZON-AESUS	false
52.22.221.65	idaas-ext.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
108.138.115.149	d1ykf07e75w7ss.cloudfront.net	United States	16509	AMAZON-02US	false
52.204.113.215	thrtle.com	United States	14618	AMAZON-AESUS	false
52.22.81.24	io.narrative.io	United States	14618	AMAZON-AESUS	false
198.148.27.131	lga-direct-bgp.contextweb.com	United States	19189	PULSEPOINTUS	false
18.164.117.3	unknown	United States	3	MIT-GATEWAYSUS	false
35.244.159.8	us-u.openx.net	United States	15169	GOOGLEUS	false
15.197.193.217	match.adsrvr.org	United States	7430	TANDEMUS	false
35.208.249.213	gtrace.mediago.io	United States	19527	GOOGLE-2US	false
34.199.60.123	us-east-tlx.3lift.com	United States	14618	AMAZON-AESUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1411162
Start date and time:	2024-03-18 17:20:57 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 54s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://iwu.marketing/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@50/476@366/100
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://browser-update.org/update-browser.html#3.3.51:iwu.marketing Browse: http://iwu.marketing/#about Browse: http://iwu.marketing/#services Browse: http://iwu.marketing/#team Browse: http://iwu.marketing/#resources Browse: http://iwu.marketing/#contact Browse: https://indwes.tfaforms.net/56 Browse: https://browser-update.org/ Browse: https://browser-update.org/contact.html

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.40.195, 142.251.32.110, 172.253.115.84, 34.104.35.123, 142.250.65.170, 142.250.81.227, 142.251.40.110, 142.251.40.202, 142.251.40.170, 142.250.80.42, 142.251.40.138, 142.250.80.106, 142.250.65.234, 142.250.80.74, 142.250.65.202, 142.251.40.234, 142.251.35.170, 142.251.40.106, 142.250.176.202, 142.251.32.106, 142.251.41.10, 142.250.81.234, 23.40.179.6, 23.40.179.58, 40.127.169.103, 142.250.64.106, 142.250.80.10, 172.217.165.138, 142.250.72.106, 23.206.121.20, 23.206.121.60, 23.206.121.52, 23.206.121.47, 23.206.121.39, 23.206.121.48, 23.206.121.22, 23.206.121.28, 192.229.211.108, 13.95.31.18, 142.250.65.193, 142.251.40.130, 23.51.57.13, 20.127.253.7, 142.251.41.2, 69.173.151.100, 104.76.104.253, 3.217.51.221, 159.127.42.76, 142.250.80.2, 199.38.167.130, 142.250.65.195, 142.250.80.97, 142.250.64.74, 151.101.66.49, 151.101.194.49, 151.101.130.49, 151.101.2.49, 142.250.72.99, 13.107.42.14, 142.251.40.227, 69.194.242.12
Excluded domains from analysis (whitelisted): uipglob.trafficmanager.net, slscr.update.microsoft.com, clientservices.googleapis.com, a767.dspw65.akamai.net, e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com, l-0005.l-msedge.net, clients2.google.com, ocsp.digicert.com, cdn.fuseplatform.net.edgesuite.net, pubmatic.edgekey.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, a.rfihub.com.akadns.net, update.googleapis.com, rtb-csync-geo.usersync-prod-sas.akadns.net, www.google-analytics.com, glb.sls.prod.dcat.dsp.trafficmanager.net, www-linkedin-com.l-0005.l-msedge.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, a1956.dscr.akamai.net, pixel-us-east.rubiconproject.net.akadns.net, pixel-sync.trafficmanager.net, ctldl.windowsupdate.com, pagead2.googlesyndication.com, ad.turn.com.akadns.net, wu-bg-shim.trafficmanager.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: http://iwu.marketing/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30837)
Category:	downloaded
Size (bytes):	31000
Entropy (8bit):	4.746143404849733
Encrypted:	false
SSDEEP:	384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf
MD5:	269550530CC127B6AA5A35925A7DE6CE
SHA1:	512C7D79033E3028A9BE61B540CF1A6870C896F8
SHA-256:	799AEB25CC0373FDEE0E1B1DB7AD6C2F6A0E058DFADAA3379689F583213190BD
SHA-512:	49F4E24E55FA924FAA8AD7DEBE5FFB2E26D439E25696DF6B6F20E7F766B50EA58EC3DBD61B6305A1ACACD2C80E6E659ACCEE4140F885B9C9E71008E9001FBF4B
Malicious:	false
Reputation:	low
URL:	https://stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
Preview:	/!. Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.7.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.7.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156011&s=165626&predirect=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dpubmatic.com%26id%3DPM_UID
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65031)
Category:	downloaded
Size (bytes):	321263
Entropy (8bit):	5.387032650378889
Encrypted:	false
SSDEEP:	6144:Y5HrU00klNOzV2G5ZtdjJPJu0u/GxBCAo:2j0pVFPBS/GaAo
MD5:	DA86FDF0C575BB3571A08D03DCAC920A
SHA1:	9F1E744B4EB0511624AAE2A16B8137D49DCCDDED
SHA-256:	77A46A65787D5C9EFBD5C38112795872E5626E217CA8550FAF982C17E1F1BB48
SHA-512:	4254CAD44B832A20950B03F3FD3E96DE758E293DEF1D5A8408369D3740F85887824EAFB7424B7EF2D32D02BCC608C6C8A596FE54A4F1FB229960E048F4F498F9
Malicious:	false
Reputation:	low
URL:	https://cdn.fuseplatform.net/prebid/prebid-3fb2499816886fc4e28155c422049026.js
Preview:	/* prebid.js v8.5.0.Updated: 2024-02-06.Modules: amxBidAdapter, appnexusBidAdapter, criteoBidAdapter, criteoIdSystem, currency, gptPreAuction, gumgumBidAdapter, id5IdSystem, medianetBidAdapter, pubmaticBidAdapter, schain, sovrnBidAdapter, tripleliftBidAdapter, userId */.if(window.fusePbjs&&window.fusePbjs.libLoaded)try{window.fusePbjs.getConfig("debug")&&console.warn("Attempted to load a copy of Prebid.js that clashes with the existing 'fusePbjs' instance. Load aborted.")}catch(e){}else (function(){.!function(){var e,n={35706:function(e,n,t){t.d(n,{Pd:function(){return d},Th:function(){return s},_U:function(){return f}});var r=t(55730),i=t(64358),o=t(20265),a=t(34614),u=(0,t(78640).R)(),c="outstream";function s(e){var n=this,t=e.url,o=e.config,a=e.id,u=e.callback,s=e.loaded,d=e.adUnitCode,f=e.renderNow;this.url=t,this.config=o,this.handlers={},this.id=a,this.renderNow=f,this.loaded=s,this.cmd=[],this.push=function(e){"function"==typeof e?n.loaded?e.call():n.cmd.push(e):(0,i.logError)("

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6822
Entropy (8bit):	5.510466786813814
Encrypted:	false
SSDEEP:	192:xNUABNUDNUgNUh3wNUWNU3LNUfNUA4NUONUJNUh3ZNULNU3WNUGNUA9NUHNUENU/:nlXO12+xiYlWPo2/cLxlTCB2yluV
MD5:	EB33FDECE3CFCB56ECABFCB64FA5E023
SHA1:	3FF54AC716976B1CD27327A37BBB8FA649754BA3
SHA-256:	FAC30F50B4A7C2194996EC927B12EA51B16ECC015B25922D064E7DADD21C298F
SHA-512:	35085773F2FBAEA20F4D4608A970E252D6222E70C5BC2B04941E66723E4B267DD1B63DAB49B9F0AF7A2FECFBFB15D9DAA7B077E1F001133D9E9CE111728C6009
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Roboto+Slab:300,400,700"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto Slab';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufA5qW54A.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto Slab';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufJ5qW54A.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto Slab';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufB5qW54A.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto Slab';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJS

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1539
Entropy (8bit):	7.788046637141617
Encrypted:	false
SSDEEP:	48:hYmEM62sh1f6lvpX07HAlyS85dmaujPVl:mW6D6lp07CyvjRG
MD5:	82C817167577EE35DAC35F52311C609B
SHA1:	D76E36B63B9F09577C32A6F90D2C55F31799901E
SHA-256:	75FA6025B77FF1B3FD601EC423C62F4250DAF6948A637D22C9BCD2E7835DDFB6
SHA-512:	7CF9B40C21FC4DE1175254F163911798D9EDB100097A5C378261D973174A2DA0F2AC8C73E01D458054E70AC5CD2AB6A80A96B53F96F804CE276D9B6C4A7C70E8
Malicious:	false
Reputation:	low
URL:	https://browser-update.org/static/img/speed.png
Preview:	.PNG........IHDR... ... .....D.......PLTE.................................................................................f_x............}....}z.xt.........{y.yv.uq.rm.iax.............................\Tn..............................................................~\|.....}.\|v.pk.ZQjXOh.....................................................................y.xr.so...oi.nh.kf.kd\|gb\|e]vbZu`Ys.Q.......................................................................{w..z.{t......rl}pi\|..x..t..i..`;6..............................................................\|..{........~.wo.~{.vr...~zzy..u..onnnWNg..cddc..a``_..Y.Y.XkgVVVU.IHHHGGGof?..>MJ=.:CA5PI(&&&`U .........=.CF....tRNS."...fD..1@...!IDAT8.m.c..Q..Swvg.3.Y.Y#......mD...m[_...D....<.=.?......poJJ.....Z...Z...hbS.......N.,Y'.+Mt/.......-..l-..4.*T.sypb....).=v...,v..FY8.\|b^.N{..g}Z-.29.pw.L.6#..9b....I.Nal.)DBl....).w.#6...:...i...Z .....4./...gG.<.N.o....-8..v..L.......//.F......@`. ]....lL.x

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&vxii_pid=12&vxii_pid1=10067&vxii_rcid=cdd5ca24-47b1-4f3e-8cc1-d0019f951b2e
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://bpi.rtactivate.com/tag/?id=20909&user_id=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 15, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	183
Entropy (8bit):	6.075702118355463
Encrypted:	false
SSDEEP:	3:yionv//thPl8kllZRthwkBDsTBZt8AnlTpNm1rBxtUFBPbG4EZDKMSQb7Slp:6v/lhP6s9nDspDn7AtUFBPbEZ5elp
MD5:	FE4BDF0F314B68757F2EE5C63EDD4C2D
SHA1:	75C4F1569DC0D425B847895ABA46AACE2868CE13
SHA-256:	20D9446B589F06289E3A2F62CD749F76B571C6ACC63EC6E1E93710854017C6BF
SHA-512:	2C790E0F271C26B4989D68C87BB2A442D668161B32332700BA25463CC102AAC5FC4ACBCA48D83F621C793FCD5C7500CB2F76082C4E3B56121CAB5FF8F1D08FB2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............$.....tEXtSoftware.Adobe ImageReadyq.e<...YIDATx.b....f.....a...T.f.o..L.T.,.L...]M.%..j}@....x...Nj&...af......`...d........ ..e5.3.:......IEND.B`.

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 110 x 114, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	11583
Entropy (8bit):	7.977022340705602
Encrypted:	false
SSDEEP:	192:HtnqzSu8x6GKdtBCjO9z23RiPfw4slEWlkdaZvgU9JsSc3f1zhxvSxO2vrpE1em:oh8YCK9gA8kdaZ4U9kOvvruZ
MD5:	596CEABCDAA1016DB9677D3B8F28E8D3
SHA1:	4EB33E30EED75981AC0FFAA9C111CD5470E23477
SHA-256:	9715E6BFA7CC7D50CEB4AE193E94D2E9DF8AEA8ECCDE5372E35E781DB06A5C42
SHA-512:	0D3A86DBCDF41A08473234268310DDD65A30B9B043097132B9F44D9B4ACDB685E512FB03F1337D4C6091081885FDBDF15E746B3593908B9214F533D9482EDFFA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...n...r......O......sBIT....\|.d.....pHYs.........L"M.....tEXtSoftware.www.inkscape.org..<... .IDATx..w..G}...s.nQ/.%.e.;...`...)6!.....P.(..$28........Rp0-......S%.&w...........c..=.H..}<......;;........).n.E..c..v..<...}.:.A.W"..t..0.J...Gu..n.w....g.4....:.\u....n.Ow...S.]....Cg......=.....n.<c.&.!./..0.!X.p.=....4x.\m.[.8.,..T..G..r.n.}O_......]K.Bv.g.4^.........@..^%......g$.."...&...S`.........U...OW3....5..^.A..~B..<"..#.n.....C...e........k.Y.(M"..!XQ........m...b.....#....F.i..0z,.....0r(..%p`....&.d.l.fuZ..H...p/F.....\.~\|.......m...^.j.'.$...j/_>O.s...........=.`8. \|..9.#.F...T..\|H....(;.;...+@...x... ....p.,fsi....,..h....]Od...:...y".R.o.<.w..$=..A..1...\| J*..[f.4)..2..........ds..NY.....]..[.dYi..e.&...6........._`D..'...sK..0.....h....@.C..sF9+..x...@...L....-.5s..fU.&..@.l.mn.-...G.>....W.'.i.L..=...N[.F/C.....PV......k.... .3........vH..uk.)/.w....&ot.e.!..8...i..;.f..E..a...Bw......iz.2u.+.S. .Y.

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	604
Entropy (8bit):	5.861246086925173
Encrypted:	false
SSDEEP:	6:NCuxkVoA5eAEkZgoy+S+M5vWHKh7ISanZj3yG6c3FQLUAAWnprYsYqHxn:IEkvzEGLM5eqh7IziE3FEnFYsY2xn
MD5:	6D1F95AB9C97F037107D6B274B6FB0ED
SHA1:	9984B0530BFFCFEA89D2D9E0FBFBD4CBB6712AB2
SHA-256:	DBF67F8F94FB5C080F60C8A42AA93BD3C6E89A5041DC534AD2C3D58C41316C25
SHA-512:	8A4557A11B1C3B006D06B815FD4F190CDFCB897BE876E58290F45E1DC00600F7D41546FD32541270BCB91BC7A855C9F858516313854B356B6E0A0A80A6679486
Malicious:	false
Reputation:	low
Preview:	GIF89a.....I.............................................................111. .....'.@@@CCC.1"MMM.;.)).//.E0.33.F1ZZZ[[[.99.<<.AAhhh.bE.h.o..w...~....................................................................................................................................................................................................................................!.......,............E..5..5...!..!..4....4....22....3.&77&.3...1..1.../.%8..8%./...0:..:0...,.$9;##;9$.,.C...>=''=>...C.. <A>66>A< .*E?..-DBA..ABD- 4..".. F........R<.....B..A."...&..IR...(..X..J.(...;

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:d:d
MD5:	9DD4E461268C8034F5C8564E155C67A6
SHA1:	11F6AD8EC52A2984ABAAFD7C3B516503785C2072
SHA-256:	2D711642B726B04401627CA9FBAC32F5C8530FB1903CC4DB02258717921A4881
SHA-512:	A4ABD4448C49562D828115D13A1FCCEA927F52B4D5459297F8B43E42DA89238BC13626E43DCB38DDB082488927EC904FB42057443983E88585179D50551AFE62
Malicious:	false
Reputation:	low
URL:	https://cdn.fuseplatform.net/telemetry/noconsent?auid=22728806944&cmpj=unknown&v=1&ttm=1710778927132&cookie=true&res=1280x1024&device=desktop&browser=chrome&fuuid=e77f8bfe-60b6-5c8b-a657-64bfafdad065&fid=2789&pubid=5&url=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html&sid=bac552fa15f25121a86b&srate=100&adserver=gpt&etm=5101&e=slot-request&tenant=publift&account=browserupdate
Preview:	x

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESEE-eUtltZUO8fva0a6Jtqjs&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=baidu_mediago&google_push=AXcoOmTyRBsK4N-BKKXlOPXZO_jFsWo2S1ruc4RCcqcElEFn8xPp2T2l8ut_W689BpFYMZc2uFI9O_SDZHTE8cv3uV3BMYU4G3sG&google_hm=22210ca7211caf792c9xmt00ltx5lqro
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4210
Entropy (8bit):	4.9818964645034995
Encrypted:	false
SSDEEP:	96:mI0CsR9u71h/1fjGY3fxl49XRN6bAQTfGskEJFueLAAh:mhR9u71hdrGIxW5RN2ZFuek2
MD5:	38ED610C5C03B08C3EC08EA53C46CCE2
SHA1:	21A52CC10308EAA7FFE36CB229519F334975DC5B
SHA-256:	CB3F78416F8CF3E79B5F0350FDB07181953FA89071050F77C554200A45A0B6DA
SHA-512:	69A391139DF594F4FFAE4F7C706E1D184D475F031C16E4AD392B3FDED3B8B18E03DF28FA91845B00E878F811C3BD7CAF7858D2FE876EFBCE236411ED36684B09
Malicious:	false
Reputation:	low
URL:	https://browser-update.org/cdn-cgi/apps/head/dSTaMRtp7Uh77lw_sJp5-4w_sZY.js
Preview:	;window.CloudflareApps=window.CloudflareApps\|\|{};CloudflareApps.siteId="c39cfbab607872b12d12db2dc46b08ef";CloudflareApps.installs=CloudflareApps.installs\|\|{};;(function(){'use strict'.CloudflareApps.internal=CloudflareApps.internal\|\|{}.var errors=[].CloudflareApps.internal.placementErrors=errors.var errorHashes={}.function noteError(options){var hash=options.selector+'::'+options.type+'::'+(options.installId\|\|'').if(errorHashes[hash]){return}.errorHashes[hash]=true.errors.push(options)}.var initializedSelectors={}.var currentInit=false.CloudflareApps.internal.markSelectors=function markSelectors(){if(!currentInit){check().currentInit=true.setTimeout(function(){currentInit=false})}}.function check(){var installs=window.CloudflareApps.installs.for(var installId in installs){if(!installs.hasOwnProperty(installId)){continue}.var selectors=installs[installId].selectors.if(!selectors){continue}.for(var key in selectors){if(!selectors.hasOwnProperty(key)){continue}.var hash=installId+'::'+key

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	124
Entropy (8bit):	4.666092607806425
Encrypted:	false
SSDEEP:	3:knnMXiCnjJQ4YakSMf0ODoYANoSAlMiCnSkxEoS9AnrBnhRn:knMXiCn1Q9ad60so7NoSliCnSkeoS90L
MD5:	1BA942836B1FB92010616904DD7E01B9
SHA1:	9F43308380BE68E2B1516AD0D2133DB470873799
SHA-256:	9428155381E797893588016C5C81B594AC7A78D4F678ECF15B2092E7C20DFC38
SHA-512:	A422D4BE3F6F48377900A9CFD19F9EE50137D26C597636658B8DC9E8C31297652CB61C2AC1E77D4012F1E921A502096FB7B6E8D3A12502AE54C089C6E658C3DA
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISTwkJkz-LycDvOBIFDdeKxEYSBQ0ql5s2EgUN4H9NThIFDec-mpoSBQ1Qsa7fEgUNfRtrvhIFDdvXVGISBQ2oJTeQEgUNdGJaMxIFDT13jjY=?alt=proto
Preview:	CloKBw3XisRGGgAKBw0ql5s2GgAKBw3gf01OGgAKBw3nPpqaGgAKBw1Qsa7fGgAKBw19G2u+GgAKBw3b11RiGgAKBw2oJTeQGgAKBw10YlozGgAKBw09d442GgA=

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	755
Entropy (8bit):	4.764598419421799
Encrypted:	false
SSDEEP:	12:zSmmdOdWGQqfTTLxdXLXETvTTPdXCCni/rTvjCPdXMVjCRQW/TTHRA1W/jC3C+Tr:zSmASWYTHHjEbThpi/rbCsCjTTmcN+Tr
MD5:	7115B3A93075ECB5E36335002FCAFF7E
SHA1:	F655788CAA361AA3F2A6A3A1AAD1FCA871450743
SHA-256:	2C3626D21F1D22DC053238489A0AC7B58C451C95B516C1A13BD8BCF08E555C1A
SHA-512:	3CD1DCE5E5A4EADFCA07D48F60684916F028D15E8621B12DBC1011D6AA62B8F4672401B4BDDA75104264A1B58EBAAE58DB8FDD99522E84734BE9E27AA637310B
Malicious:	false
Reputation:	low
URL:	https://indwes.tfaforms.net/dist/form-builder/5.0.0/wforms-jsonly.css?v=8b5c9ffd0b6fc88dc72529725004f6b69b9e0ae8
Preview:	../* Accessiblity Related Rules /./ These are the rules that should not apply if javascript is disabled. /....offstate {. display: none !important;.}..html .wForm form .wfPage, html .wForm form .wfHideSubmit {. display: none !important;.}.html .wForm form .saveAndResume .actions .wfHideSubmit {. display: block !important;.}.html .wForm form .wfCurrentPage {. display: block !important;.}...offstate-resumelater {. display: none !important;.}..onstate-resumelater {. display: block !important;.}..#saveAndResumeFieldset {. display: none;.}../ Handle page visibility */.html .wForm form .wfPage, html .wForm form .wfHideSubmit {. display: none !important;.}.html .wForm form .wfCurrentPage {. display: block !important;.}

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 307 x 32
Category:	dropped
Size (bytes):	3731
Entropy (8bit):	7.499297254351199
Encrypted:	false
SSDEEP:	48:irzpp4zZdZKrJmv85IEJnrohWIgilrHqmqa5NGh/wl/HX3DavPrDiRy4VeuVkwr8:O4srq8my0dpz5rl/jormyZuVkOK
MD5:	324AD67E733780C9D1A2E43EDBF76FF7
SHA1:	A7D1A31562880CBDF8C56DFD47A84667265A7D45
SHA-256:	90542CE71FCB229ADB654176B9A66DFAA82A9CA08F147AADE9C5A7C7405AEED1
SHA-512:	9E07DC2AC0F22AD8C2F70BD2D397E22AE06B448DB63D30EB80F1B2DCCC9967E96C6AE94CCBB7719805012D04D0A01F838FBCBD6E2CA3BB306F55724BC67BE469
Malicious:	false
Reputation:	low
Preview:	GIF89a3. ....bdf.................................................................................................lnp......uwy...~........vxy...uwx......lmo......kmo...lno......................................................................................................................................................................................................................................vwy........................................................................................................................................................................................................................................................................................................................................................!.......,....3. .@......H......\....#J.H.......... C..I...(S.\...0c.t@...8s.....@...J...H............).6Rax....W.R...J....`....#,X.&.v.Z...M.z.J#...x....U..hK..@..T.O..]. .W.Z.E..\...........Ac.-..c.q

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 491 x 81
Category:	downloaded
Size (bytes):	12764
Entropy (8bit):	7.87581871799207
Encrypted:	false
SSDEEP:	192:ZjJGvpCt78eZgzJ2L13OtLfKN46yfS4KYAC/A09MtcotU5xZqgZfDoQljubr:DyCJ8ey92B3Ot7KK6RC/AWMtcAmvUbr
MD5:	A08FA83818758604500787B5752B0C4D
SHA1:	2BEDCC7F1394EFFC3854D15A2BBC9385947A0D26
SHA-256:	374744E3B2D65581D27416F54509A24A11FB115FCB2E13F3B7E22E0A98D5C70D
SHA-512:	0293042B5E256E5E57C2F507EEE0E76C918804FD0346D00F94F039CE62C56CD38179D419C826BBCC775DD20E9D514705F21C49C07ED69DFAB6D40AA3854A3CBA
Malicious:	false
Reputation:	low
URL:	https://secure2.indwes.edu/_img/hdr_form_iwuLogo.gif
Preview:	GIF89a..Q......&..&.....&.....%..%..%.."..#..$..%..&..&..&..&..&.. ...u...$........)C..&..$..#.....#.."..!..#..#.. .. .$9..,..$.......".....&..&....1J..&..&.)C....&.....&.s..CZ..)..&.j\|..!.......).......$....z........1.Ug..%..8....4....... .......$..$..$..........9Q..".1K.!<...<T.CY.at..%.."..0...La.......^r...}......$....#.....%.l~......BZ..1....4.EV.......!..%...La.=U..%....%....IY..!.@W..$..#...Th.Qf.7O...fx.9K..%.Uj.9Q.Yn.."...........7P..#....1J....Yl....'....#...v..bt.."..#.. .."..9....9.....#..$...... ..$..$..!..#.AR..#.......H^..$.dx.s.......>U.....!.n{..#....5G.."..".0B..'.iv..!.cq...>O....(..$.....!..#..&.9M.. ..$.."..."..'./F....%..(.n..^l..'....'.........p... ..'..'..%..%.^p.x...%..%..%.....'..&..'.;S..!..'............!.......,......Q.@.....lP.`.....D..!A...2.8.`D..%f..#..'B..H..I..2..P.....f...b.M."r.x..g..;`..:...H.fY.&G..5RHM.t..6X.X..B.W),.5d(J..h."Y.d......-................L.....+^.....!.., .d..P.lysf.1...Ytd.MCf....

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48103)
Category:	downloaded
Size (bytes):	48104
Entropy (8bit):	5.506586942957563
Encrypted:	false
SSDEEP:	768:JljZIE0odsXt3B7uwZ5HNIGSJUqMTSVG9btfvFRbL03uOPOulLx4u+1beasDyAZm:3qqG7Tv9t3bL03rFNObeakZE+rAr
MD5:	DCAE66D1EEA1CBC3A409478274A7FD22
SHA1:	7217BEC44E807B8E766FBABAB71FDD5DC1205C10
SHA-256:	1A72CF32FD54486409242C9BB9F1BB277BEF281A8DF9ABCBA8F77DC3646C6E29
SHA-512:	7BD1373DE9C9BBBB0502BC7FE9593BA72309E440DD07C6BB5D67EB5E603CFEB7463A78F017982C1B1F2594D2F6FB2550FABFBDF4F0792E6AE2540A6CC5BCA451
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202403140101/pubads_impl_page_level_ads.js
Preview:	window.googletag&&typeof googletag._gpt_js_load_2_=='function'&&googletag._gpt_js_load_2_(function(_,_m){var OQ=function(a){var b=_.Ef();if("function"!==typeof a)throw b=b?b()+"\n":"",Error(b+String(a));return a},QQ=function(a){if(!PQ.test(a))return null;a=Number(a);return isNaN(a)?null:a},RQ=function(a,b){return a&&a.source?a.source===b\|\|a.source.parent===b:!1},SQ=function(a){a=_.Oi(a);return.05>Math.abs(a-1)},UQ=function(a){var b={bottom:"auto",clear:"none",display:"inline","float":"none",height:"auto",left:"auto",margin:0,"margin-bottom":0,"margin-left":0,"margin-right":"0","margin-top":0,"max-height":"none","max-width":"none",opacity:1,overflow:"visible",padding:0,"padding-bottom":0,"padding-left":0,"padding-right":0,"padding-top":0,position:"static",right:"auto",top:"auto","vertical-align":"baseline",visibility:"visible",width:"auto","z-index":"auto"};_.dx(_.z(Object,"keys").call(Object,b),function(c){var d=a.style[_.HA(c)];("undefined"!==typeof d?d:a.style[_.DB(a,c)])\|\|_.EB(a,c,b

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21224)
Category:	downloaded
Size (bytes):	24203
Entropy (8bit):	5.349731623672621
Encrypted:	false
SSDEEP:	384:PLX1wtH+NTv0vDckjUhzU0ZppJeiUGg2TD7eC43YU/Us3ZYNbHG3W5AJdME9oPaV:jKtPQOaG3WFaoPaIK/zn
MD5:	F1DFC75C82E12DFE846D5593978E422A
SHA1:	12E580A708B09C9A8F4CA7CCBE9DD7DF32EDEE60
SHA-256:	08204982C484FAF6890C60557A4E642971F17625DDDDC0559DC0E3CA728AC9E0
SHA-512:	623412E6D454104251215E38A0F365F879EC70F77306769F5FA40E144C0EAB43237D1FE13B92031AD5848071A6A8910F01576F079E1A0904F4D8DD8959D922A5
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/safeframe/1-0-40/js/ext.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}},ea=function(a){return a.raw=a},fa="function"==typeof Object.assign?Object.assign:function(a,b){for(var c=1;c<arguments.length;c++){var d=arguments[c];if(d)for(var e in d)Object.prototype.hasOwnProperty.call(d,e)&&(a[e]=d[e])}return a};da("Object.assign",f

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3917)
Category:	downloaded
Size (bytes):	148626
Entropy (8bit):	5.598486892822855
Encrypted:	false
SSDEEP:	3072:7UrMzoc00V6HZep97ZOXO9l0NE48gRyke5roRZeE44cw6l7lMV8rMhJFdPAR7xGx:7eMz100V65ep97ZOXO92a7gRNe5rYZeS
MD5:	017E900BFACAF6E233361175094C3421
SHA1:	2A8C13A2512ED3475B8A7C06559210827B3BACED
SHA-256:	2B7E63BC3C3B6D48472E5E16A98EB67E333366E96BFC9BC60AF10AE15FF98B9E
SHA-512:	206B01C1058E9F0EA165F8C664795ABE4842E6D9D4CDCCA1D2FB30BD187044BE115A8ADDDBAC9008458612E471E511987A60A79E9080271A3A8A29EE639CFCC2
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
Preview:	(function(sttc){'use strict';var aa={};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var p=this\|\|self;function ba(a){var b=ca("CLOSURE_FLAGS");a=b&&b[a];return null!=a?a:!1}function ca(a){a=a.split(".");for(var b=p,c=0;c<a.length;c++)if(b=b[a[c]],null==b)return null;return b}function da(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b}function ea(a){return Object.prototype.hasOwnProperty.call(a,fa)&&a[fa]\|\|(a[fa]=++ha)}var fa="closure_uid_"+(1E9Math.random()>>>0),ha=0;function ia(a,b,c){return a.call.apply(a.bind,arguments)} .function ja(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}}function ka(a,b,c){ka=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?ia:ja;return ka.apply(null,argu

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 336x336, components 3
Category:	dropped
Size (bytes):	8025
Entropy (8bit):	7.665606701385958
Encrypted:	false
SSDEEP:	96:ghSpE/RP8wTNr4sw6CJImIBxq9Q9JvtSEV3sXeHAGrnEtccajYi:mqQ8Kasw6CJGBkQ9JvtfRo2AGAtccaL
MD5:	C797619B270D5E7EEB243E0382FBCADC
SHA1:	3D5E6A58D33F0EEEB3BE2A8C1C341F431E533FC4
SHA-256:	DB9F35F475E4F2DE77712C171E4BA7593941067048F339379A4E5EDC0C5DCD17
SHA-512:	A468697EBB2B9A50E98ACD6C1D013837FC966A1A6C55055409693A56CB5C4AF55E12F9BC870F98805B02774EEC2DE73B45586DF7C987E234F712D330B6088F25
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......P.P.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(..

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:d:d
MD5:	9DD4E461268C8034F5C8564E155C67A6
SHA1:	11F6AD8EC52A2984ABAAFD7C3B516503785C2072
SHA-256:	2D711642B726B04401627CA9FBAC32F5C8530FB1903CC4DB02258717921A4881
SHA-512:	A4ABD4448C49562D828115D13A1FCCEA927F52B4D5459297F8B43E42DA89238BC13626E43DCB38DDB082488927EC904FB42057443983E88585179D50551AFE62
Malicious:	false
Reputation:	low
Preview:	x

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 336x336, components 3
Category:	downloaded
Size (bytes):	9354
Entropy (8bit):	7.7586842615088765
Encrypted:	false
SSDEEP:	192:mqP17vsstL7uV+bsXEN+fVuUtkuMBOqcR4fxlb7Pt:lPpvssgV1XdfVbMIqo4Lt
MD5:	417D5E45EFF316522924574A13DC270F
SHA1:	7E2BE450DF6CD7074F9E0B8C4D7A52B02EBEC546
SHA-256:	3D282F6180231B7C54722C0B14EBA943A74BB32C805F543468184C2137E5C18D
SHA-512:	720CAB3778C2669B376EB7EDB2E13D4AB16C3FF9EA991D94B788877AF81A367C4945E9CE49F0450AEEFF1220F9BE91EB8A17E568F9950A66710FCCBEC79D0B23
Malicious:	false
Reputation:	low
URL:	https://rtgcdn.2trk.info/imageresize?url=width=336::height=336::imgurl=https%253A%252F%252Fcdn.shopify.com%252Fs%252Ffiles%252F1%252F1996%252F9707%252Ffiles%252Fecoflow-us-ecoflow-wave-2-portable-air-conditioner-delta-pro-portable-power-station-30313001386057.png%253Fv%253D1683344965::campaignId=64180
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......P.P.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(..

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 336x336, components 3
Category:	downloaded
Size (bytes):	5886
Entropy (8bit):	7.344971691011853
Encrypted:	false
SSDEEP:	96:ghSpEFM+W7kZ5dC1qBBaO7P2nEFbrC7YuM83EVeEcn1T3+Xm1q:mqFZ7kZja6CnEFCm8U2n1TuXmM
MD5:	5787798A2B6D350885574866F13E2D30
SHA1:	18E2C4F1F9300F7E272BABDD912722BF149B929B
SHA-256:	E3CE403915CE22195CEB0806FF6286353A28B81D1A295691003196681FF15F03
SHA-512:	73F25957F27B2350F94DBF9CABC1C64B2B48E4B76958C02D40388CF3147CCDC3EEDD89AF5DA3D20091942A916B6EDE7DBD30FD7FD561C2E4ADBDD82E6089A7CE
Malicious:	false
Reputation:	low
URL:	https://rtgcdn.2trk.info/imageresize?url=width=336::height=336::imgurl=https%253A%252F%252Fcdn.shopify.com%252Fs%252Ffiles%252F1%252F1996%252F9707%252Ffiles%252Fecoflow-ecoflow-double-voltage-hub-power-input-output-delta-pro-30641334714441.png%253Fv%253D1704179963::campaignId=64180
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......P.P.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...jw.?.o/......AH..NH..rp.8.q.........xV..ai-..\G..a....?y....#...n.e.i.j.}.\Z.....

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	dropped
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2791), with no line terminators
Category:	downloaded
Size (bytes):	2791
Entropy (8bit):	4.951012155281539
Encrypted:	false
SSDEEP:	48:lUQIzy6yt1sFAG14wgkbD+jA3D+bqLldb:lUS6yteFN1bgOD+jo5D
MD5:	EBFDB99E8E4DCFDE3349E6F196D2F103
SHA1:	78070076FF046C48498D81F561131A056F6A8493
SHA-256:	4FD81C7F97EA09B046D04E85F4C71FD72ACF741CE71B2B51191259CB62E105B7
SHA-512:	DF4194FFE9D44FDC6D3C7101CBA672E7A1E064C1EFA826DE0B25A444CDCCCC6F74AD1B56A96CE9669A53325357F0A58FEDA4752B71AF4A32A3D6CD225F221E42
Malicious:	false
Reputation:	low
URL:	https://cdn.2trk.info/rtgstat/50version/css/slider.css
Preview:	.mainad-wrapper{position:relative;padding:0;*zoom:1;height:100%;-ms-touch-action:pan-y;touch-action:pan-y}.mainad-wrapper img{max-width:100%}.bxslider{margin:0;padding:0}ul.bxslider{list-style:none}.mainad-viewport{-webkit-transform:translatez(0)}.mainad-wrapper{border:0 solid #fff;background:0 0}.mainad-wrapper .mainad-pager,.mainad-wrapper .mainad-controls-auto{position:absolute;bottom:-30px;width:100%}.mainad-wrapper .mainad-pager{text-align:center;font-size:.85em;font-family:Arial;font-weight:700;color:#666;padding-top:20px}.mainad-wrapper .mainad-pager.mainad-default-pager a{background:#666;text-indent:-9999px;display:block;width:10px;height:10px;margin:0 5px;outline:0;-moz-border-radius:5px;-webkit-border-radius:5px;border-radius:5px}.mainad-wrapper .mainad-pager.mainad-default-pager a:hover,.mainad-wrapper .mainad-pager.mainad-default-pager a.active,.mainad-wrapper .mainad-pager.mainad-default-pager a:focus{background:#000}.mainad-wrapper .mainad-pager-item,.mainad-wrapper .main

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 145, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5380
Entropy (8bit):	7.9138219412651
Encrypted:	false
SSDEEP:	96:FdmpwsMHIQhDke1g5U2xzDHThuXawymN2AOdBlVYUL+C/ixSZEQ1mmQ1aX3gt:Fc6sYrCN4KMN2tBPYS+XQsmFnc
MD5:	5B6D9A172800420E357FEFCD6FFF108B
SHA1:	A0AC05607E8532124D76ADDD8D66BF68BB557755
SHA-256:	921849FD090598E7C4F2F6DD057A0C9B54D8D40A2737B19F48DCEA591646BC57
SHA-512:	F3C09B8C918A9EE70892FA8D5EA19DBCDECC1D55715048CE2DE3C8E01E2E37103B94287CA447828DFE10E742D97BDAA8094BF6D8B589BE24C1A41FFE27802E09
Malicious:	false
Reputation:	low
URL:	https://browser-update.org/static/img/blog/logo-browserstack.png
Preview:	.PNG........IHDR...X.........(.6.....gAMA......a.....sRGB.........PLTE... "! .\.K .{E.`..h..h..g..h.l>.m= .o;..hm.U!......=D..RW......KD....Z.]C....N..S..Tt.v....J-...+8;D..1RZ1p..xL_.."..................tRNS.bz..H+.....#...Kv...w.......IDATx..yw.8...M.B1I e)...{.....b/6^..+......c.)C.-.x."....H$..D".H$..D".H$..D...r....d4.....V....._htH..o...Z.D.Z.\|%.H.............U.Tm.&.HNfUS5[.....b"...X....m...Z...Z$.V3Sn.j..R.uFh. }...j...^\\|.tqq;Rr....r-R'.Zm...hC.dZ.#.I..].n..$..:.S<$..'8W+#U.o..pH.Er...Xmmk.5.L.T.p.q...z>.P8$......w...~]otyy..5j.pH.Zo...7o.....T...N..!........~.P.T5lm..MkHd.W.WEv..j.QU..X,..n...4....E.....k-..pxFdQ=XII...O....Z%Y.9......N..../..5-...."..<..:....dW...LK..%YC".....+........%.D...,.g.<q........-..2......K..0Ww?@Uhm.....eMh..p.s...U..L....4.s .....Ww?LzljC..u..S...@(d.....XT..B!k.fm-..,2..Vo;p.%.J.m.e.'4.=5..).j.z}~z(.....u.....C..=...z.u.q..4..j..UYV.u..-kN.a...M7.-7...T

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1539
Entropy (8bit):	7.788046637141617
Encrypted:	false
SSDEEP:	48:hYmEM62sh1f6lvpX07HAlyS85dmaujPVl:mW6D6lp07CyvjRG
MD5:	82C817167577EE35DAC35F52311C609B
SHA1:	D76E36B63B9F09577C32A6F90D2C55F31799901E
SHA-256:	75FA6025B77FF1B3FD601EC423C62F4250DAF6948A637D22C9BCD2E7835DDFB6
SHA-512:	7CF9B40C21FC4DE1175254F163911798D9EDB100097A5C378261D973174A2DA0F2AC8C73E01D458054E70AC5CD2AB6A80A96B53F96F804CE276D9B6C4A7C70E8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....D.......PLTE.................................................................................f_x............}....}z.xt.........{y.yv.uq.rm.iax.............................\Tn..............................................................~\|.....}.\|v.pk.ZQjXOh.....................................................................y.xr.so...oi.nh.kf.kd\|gb\|e]vbZu`Ys.Q.......................................................................{w..z.{t......rl}pi\|..x..t..i..`;6..............................................................\|..{........~.wo.~{.vr...~zzy..u..onnnWNg..cddc..a``_..Y.Y.XkgVVVU.IHHHGGGof?..>MJ=.:CA5PI(&&&`U .........=.CF....tRNS."...fD..1@...!IDAT8.m.c..Q..Swvg.3.Y.Y#......mD...m[_...D....<.=.?......poJJ.....Z...Z...hbS.......N.,Y'.+Mt/.......-..l-..4.*T.sypb....).=v...,v..FY8.\|b^.N{..g}Z-.29.pw.L.6#..9b....I.Nal.)DBl....).w.#6...:...i...Z .....4./...gG.<.N.o....-8..v..L.......//.F......@`. ]....lL.x

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/pubmatic/26FC5BC4-C0EA-481E-AC6D-297EF4930E35?gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39827), with no line terminators
Category:	downloaded
Size (bytes):	39827
Entropy (8bit):	5.426881544196986
Encrypted:	false
SSDEEP:	384:D4mbcNLkkKhS/KQ6Nb5mqfAubZB2JjP2F6EUnW5O7WIDXrD+9PM5C9bDuwGGXo0+:DTbAKrL7fAovYr17WIDXngc+pHgQTC
MD5:	21F8671135AFBD2E874C42D3DC478AFA
SHA1:	FBBE938AEBBAF60E3B8388721A41905B36681E60
SHA-256:	F6CD320C5BA515FEF3997AFE473332231160A2CB715F1A99679A7CEFA1CF0BE0
SHA-512:	830FB51CC3DDE68BD79A3961E6F5C2D435A966CE552FBE683A45AC29F20F8EB7C6F048DEF36E590E851A672DA740BD8F7BDA573CE9E65B37F0DD6D59D8CA5F53
Malicious:	false
Reputation:	low
URL:	https://tags.crwdcntrl.net/lt/c/16589/sync.min.js
Preview:	var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== 'undefined' && typeof console.log !== 'undefined' && typeof document.createElement !== 'undefined' ); }; if(!lotameIsCompatible()){ if(console && console.error){ console.error('Lotame: This browser does not meet the minimum requirements.'); } } else { function sync16589_a(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function sync16589_b(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:sync16589_a(a)}}var sync16589_aa="function"==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},sync16589_c; if("function"==typeof Object.setPrototypeOf)sync16589_c=Object.setPrototypeOf;else{var sync16589_d;a:{var sync16589_ba={Sa:!0}

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:d:d
MD5:	9DD4E461268C8034F5C8564E155C67A6
SHA1:	11F6AD8EC52A2984ABAAFD7C3B516503785C2072
SHA-256:	2D711642B726B04401627CA9FBAC32F5C8530FB1903CC4DB02258717921A4881
SHA-512:	A4ABD4448C49562D828115D13A1FCCEA927F52B4D5459297F8B43E42DA89238BC13626E43DCB38DDB082488927EC904FB42057443983E88585179D50551AFE62
Malicious:	false
Reputation:	low
URL:	https://cdn.fuseplatform.net/telemetry/noconsent?cwvRep=%5B%7B%22name%22%3A%22FCP%22%2C%22value%22%3A%221922.1000000000058%22%2C%22rating%22%3A%22needs-improvement%22%2C%22id%22%3A%22v3-1710778924287-4521129016176%22%2C%22delta%22%3A%221922.1000000000058%22%7D%2C%7B%22name%22%3A%22LCP%22%2C%22value%22%3A%222095%22%2C%22rating%22%3A%22good%22%2C%22id%22%3A%22v3-1710778924288-8800829427481%22%2C%22delta%22%3A%222095%22%2C%22element%22%3A%22p%22%7D%2C%7B%22name%22%3A%22CLS%22%2C%22value%22%3A%220.007720449852789149%22%2C%22rating%22%3A%22good%22%2C%22id%22%3A%22v3-1710778924358-3121739210766%22%2C%22delta%22%3A%220.007720449852789149%22%2C%22element%22%3A%22div%20%23co%22%7D%2C%7B%22name%22%3A%22CLS%22%2C%22value%22%3A%220.00863614285346987%22%2C%22rating%22%3A%22good%22%2C%22id%22%3A%22v3-1710778924358-3121739210766%22%2C%22delta%22%3A%220.0009156930006807215%22%2C%22element%22%3A%22div%20%23co%22%7D%2C%7B%22name%22%3A%22CLS%22%2C%22value%22%3A%220.009713463701785415%22%2C%22rating%22%3A%22good%22%2C%22id%22%3A%22v3-1710778924358-3121739210766%22%2C%22delta%22%3A%220.0010773208483155442%22%2C%22element%22%3A%22div%20%23co%22%7D%5D&cmpj=unknown&v=1&ttm=1710778929581&cookie=true&res=1280x1024&device=desktop&browser=chrome&fuuid=e77f8bfe-60b6-5c8b-a657-64bfafdad065&fid=2789&pubid=5&url=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html&sid=bac552fa15f25121a86b&srate=100&adserver=gpt&etm=7549&e=web-vitals&tenant=publift&account=browserupdate
Preview:	x

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (634)
Category:	downloaded
Size (bytes):	1174
Entropy (8bit):	5.74166936214599
Encrypted:	false
SSDEEP:	24:hY6t2eJJBewfHDdUg8EcvjHODQMJXeK+C6uS/MLmeK+C6uSGymWAuDSXeMzCUtVv:9V4goLHODS1CTXT1CTVyPyCM6Nu
MD5:	2FE2B1F17888E326B010A8CDA72D48D3
SHA1:	59CBBEEDE4C472024C482BAE8529144119BBBD27
SHA-256:	9A9B7FB32E01FD70747F32EFDBD0472FD681C85EEBB0C42D10C7A514820A0062
SHA-512:	30BE2E73020EB97A67709E47DED40E999D352DA9B94EDD946D1315BDA65AD616AAA3CDFCFA675D061E4ED4AE1BAE3F0D245908D44411B2425C49B4345D2F6607
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/s/cookie_push_onload.html
Preview:	<!DOCTYPE html>.<html>.<head>. <title></title>. <script type="text/javascript">(function(){var f=null,g=null;function l(a){var b="";n(a,function(a){b+=String.fromCharCode(a)});return b}function n(a,b){function c(b){for(;e<a.length;){var c=a.charAt(e++),d=g[c];if(null!=d)return d;if(!/^[\s\xa0]*$/.test(c))throw Error("Unknown base64 encoding at char: "+c);}return b}p();for(var e=0;;){var d=c(-1),m=c(0),h=c(64),k=c(64);if(64===k&&-1===d)break;b(d<<2\|m>>4);64!=h&&(b(m<<4&240\|h>>2),64!=k&&b(h<<6&192\|k))}}.function p(){if(!f){f={};g={};for(var a=0;65>a;a++)f[a]="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".charAt(a),g[f[a]]=a,62<=a&&(g["ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_.".charAt(a)]=a)}};function q(){for(var a=window.location.hash.substring(1).split(","),b=0;b<a.length;b++){var c=l(a[b]),e=window;e.google_image_requests\|\|(e.google_image_requests=[]);var d=e.document.createElement("img");d.src=c;e.google_image_requests.push(d)}}var r=!1;

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (603), with no line terminators
Category:	downloaded
Size (bytes):	603
Entropy (8bit):	0.935856668666257
Encrypted:	false
SSDEEP:	3:qVZqp6OqPFFSKPCQ4:qzc6OqPbRM
MD5:	2C739853E3EDFA26869416E3D4E5D369
SHA1:	C263DC1C36C954B252BC7E775E6E82865D9B29B8
SHA-256:	00DAEF3B4A945D15F73EFA05E0CE2CA51F2F8252E1DA8FAE5C2EFB0F6DDDACCE
SHA-512:	EAE3DF357290171698ED241A53688A1907712A53D5AC7B8CA06C618335FE45FC556C9903DCC09283A4DABB6AC896CA67AF1AEAFA528593DB532F2E8586540A86
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5884294479391638&output=html&h=280&slotname=3654094576&adk=229048865&adf=3493768504&pi=t.ma~as.3654094576&w=336&url=https%3A%2F%2Fbrowser-update.org%2F&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1710778930128&bpp=1199&bdt=1523&idt=2831&shv=r20240313&mjsv=m202403130201&ptt=5&saldr=sd&correlator=4983246607908&frm=24&ife=3&pv=2&ga_vid=1057831115.1710778933&ga_sid=1710778933&ga_hid=1798790202&ga_fc=0&nhd=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=-12245933&bih=-12245933&isw=336&ish=280&ifk=2444235967&scr_x=-12245933&scr_y=-12245933&eid=44759875%2C44759926%2C44759842%2C44795922%2C95322746%2C95327951%2C95327954%2C31081901%2C95322184%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=2513308701797547&tmod=1386792793&uas=0&nvt=1&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C336%2C280&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=1.7nq73craib6t&fsb=1&dtd=2860
Preview:	<html><body style="background-color:transparent"></body></html>

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6482), with no line terminators
Category:	dropped
Size (bytes):	6482
Entropy (8bit):	5.386219794662181
Encrypted:	false
SSDEEP:	192:UaveH+XTFLLgXxQRCJS3ZE1m1j/YMvKTP+pmY2/:UdqTFPKt16EMiY2/
MD5:	A4D296427FC806B21335359E398C025C
SHA1:	46928CCD1407B4E55192BB9D0A07DCFEBD9687B7
SHA-256:	06B99248A163333E36980A6CFB756F1A7DE60FA49517162B87B1A44D5D48F844
SHA-512:	4C0326040E2C7837FA78185CC5A185EA43697DD4F3591757F84BDA76BAC746BADFBE047DAC2C1DC677561FD6CC6C5D5B4BEBB7D671CB82AB04E070DA766FE6AF
Malicious:	false
Reputation:	low
Preview:	var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"adViewability":[{"error": {"m": "'+amzn_aps_csm.errors[b]+'"}}], "c": "aps_communicator", "api": "RTB", "error": 1}',"https:"===document.location.protocol&&/^http:\/\//.test(a)===!0&&(a=a.replace("http://","https://")),(new Image).src=a+c+"?cb="+Math.round(1e7*Math.random());amzn_aps_csm.errors=[]},function(a){function b(a){return a?a.replace(/^\s+\|\s+$/g,""):a}function c(a){if(a&&a.s){var b,c=a.s.length>0?a.s[0]:"",d=a.s.length>1?a.s[1]:"";c&&(b=c.match(j)),b&&3===b.length\|\|!d\|\|(b=d.match(i)),b&&3===b.length&&(a.f=b[1],a.l=b[2])}}function d(a,d){if(d=d\|\|{},!a)return{};a.m&&a.m.message&&(a=a.m);var i,j,k,l,m,n={m:e(a,d),c:a.c?""+a.c:a.c,s:[],l:a.l\|\|a.line\|\|a.lineno\|\|a.lineNumber,name:a.name,type:a.type},o=0,p=0;if(i=a.stack\|\|(a.err?a.err

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	136
Entropy (8bit):	4.829648675481792
Encrypted:	false
SSDEEP:	3:rdiF5PfViEGoSPQun0SFT+fIoCERoQqyoY:rdijVidPXNFcrCCozY
MD5:	97BA105F14BE0CB14CE33B7593B94F66
SHA1:	56117D794BE0DB0A7D51D2D4FC63BD7F3AC6CF5F
SHA-256:	CF45927E3D895D6C9A6679060EAD9D05FF55D8C4E3434A9FC9EFA94133913E88
SHA-512:	102FE13C625186840733E1E8A40CDB7FB624CDA3BFEEF076A4B3F77EA2AF7B61D3237021E130169206C99B21901460DEA51564A5A73DAF64132A2766BA668E85
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISVgklAbAPtBscmBIFDTFf9ZMSBQ0-o1z0EgUNyTmyHxIFDWh-HGkSBQ3FRamsEgUNtOuTVBIFDTx4RyYSBQ0P9p3GEgUN-aMjUBIFDeuHFzQSBQ3_eEV0?alt=proto
Preview:	CmMKBw0xX/WTGgAKBw0+o1z0GgAKBw3JObIfGgAKBw1ofhxpGgAKBw3FRamsGgAKBw2065NUGgAKBw08eEcmGgAKBw0P9p3GGgAKBw35oyNQGgAKBw3rhxc0GgAKBw3/eEV0GgA=

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8993
Entropy (8bit):	7.960051115426514
Encrypted:	false
SSDEEP:	96:IQFlI/I4o6SZ/zeCRDIM4v1gzBgvSSIpeasE39kbd67D2YcYjyzBPpb//xqaKwUb:ZFlIQ4hSZC3v1uS6e+UdsDWYjuNWZdSe
MD5:	85D58A8B09C21AE86D086683F1DD417B
SHA1:	9A425BC319508E0D6053A712CC7F50E93F3BE511
SHA-256:	BE4C3A4457D1BAABB25DDC25BB7828817BF1344F2F586D6C612CDF04CA346E45
SHA-512:	89C7404CD886242A6E703F3CE950B0225258F85A81235B2A897A05E44957211DC37C6023F4071F44A94B8A6946EABAE2EB960F8EEC8D6123F16B6C7A91003919
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............X......sBIT....\|.d.....pHYs..=...=....t....tEXtSoftware.www.inkscape.org..<... .IDATx..y\|$U...v...t.d`f...e..D\@.W@...P...O.....<E..5.3".....P..tD\|>....D..E..f..NzIw..G20K..t......L...H.r...\......[.B&.&.}.]MY.k.e.,CY!.2...e.Bb...y.g9`....QtD1S..q...{..V....?l....N..S.H.*...v.vWew..(loI.8.........z...K....(..0..R#.vy.P..k....V8P`..u.@..W..jd...........,D....`..Rb.pU9..@`/ ...:.C...7....=...-....2.....Z..F.7....... ...TD..(&o.3.p...HD.."..M.;...".K...&.........:.....Y...a...:J...G..N...A...pe..U..[S.,J.....Q........F...+..\|Qz....c.Ec.......TN.xY.z..1D....]....c..o....B>s..g./.[...C.gTt8...... Y....I.GS.C.#...[..f.(.vz.k...... .G..Y...`..,..n..Z.s..[..,(.....E...g.Z.-"?5R.H.s.waK..a..pjO.0...ak........sZ{F....zhj...,-..3.......>yU9?9....Q.[.\|hZ...2...!{;f#...x.D...a+...3..tt.Ly.........P...i.WS...~3..V....#rJ.+{c.B..)....e.....>...._P......>7ix.....r%...D....=....W..zKwa(.AQn"2.Da.......c..2..9..y...d.+(G..%...:...l.G..3

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5362)
Category:	downloaded
Size (bytes):	25908
Entropy (8bit):	5.508770244018939
Encrypted:	false
SSDEEP:	768:el2PxL2acg/2OPgef7USV7yc/jfr1v1u1mX46zxffMbkwkWB:9Lnb7/XI6qn
MD5:	608381731397CAFF8B6D7EF5E57804DD
SHA1:	CD330DD924A03BEE97436223409942771E9C90A8
SHA-256:	F4D6D3476A113C1EA91F0C5D9F08EB0533AAB84E6E6362B4197C36E620444D4B
SHA-512:	638275C6F300F43A289F749DA1C44E2E038B43EA6899087D37A130FD7B2160947372E4D920971B56D60CF3CF185B6F4B8FF978BF80324E7E94CD5CFC9F1D00A9
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/show_ads.js
Preview:	(function(sttc){'use strict';var aa={};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function ba(a){a:{var b=["CLOSURE_FLAGS"];for(var c=m,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1}function ca(a){return a};var da=ba(610401301),ea=ba(188588736);var p;const ha=m.navigator;p=ha?ha.userAgentData\|\|null:null;function ia(a){return da?p?p.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function t(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};function w(){return da?!!p&&0<p.brands.length:!1}function ja(){!t("Safari")\|\|ka()\|\|(w()?0:t("Coast"))\|\|(w()?0:t("Opera"))\|\|(w()?0:t("Edge"))\|\|(w()?ia("Microsoft Edge"):t("Edg/"))\|\|w()&&ia("Opera")}function ka(){return w()?ia("Chromium"):(t("Chrome")\|\|t("CriOS"))&&!(w()?0:t("Edge"))\|\|t("Silk")};function la(a){la[" "](a);return a}la[" "]=function(){};var ma=w()?!1:t("Trident")\|\|t("MSIE");!t("Android")\|\|ka();ka()

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (707)
Category:	downloaded
Size (bytes):	13970
Entropy (8bit):	5.114917555530672
Encrypted:	false
SSDEEP:	192:um24X6r3GwDxf/eJ+b2a93KDpPgYSru1MPRpuPZI4YRCT9/:5X6r3pR/eYrKRgYSrKCp4YRCT9/
MD5:	9DCF1C33278ADB58BB73167F37639A5D
SHA1:	9278AFCF5345566D28A5DC4B241DF4745A9A32C1
SHA-256:	13172AB6A52C259BDF2510D889608158BFAE43FC8F8C01037B77E811E1AF33B3
SHA-512:	4D2A33563399FD306620DD47433A059811E6D0A6AEA5F5F37EAC97A0522108D1009D5740177A3283E65C862A1041CAC904541BA5EE4A2F07B71699CF27AEEEF7
Malicious:	false
Reputation:	low
URL:	http://iwu.marketing/
Preview:	<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" lang="en">.<head>.<meta charset="utf-8"/>.<title>.IWU Marketing.</title>..<meta content="width=device-width, initial-scale=1.0" name="viewport"/>.<meta content="noindex, nofollow" name="robots"/>... Bootstrap Core CSS --> <link href="css/bootstrap.min.css" rel="stylesheet" type="text/css"/> Custom Fonts --> <link href="https://fonts.googleapis.com/css?family=Open+Sans:300italic,400italic,600italic,700italic,800italic,400,300,600,700,800" rel="stylesheet" type="text/css"/> <link href="https://fonts.googleapis.com/css?family=Merriweather:400,300,300italic,400italic,700,700italic,900,900italic" rel="stylesheet" type="text/css"/> <link href="font-awesome/css/font-awesome.min.css" rel="stylesheet" type="text/css"/> Plugin CSS --> <link href="css/magnific-popup.css" rel="stylesheet" type="text/css"/> Custom CSS --> <link href="css/creative.css" rel="stylesheet" type="text/css"/> .</head>.<body id="page-top">.<style>

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	93910
Entropy (8bit):	6.015317666774006
Encrypted:	false
SSDEEP:	1536:N7mYoVwQtC5xqNmQKob7meoVlgC5xYs66oS:w+ENm3Zcs6O
MD5:	7E5892895E6F97B7C666B7AB680C0786
SHA1:	520DBB0B1A7E18A127BF32ADB08D0D2EDDCE1325
SHA-256:	1432D6FC65F5FBBB4F6684529919F83A4F1BAA8C1FF014139D3692FB34DCF8A5
SHA-512:	C4370C4ABA8DF872EA836048FAC4404ED8EB545214FC346094CB0A37989E3FD71DEED1A1869E213D714028DFA398F55965E940D42DA91B0F7C1D969F855AA0BC
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1702785379071819&correlator=202337239561750&eid=31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403140101&ptt=17&impl=fifs&iu_parts=71161633%3A1007669%2CBROWUPD_browserupdate%2Cupdate_vrec_1%2Csticky_footer&enc_prev_ius=%2F0%2F1%2F2%2C%2F0%2F1%2F3&prev_iu_szs=320x50%7C300x250%7C336x280%2C728x90%7C970x90&fluid=height%2C0&ifi=2&sfv=1-0-40&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1710778927012&lmt=1710778927&adxs=875%2C268&adys=95%2C952&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0%7C1&ucis=2%7C3&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&vis=1&psz=350x0%7C0x-1&msz=300x0%7C728x-1&fws=128%2C644&ohw=0%2C1263&ga_vid=1126053991.1710778926&ga_sid=1710778926&ga_hid=1902104362&ga_fc=false&td=1&topics=9&tps=9&htps=10&a3p=EhwKDWNyd2RjbnRybC5uZXQYhIn7kuUxSABSAghk&nt=1&psd=WzE1LFsyLFtbIi83MTE2MTYzMywxMDA3NjY5L0JST1dVUERfYnJvd3NlcnVwZGF0ZS91cGRhdGVfdnJlY18xIixbXV0sWyIvNzExNjE2MzMsMTAwNzY2OS9CUk9XVVBEX2Jyb3dzZXJ1cGRhdGUvc3RpY2t5X2Zvb3RlciIsW11dXV0sbnVsbCwzXQ..&dlt=1710778923330&idt=2820&prev_scp=in2w_key20%3D1p09%2C1p0r%2C1p0x%26in2w_key21%3D2738828490%26amznbid%3D2%26amznp%3D2%26is_refresh%3Dfalse%26slot_prev_count%3D0%26adunit_prev_count%3D0%26in2w_key15%3Du0%7Cin2w_key20%3D1p09%2C1p0r%2C1p0x%26in2w_key21%3D549476650%26amznbid%3D2%26amznp%3D2%26is_refresh%3Dfalse%26slot_prev_count%3D0%26adunit_prev_count%3D0%26in2w_key15%3Du0&cust_params=in2w_key15%3Du0%26intowow_optimized%3Dfalse%26fuse_site%3Dbrowser-update.org%26fuse_path%3D%252Fupdate-browser.html%26fuse_query%3D%26fuse_category%3D%26fuse_industry_2%3DIAB19%26testmode%3Dfalse%26inskin_yes%3Dtrue%26fuse_uuid%3De77f8bfe-60b6-5c8b-a657-64bfafdad065%26fuse_publication_id%3D5%26fuse_flavour%3Ddefault%26GPT_READY_MS%3D4000-4999%26PREBID_READY_MS%3D3000-3499%26UAM_READY_MS%3D3500-3999%26CMP_DETERMINED_MS%3Ddisabled%26CMP_GDPR_CACHED%3Dfalse%26FUSE_LOADED_MS%3D2000-2499%26FIRST_ZONE_MS%3D3500-3999%26HB_AUCTION_START_MS%3D3500-3999%26CMP_JURISDICTION%3Dunknown%26CMP_ALLOW_PERSONAL%3Dtrue%26fuse_exp_0%3Dfalse%26fuse_exp_2%3Dtrue%26fuse_exp_3%3Dtrue%26fuse_exp_4%3Dtrue%26fuse_exp_5%3Dtrue%26fuse_exp_6%3Dtrue%26fuse_exp_7%3Dtrue%26fuse_exp_8%3Dtrue%26fuse_exp_9%3Dfalse%26fuse_exp_10%3Dfalse%26chrome_label%3Dstandard%26zone_count_above_vp%3D1%26GPT_AUCTION_START_MS%3D4000-4999&adks=2065841319%2C1568334319&frm=20
Preview:	{"/71161633/BROWUPD_browserupdate/update_vrec_1":["html",1,null,null,1,280,336,0,0,null,null,1,1,[["ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw",1744474928,"/","browser-update.org",1],["UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg",1744474928,"/","browser-update.org",2]],[107027455473],[208234953],[66203433],[415142193],null,null,null,null,null,null,null,1,null,null,null,null,null,null,"AOrYGslUTvfKfeoGpdeKwyTd_81nkWtgf7m4mClTKy6CwPgmaCtV_f3EkIRA4_tVh0jv5grwH3o4UavS88ZY5Wzj334t87MsLF4","CMPpyZKc_oQDFfePgwgdA80M5A",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"2",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,[["ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc",1726330928,"/","browser-update.org"]],[]]}.<!doctype html><html><head></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script src=

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4974)
Category:	downloaded
Size (bytes):	21277
Entropy (8bit):	4.832400276322665
Encrypted:	false
SSDEEP:	384:CsZ97WRJzbfbjz5d/7jSWzAfgNhjI5LD05fdpiOXfcvYnhAs:CsZ9IJPfb/5VAo7IJgV/0vYnhAs
MD5:	8351ADF19C173B707E0C820ADE6F6C1F
SHA1:	86B5141D6E6D9C93278633B747268208BC18B8D0
SHA-256:	23543AAA71824CC6FEE0E06935013BAB69DF682EBC05C606472875C9A9A932BB
SHA-512:	67BCE37294DA2B7B13BC4AE7C6ECE601B7A5A28A4DB42A191A1028184C72CF0A4820A8C608F7A7DA5442F6D80F3CCCD648D12350BAFDCCF58C2B7F71C1087E96
Malicious:	false
Reputation:	low
URL:	https://indwes.tfaforms.net/js/iframe_message_helper_internal.js?v=2
Preview:	/*. This script must be included in a FormAssembly form.. * When loaded in an IFRAME, it will continuously send its updated. * height so that the container can adjust IFRAME height to match. * it content's height.. . The posting is done through a cross-domain message mechanism.. * simpleStorage js library is also used (included minified below) -. * it is needed to store data between page reloads in the IFRAME.. . The message sent in the following format:. * h,iframeID,targetUrl. . - h: either new height in pixels or a command like "submitted";. * the message receiver in the parent window will handle it accordingly.. * - iframeID: the unique iframe ID for which the message must be applied,. * in other words it is the IFRAME running this script;. * - targetURL: the fallback solution if no iframeID is available;. * indicates the value of IFRAME's "src" attribute to identify. * the IFRAME. Identifying IFRAME by targetURL will not work after. * form resubmission as the

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=Y2QwZTM0M2MtOGJhZi02M2U4LTYxY2QtMTFkZDA3MzZhOTJk
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6542
Entropy (8bit):	5.396347276510722
Encrypted:	false
SSDEEP:	192:pNa5N4NXNO3qNWNIXNENFQNDN8NW3XNtNGqN+lNn1NhN6ND3eNhNzTNM:vafWdMQcMCFe5Kkdjjwn73Az03FM
MD5:	E0FD6BE3182DD641E1FF9568A94E74A5
SHA1:	0A1567A992D1A58E530A6A52AA82DAE0A4F48C57
SHA-256:	BDB7D822D6AFD1C8354749A111F68D56CE5E5DB03B8A3028698ACFC78358E06D
SHA-512:	2BB56FA556688262F4F99DC67905342041FCCF570CF2E9AEBC54929FDAF39B954479E75034B3BE288024E382A1BEB93C8E0CB76E8623AEF38CA947E8B9F13470
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Roboto:300,400,700"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2) format('woff2');. unicode-ra

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	587
Entropy (8bit):	7.353364888547681
Encrypted:	false
SSDEEP:	12:6v/7s6uxrvtrBQIunXuycw8toGufjibQLTlkULUjGwLDXuhBuBGxz:hZpYIGubwPtfe0tkRjGwLTuhBeGh
MD5:	E2777B6F454A35516C560607F5C98DB6
SHA1:	A27ED3357F2EB51153820F12CF4C6253944D587F
SHA-256:	785A18AEF2086A8EBE4DF2B351D4656C03E110F3FEBF4220424049716B085BA1
SHA-512:	40C8FC8E030DAA91CAFC5C3B0B0BA9117AB8C1D11C7C93338028456EF8ABBDD8ECB02B7CE79D8C87E6E6C1A9F0A966D7F98A344848E9E4EB6C4EAC53A426C80B
Malicious:	false
Reputation:	low
URL:	https://www.indwes.edu/_shared-resources/_hannonhill/_files/images/favicons/favicon-32x32.png?v=GvJKryKOzM
Preview:	.PNG........IHDR... ... .....D.......gAMA......a.....PLTE....)g......ZZZUUU.....J..H..M............Qaaa{{{iii.....p.......ppp......G.....Y.a..5o.V..G\|.............^.........................F.........8a....ZIDAT8...r.0.E...f......B........d...Cgz...{$Y.......r...s..H.$.4.B...B).......B..@..k.%.b...B6T.J..iZ.,.>ji..#U..d.u.L..K..1..H%..r....;.;.zDf.X...Q..l.w....8.\C.fD..]...d.A.1v8.pp.......Vc.W..L.d7.........6...A^..`.8G<:....&.u..T.Y...n.OV.....H.`.....t8..r.lK.&.*.Yf..(`b....AN..@..q.A....}r..m.@...rw..\]...A#.A..dm..o.^.P..q..J..b....IEND.B`.

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.5
Encrypted:	false
SSDEEP:	3:YGKeMfQ24:YGKed24
MD5:	055DE8F64447F10ED2C4C7F78E27B7CD
SHA1:	BBFCC7FBB135D3893E9BD559E44E069F57DFAB31
SHA-256:	30C714BF4216E577686D238B98561D093672CB25BF90BAAB50DD956F75CDA4B3
SHA-512:	1A726490120152235BBCE20368630EF20FAC7964BA32F846FAC2C1F1A58EE9722356AD94FA6342685E8CEB5015CE2E944EDD739B901D3D9B0A22A5238118142B
Malicious:	false
Reputation:	low
URL:	https://api.btloader.com/country
Preview:	{"country":"US"}

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=476a305c-888e-468c-8d57-ea927e6c6f82&ttd_puid=da9fa8fc-3c38-47c1-bced-e79257211d8c%2C%2C
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1595)
Category:	downloaded
Size (bytes):	22168
Entropy (8bit):	5.51091601322237
Encrypted:	false
SSDEEP:	384:uea819dVXUWG+FsIR3X/UGxT7qPBPmcLlLJ8qpJuXVr7W6TJh2wzprRo2Iojq5Kn:379dpKtIRn8GxT7UPmcRpJuXl7WQ2yln
MD5:	CE87FE13C33E156CD3E73B33F451446B
SHA1:	668E876DD19538558F1774E7229D1C9ADC6241EA
SHA-256:	7B2685EA894C514E15F58420B40933B08F0B2BAA4CEF2A68479ACC9A01323B0A
SHA-512:	9144EBE7C91A53CA336D456497EC9E3761DBF73E9E99131373CB3F28D5C4055E0EBED25D154A2934BACB5335CAF7D8881520A77606D803968E5FEEF5275FB062
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240313/r20110914/elements/html/interstitial_ad_frame_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var n=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=n,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1}function ba(a,b,c){return a.call.apply(a.bind,arguments)}function ca(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}} .function r(a,b,c){r=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?ba:ca;return r.apply(null,arguments)};var da=aa(610401301),ea=aa(188588736);var t;const fa=n.navigator;t=fa?fa.userAgentData\|\|null:null;function ha(a){return da?t?t.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function u(a){var b;a:{if(b=n.navigator)if(b=b.userAgent)break a;b=""

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 43236, version 1.0
Category:	downloaded
Size (bytes):	43236
Entropy (8bit):	7.99459009427261
Encrypted:	true
SSDEEP:	768:XnvkvvzWpxpYZfeRsyjTHOHdBoSaLPr2ZGvL9HirHkQazamxZfBN3Qs9eA:XnvknOfYZjyfD3LPr2ZCirkQG9Vx9J
MD5:	A9557EB451F17DCD8E687327EA9383A0
SHA1:	78AD7AC0D04E1C0439C26D47978622B5B75B472A
SHA-256:	2E3B1D34AC67763AB50652DA19305D4B3694C6B6E6BF35F4B98411CE4AF646D2
SHA-512:	2B4934D472E301159BD07D7BC50AE396D3C7AE952AF2A0219DC18C7237FEF16C6578CF212CD2D04C6537DD26492A00A11C36458B21FB929126A10B2F1D6AED18
Malicious:	false
Reputation:	low
URL:	https://browser-update.org/static/fonts/open-sans-v17-latin_latin-ext_vietnamese_cyrillic_greek_cyrillic-ext-regular.woff2
Preview:	wOF2..............n...................................V.`....."..4........_.....6.$.... ..Z..5...[\@q.k.].%...F.SSO.....n.CA8...q....T....7$.1..k. .i.".j.A..A.#...<"9..Q..........X..i.-..nH.d.2%Sj1r.Q..g$..4u.>!.6...R.5d.qC.gB,t>L....s..Bn...?.......U.....@W.6k)....,.&n(...~.C..8^.<.[.p..'t..b..+.R.u#9........U.$....Ias[...O...=..?N_.".J....j(c..E..w....M..6_}.>......;.......].%..X'^.......d%.. .;."..Xx.E...O......x<.%.P2..@...q..bQ@...8f=........\|k...Y.e.'.ROj..\|..c.....]...V4h...l.V..m...L....0(.hm.....31rV.d.6...R..OW."..z.x.<.?5+....\|9..g.m.....{w....p.r._...Rm....\&7w~d].(V.w..;..HY...1Es.1........Q......c#.u.b.w..&7.s.Nd..^..u8.1X...7Z...O....C..&.{...WK..).....Cmz...P4B.....eP...H...m.~^..f..o.....Qo.X.......XH..2.E.B.....a...\|........F...J4@R.N~.........E......{[...)..xE...k.......@n....n.q.B....T/............Yx...#..xC(..,......U..H..?".R.].N..p%.Fej}......[.,[]m..L.X.,....$.W..,....\|..........sy....?\|#...PA~a.T."....9...

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	761
Entropy (8bit):	7.561608605657339
Encrypted:	false
SSDEEP:	12:6v/7swLdxP2F9Bk7F5qn8wyGODJdqn8oSqdedX+Blz+Byk66y5pbaR0Snn/Ty3od:hwBxY9avG8wy/DrqnRS8+GlzM36h5Zur
MD5:	73420E8A098BE473FC8A62BE7BF09206
SHA1:	6D641776ADC712B2ECE75C005C593AE2F8453517
SHA-256:	A572AC8D058F9E16158F5308391158937E15F8C033B138EE00C0AF5FFCD90C2D
SHA-512:	36D7D8386C5D195B24AA73457FC5EDAB6C47D5DB9684C5D9141E2F2049FBB055F08D48F8BEE7AAD1D53010CA5E03EEA394CE25472289B7075E400A7C3234A296
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....D.......PLTE..........................................................................................................................G!.....tRNS....fD."...X....IDAT8.}R.b.0..GZ.)..v....B....[<..8../..$...r....:j"D\|..=...9..3.#O'..~....S....X3....:_..F.q`......S....L$<.%...4........<._...3..'CqT....H1..R.F.pP.R.9.e.1%..d.a`...y.._@..$..]j..&)%/lh.<-....s.@....L...]Z.-...B.DZ.4......+..(G2..E.,.f.J{.c.Pl.A.P..e>....0...j..B..G.79.....-...F.h.q5]GG..BT.w.._.n. (.]..(u0.~......."...R.Y%..{..;..'.....xL._9W..c...o o..c.{)Y......4Y..`....i..l.Y...O*..3U..%e....5....`......p...n...O....ooo.m.n....>...o..w.....+..b_....'Q..!..c........<....2JJ..!.;&..Z..$Xq...w.....Q...>...G...n42GA."....IEND.B`.

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1595
Entropy (8bit):	4.552418287032655
Encrypted:	false
SSDEEP:	48:YZXkF/y/rLCcx/Wo1CJRenRHc69w3PskwyDVfowl:EkF/8vt1IRwH19w3flVXl
MD5:	34A291DED495B0CA7733D12A34D96A2F
SHA1:	016E3673434C1338A149D15F1B194CCF5F42FABD
SHA-256:	218AEBE6C4D9C9B534344427A433F7B243D3F42D3A3814AF49013D70C26EF505
SHA-512:	A11E4C1FF4ADBC7999BBA9FEB6E7107222F9105AA60BA3D10ECE38CF5BF45ED89E96E0AC1B2C9635027226C1E416B5C6883391702A26740B1E6A9FBA32C8C877
Malicious:	false
Reputation:	low
Preview:	{"dataAsOf":"2024-03-18T00:00:00.000Z","generatedAt":"2024-03-18T16:00:35.664Z","conversions":{"USD":{"USD":1,"JPY":149.20124862284246,"BGN":1.795629820051414,"CZK":23.13624678663239,"DKK":6.846584649283878,"GBP":0.7852093279471172,"HUF":362.6055820785898,"PLN":3.9582262210796917,"RON":4.564450973191333,"SEK":10.39092912229159,"CHF":0.884135145060595,"ISK":136.70583914799855,"NOK":10.610080793242748,"TRY":32.301230260741825,"AUD":1.5224935732647817,"BRL":4.992838780756519,"CAD":1.3537458685273596,"CNY":7.198127065736321,"HKD":7.819316929856776,"IDR":15718.949687844291,"ILS":3.6502937936099893,"INR":82.89111274329784,"KRW":1333.777084098421,"MXN":16.728516342269558,"MYR":4.718508997429306,"NZD":1.6416636063165626,"PHP":55.60044069041499,"SGD":1.338138082996695,"THB":35.96492838780757,"ZAR":18.900018362100624,"EUR":0.9181050312155711},"GBP":{"USD":1.2735457468576439,"JPY":190.01461560947092,"BGN":2.2868167202572347,"CZK":29.465068693364515,"DKK":8.719438760596317,"GBP":1,"HUF":461.794796

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	104933
Entropy (8bit):	4.145451176484246
Encrypted:	false
SSDEEP:	1536:zCfQia2HpcHUq7UENOiS1G3gSilwlWn9UfNWwawr:zCfQiPyNYlyWnmlWwa0
MD5:	B49918F136B833A41939E473368F393A
SHA1:	845F2F69F544544CC690138BDDE1075D959495F3
SHA-256:	53B5B7076F0E480F06ACF893E34F28E8D64B61676B4344E68ABD0BEA4CEFBFDA
SHA-512:	5E91B13544B6D0081BED2D2E6EF856E36B0682189D6A1B24E85D1F0FD2A5F253D4CCE6B60FB349959F9B60694A9E5F2B776D979E59FADD2E5DAE3E4B53655290
Malicious:	false
Reputation:	low
URL:	https://indwes.tfaforms.net/js/typeahead/v1.2.0/typeahead.bundle.js
Preview:	/!. typeahead.js 1.2.0. * https://github.com/twitter/typeahead.js. * Copyright 2013-2017 Twitter, Inc. and other contributors; Licensed MIT. /..(function(root, factory) {. if (typeof define === "function" && define.amd) {. define([ "jquery" ], function(a0) {. return root["Bloodhound"] = factory(a0);. });. } else if (typeof exports === "object") {. module.exports = factory(require("jquery"));. } else {. root["Bloodhound"] = factory(root["jQuery"]);. }.})(this, function($) {. var _ = function() {. "use strict";. return {. isMsie: function() {. return /(msie\|trident)/i.test(navigator.userAgent) ? navigator.userAgent.match(/(msie \|rv:)(\d+(.\d+)?)/i)[2] : false;. },. isBlankString: function(str) {. return !str \|\| /^\s$/.test(str);. },. escapeRegExChars: function(str) {. return str.replace(/[\-\[\]\/\{\}\*\+\?\.\\\^\

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1549
Entropy (8bit):	7.68911639521585
Encrypted:	false
SSDEEP:	24:Py1nfBWui8FepGcWGRp7YqGqwXeIiMNZIFJd7kG5H7a1dlgwm/2IlMTEGe:I8BG0VYqG5l1NZWJf7YgvVloEGe
MD5:	B2B37AA9F64082EEEDB9670C620BACA1
SHA1:	BAE0DECAF4DD31625A5E9E1D384AC0D85FAD0E4E
SHA-256:	C9658821B2D9D149EB6D868C6CE8811406C6E8FB1F74104EB480264F94836428
SHA-512:	86AEE8D58393F05D769E978FDCDA738FBCBFB8545F419E4D92F75E0D4AB43A9E846B66EBD8D348DD20A4BD2F906E117C0192AA8FB604F937CB7A1FFF30000723
Malicious:	false
Reputation:	low
URL:	https://d31otfhas71ais.cloudfront.net/images/button.png
Preview:	.PNG........IHDR...2...2......?.....KiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about=""/>. </rdf:RDF>.</x:xmpmeta>.<?xpacket end="r"?> I.:...}IDATh.._L[U..?-.C:]...%lns]..f.Ix....\R6c......,[4Y...o.,.D....23.6....&.1c. ..0W.HL.2...i..pn).{...s`.'........;....>dQ.<...{.G...7....?._.)`...fd.;l&..h.Z..-........U#V.y......V.W..\|......\......-.l..\|^....t..n..f..x.U..5.t.($.....!.d...]..!'..........L..ac..r%R.\|.4H4e....r....q!>.:...R..`.%..p@.#.<..i4`.H.....G'..g.2.m..kb....^.X.....k.........A....zi..WA....N....{.M...'\......g ... S....d.$.<J'....2..... .......w_...i.@{....U).]nN..J...e^..-.%...^.....r..~6.9..U.Zv.pg..c....x.x.....GdE.i1../SYR...5.v.9..!\|.\|Dg..$..+!@....u..Y.3Q..^.v[-.......GI.&.i1..7..1......K.!Jue.......Cve.p..O.

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10268), with no line terminators
Category:	downloaded
Size (bytes):	10268
Entropy (8bit):	5.065900888121147
Encrypted:	false
SSDEEP:	192:woXroXpoX4oXmB4yurE2YfCcZLSxdBf/VY1JO/:XX0X2XvXmRurCR5SxdBcg
MD5:	98130488D873CBB34D9952E235187602
SHA1:	5024B9FD8ED3727DBC2C92038BEB39D8B489AED6
SHA-256:	9A057038F279D39CFCDAB51DC88D7F40E95E98D36A3BA92D3D78E48539639D05
SHA-512:	196AF3F02C114D22EE049BC2E3B00DF3B070F75300BFFDC8F19AC8DC4D63CF63A75F03BB9E7CD13DC298E73606D3936287FB0ECFD78B8E67DED0AD2364D1A224
Malicious:	false
Reputation:	low
URL:	https://browser-update.org/static/base2.css
Preview:	@font-face{font-family:open sans;font-style:normal;font-weight:300;src:local('Open Sans Light'),local('OpenSans-Light'),url(fonts/open-sans-v17-latin_latin-ext_vietnamese_cyrillic_greek_cyrillic-ext-300.woff2) format('woff2'),url(fonts/open-sans-v17-latin_latin-ext_vietnamese_cyrillic_greek_cyrillic-ext-300.woff) format('woff')}@font-face{font-family:open sans;font-style:normal;font-weight:400;src:local('Open Sans Regular'),local('OpenSans-Regular'),url(fonts/open-sans-v17-latin_latin-ext_vietnamese_cyrillic_greek_cyrillic-ext-regular.woff2) format('woff2'),url(fonts/open-sans-v17-latin_latin-ext_vietnamese_cyrillic_greek_cyrillic-ext-regular.woff) format('woff')}body,html{font-family:sans-serif;font-size:13px;color:#333;text-align:center;line-height:1.5;margin:0;padding:0}#co{width:750px;margin:auto;text-align:left;position:relative;clear:both;margin-bottom:25px}@media only screen and (max-width:1200px){#co{width:auto;margin-left:10px;margin-right:360px;min-width:200px}}@media only sc

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	148
Entropy (8bit):	4.844155593891779
Encrypted:	false
SSDEEP:	3:wVCiF5PfViEGoSPQun0SFT+U/ZoS3IoCERoQqyoY:wVCijVidPXNFR/ZoS3rCCozY
MD5:	D7880C8ADD4E3DD550487B72ECFBB986
SHA1:	E700160344AA942102CECEAC46518E5FD2445BCB
SHA-256:	5DD446C8F0125D12B3480833C7AAD49640BC7AD3346F859C8136A3F218B4021C
SHA-512:	E7B16CCABE94E24F07D8C3D1BE55813C35FD4E56BD50BE876B048540F028A97041C4522034DFA4DA7F8D85F68B4590E393FA96921F4FBCB5464EC31695CD454A
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISXQnKo6shiA_kdxIFDTFf9ZMSBQ0-o1z0EgUNyTmyHxIFDWh-HGkSBQ3FRamsEgUNtOuTVBIFDZFhlU4SBQ08eEcmEgUND_adxhIFDfmjI1ASBQ3rhxc0EgUN_3hFdA==?alt=proto
Preview:	CmwKBw0xX/WTGgAKBw0+o1z0GgAKBw3JObIfGgAKBw1ofhxpGgAKBw3FRamsGgAKBw2065NUGgAKBw2RYZVOGgAKBw08eEcmGgAKBw0P9p3GGgAKBw35oyNQGgAKBw3rhxc0GgAKBw3/eEV0GgA=

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_ula=5153224&google_hm=o2HIxaEGHLyIlgWmC9QyNMFpZi0f4iDXPjTtqxL-O6g&pi=adx&tdc=ams&pi=adxab&google_nid=rtb_house_us&google_gid=CAESEIhasK4mZsNIs-PD6FQmJPo&google_cver=1&google_push=AXcoOmTzjEBi1UV2I9JJEaJ5_L5fTT7cQV3wrJO_tEzCFlCuhF1vKxhxfuayF9bBJaxUwoQYS9XXkK9qaut7R7bI6QVgRdtyQnL_
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	6987
Entropy (8bit):	5.244054308629108
Encrypted:	false
SSDEEP:	192:CdnHVOOmmQEEGt43dgEQzb+qPy7TcNA1G74:CdnHVOOSezqqPy7TIA1G74
MD5:	6D25CF65270932E02F921E73FA790933
SHA1:	F29B9FEF407839C33680FD590EDA8ACB91BF3FD5
SHA-256:	E3CF178F55674A604D32AACDE5650422FBB2183E668B7C2C1AFDE1C005E5808F
SHA-512:	A9470C62A48DB91497676F6D1ABFBBAD3D758D3677877AB806D68A91571EA1AB06CE40D82DEFF13106FE6107B0B5C551D7D15D757EBAAA88A2695C813E454ADD
Malicious:	false
Reputation:	low
URL:	https://browser-update.org/contact.html
Preview:	<!DOCTYPE html >.<html lang="en">.<head>.<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />.<title>Contact - Browser-Update.org</title>.<meta name="description" content />.<meta name="keywords" content="browser, webbrowser, upgrade browser, update browser, choice, change browser, firefox, safari, opera, firefox, upgrade internet explorer, internet explorer update, ie, safari, konqueror" />.<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">.<script src="/cdn-cgi/apps/head/dSTaMRtp7Uh77lw_sJp5-4w_sZY.js"></script><link rel="shortcut icon" href="/static/img/favicon.png" type="image/png" />.<link rel="icon" href="/static/img/favicon.png" type="image/png" />.<meta name="robots" content="index,follow" />.<link rel="stylesheet" href="/static/base2.css" type="text/css" />. [if lte IE 7]>. <link rel="stylesheet" href="/static/drecksie.css" type="text/css" />. <![endif]-->. [if lte IE 6]>. <link rel="style

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
Reputation:	low
URL:	https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	33
Entropy (8bit):	4.294246013232288
Encrypted:	false
SSDEEP:	3:YJH/m1oNoU2H0K:YJ/m1ug0K
MD5:	34AE14BD0DBC50C906C4345F139F3FCB
SHA1:	AF6225E1B6F3EC47E6F07B849AD0EB3F67DB29B0
SHA-256:	2BDE9E99534FA5B2021E18C73C803647E65EFA98A928A5F2C70740896962B169
SHA-512:	F0238414BABF09BE52C5135DE2F9438C5F66857677C212C6043E3B1BB9FB3C91A0734E6D78297312A97C9288B99C1BCE34B300BF3E2218D63B2E3FAC564388D6
Malicious:	false
Reputation:	low
Preview:	{"lb":"X6eJ5jX3JvMM8TGlMNeSbQ=="}

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (19040), with no line terminators
Category:	downloaded
Size (bytes):	21886
Entropy (8bit):	6.065358786332392
Encrypted:	false
SSDEEP:	384:Fmnq/xfICwb8KjPB4vD8Y9ulK5PT+QS05cthDyA/887BUBLJCScBwwqHAyp6/Eyy:PxfIuK9KDNs0r+QS0+yA/88m1QScJqvB
MD5:	F7C3B9AC13EEAA71A7B559A290E285CD
SHA1:	3CAA7B016108941CE110762AE85BD10E08EC9444
SHA-256:	4757F7F4E9C0B9187F72FF21600D009E79B7776ADF8AB2E2122F760EB769FE0A
SHA-512:	57D3B08BABFD19DE4E8D88DEE136E8B0130AE2CF455DA0CC0439E1CCCB07E40D4E9E5CBD9662149617733EF0F9136E48428C80F6E86C84ECCD3B690143703A13
Malicious:	false
Reputation:	low
URL:	https://browser-update.org/update.show.min.js
Preview:	"use strict";var $buo_show=function(){var op=window._buorgres;var bb=$bu_getBrowser();var burl=op.burl\|\|("http"+(/MSIE/i.test(navigator.userAgent)?"":"s")+"://browser-update.org/");if(!op.url)op.url=burl+((op.l&&(op.l+"/"))\|\|"")+"update-browser.html"+(op.test?"?force_outdated=true":"")+"#"+op.jsv+":"+op.pageurl;op.url_permanent_hide=op.url_permanent_hide\|\|(burl+"block-ignore-browser-update-warning.html");function busprintf(){var args=arguments;var data=args[0];for(var k=1;k<args.length;++k)data=data.replace(/%s/,args[k]);return data;}var t={},ta;t.en={'msg':'Your web browser ({brow_name}) is out of date.','msgmore':'Update your browser for more security, speed and the best experience on this site.','bupdate':'Update browser','bignore':'Ignore','remind':'You will be reminded in {days} days.','bnever':'Never show again','insecure':'Your web browser ({brow_name}) has a serious security vulnerability!'};t.ar={'msg':'..... ........ ..... .. ({brow_name}) ... .....

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1774
Entropy (8bit):	4.877113012227268
Encrypted:	false
SSDEEP:	48:PEQhE599TsVF8It1Rj0VP8IBAZ5Ee7uCmt4:PXEgKIT2eo4
MD5:	0CC1BCD5A3B56DBBA32F0919500C2C39
SHA1:	FD83C95328023DA9DC780A9A16A8BD1068616360
SHA-256:	8EB8CB87215977A3E36B79F554F14219CB002FCF7B1FBCF3A73319F941579C96
SHA-512:	E6B6ED3FC4BFB461BB13D143636C2E1543975C965487EE96AEE699FBE1E89D62C1D820BD6A403C14585382DF885A18E098FDBEABFD4DEB0B22C97893043D5BCD
Malicious:	false
Reputation:	low
URL:	http://iwu.marketing/js/creative.js
Preview:	/!.. Creative v1.0.4 (http://startbootstrap.com/template-overviews/creative).. * Copyright 2013-2016 Start Bootstrap.. * Licensed under MIT (https://github.com/BlackrockDigital/startbootstrap/blob/gh-pages/LICENSE).. */....(function($) {.. "use strict"; // Start of use strict.... // jQuery for page scrolling feature - requires jQuery Easing plugin.. $('a.page-scroll').bind('click', function(event) {.. var $anchor = $(this);.. $('html, body').stop().animate({.. scrollTop: ($($anchor.attr('href')).offset().top - 50).. }, 1250, 'easeInOutExpo');.. event.preventDefault();.. });.. $(function () {.. $('[data-toggle="popover"]').popover()..}).. // Highlight the top nav as scrolling occurs.. $('body').scrollspy({.. target: '.navbar-fixed-top',.. offset: 51.. }).... // Closes the Responsive Menu on Menu Item Click.. $('.navbar-collapse ul li a:not(.dropdown-toggle)').click(function() {.. $('.navbar-tog

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 44352, version 1.0
Category:	downloaded
Size (bytes):	44352
Entropy (8bit):	7.995478834209917
Encrypted:	true
SSDEEP:	768:N6+ejdJmM55nfhuRB52jN6mG7RunXu1SSZXmd7GQElokrLxOe7LzExCl6964km0o:beDPnf272jgqXdSm7GRlLxOe7LzEm69j
MD5:	2A3D175B60ED8E9E4FC6D5FF888251ED
SHA1:	C154082674B59A363C52A319E125AE015D711CEC
SHA-256:	7736AA3596C468515C3209F2F9D68CFAE96D94C05689BCC11A5DCE426A6EE2E8
SHA-512:	7AF84FC65B1D8B918D06C46FA5E7D9379222B7353C4C873F0E1AF6448B31B625ECC8E1934E33F2728A481CCBD1680E2BC8E6AEFFC56E5B0F0394F1ADB1E800CA
Malicious:	false
Reputation:	low
URL:	https://browser-update.org/static/fonts/open-sans-v17-latin_latin-ext_vietnamese_cyrillic_greek_cyrillic-ext-300.woff2
Preview:	wOF2.......@..........................................V.`.......4.....h..(.....6.$.... ..<.....:[.R.@....T...M..{O.w]......n..l.....{.t.8.Zu@......1.....B...G.C....!..E...K.X...$CJ........7.[...d..h..)H......Se...+.;.)...d.f..7...}\|....K......<}1..6..G...U).$.~K..O.A..>p$.4............Jx..s.N.<j...X$KUnH..... ..N..\|h!......W>..;..3.n........8.et.1..d..(.0".&...z.U.mM.G...q....y....>O.......G.3.F..p.^)..f4k.0.?..Z...[....X......b.:/......H2.....TGT.E.R.h.{V.H...`..0.a..i.X..H..Bi.B=..4.8>..".a9.9l.....n-..4b...mXC..mb.G....y....A@DD. .>./.+o..[...........j.U[..V\|.:2...uC.....w.`9...ckn+P......*.......V..Y.D....A...H...t.w.A!M.._fi..zY..RUV.....@..&..S.....a.>.kx.3,..x..kxB..I.8..}<.[...0c.._....L.S .=.p(y...x.m..d.....(./...u.2m...k..\|....\&....`...w.......U)..H..?2.R.].N..p..Fe.......oY.lu.....L..K~ ..o}....TW%K..1...$...f`.Y6.&.......RQ...~.}Q.\~.bU>..fB..C;.....w....O..?..d.B..\H&T....)..0L..[...]..ny...G.ZUu.n?=....(.3.{.=.I....{Q.0. ....

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 307 x 32
Category:	downloaded
Size (bytes):	3731
Entropy (8bit):	7.499297254351199
Encrypted:	false
SSDEEP:	48:irzpp4zZdZKrJmv85IEJnrohWIgilrHqmqa5NGh/wl/HX3DavPrDiRy4VeuVkwr8:O4srq8my0dpz5rl/jormyZuVkOK
MD5:	324AD67E733780C9D1A2E43EDBF76FF7
SHA1:	A7D1A31562880CBDF8C56DFD47A84667265A7D45
SHA-256:	90542CE71FCB229ADB654176B9A66DFAA82A9CA08F147AADE9C5A7C7405AEED1
SHA-512:	9E07DC2AC0F22AD8C2F70BD2D397E22AE06B448DB63D30EB80F1B2DCCC9967E96C6AE94CCBB7719805012D04D0A01F838FBCBD6E2CA3BB306F55724BC67BE469
Malicious:	false
Reputation:	low
URL:	https://secure2.indwes.edu/_img/footer_IWU.gif
Preview:	GIF89a3. ....bdf.................................................................................................lnp......uwy...~........vxy...uwx......lmo......kmo...lno......................................................................................................................................................................................................................................vwy........................................................................................................................................................................................................................................................................................................................................................!.......,....3. .@......H......\....#J.H.......... C..I...(S.\...0c.t@...8s.....@...J...H............).6Rax....W.R...J....`....#,X.&.v.Z...M.z.J#...x....U..hK..@..T.O..]. .W.Z.E..\...........Ac.-..c.q

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65470)
Category:	downloaded
Size (bytes):	89617
Entropy (8bit):	5.284830764879571
Encrypted:	false
SSDEEP:	1536:aqGRLi9gxGUs+4Ezy4bx60BWpPkWyAux5YQEfO8cCFpEsMCk7YB2Fce8V+TAYnL6:0lt5YQEfOQkx5U3huEJb
MD5:	2E9A54E894F2FF6FD26A83CAD9543203
SHA1:	D02270E728CD91AFD3216E4D0DC66C815F172125
SHA-256:	1D420088235A094ACE032903135406FD4449FC35D7F0DB5E8DEE38392F5C3180
SHA-512:	F306847CDD5EAA4448948AEE5319C05932AF1085521BDC2CF41A74529478D4F06DF9FED9575FEEDD437C8853BC2BBCACD86097E8B5442C442EE5F056E33C9B0E
Malicious:	false
Reputation:	low
URL:	https://indwes.tfaforms.net/dist/jquery/jquery.js
Preview:	/! For license information please see jquery.js.LICENSE.txt /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,(function(e,t){"use strict";var n=[],r=Object.getPrototypeOf,i=n.slice,o=n.flat?function(e){return n.flat.call(e)}:function(e){return n.concat.apply([],e)},a=n.push,s=n.indexOf,u={},l=u.toString,c=u.hasOwnProperty,f=c.toString,p=f.call(Object),d={},h=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},g=function(e){return null!=e&&e===e.window},v=e.document,y={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|v).createElement("script");if(o.text=e,t)for(r in y)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function x(e){return null==e?

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Category:	downloaded
Size (bytes):	48236
Entropy (8bit):	7.994912604882335
Encrypted:	true
SSDEEP:	768:uj6JxavgLx5rjTH3CdZ3y11o4uMb2IVEhiB6z6GAAHJApICtBgso6HaOjTXHRWK:ujoa4LxZPCdm3B2IVEhiB62apApISxos
MD5:	015C126A3520C9A8F6A27979D0266E96
SHA1:	2ACF956561D44434A6D84204670CF849D3215D5F
SHA-256:	3C4D6A1421C7DDB7E404521FE8C4CD5BE5AF446D7689CD880BE26612EAAD3CFA
SHA-512:	02A20F2788BB1C3B2C7D3142C664CDEC306B6BA5366E57E33C008EDB3EB78638B98DC03CDF932A9DC440DED7827956F99117E7A3A4D55ACADD29B006032D9C5C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
Preview:	wOF2.......l......D...............................O..B..h?HVAR.x.`?STAT.$'...0+...\|.../V........+..2.0..6.6.$..`. ..~......[B4q.....t..P.M_.z...1..R.S...u.#..R....fR.1.N.v.N.P...;.2........!Z......Qs...5f.G.K.an2&....2.........C.H.t..N!.....nh.<(.vN.....j.._.L.P.t..Ai.%.............._I.i,..o,C.].H.X9.....a.=N....k.....n.L..k.f.u..{...:.}^\[..~5...Z`...........`!...%4..,...K0..&.a/....P....S....m.Z......u...D.j.F...f.0`I.`.`.h#..)(FQ.F!o$........S.).MV8%Rh...r...x...T]$.=......Y...!.3.&U..."....Q....{.l/0..d..4iJ/..}...3....i[Z..NG.WD...>.[U..Q.h..@m.=..S...1C2...d...<..v.?.q.f..n...OUz.....&Z......Z."..N.....n...9.B..C..W....}...W..6Zs.i.+Z........jB.n..x.8M.....q..@I....-.%..,C,..K..#.2...4)/.v_..x.<....t.....%[.4?.=j.V..jj''..W.u..q....I.L.=......E...\.M.7{.>......W........C.`...,9$......\..o........y...4A..m.P.,X..=?.:................wF`..+.P..........M!.4.......l.>M..t.ff5r..^..Z.g...!fA,hIIQ...e.R>B.AH.VuX..>..\.=.ky...1>C....>C.c.;...6D.

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 960x123, components 3
Category:	dropped
Size (bytes):	69217
Entropy (8bit):	7.982130644267212
Encrypted:	false
SSDEEP:	1536:6AhdS66mYta8EhCob1aAkJn4qjTjP7w2+7wj7Bj9Iy:6AqhmYtathXJD6zw2+7wj7z/
MD5:	14AB3E0852B384B69C59569976937917
SHA1:	DED02213FFA5734B3D327194DF46B9A2D2875711
SHA-256:	091C5F453195F4BDFA1C71531C6AA3CBB277ACEE314D5A71DE6271A61A0B6C3B
SHA-512:	00630E1BDF9076DE0B103F33C491F02F8F58F7A498F484838B78F1828141C11FCC56A03B3FCDEED86B8B98A8DB1156A14391BD5330508A5865ABBD5BE65FC787
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P.....ohttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:F77F11740720681195FE8C21F279F398" xmpMM:DocumentID="xmp.did:9FA1D39A48FB11E1940FDA66B23DBC2F" xmpMM:InstanceID="xmp.iid:9FA1D39948FB11E1940FDA66B23DBC2F" xmp:CreatorTool="Adobe Photoshop CS4 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A7493FEE2E206811994C809C83B5FB4D" stRef:documentID="xmp.did:F77F11740720681195FE8C21F279F398"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................................

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1438), with no line terminators
Category:	downloaded
Size (bytes):	1438
Entropy (8bit):	5.636718647629385
Encrypted:	false
SSDEEP:	24:CpJHvUa1jOSCwLVYPmha1CB//oVJb3/Mp+9BhiMNMeOSCy9AHIkmlg:CzUCjOSCwLVPhCs/u53kpGBliedCKAHp
MD5:	0AA0B70A656F83C66060231E47C74E33
SHA1:	26DCBFAFE55750EF3BAFAEC5CE5C05FB73C6C770
SHA-256:	60982EED73B4D6675E4C8CB14783E14DEA9B0B2D85DB9B836CE6BAD0E35E0511
SHA-512:	9A4BEBCAB2085EB9CCDA7EE98671F435040498F4576D287693CF90817C2E55B68B5D2F9D0D6DB37A64066E6439480CB2554AEBF0B58C2091AD714C9F15B71738
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=62310470&p=156011&s=165626&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://bpi.rtactivate.com/tag/?id=20909&user_id=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://i.liadm.com/s/75145?bidder_id=195755&bidder_uuid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35');PubMatic.loadAsyncImagePixel('https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://io.narrative.io/?companyId=673&id=pubmatic_id:26FC5BC4-C0EA-481E-AC6D-297EF4930E35.');PubMatic.loadAsyncIframePixel('https://x.bidswitch.net/sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy=#US_PRIVACY');PubMatic.loadAsyncImagePixel('https://pixel-sync.sitescout.com/dmp/pixelSync?nid=3&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://pm.w55c.net/ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent=');PubMatic.loadAsyn

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (540), with no line terminators
Category:	dropped
Size (bytes):	540
Entropy (8bit):	4.609873607644369
Encrypted:	false
SSDEEP:	12:iWRSafoJfAAH/0HR8/JKAX8iyyyyyyyy9/yF5UFWRSy:iWSa7AH2tAvegy
MD5:	BDF58AD49D2344B4D85C7706C1B665A1
SHA1:	1EA9679198192691A541893D169E272213BCF3FB
SHA-256:	3384A801762F8C42DC495D9640CCE005B93B0F328AB34F89E85660E381913320
SHA-512:	70AA3DD34541F3F21B63C2130165818B008C432B157708FD187B83E5B5B9D523486EA1DA5447740602D02AF5F8CF9CD88B41638F4009D55DE93DB1655845F7AE
Malicious:	false
Reputation:	low
Preview:	Required request body is missing: public org.springframework.http.ResponseEntity<io.id5.fetch.request.FetchResponseDto> io.id5.fetch.Fetch2Controller.fetchClientToServer(java.lang.Long,io.id5.fetch.request.FetchRequestBody,java.lang.Integer,java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.Long,java.lang.String,java.lang.String,java.util.List<java.lang.String>,jakarta.servlet.http.HttpServletRequest,jakarta.servlet.http.HttpServletResponse)

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	26951
Entropy (8bit):	4.514992390210281
Encrypted:	false
SSDEEP:	384:jMgviMjM4if38GmhXeC1QRwweTkBE9wbOY4Jf/JhRZ5h+73hNVt8oC4veONhLYVi:CLEiJSdo11vIYHqb5Klo8v
MD5:	B3D7A123BE5203A1A3F0F10233ED373F
SHA1:	F4C61F321D8F79A805B356C6EC94090C0D96215C
SHA-256:	EF9453F74B2617D43DCEF4242CF5845101FCFB57289C81BCEB20042B0023A192
SHA-512:	A01BFE8546E59C8AF83280A795B3F56DFA23D556B992813A4EB70089E80621686C7B51EE87B3109502667CAF1F95CBCA074BF607E543A0390BF6F8BB3ECD992B
Malicious:	false
Reputation:	low
URL:	https://secure2.indwes.edu/Marketing/Project-Request/ScriptResource.axd?d=N1YvUyNqW0L73jWWkHG8Q2j76Mx82NFmzNRQMnxnODvY7K-ZSKORZ0MB81NHSzxF-dDgdPZD9LXX-szea8XzdOrZowxhpSsfSBZZjAdUZBQdqkbUeTOS5Kz7quSZZPJJKyWeybnwswsSc1oepVOO2VDOZ4HqQIPC2btXaVzQuXs1&t=3e1b2a62
Preview:	var Page_ValidationVer = "125";..var Page_IsValid = true;..var Page_BlockSubmit = false;..var Page_InvalidControlToBeFocused = null;..var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime-local)$/i;..function ValidatorUpdateDisplay(val) {.. if (typeof(val.display) == "string") {.. if (val.display == "None") {.. return;.. }.. if (val.display == "Dynamic") {.. val.style.display = val.isvalid ? "none" : "inline";.. return;.. }.. }.. if ((navigator.userAgent.indexOf("Mac") > -1) &&.. (navigator.userAgent.indexOf("MSIE") > -1)) {.. val.style.display = "inline";.. }.. val.style.visibility = val.isvalid ? "hidden" : "visible";..}..function ValidatorUpdateIsValid() {.. Page_IsValid = AllValidatorsValid(Page_Validators);..}..function AllValidatorsValid(validators) {.. if ((typeof(validators) != "undefined") && (validators != null)) {

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.5
Encrypted:	false
SSDEEP:	3:YGKeMfQ24:YGKed24
MD5:	055DE8F64447F10ED2C4C7F78E27B7CD
SHA1:	BBFCC7FBB135D3893E9BD559E44E069F57DFAB31
SHA-256:	30C714BF4216E577686D238B98561D093672CB25BF90BAAB50DD956F75CDA4B3
SHA-512:	1A726490120152235BBCE20368630EF20FAC7964BA32F846FAC2C1F1A58EE9722356AD94FA6342685E8CEB5015CE2E944EDD739B901D3D9B0A22A5238118142B
Malicious:	false
Reputation:	low
Preview:	{"country":"US"}

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:d:d
MD5:	9DD4E461268C8034F5C8564E155C67A6
SHA1:	11F6AD8EC52A2984ABAAFD7C3B516503785C2072
SHA-256:	2D711642B726B04401627CA9FBAC32F5C8530FB1903CC4DB02258717921A4881
SHA-512:	A4ABD4448C49562D828115D13A1FCCEA927F52B4D5459297F8B43E42DA89238BC13626E43DCB38DDB082488927EC904FB42057443983E88585179D50551AFE62
Malicious:	false
Reputation:	low
URL:	https://cdn.fuseplatform.net/telemetry/noconsent?auid=22728807289&cmpj=unknown&v=1&ttm=1710778927130&cookie=true&res=1280x1024&device=desktop&browser=chrome&fuuid=e77f8bfe-60b6-5c8b-a657-64bfafdad065&fid=2789&pubid=5&url=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html&sid=bac552fa15f25121a86b&srate=100&adserver=gpt&etm=5098&e=slot-request&tenant=publift&account=browserupdate
Preview:	x

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 960x123, components 3
Category:	downloaded
Size (bytes):	69217
Entropy (8bit):	7.982130644267212
Encrypted:	false
SSDEEP:	1536:6AhdS66mYta8EhCob1aAkJn4qjTjP7w2+7wj7Bj9Iy:6AqhmYtathXJD6zw2+7wj7z/
MD5:	14AB3E0852B384B69C59569976937917
SHA1:	DED02213FFA5734B3D327194DF46B9A2D2875711
SHA-256:	091C5F453195F4BDFA1C71531C6AA3CBB277ACEE314D5A71DE6271A61A0B6C3B
SHA-512:	00630E1BDF9076DE0B103F33C491F02F8F58F7A498F484838B78F1828141C11FCC56A03B3FCDEED86B8B98A8DB1156A14391BD5330508A5865ABBD5BE65FC787
Malicious:	false
Reputation:	low
URL:	https://secure2.indwes.edu/_img/headerImages/generic_iwu/generic_iwu2.jpg
Preview:	......Exif..II*.................Ducky.......P.....ohttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:F77F11740720681195FE8C21F279F398" xmpMM:DocumentID="xmp.did:9FA1D39A48FB11E1940FDA66B23DBC2F" xmpMM:InstanceID="xmp.iid:9FA1D39948FB11E1940FDA66B23DBC2F" xmp:CreatorTool="Adobe Photoshop CS4 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A7493FEE2E206811994C809C83B5FB4D" stRef:documentID="xmp.did:F77F11740720681195FE8C21F279F398"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................................

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32086)
Category:	downloaded
Size (bytes):	95785
Entropy (8bit):	5.393592005865771
Encrypted:	false
SSDEEP:	1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzmQ:ENMyqhJvN32cBC7M6Whca98Hrp
MD5:	3C9137D88A00B1AE0B41FF6A70571615
SHA1:	1797D73E9DA4287351F6FBEC1B183C19BE217C2A
SHA-256:	24262BAAFEF17092927C3DAFE764AAA52A2A371B83ED2249CCA7E414DF99FAC1
SHA-512:	31730738E73937EE0086849CB3D6506EA383CA2EAC312B8D08E25C60563DF5702FC2B92B3778C4B2B66E7FDDD6965D74B5A4DF5132DF3F02FAED01DCF3C7BCAE
Malicious:	false
Reputation:	low
URL:	http://iwu.marketing/js/jquery.js
Preview:	/! jQuery v1.11.1 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l="1.11.1",m=function(a,b){return new m.fn.init(a,b)},n=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,o=/^-ms-/,p=/-([\da-z])/gi,q=function(a,b){return b.toUpperCase()};m.fn=m.prototype={jquery:l,constructor:m,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=m.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return m.each(this,a,b)},map:function(a){return this.pushStack(m.map(this,function(b,c){ret

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/openx/75a681b2-d274-af05-45fa-5d913283aa04?gdpr=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1736), with no line terminators
Category:	downloaded
Size (bytes):	1736
Entropy (8bit):	5.793171497130285
Encrypted:	false
SSDEEP:	48:C2Bqe/uLVndiwPrL2Bqv42Bqhybj/5CSC5Sb/sq:C2Bqqgnf32Bqv42Bqhybj5Pg80q
MD5:	E0CBB167F19307BB49DDEC5DAD46EA7C
SHA1:	AEAF66F499D8FAC5FACD5783FE45028FE811D3AF
SHA-256:	75909C216A858CD908F011D61494092FCD10D501CFCEA8F7859207F1CC7730F2
SHA-512:	8F7D53FCB2721E9F68BD0C6C935A42EC6F96D00C863847ED07EC5C93438107B11AC7082BE89C2E5CD7DD859BAF9327AC5F33E7A7ADC1105D837115209E1B8ADC
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=1205808&p=156011&s=165626&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=JvxbxMDqSB6sbSl-9JMONQ%3D%3D&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner_device_id=26FC5BC4-C0EA-481E-AC6D-297EF4930E35');PubMatic.loadAsyncImagePixel('https://us01.z.antigena.com/l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx 26FC5BC4-C0EA-481E-AC6D-297EF4930E35&rnd=RND');PubMatic.loadAsyncImagePixel('https://eb2.3lift.com/xuid?mid=7976&xuid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&dongle=u6nf&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=MjZGQzVCQzQtQzBFQS00ODFFLUFDNkQtMjk3RUY0OTMwRTM1&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pu

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&gdpr_consent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5266
Entropy (8bit):	7.938123734383485
Encrypted:	false
SSDEEP:	96:b/Gy+1jFLQKd97xI8gQpyeF3v0LxQjrOCEwm/yz01TwHdt3uYJM:bONRQKd91hgiyY3cTCEwTz04IYJM
MD5:	4BD4CBD809C772307C7D5180F5B8D333
SHA1:	B93DBFD9FC6AE921090265A09167BDF1F42A32F8
SHA-256:	6D494DA8CE6F6B9B5D5A3716CCFA1339262E33DA13319E97D71DCBB9A998E00A
SHA-512:	8DE8F79DD354BA8F32B273AAF27C83D79490B40454457A0D4C4B2E577FDAB7AA4B2EA614CB2A316E16AC6115BB5E2319FF1B5BDDBA4CD56B5C179346A97BE5D0
Malicious:	false
Reputation:	low
URL:	https://browser-update.org/static/img/big/o.png
Preview:	.PNG........IHDR...n...n......[&....YIDATx...yxTU...7kU..T.TV. .!la.P...@.Ag.y.......{..u......q.iP.A....Ve...".e1H.A..o.5...;.X.U.....sI...{.9wI.....>...0.^......0...P.v.N....Ka2...C...N.F;#..n.........'-..).0.............`\|..;].Ew.j.B5.".... \.+k"\|....b.e0.t..}/.>... Rc. ....q(m.1<..R.k...,h.s....h.@.....2.tcN.....X.vw............M..r8..l.P..P.@.\.uK..26.~(2.;.l.f..o4.l.C". .N.......p..pT..,^_e.#.C.->..2.....O1.?.M..jb%uv\.d..M..R...l...1..$r...o...S..m.~..9..t...([..WY.....5Nr.........]...b.Nc.u...,.l_.l...G..p. .....~.....&.....O...b...w,...#.U.Y.Sj.T...6..V.G........!...'b1V.&.g..(>T........Z.........\|&...[9.t....s..&o.A.+.....R...W...O.(.......I ....o..P.+B..d...y.@%\Y+......sX....x&..m.>.`.w....... l...a.)~......,.S9...3Y.@ju.:.y9.r.UV..k...m..O,....B.........S._.....N*..a......=..).,.....i.!&HL..]0...<_.;.Kar.N.G....oO..p..P.1V.N..pF.......~F..p.rVY...>..s....0.3......).d<7_.o...R.z.y...z}.^./E!!...\s...r.........I..M..yuh....w.0D.j..`

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	85
Entropy (8bit):	4.292908596521779
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+DtjyREWqWv+ndp:6v/lhPfkCDtmDV+dp
MD5:	5BEC6606B8392065F9DA9898CA6F7B14
SHA1:	73AC5B01B5E3293FB792179626E7F8369CDB944D
SHA-256:	ACCCC501AA6AFA3CFAC15E8DDCCF1561DEED2ED08C2F7D652ABBDBE9AA71609A
SHA-512:	36FEC10F71295203E59BCC52042EE2691E5DB51D26F6D76D4B19BFEDF4429FDE898C87ABC77CA29F6BB58E6217FF380F0650115C06395CB1DA270BD028C2CF80
Malicious:	false
Reputation:	low
URL:	https://sync-tm.everesttech.net/ct/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=&_test=ZfhqUgABw8xG4wBi
Preview:	.PNG........IHDR.............%.V.....PLTE......U..~....IDATx.c`.......'......IEND.B`.

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 336x336, components 3
Category:	dropped
Size (bytes):	7054
Entropy (8bit):	7.461759704254566
Encrypted:	false
SSDEEP:	192:mqnDrq/LOiemJek+QnzkDNsg7N15x1X1Lpyb:lb18jPnosKN10b
MD5:	A2E5375C6EE0D26E832C4ABBDCED778A
SHA1:	4909E6C2C518D3B97FA7ECEDDE4A741B53A02192
SHA-256:	F4AB589C28D36DAE48DA094A26A74380E7052825DB596056775814457C0067DA
SHA-512:	E4E9EBFF44812B94D2C63ECC00EE28DF13518DABC867F142BF242D1363895BF49034991B8651B656079BB302BC1196740661A9C8D3A70511A1D39FD8B818D50C
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......P.P.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...)..s...

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 220 x 220, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	52207
Entropy (8bit):	7.989766275001399
Encrypted:	false
SSDEEP:	1536:o37fcMNCSfk5/OApo+J0kyXbFx8yB/R4ss93pOUX:o3DjaO4XyXbFx8yuF
MD5:	DEA65EDE5744C26DAF5209CF9DA9E7BD
SHA1:	84D99BF7B697F20C04810E8DC7A4BD85E4150C27
SHA-256:	DB52A0D0D38C5DE44851BAF95826AD010E4F17FDB16057F5EF2D4C6039A10515
SHA-512:	86A3ACA7D9EBE988579AA7054DB0C499F4917856A469D375DB65CA9B5439C1238996D661C9C5C1C70690DE709BBC552B3C431694788B11B880C6816ABDC23B15
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............Z.....sBIT....\|.d.....pHYs.........^.......tEXtSoftware.www.inkscape.org..<... .IDATx..w.%E...~..O.a.3..9.D..b.T.......~.?].......~..YuE...... ....s.&.;7..]....s.I..5.;..s.....S......O...S.)fkw..T.k....Se....H.........Tu\|......Se.E...[.....1fGk.I..)"{.c....T...........1 .....0..q..e...;.,.w...'.....S.{.J...{:..1f.$I.4..)"{.j......T....;.sw.c........5....'(.....4=<M..1....v....t.]..v/.v.......;..T....P...\..a....4=\D..K..".snY...9w....z.~....sy.p.....&.#k..QI..."...L.'..[...n.{i..(..sf.9..;..T..............1....'...T..N..v....3gf[.CO....6QFGGw...o..j.P..v..T.q..v.}j..>y.....>.%....(etttF..xS...P...[.V........N.sr....Y....y2...W)...{.....[...\U ..`m.....u`2..<.G!.....#.U.._.@b..V..@..y..u.2...#...<y.t:...5.....O../O.....?..l~.x..!.ms.X.2.{G....U.)xx.Z.........#......p.. ...G...5....F.g6.=...+.......[455.e..........p.../J..3....v.@..lL.j.0..D....`..x&..HF..""H...g.....T.dJ......?_).w..3....:<}...LH-

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=zeta_interactive&google_push=AXcoOmRYiLIKT1LSQ1dkkpqKwk33oMg7DeXixc2GWjt_kOj9GBU8pmtxtUSmhcXJwPyG5VAPuogsXBZu42ViSe2xiKlxCk9zSM4&google_hm=ODI1OTg1NjcxNTY2ODc4MTc0Ng==
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65329), with CRLF line terminators
Category:	downloaded
Size (bytes):	102801
Entropy (8bit):	5.336080509196147
Encrypted:	false
SSDEEP:	1536:MGLiogSomRYvoGtT+KHsVS0bT79DSsi46j/LPyR7kbE:MGLXGFKT79DSs6WCE
MD5:	C89EAA5B28DF1E17376BE71D71649173
SHA1:	2B34DF4C66BB57DE5A24A2EF0896271DFCA4F4CD
SHA-256:	66B804E7A96A87C11E1DD74EA04AC2285DF5AD9043F48046C3E5000114D39B1C
SHA-512:	B73D56304986CD587DA17BEBF21341B450D41861824102CC53885D863B118F6FDF2456B20791B9A7AE56DF91403F342550AF9E46F7401429FBA1D4A15A6BD3C0
Malicious:	false
Reputation:	low
URL:	https://secure2.indwes.edu/Marketing/Project-Request/ScriptResource.axd?d=T0VaWC5aFwLzNsW4kfM0Y5VkzcH6rIPd0pv-1CL4Dy_XiN6x5sx3PkYf3sexq64YkJRoDlgIkEiUN4AwioDB-vRUrNL4GfY6aTnep5OSyf88dGSi9Atycswoaue9vayAL20ek3B9p0Pmz1puwpE_SEhbflnicYNonlmniaV6trc1&t=511fa37d
Preview:	//----------------------------------------------------------..// Copyright (C) Microsoft Corporation. All rights reserved...//----------------------------------------------------------..// MicrosoftAjax.js..Function.__typeName="Function";Function.__class=true;Function.createCallback=function(b,a){return function(){var e=arguments.length;if(e>0){var d=[];for(var c=0;c<e;c++)d[c]=arguments[c];d[e]=a;return b.apply(this,d)}return b.call(this,a)}};Function.createDelegate=function(a,b){return function(){return b.apply(a,arguments)}};Function.emptyFunction=Function.emptyMethod=function(){};Function.validateParameters=function(c,b,a){return Function._validateParams(c,b,a)};Function._validateParams=function(g,e,c){var a,d=e.length;c=c\|\|typeof c==="undefined";a=Function._validateParameterCount(g,e,c);if(a){a.popStackFrame();return a}for(var b=0,i=g.length;b<i;b++){var f=e[Math.min(b,d-1)],h=f.name;if(f.parameterArray)h+="["+(b-d+1)+"]";else if(!c&&b>=d)break;a=Function._validateParameter(g[b],f

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://ad-delivery.net/px.gif?ch=1&e=0.49315834659810265
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	284660
Entropy (8bit):	5.3975741637593115
Encrypted:	false
SSDEEP:	6144:oe+8jDjrMlXX25IMZ2j3oQOnRQuKK2s2Kk0CNIpcQMHQ:oy
MD5:	9C5B58C0524458F76B62AA38AED5D7E5
SHA1:	778460FB6F8D24F4E22D7E7A8DF28F00737C7971
SHA-256:	DCE6005A4B251D2713A6C24B607CA7D1F99C765A2C0AA12DE6EF41EC7C11D4CC
SHA-512:	66D894627003A7833A227B66F3FD1751B48AB6A67A355B97BE988D91E425762509B618806A40242AAEF8E771359F991A5BCF08088D6300B9E8D93E70688C5DAA
Malicious:	false
Reputation:	low
URL:	https://cdn.fuseplatform.net/publift/tags/2/2789/fuse.js
Preview:	!function(e){"function"==typeof fuseDefine&&fuseDefine.amd?fuseDefine(e):e()}((function(){"use strict";function e(e,i,n){return i=c(i),function(e,t){if(t&&("object"==typeof t\|\|"function"==typeof t))return t;if(void 0!==t)throw new TypeError("Derived constructors may only return object or undefined");return d(e)}(e,t()?Reflect.construct(i,n\|\|[],c(e).constructor):i.apply(e,n))}function t(){try{var e=!Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],(function(){})))}catch(e){}return(t=function(){return!!e})()}function i(e){var t=function(e,t){if("object"!=typeof e\|\|!e)return e;var i=e[Symbol.toPrimitive];if(void 0!==i){var n=i.call(e,t\|\|"default");if("object"!=typeof n)return n;throw new TypeError("@@toPrimitive must return a primitive value.")}return("string"===t?String:Number)(e)}(e,"string");return"symbol"==typeof t?t:String(t)}function n(e){return n="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typ

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	30334
Entropy (8bit):	5.405536255443099
Encrypted:	false
SSDEEP:	384:UJXE05IsF53BGAS1StSZSGotLr33LBEJPORgFfwKYlf29u9z5:Q35Isug4sGa3OmL20
MD5:	2DCEB08E80AF1C7716B7F95E6907B07E
SHA1:	BF73062E8279801D7B0633771CC0BEEADB4FF23D
SHA-256:	55431CA9A362ED0CC015CD9A19FE0B555B07B7AE90F8B218411B03642F251C40
SHA-512:	B1D84061CC1EFB7A6D71BC33401A5B55025065600AAC2F90B71B24A84EF6C72F5AAFA892FA49618A637D1E5B9407BDC188B73E7B54258033B068FF89A2EE42B8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......<.......H.....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 110 x 114, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	11583
Entropy (8bit):	7.977022340705602
Encrypted:	false
SSDEEP:	192:HtnqzSu8x6GKdtBCjO9z23RiPfw4slEWlkdaZvgU9JsSc3f1zhxvSxO2vrpE1em:oh8YCK9gA8kdaZ4U9kOvvruZ
MD5:	596CEABCDAA1016DB9677D3B8F28E8D3
SHA1:	4EB33E30EED75981AC0FFAA9C111CD5470E23477
SHA-256:	9715E6BFA7CC7D50CEB4AE193E94D2E9DF8AEA8ECCDE5372E35E781DB06A5C42
SHA-512:	0D3A86DBCDF41A08473234268310DDD65A30B9B043097132B9F44D9B4ACDB685E512FB03F1337D4C6091081885FDBDF15E746B3593908B9214F533D9482EDFFA
Malicious:	false
Reputation:	low
URL:	https://browser-update.org/static/img/big/f.png
Preview:	.PNG........IHDR...n...r......O......sBIT....\|.d.....pHYs.........L"M.....tEXtSoftware.www.inkscape.org..<... .IDATx..w..G}...s.nQ/.%.e.;...`...)6!.....P.(..$28........Rp0-......S%.&w...........c..=.H..}<......;;........).n.E..c..v..<...}.:.A.W"..t..0.J...Gu..n.w....g.4....:.\u....n.Ow...S.]....Cg......=.....n.<c.&.!./..0.!X.p.=....4x.\m.[.8.,..T..G..r.n.}O_......]K.Bv.g.4^.........@..^%......g$.."...&...S`.........U...OW3....5..^.A..~B..<"..#.n.....C...e........k.Y.(M"..!XQ........m...b.....#....F.i..0z,.....0r(..%p`....&.d.l.fuZ..H...p/F.....\.~\|.......m...^.j.'.$...j/_>O.s...........=.`8. \|..9.#.F...T..\|H....(;.;...+@...x... ....p.,fsi....,..h....]Od...:...y".R.o.<.w..$=..A..1...\| J*..[f.4)..2..........ds..NY.....]..[.dYi..e.&...6........._`D..'...sK..0.....h....@.C..sF9+..x...@...L....-.5s..fU.&..@.l.mn.-...G.>....W.'.i.L..=...N[.F/C.....PV......k.... .3........vH..uk.)/.w....&ot.e.!..8...i..;.f..E..a...Bw......iz.2u.+.S. .Y.

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	26826
Entropy (8bit):	7.962384718747582
Encrypted:	false
SSDEEP:	384:Pl0J+ToFtyx/kd57yXSlNYLDIB8FMWiKPiHVdLhFhOA6pmP7QQ1IsiSYeJCA2kXN:Pl0J+0FtMI57yXSlunIBTEdUQoIjEC4L
MD5:	B0349CCCA36912B8CFF07E71D0A80770
SHA1:	E3B9C1C472ED7DCE9ABDD2497DF7B9D5FC9217A3
SHA-256:	C6D5FDEB4E7F7B423B878EBD2289D186D98C2EE1D3F02761477E904C0122B2C4
SHA-512:	D56A9F1561319ECD4A076266839A27A958A3CBEFA4615C1159061E99929042B66D3400A5D373B77985A327F7EFA71F53D5F38E8FF818F3382C0E3E060914F496
Malicious:	false
Reputation:	low
URL:	https://browser-update.org/static/img/big/e.png
Preview:	.PNG........IHDR.............\r.f..h.IDATx.....................f...$.-..VV}..l.m.m.m.m....T.../n.dLFW..s...q"O..9.....G..........=..(\s_.........4G.?...7h.+.B....%....Ah37...-M..'.......P........1.....c.G...ax...u.l...{z.W.].N.F.........g.3..M..f>#.0&...).......O.L4.;.k.P.x...x.<.....Q.@Q...2N.2..1.....%.S....W..w.$..R.U..;....S....f....).F........eN.f...5.7.hg.P4tb.T.W...O.o.....?..Y064t.h.7.....D.6..{3j.8............f.:..A....z#*.R.5...).w...?.......].Ja#..:r...........S.......,/F.....P.ZLH..@...Y..LFp.{....E._.....4~.W..Lt..3.<...8r....kD_.. /N_./.'.......\O.]..b...T.....zm[Q.....?.?I...8.....~.... ..?... .N.....E_..6^.>.......]....A.=SU.E9....U9.R.@.?......N..r4.ot..G..1?.5wo..K.7....@.=`.Y..a...1...e[p....33@7R.J...M.6..@..Da..A.Y....9..;.`........S......\|./s...V..(go..6....!-.3.....W.o.?.l...{.u.g...v....B.............&.<..Fp.\|..1..pXKQ..'k.EI.5.m./..L...d.....s..W8....\.j.`.7...)........5.7...g.....i..+...........

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (625)
Category:	downloaded
Size (bytes):	824
Entropy (8bit):	5.472650593775339
Encrypted:	false
SSDEEP:	24:2e2C6hHfhiVIFK+zu+p+KzN9Y0+ODB5GBf:2e2C6lIqvzuVcnY0JB5GBf
MD5:	4E2A491D81601E0532E4B34FFE8FA60E
SHA1:	CD3DEAF862C4C21525C780B2A5340A50994668E6
SHA-256:	D437ABBE3288AB1D9262D04CC3E6CA8840756FD773EEACA030B9B8013E8F25BB
SHA-512:	F4ADE73296861A13157A8FBDB17707EE22B33F5EF93F122501C5C9E6AC797406D5E9AE1713F60F46AE95BD1BDE461A93F9F8B832DABBC97506694108DEC24446
Malicious:	false
Reputation:	low
URL:	https://u.openx.net/w/1.0/cm?cc=1&id=e818ca1e-0c23-caa8-0dd3-096b0ada08b7&ph=2d1251ae-7f3a-47cf-bd2a-2f288854a0ba&plm=5&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dopenx.com%26id%3D%7BOPENX_ID%7D
Preview:	<html>.<head><title>Pixels</title></head>.<body>.<script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script>..<img src="https://s.amazon-adsystem.com/ecm3?ex=openx.com&id=b9b79b8b-5e72-86b6-b423-c9f3a5e7acad"><img src="https://pr-bh.ybp.yahoo.com/sync/openx/75a681b2-d274-af05-45fa-5d913283aa04?gdpr=0"><img src="https://s.amazon-adsystem.com/dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=b9b79b8b-5e72-86b6-b423-c9f3a5e7acad"><img src="https://match.adsrvr.org/track/cmf/openx?oxid=e161e7f6-42d8-3d4c-742d-4b64cdd4674d&gdpr=0"><img src="https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=Y2QwZTM0M2MtOGJhZi02M2U4LTYxY2QtMTFkZDA3MzZhOTJk"><img src="https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_sc">..</body>.</html>.

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (32769), with CRLF line terminators
Category:	downloaded
Size (bytes):	94789
Entropy (8bit):	5.37249398927007
Encrypted:	false
SSDEEP:	1536:sYRKUfAjtledhTmtaFyQHGvCXseUOgRc9izzr4yff8teLvHHEjam7WuX3yzSiLnM:FUb6GvCD0932o2skAieW
MD5:	1747449F5BAC2C068A524EE343D790FE
SHA1:	E2967F9D2C4AC172799DEB83ED97D089B60D3B85
SHA-256:	D6C27F54B1B1E4D2EEFF5AFC0A4AC422EBC29D10FCC356DA9CE567F926CF177D
SHA-512:	3C9EA74F40A80180F0B4F6A1A5DAE4728D3CE95CB05C450D8C87793B99A4DA851503D0302CE704CF0BA15EA9CA54130DDE5C7978D011800FBF494D7D76C35307
Malicious:	false
Reputation:	low
URL:	https://cdn.2trk.info/rtgstat/script/jquery.min.js
Preview:	(function(a,b){function cy(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cu(a){if(!cj[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");d.remove();if(e==="none"\|\|e===""){ck\|\|(ck=c.createElement("iframe"),ck.frameBorder=ck.width=ck.height=0),b.appendChild(ck);if(!cl\|\|!ck.createElement)cl=(ck.contentWindow\|\|ck.contentDocument).document,cl.write((f.support.boxModel?"<!doctype html>":"")+"<html><body>"),cl.close();d=cl.createElement(a),cl.body.appendChild(d),e=f.css(d,"display"),b.removeChild(ck)}cj[a]=e}return cj[a]}function ct(a,b){var c={};f.each(cp.concat.apply([],cp.slice(0,b)),function(){c[this]=a});return c}function cs(){cq=b}function cr(){setTimeout(cs,0);return cq=f.now()}function ci(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}function ch(){try{return new a.XMLHttpRequest}catch(b){}}function cb(a,c){a.dataFilter&&(c=a.dataFilter(c,a.dataType));var d=a.dataTypes,e={},g,h,i=d.length,j,k=d[0],l,m,n,o,p;for(g=1;g<i

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (598)
Category:	downloaded
Size (bytes):	35492
Entropy (8bit):	5.469634941543777
Encrypted:	false
SSDEEP:	768:7CkD5/uPaRKPUlrDpPgwAL0QLpDwRi8xhBdmIaSrS9EJAP+:eXtPUlrDpPXAL0wph8xf9BWY
MD5:	C8E0AF5111DA35A93778A28C65470447
SHA1:	A72B35B1ED485767792E56653E7652985ABF7F50
SHA-256:	AEDAC53B8F8BBE11707C84B588D36A4E1163A9FA76E0D65272BF6C8B31E5B612
SHA-512:	B6F6D4EEA5D7B56B54983EC0478EA2D3BDE898910597EEADE56E902644B6EA5D0052400389691CFAED56421818AF29C99CC0349A09DAC7F3951CDB581DA6F5F3
Malicious:	false
Reputation:	low
URL:	https://indwes.tfaforms.net/js/kalendae/kalendae.standalone.min.js
Preview:	/*******************************************************************. .Kalendae, a framework agnostic javascript date picker . .Copyright(c) 2013 Jarvis Badgley (chipersoft@gmail.com) . .http://github.com/ChiperSoft/Kalendae . .Version 0.5.1 . *******************************************************************/..(function(ma){var v,m,q=function(a,b){if("function"===typeof document.addEventListener\|\|f.isIE8()){var e=!1;try{e=a instanceof Element}catch(q){e=!!a&&1===e.nodeType}e\|\|"string"===typeof a\|\|(b=a);var d=this,k=d.classes,g=d.settings=f.merge(d.defaults,{attachTo:a},b\|\|{}),e=d.container=f.make("div",{"class":k.container}),n=d.calendars=[],x=m().day(g.weekStart),p,A=[],r,l,u,v;r=[];var L;l=0;p=g.months;f.isIE8()&&f.addClassName(e,"ie8");for(l=7;l--;)A.push(x.format(g.columnHeaderFormat)),x.add(1,"days");.F(d);if("object"===typeof g.subscribe)for(l in g.subscribe)g.subscribe.hasOw

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 20028, version 1.0
Category:	downloaded
Size (bytes):	20028
Entropy (8bit):	7.989815525253405
Encrypted:	false
SSDEEP:	384:rsI3Ql/p69zMPrE1cP232AphZG/66KSRKFUfGTsvNGRqt:wIAW9zoCvoZ9XMK
MD5:	2BFDE17B9A1384CE64AF78DB1B87A82F
SHA1:	8EFFD23E482511E249C3F8E91CDC503729B93598
SHA-256:	5C2D662E92BCBF1A5970B97040F901031295E79A96314DB8302F549003022087
SHA-512:	4AA4665AEB9D038078B303448D56CF14DB8EA43739380CDA67BA63F738ABFE77470686D67E1D04FB1C784FCCBF9A053C246F440E0F638AE790B6A6146B10E0DC
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-fCZM.woff2
Preview:	wOF2......N<.......,..M..........................p....2.`........m.....`....."..6.$..@. ..r..j..1...5l\m..!@!.o...<..(.".8....,..?&7.H.@.U............D.....s.)..`..Y.^OD..o.....'...~=.L..].?..h....4..i..4R.{...I. ...L...wGhr...<.?..[..G.o7+IYQT.q....PR.;.o..T...F.T"..I.ZJRT.1.3...nsel...y..[._...Y.Q.d'.^.uW.:.w.7..J.W@2qPo9D\...t.:v.........5..(....MC..7..o.5.kp....`.n}.<.la.u`....QR......6.95.N.R2@...HVZ.M9;f.k.q`.%.;n.!..>.....@d*%J..C..........\|r>...t<x..(J..@....5.qV..w.......e.X.X.......h..g.K.d....s.U7..?..x..7.S..p...6.....3..ld..q.Y..R!..t.>.}{e.....x.x.{K...\..c.l.....,@`.t.t.$>.8....G..`xw .3.q.;....T......... .....L............./.p.....b.G?F.........5.y.i.I.t.."e.cj.3...[....".H... ?..%.7p.e.. H..}g......y..../...,,.....tn`s.l....R...:....^.B...m..]...et..x.....c..-..:........+.=.0...\|.D......n...,.A.A.j..T...?h.$4 ...,.1..`&. Q.(..L>.E.K..f.. .N<.W..pq.X...J.XL. ...B........D.:.W.....d....U.z..vt..%...3...b...$.d.4.L.$]......

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	787
Entropy (8bit):	7.535224668131678
Encrypted:	false
SSDEEP:	24:YgktmKBgMJliZv7AmrYq1Yv6Bv9aRdgcafK:Yge5lgv7AFqm81qdgcafK
MD5:	43F0AB4CBCC999CF3D3BD81BB05FE952
SHA1:	8B0F5C1805305E826C8457935C6BE08C22C46A85
SHA-256:	5F979BB91EAF11B4A8F292CF49BAB2250EB755CFF8F6A10169977DB44ACABD3E
SHA-512:	1F164474D779239ECDAE5A39CDF1D13AD93CD1B2920600FF4364E2A429DED442702B84E03449D08ED9740564125DFB56FFE8FE59D77E29BE2ED951EC74C7DAD5
Malicious:	false
Reputation:	low
URL:	https://browser-update.org/static/img/small/c.png
Preview:	.PNG........IHDR.............(-.S....PLTE...E.J....hW.gW7.@.aQ..7.F9.A.^P.^P.........z.4B.EF.F. ..G@.DI.G......RG....#."...QG.gV=.B.'F8.AL.H9.A.[N.U>7.A...dT.cS.QG.......\O.G@.D<.B>..B.D?.D:.A.G@...T..Dq..N..]....s.]O3.NG.F-.-,.+.w$.v#...%...................X...........v.......R..G..?.......e..\|..V..R..6~.'q......g...........q...}..w.hb,.O..N..L(.I..G.PGD.E6.D{.A:.?..>.8>a.:..7.=7.;7.)4.!2.'0,...4...,..(.%. ..cu...........................v....)j. ...*tRNS.....d#...................zzsnlkgeXSJ....c.......IDAT..c..M6.ff.9..(P....[.6._V..$@\|..SS.ZW.j= P``.`,..h....uvrvRgP.,..........pw.d.e.k..........fb...kN..177.I...2...7.E&...&..x.D....}-..,.r.Z......-,".<....8.....m..m.t.......M.B5.e=..f.2 ......g....A<..iR.....(....0?...;...H/4.........IEND.B`.

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:d:d
MD5:	9DD4E461268C8034F5C8564E155C67A6
SHA1:	11F6AD8EC52A2984ABAAFD7C3B516503785C2072
SHA-256:	2D711642B726B04401627CA9FBAC32F5C8530FB1903CC4DB02258717921A4881
SHA-512:	A4ABD4448C49562D828115D13A1FCCEA927F52B4D5459297F8B43E42DA89238BC13626E43DCB38DDB082488927EC904FB42057443983E88585179D50551AFE62
Malicious:	false
Reputation:	low
URL:	https://cdn.fuseplatform.net/telemetry/noconsent?auid=22728807301&cmpj=unknown&v=1&ttm=1710778926451&cookie=true&res=1280x1024&device=desktop&browser=chrome&fuuid=e77f8bfe-60b6-5c8b-a657-64bfafdad065&fid=2789&pubid=5&url=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html&sid=bac552fa15f25121a86b&srate=100&adserver=gpt&etm=4419&e=slot-request&tenant=publift&account=browserupdate
Preview:	x

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=sovrn&google_push=AXcoOmRBhOkc4CQBijA_uVLMq63d_Hmzeiv428I6IxmXQKJNWikWpoFRWaBlWqXY3n_XtwSVeBsXHqLVjTbLAzJOf5ElQmIq4Ts&google_hm=IV6WABZHUuoYlIO2Qzydeftv
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	248
Entropy (8bit):	5.152207539562613
Encrypted:	false
SSDEEP:	6:knMXiCn1Q9ad60so7NoSliCnSkeoS90BtjOIgtqwtkqOvaxPPPVj:kiha4X6S4CnShyngtwvax3P5
MD5:	1B536839CFCEBA74EDE5A2C30E655542
SHA1:	D79C75C6AC96F314C619250C0920900A5EF09642
SHA-256:	A58ECA07E0BA184B0BB823C2C87DFB2FB49EF76DD790EBF67AE89006F6D0A6C1
SHA-512:	694FD7E0E0422D69CA1FF7E5595C7A116D6742AE697170407800EF612F76D692090CE9F63840B6DCD8A21BA1CC405528E82FD75F866B502EF954B1EE499B2470
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISTwmjhvzkzf846xIFDdeKxEYSBQ0ql5s2EgUN4H9NThIFDec-mpoSBQ1Qsa7fEgUNfRtrvhIFDdvXVGISBQ2oJTeQEgUNdGJaMxIFDT13jjYSTwkJkz-LycDvOBIFDdeKxEYSBQ0ql5s2EgUN4H9NThIFDec-mpoSBQ1Qsa7fEgUNfRtrvhIFDdvXVGISBQ2oJTeQEgUNdGJaMxIFDT13jjY=?alt=proto
Preview:	CloKBw3XisRGGgAKBw0ql5s2GgAKBw3gf01OGgAKBw3nPpqaGgAKBw1Qsa7fGgAKBw19G2u+GgAKBw3b11RiGgAKBw2oJTeQGgAKBw10YlozGgAKBw09d442GgAKWgoHDdeKxEYaAAoHDSqXmzYaAAoHDeB/TU4aAAoHDec+mpoaAAoHDVCxrt8aAAoHDX0ba74aAAoHDdvXVGIaAAoHDaglN5AaAAoHDXRiWjMaAAoHDT13jjYaAA==

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1321)
Category:	downloaded
Size (bytes):	17314
Entropy (8bit):	5.342134706855769
Encrypted:	false
SSDEEP:	384:cCDFzlR6exHAiyyrYuy9ckdnfczIk7LcuNP/p:DlsexHAlii9NmIeLcE
MD5:	2CC87E9764AEBCBBF36FF2061E6A2793
SHA1:	B4F2FFDF4C695AA79F0E63651C18A88729C2407B
SHA-256:	61C32059A5E94075A7ECFF678B33907966FC9CFA384DAA01AA057F872DA14DBB
SHA-512:	4ED31BF4F54EB0666539D6426C851503E15079601A2B7EC7410EBF0F3D1EEC6A09F9D79F5CF40106249A710037A36DE58105A72D8A909E0CFCE872C736CB5E48
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var l="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ba(this),p="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),r={},u={};function w(a,b){var c=u[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}.function x(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var g=d[0],h;!a&&g in r?h=r:h=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in h))break a;h=h[e]}d=d[d.length-1];c=p&&"es6"===c?h[d]:null;b=b(c);

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	10863
Entropy (8bit):	5.277561569463626
Encrypted:	false
SSDEEP:	192:GdBGHVOO0QEEG56FtiNanyRQ9iWBBraMH8xJtYIpLcBKQ68/cD/Os1:GdBGHVOOsQHyRQ9imrKxJlpgKQt/Ir
MD5:	3882A5DB8AE2313E308D8B0EAA7BD577
SHA1:	97FF2579F89D63ECE29620CCB4197BA315613BAF
SHA-256:	490A0A5E483E2EEDC54A6564F4B58A74E9C8C9F7B54C51B0EFFDC2BD26F4156C
SHA-512:	E5D4AA88F51E2F14DCDEEAF0A2FFC3238E7FEA075FDFA2FBAAF42188617F0A27A75C2D14ABBB9A07225CDDC6FB29638104BC0FF23C9A2BCF3A18D7AE797C7F70
Malicious:	false
Reputation:	low
URL:	https://browser-update.org/update-browser.html
Preview:	<!DOCTYPE html >.<html lang="en">.<head>.<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />.<title>Update your Browser - Browser-Update.org</title>.<meta name="description" content />.<meta name="keywords" content="browser, webbrowser, upgrade browser, update browser, choice, change browser, firefox, safari, opera, firefox, upgrade internet explorer, internet explorer update, ie, safari, konqueror" />.<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">.<script src="/cdn-cgi/apps/head/dSTaMRtp7Uh77lw_sJp5-4w_sZY.js"></script><link rel="shortcut icon" href="/static/img/favicon.png" type="image/png" />.<link rel="icon" href="/static/img/favicon.png" type="image/png" />.<meta name="robots" content="index,follow" />.<script async src="https://cdn.fuseplatform.net/publift/tags/2/2789/fuse.js"></script>.<link rel="stylesheet" href="/static/base2.css" type="text/css" />. [if lte IE 7]>. <link rel="stylesheet" href

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	761
Entropy (8bit):	7.594779111754463
Encrypted:	false
SSDEEP:	12:6v/7sQeIl//VWv0ETCX443vvrkwQdRdU7wppxmb0WGOFwNM0Ix:hQeI93XPvrkBW4pxmb00wNM0Ix
MD5:	AF985E11B8EF341341D8C44FA00B5D0F
SHA1:	BF443D37DA964CEA50DD5CD792F13258506DC7FE
SHA-256:	B72FEFB656009443D88CFDACD5CAAD8969FDAB1BF6DF78C8BFC687ECFB5FE0DA
SHA-512:	140467E975C1376B00C2FB45F1C4BD2425F96E98ECA6769B54CC37AC98AA37450A566A283A86B5F030793EA612280BDEB968FA298EDB5C9614EE0B40B0BFB106
Malicious:	false
Reputation:	low
URL:	https://browser-update.org/static/img/security.png
Preview:	.PNG........IHDR... ... .....D.......PLTE...............................................................................................................................................................................g.V.....tRNS..D..f."Rw.i....IDAT8...0..`2.......)...j....k/.!..Hs.~...J..t.k+...W.t....W1I}..S.<..\|..A.nt.i..X_.'.[.F.k.v.T}3.._..W%d.....N......dW+....L.!.P...QT1..P`.U...k..K.Sa#...._....u]Q"{t.\|o.....f..K...x.......@...H...B..B.e(p7v..o.S...5......^.......lD...>.@[aL.8.56"qb.m.O."m.qJx....S.:.c...(0.<=r....x...\....3...I@9...l>"dP.<......i)".1..2..,]..>,.BH...]9...TUU.A5G.Wa...8...q...\2.0...).C.:...`..(....n.7...=:.....o..K_.....oMs..IM2}.......?_..G..<......u..q............Y..5...G.u....>.7&.....IEND.B`.

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1054)
Category:	downloaded
Size (bytes):	2689
Entropy (8bit):	5.40021492400263
Encrypted:	false
SSDEEP:	48:Otg7xBo1IN7Qa69Fa9FKYPCfmY/bZyf2jcju8m5I0zRHkFRvEJG:/N7QaaiC+Y/jcju8WhRHMxEJG
MD5:	9EF158292B617D358506529B02C73629
SHA1:	843852D8ADDBF1A7F96C5607179E1C9423ED8A4C
SHA-256:	3164DB7EF9EFC7121CE85192340A653C6CB87E34CAA05849C8FD47B7872F9FC5
SHA-512:	D4B0E6E8900043C9C4EE010ABFD00A51D891FE4B4F424418DC1A75075E3DF931D0558BFB3E983190079EDDD0BF11D7604E70CEAF119351690812EBC21D7EAEB8
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240313/r20110914/client/window_focus_fy2021.js
Preview:	(function(){'use strict';function f(a,b,e){a.addEventListener&&a.addEventListener(b,e,!1)};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a,b,e){if(Array.isArray(b))for(var c=0;c<b.length;c++)g(a,String(b[c]),e);else null!=b&&e.push(a+(""===b?"":"="+encodeURIComponent(String(b))))};function l(a=document){return a.createElement("img")};function m(a,b,e=null,c=!1){n(a,b,e,c)}function n(a,b,e,c){a.google_image_requests\|\|(a.google_image_requests=[]);const d=l(a.document);if(e\|\|c){const k=h=>{e&&e(h);if(c){h=a.google_image_requests;const v=Array.prototype.indexOf.call(h,d,void 0);0<=v&&Array.prototype.splice.call(h,v,1)}d.removeEventListener&&d.removeEventListener("load",k,!1);d.removeEventListener&&d.removeEventListener("error",k,!1)};f(d,"load",k);f(d,"error",k)}d.src=b;a.google_image_requests.push(d)};function p(a=null){return a&&"22"===a.getAttribute("data-jc")?a:document.querySelector('[data-jc="22"]')};var q=document,r=window;functi

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.1961893998690174
Encrypted:	false
SSDEEP:	3:CUU0/wv/p/Hh/:S0+/
MD5:	45CF913E5D9D3C9B2058033056D3DD23
SHA1:	30CB5D44E276505B1D4C053C8B25525DA228DB30
SHA-256:	42B976597A2D977D0E300F6D06BC903DB389E5C112D33C1C8C249690A522D9F2
SHA-512:	16DD1560FDD43C3EEE7BCF622D940BE93E7E74DEE90286DA37992D69CEA844130911B97F41C71F8287B54F00BD3A388191112F490470CF27C374D524F49BA516
Malicious:	false
Reputation:	low
URL:	https://bid.2trk.info/impression?v1ImpParams=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&price=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q&bs=49a8ccc8-4e10-415f-b3cc-85fda009ccda&cbvp=2
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:d:d
MD5:	9DD4E461268C8034F5C8564E155C67A6
SHA1:	11F6AD8EC52A2984ABAAFD7C3B516503785C2072
SHA-256:	2D711642B726B04401627CA9FBAC32F5C8530FB1903CC4DB02258717921A4881
SHA-512:	A4ABD4448C49562D828115D13A1FCCEA927F52B4D5459297F8B43E42DA89238BC13626E43DCB38DDB082488927EC904FB42057443983E88585179D50551AFE62
Malicious:	false
Reputation:	low
URL:	https://cdn.fuseplatform.net/telemetry/noconsent?v=1&ttm=1710778924352&cookie=true&res=1280x1024&device=desktop&browser=chrome&fuuid=e77f8bfe-60b6-5c8b-a657-64bfafdad065&fid=2789&pubid=5&url=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html&sid=bac552fa15f25121a86b&srate=100&adserver=gpt&etm=2322&e=fuse-load&tenant=publift&account=browserupdate
Preview:	x

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 263 x 81
Category:	dropped
Size (bytes):	2090
Entropy (8bit):	7.709979636708156
Encrypted:	false
SSDEEP:	48:SOs3Xbic7ERAM2nSCGBIz0u/QPcWskekmH:S9ioE2STOz0gWakO
MD5:	1B9EE43DD42F1EED1A729FD9B6F04911
SHA1:	4B74B5F099797B59A4630C7060899AD99C7C5F50
SHA-256:	93FE81DB61D9535E11FE400603D155F0291A6B275A3FDCE7B3C715A965EF9FB5
SHA-512:	A1942B1C56962450B0F76397AF461E172EFD15A697918BBE3BB3AE9586FBC252D69E5C8D504B0ED11A77DEB4B43BF7EB8589144580BD8DD85B405687BB4A6295
Malicious:	false
Reputation:	low
Preview:	GIF89a..Q......&.....#.."..%..%..%..$..%..&..!.. ..#..$..#..#..$..,..!..#..$.."..!..&...........{..J`.9Q.)C.......4...k}.Zn..)C..4.....9Q...........................................................!.......,......Q.@..@.pH,...r.l:..tJ.Z..v..z..xL....z.n...\|....!....9\|$Dv\|..%C.B".w.\|.~....w...~B... w .yF..#.D...B. .C.w.C.....\|%...E..C...v!E..%.w.tG......."....w....x{.....D....\|.w.....C....H.E.v.....4b..%.!.q..%,bg..F.le$.... C..I...(S.\...0c.L@...8s.......@...J...HyNX...P.J.J...X.j....S...K...h.]...p..K..]............L.....+^.8..U....#n..]...S......]..7Z4&B.).%..?!.....OZ....8.0+.AY.UM..!..M.C.x.b...]m.......k...(.....O......_........^.............(....h...&....6....F(.."...f...v... .(.$.h.(...,...0.(.`....C......ROB.......:..c.f.....v.VJF..F.r..... d..).......Q.B.....m..o...C .8.D:..d..b.1.....YR...}c...t.=.LgO#.T..>.l.....r......e$Bq.x..m.Y.OE.}..~MSNB...<.v..h.`.A...j.fB..P.:..P).j@.A.Z..4oN......C..*..x..Q...3..#.N'D.

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:d:d
MD5:	9DD4E461268C8034F5C8564E155C67A6
SHA1:	11F6AD8EC52A2984ABAAFD7C3B516503785C2072
SHA-256:	2D711642B726B04401627CA9FBAC32F5C8530FB1903CC4DB02258717921A4881
SHA-512:	A4ABD4448C49562D828115D13A1FCCEA927F52B4D5459297F8B43E42DA89238BC13626E43DCB38DDB082488927EC904FB42057443983E88585179D50551AFE62
Malicious:	false
Reputation:	low
Preview:	x

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Macintosh, datetime=2010:12:02 13:59:00], baseline, precision 8, 960x123, components 3
Category:	downloaded
Size (bytes):	71730
Entropy (8bit):	7.80036827058976
Encrypted:	false
SSDEEP:	768:gi7KmGGy7KmGG2+G0vE2VpNLDzk/Eji2zW/+R3ezl70YHqLrksGQkOWGIe4LoD/7:JtitggtLfkcmVRzl4YHKksGPOV7/KxEv
MD5:	D363CF7CD842422DCF24587029BB7C8D
SHA1:	4A3A7F7BEFA1FF62033C3244DF4BA3F7EBCFD140
SHA-256:	4D52AC1840076B23B422792CD8770185812A65C9975CD9DA37ABBF36D6784138
SHA-512:	223FE571E44722CCB2F7B2E8A50452FB440AA2D4DCC0B2F5A3C13521E70E17DBBC4237EA6C1AE1DDDA64767A92BA441145F636D4BB212FE6EBF2509E3EBF23E9
Malicious:	false
Reputation:	low
URL:	https://secure2.indwes.edu/_img/headerImages/generic_iwu/generic_iwu3.jpg
Preview:	......JFIF.....H.H.....3Exif..MM..............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS4 Macintosh.2010:12:02 13:59:00......................................{...........................................&.(.........................................H.......H..........JFIF.....H.H......Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..1.;.....h.!..._.....s\.e...W.,.o..O.3..1.1M.7.".C...[..o.l...g..o././t..E.[.X.}.m._m...{YN&k.;.....sl..o....O.}n....

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x627, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	70272
Entropy (8bit):	7.997406941965109
Encrypted:	true
SSDEEP:	1536:HOE8qD6UkirDZKpwvqgtK6FhW1S+fyC3Q6sWFdqMm6zF:ugGUnp0w3tK6FhW1S+qCf3zF
MD5:	4FF03C4B83F6FBF0BC586D64A2BBE796
SHA1:	8AC92323C154E510BC7E6D9C26F3A68F02CC14B4
SHA-256:	1581F261DD14666B30C218F26D4D99DC5DB2F6C091A0F1C7D09121A036E3978D
SHA-512:	249DCF561F5729690286F3E579FE45FE4B2F060BF6F02BA0175AE75250FAA1FC009A2AA22572831B98B0EE655E7BCEABC5E2BF690AC28C55E4D3544349434248
Malicious:	false
Reputation:	low
URL:	https://de9a11s35xj3d.cloudfront.net/0a0dde8b5c2c6b867ddb968a93f6fcd0.webp
Preview:	RIFFx...WEBPVP8 l...0......s.>m2.G$#$.......ci.....ib\.i.u....e.K...9sR.)...;..<....w..U.&.....W......$.at..Q.q.o...?....../.n..O.o..n.....\|.....t.y~..../a....or......._...=L..._.?............~Z.........;./.?.x.~............p?I.w..........}Z...?..5.V...9..3Q.1.&...).mD.mD.B5@ai.$.4.=..R.p._w...c...D..&3.(Dg.....j..N....y86.V...j?.n...".G......W...o..p\.rl..;1..B..jO\.t...y..X!Ho\.......H..7..G..+..y..]vk..x&..V...O....`?..^.?.G.#..m.4,$...j.>[..C.p^k..t.p..x..S.w..a.2./...,.[.h\.um.]....M.2L...6..Q...v)..f4...........V...j.U..~=..-.qU.ur.B....M.J..&^hc.h.Z.Q.y...........3.6...?B.-.,..%.[..<...zQaMJ..(....f....3c.0...6......l3..6.rK.p.....>..y..ti.\|u..... x..!.}......<.!.VM.....;....T.z....h..Y..^MV..=0....].O:..V..;.0.}H@= ...~..v.....r..R...\|....C..g......9.......m...Bh,.c$..+..Q......J.w.BaV.F.....J.3..+oe_.....w.;{...J.o&......Y..(...W.73..+.9I...V....}f.V).vU....V....-...8...ET...y."&~.v.........~u.@..).$... :.....1*.V..6D....6...+W5..~i

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8993
Entropy (8bit):	7.960051115426514
Encrypted:	false
SSDEEP:	96:IQFlI/I4o6SZ/zeCRDIM4v1gzBgvSSIpeasE39kbd67D2YcYjyzBPpb//xqaKwUb:ZFlIQ4hSZC3v1uS6e+UdsDWYjuNWZdSe
MD5:	85D58A8B09C21AE86D086683F1DD417B
SHA1:	9A425BC319508E0D6053A712CC7F50E93F3BE511
SHA-256:	BE4C3A4457D1BAABB25DDC25BB7828817BF1344F2F586D6C612CDF04CA346E45
SHA-512:	89C7404CD886242A6E703F3CE950B0225258F85A81235B2A897A05E44957211DC37C6023F4071F44A94B8A6946EABAE2EB960F8EEC8D6123F16B6C7A91003919
Malicious:	false
Reputation:	low
URL:	https://browser-update.org/static/img/favicon.png
Preview:	.PNG........IHDR..............X......sBIT....\|.d.....pHYs..=...=....t....tEXtSoftware.www.inkscape.org..<... .IDATx..y\|$U...v...t.d`f...e..D\@.W@...P...O.....<E..5.3".....P..tD\|>....D..E..f..NzIw..G20K..t......L...H.r...\......[.B&.&.}.]MY.k.e.,CY!.2...e.Bb...y.g9`....QtD1S..q...{..V....?l....N..S.H.*...v.vWew..(loI.8.........z...K....(..0..R#.vy.P..k....V8P`..u.@..W..jd...........,D....`..Rb.pU9..@`/ ...:.C...7....=...-....2.....Z..F.7....... ...TD..(&o.3.p...HD.."..M.;...".K...&.........:.....Y...a...:J...G..N...A...pe..U..[S.,J.....Q........F...+..\|Qz....c.Ec.......TN.xY.z..1D....]....c..o....B>s..g./.[...C.gTt8...... Y....I.GS.C.#...[..f.(.vz.k...... .G..Y...`..,..n..Z.s..[..,(.....E...g.Z.-"?5R.H.s.waK..a..pjO.0...ak........sZ{F....zhj...,-..3.......>yU9?9....Q.[.\|hZ...2...!{;f#...x.D...a+...3..tt.Ly.........P...i.WS...~3..V....#rJ.+{c.B..)....e.....>...._P......>7ix.....r%...D....=....W..zKwa(.AQn"2.Da.......c..2..9..y...d.+(G..%...:...l.G..3

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Category:	downloaded
Size (bytes):	48236
Entropy (8bit):	7.994912604882335
Encrypted:	true
SSDEEP:	768:uj6JxavgLx5rjTH3CdZ3y11o4uMb2IVEhiB6z6GAAHJApICtBgso6HaOjTXHRWK:ujoa4LxZPCdm3B2IVEhiB62apApISxos
MD5:	015C126A3520C9A8F6A27979D0266E96
SHA1:	2ACF956561D44434A6D84204670CF849D3215D5F
SHA-256:	3C4D6A1421C7DDB7E404521FE8C4CD5BE5AF446D7689CD880BE26612EAAD3CFA
SHA-512:	02A20F2788BB1C3B2C7D3142C664CDEC306B6BA5366E57E33C008EDB3EB78638B98DC03CDF932A9DC440DED7827956F99117E7A3A4D55ACADD29B006032D9C5C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
Preview:	wOF2.......l......D...............................O..B..h?HVAR.x.`?STAT.$'...0+...\|.../V........+..2.0..6.6.$..`. ..~......[B4q.....t..P.M_.z...1..R.S...u.#..R....fR.1.N.v.N.P...;.2........!Z......Qs...5f.G.K.an2&....2.........C.H.t..N!.....nh.<(.vN.....j.._.L.P.t..Ai.%.............._I.i,..o,C.].H.X9.....a.=N....k.....n.L..k.f.u..{...:.}^\[..~5...Z`...........`!...%4..,...K0..&.a/....P....S....m.Z......u...D.j.F...f.0`I.`.`.h#..)(FQ.F!o$........S.).MV8%Rh...r...x...T]$.=......Y...!.3.&U..."....Q....{.l/0..d..4iJ/..}...3....i[Z..NG.WD...>.[U..Q.h..@m.=..S...1C2...d...<..v.?.q.f..n...OUz.....&Z......Z."..N.....n...9.B..C..W....}...W..6Zs.i.+Z........jB.n..x.8M.....q..@I....-.%..,C,..K..#.2...4)/.v_..x.<....t.....%[.4?.=j.V..jj''..W.u..q....I.L.=......E...\.M.7{.>......W........C.`...,9$......\..o........y...4A..m.P.,X..=?.:................wF`..+.P..........M!.4.......l.>M..t.ff5r..^..Z.g...!fA,hIIQ...e.R>B.AH.VuX..>..\.=.ky...1>C....>C.c.;...6D.

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	26933
Entropy (8bit):	7.966990659685408
Encrypted:	false
SSDEEP:	384:TP376CKuHkHfcXSvTWuAI7EOGnfHYh8M8pP7o8oPQBTKuA4jBxrLszMMDfDUc2D:DLJrORv6urEFne8z1IbBARLszd2D
MD5:	053FF2981EA07E5060DC466935EEE0E7
SHA1:	699AD78FB83F5AF4D8B44323E3637F31A78B3E1B
SHA-256:	C6EF59E4AC95F5EFFA2D96E6D4D882FC296D68C4DB104C1577312FD8E5AC1D5A
SHA-512:	B7DD82900E2BC9CB9BC7411B4A2FFB32C4F9FEC93847C68B62D9CEC8E2570DC7080138196F4892666D4451083E7B239C6A33DDBD76DE9D1BE66E0F2CF7019F1B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............\r.f..h.IDATx...5v.1....i....\|._ T......a.....K.}....{.kw..E...............0........0)V.3.(.......y.....\H6...n..~............SX.......Mx.3yO..:.p9.2z...........H.&lnw.5z......Hg...H.......fY.....md.&......v...:...{dnX.....p.V..2n./};.QzQS...r.+,..Vf.#...n..5..!........o..s....V.)s...a_.................Mb.ib.#.w..r.E.......z.kU..9sf.+.U....v...S..k.%..........H<9q..D...I...-..Q]....C.....3&...N\|>q..A>.....)....`....'6._..H#..@.y...J.J.z.U..H......#....r.^.....@n..2F ..H.].......H.y..80..'Ar.2.E.....:....A.?L.Dq.P%D^..t.0{?,~.Z...Lb..h8....R.....W.PB...s...w......n.,...Pw...<.....,.0.$..D(.1.,.F!)}...Y...._ zk}y E@@....>S.T ...D..us.>B.=0{3..;.g.y._.j.]..B....JH..Q....L.j}$.w..w..Z.]..n.p-...w..:...B.......@ ..D.(l..,...8b.v=.......>o.....Zm^..}........v...v. .......C(..8.WE.J......^...Z......>.".....q.y..*..f..#B .C8.p....'.E.y...Aq.<...E.U'..$1DW..\."..y7....C...........Wq.p.F..Ne..gY/.._.q.m...O..'..

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 336x336, components 3
Category:	downloaded
Size (bytes):	7054
Entropy (8bit):	7.461759704254566
Encrypted:	false
SSDEEP:	192:mqnDrq/LOiemJek+QnzkDNsg7N15x1X1Lpyb:lb18jPnosKN10b
MD5:	A2E5375C6EE0D26E832C4ABBDCED778A
SHA1:	4909E6C2C518D3B97FA7ECEDDE4A741B53A02192
SHA-256:	F4AB589C28D36DAE48DA094A26A74380E7052825DB596056775814457C0067DA
SHA-512:	E4E9EBFF44812B94D2C63ECC00EE28DF13518DABC867F142BF242D1363895BF49034991B8651B656079BB302BC1196740661A9C8D3A70511A1D39FD8B818D50C
Malicious:	false
Reputation:	low
URL:	https://rtgcdn.2trk.info/imageresize?url=width=336::height=336::imgurl=https%253A%252F%252Fcdn.shopify.com%252Fs%252Ffiles%252F1%252F1996%252F9707%252Ffiles%252Fecoflow-us-ecoflow-delta-mini-portable-power-station-refurbished-standalone-30382791786569.png%253Fv%253D1689584309::campaignId=64180
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......P.P.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...)..s...

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1322 x 375, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	110584
Entropy (8bit):	7.98475068529157
Encrypted:	false
SSDEEP:	3072:lPjABVEpD7sVtXWEnMaGg6C1hwLjMSJCFXCCp/I:hsVERsVtXddddvSGp/I
MD5:	691C5749F07BD8AEDED6C5AD91AA8CCF
SHA1:	9B33145C138DCFD551A70E71C2086C7EAC30E3DE
SHA-256:	DB06BA8AF68A1F707C09A24C3BC992C4F2E14FB87B79D086B765FB955CC5D250
SHA-512:	37B8284A66CE4CBEBE86FFC8E75DBFFBD23041EB58FF8AB78F77A60B486437D2D213F8A142FEAFA26AA3340186927F52711A98B385C503D5206930B5C2908A41
Malicious:	false
Reputation:	low
URL:	https://browser-update.org/static/img/shot%20update.png
Preview:	.PNG........IHDR...*...w.....-.......sRGB.........gAMA......a.....pHYs..........o.d....IDATx^....$Iv..........V].......\....KrI..%....G.a.....%...I.#..X,@...f......Z....R...P....s.......NQ..K.g...G.....B..e...................VAAAAAAAAAAAAAAa...............C.o................................+.E...............V..~+(((((((((((((.8..VPPPPPPPPPPPPPXq(.................P.[AAAAAAAAAAAAAa...............C.o................................+.E...............V..~+(((((((((((((.8..VPPPPPPPPPPPPPXq(.................P.[AAAAAAAAAAAAAa...............C.o................................+.E...............V..~+(((((((((((((.8..VPPPPPPPPPPPPPXq(.................P.[AAAAAAAAAAAAAa...............C.o................................+.E...............V..~+(((((((((((((.8..VPPPPPPPPPPPPPXq(.................P.[AAAAAAAAAAAAAa...............C.o................................+.E...............V..~+(((((((((((((.8..VPPPPPPPPPPPPPXq(.................P.[AAAAAAAAAAAAAa...............C.o......

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1648
Entropy (8bit):	7.786749089214657
Encrypted:	false
SSDEEP:	48:htwnSuGFD+gPdAptKl+BcgpkDm1kbd++W5QaVxZB8WVJX:HwdGBdAptKl+BcUkdfW5Q8ZB8E
MD5:	BE21696F629097B8307EC8E367237237
SHA1:	233840D45987FA0A682F4DB3E92C4E7431C3AF69
SHA-256:	1157C6EBF919D190B667C67173E1B5CB2B1A17BAD529B242044F1690ED105B7C
SHA-512:	A7251654B233C9A4DDBF90B38FECD54F9B2FE14260C4C6EB5F8FA06B73FA98CE3E576377396EC8CAEB0BF663FCFDD3CD70DDDD7F83857227ACB936FA53CF7F0F
Malicious:	false
Reputation:	low
URL:	https://browser-update.org/static/img/comfort.png
Preview:	.PNG........IHDR... ... .....D.......PLTE..........................8.....Z..........f..I..>.........P..E..................{..x..@..<...................n..\..V..<..<................s..k..c.._.[..R..G..@.................xx..v..j..i.h..b..X..S..N..M..C..@.1)..............................................uu.p.n.f..X..V..O..M..K..J..I..D..0..............................................}..}..\|..y..ssrr..i.bb..a..a..`.X.W..G..C.s7....................................................................................................................\|..{.{..y..y..v..v..u..s..s..s..q.qq..o.oo..m.m.k..i..i..h..fqqd.c.a.a..a..`qq`\|z^..].\\..V.T.QQ.QQ.P..L..I.G..E.EE.D..C.hC.BB..7.3.c0....?+.B(.j'.n&.X$./".".(".D.....(........&....tRNS..fD..."........IDAT8.b@..F9V..VVI!.....;..i..v.u.0........e.5v...1@./.........q.5v1=V..,_.R...k(##c...'k.j."..B>....WFMU.^M..BN._.sG..!,9.\|<...e..*a.............;.>.C..O%(

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1838)
Category:	downloaded
Size (bytes):	415174
Entropy (8bit):	5.585970372996938
Encrypted:	false
SSDEEP:	12288:OzmMpyTrgiR7NRSWqUCMx0+4OdMtKtHIBj6mE7G3gWwHRb37lGYpG5R0MJYPC2YK:OzmMpyTrgiR7NRSWqUCMx0+4OdMYtHIg
MD5:	2497AD524A0E24EAAFB73B90AD81EEBC
SHA1:	8E0D411C0A5A367A7ABD59ABB2A3C3DCA505A978
SHA-256:	6C24812B57CA05B6AD7E7BAE77DC988219C5D0E300F4C2441DC8F317E93CADB3
SHA-512:	8E2B1FB4C48CE733BDF250DABC477313BA703D829354C4C56233140ABAD86DCC2EB47531CEDDAE27F43119DAE3A6031D045736B510D3CAEC43259D63F0B921CD
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/adsense/m202403130201/show_ads_impl_fy2021.js?bust=31081901
Preview:	(function(sttc){'use strict';var aa,ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ea(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var fa=ea(this),ia="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),ja={},ka={};function ma(a,b,c){if(!c\|\|null!=a){c=ka[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}} .function na(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in ja?f=ja:f=fa;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ia&&"es6"===c?f[d]:null;b=b(c);null!=b&&(a?ca(ja,d,{configurable:!0,writable:!0,value:b}):b!==c&&(void 0===ka[d]&&(a=1E9*Math.random()>>>0,ka[d]=ia?fa.Symbol(d):"$jscp$"+a+

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=Sculpt, LLC], baseline, precision 8, 1900x1267, components 3
Category:	downloaded
Size (bytes):	89996
Entropy (8bit):	7.696934796502958
Encrypted:	false
SSDEEP:	1536:eGp8Naq3sw8fe1V+m64UkUzAl40uEog+Krp/HNC1Z8LSgFMoFazpppp7:xjloFHUzA6KrttC1Z8LSgFMoFwB7
MD5:	6DB34A0BA78EABD5335C4226D952BFEE
SHA1:	CEC2BBE8DE0F98EEC22EC3C5C6A4E40E7E427AB7
SHA-256:	18DFC557A05E684C754FF7AFA861446BFC44441E3579A91233CEB8EAF896151B
SHA-512:	FBF4144685092A14EFFE284601F305E5147B8C622AA370D66AC9E5C754B1526F4201AF91695808BE5F7B65FB48ED2F8FA218DA0DA86C862751A3321072C66248
Malicious:	false
Reputation:	low
URL:	http://iwu.marketing/img/campus.jpg
Preview:	.....0Exif..II*.......................Sculpt, LLC.......Ducky.......A......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="B6F344504FD15F75833FB6D747997549" xmpMM:DocumentID="xmp.did:FD7B5824317611E68F0EC9A0A96D40F0" xmpMM:InstanceID="xmp.iid:FD7B5823317611E68F0EC9A0A96D40F0" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:c11de58c-4a2e-412c-b720-438cfd8e5786" stRef:documentID="adobe:docid:photoshop:5594953d-7954-1179-893e-ca3674ef4385"/> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-defa

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 77 x 15, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1710
Entropy (8bit):	7.85670347672967
Encrypted:	false
SSDEEP:	24:VzPjuV+pzYMkJEKcP1VPdSbEx6UpZXjYNHpIzrYtJzwiaPVrU6CUyZJFC/u:VzP4+2MkJcDVSQ8+djYNHpAeUia9rCzL
MD5:	A4F2DC3F5B82A3CDCF7D575429449177
SHA1:	1A756BF326F9F9CFB98F38F3E034EDCED707FCC6
SHA-256:	C7B4E0EAD046AAF8BF5CCBFC2CACB1034484502F3EDEF69134A060F49EDDA834
SHA-512:	6489C84E25DDE400C11DC740F20CDF72A28B2ABD5285AEA10CDE2039BC2271ECD0272281E27EF8AF778B5580844EC6424BF37D59370A86B6B7DD2318F4AEEAD0
Malicious:	false
Reputation:	low
URL:	https://cdn.2trk.info/rtgstat/adchoice-links/nai_bigpreciso.png
Preview:	.PNG........IHDR...M...........B.....tEXtSoftware.Adobe ImageReadyq.e<...PIDATx..W.l.U.~s...=:...t.......`............Z...D@A..A.`@LHA0jr.B..-GK.\-GK/zn.{_.;o\|S.!....%.O^&3......?...<.E.........M..A.N....u..=...x@..7g....q....'..~..c.6....hw._.9u..`...@...v..9....V..t: .h...X..b`.i :..fN.._b.]eE.39;....W...8) E\..H.2...C...4.9.J....b..`.]@......./..3h$..X5.0.........Zf..B.!.y..{..h.w.tiw...l......s.K...n0.<...W.tz.(y..5g.....\|B............(....R..I.&. .o.F...Fz...f{.=...E.....`.VqY.Q. .c...c.}Z.......n..z....f.3{i7@!.W.......T..4....s..4..@...<]c.. ..xbS.-...!..HB...f.Qy8.3..b:rO..D.....}y.../x".,.FjH../.F\ka....z..SDs..6^.S^.Q.1...,.Q.~....@.BB.H..I...AH.p....r.&.......l.Qh./y........x....I..Il.G.&....`...=....Fv.kp..B"..3...k...S.S.v.Iol...v.1.iL..\|....Z...;.l..lqF....{5#.z.du.....,.8m(Np.@).8):.N'G9.N..u.zSs.1.-"..2`..[.......$..D.T`c)...)%t.oV...;.w'..3h,...c..M.n..CEq..K..6Z.iF...4...yb~..9.v.c.....%m.[o.Ky.PH%....S...%....$.eZ..q.O..aJ..

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 336x336, components 3
Category:	downloaded
Size (bytes):	5272
Entropy (8bit):	7.319499115875755
Encrypted:	false
SSDEEP:	96:ghSpEMl89deNsT0438U6iKQVC3ghl4m6ph9WTb:mqJUdeNsAB8c83zv
MD5:	5EC71A45E472B6939BD8D457FB10438D
SHA1:	433BED91F64940014BD7AE38F81BF6AC7C6046E8
SHA-256:	7AE1715BA052F7E2CC97319019A945B7FFFF2AE35E7731B7C30A1315F3D0A26C
SHA-512:	BCDD636C2442818FB14EAC1022893C749999A4A00FF514133E66BA96EB85782B5D2EB6621B633721A0DE2A9CD4D327F4B7407CF97DF2F3D80C71251CF60B520D
Malicious:	false
Reputation:	low
URL:	https://rtgcdn.2trk.info/imageresize?url=width=336::height=336::imgurl=https%253A%252F%252Fcdn.shopify.com%252Fs%252Ffiles%252F1%252F1996%252F9707%252Fproducts%252Fecoflow-ecoflow-delta-max-bag-30058309091401.png%253Fv%253D1667891976::campaignId=64180
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......P.P.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(..

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 336x336, components 3
Category:	dropped
Size (bytes):	11456
Entropy (8bit):	7.795377119677486
Encrypted:	false
SSDEEP:	192:mqzVf+T4qh7Rrrbfj3DYfgPlC0dK6MAWV0x0q52tYV9IVjHI9UHLzQPq+:lzw4qh9fbr3DYAXw+Wq0q5IgI69iPmq+
MD5:	EAF37E3DA1DDDA65356DC6B89748C668
SHA1:	5E5D443077265C2B4CE7332D6C2DEE5FC4397773
SHA-256:	F67573ED34266DAEA2D1A67002D785D30CF4CFEFCDE9335E0E74F15819C528C1
SHA-512:	2D4DB40263E97F44FB66BB005C494888AAA086C022EF7627DB1498AF52FFEA0FB94E4FCD806B7934748B49A2B6CD65EAE53FABC32197349FF4FD6646E4342054
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......P.P.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(..

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 8 bits/pixel, 32x32, 8 bits/pixel
Category:	downloaded
Size (bytes):	7406
Entropy (8bit):	3.459195366273547
Encrypted:	false
SSDEEP:	48:yGmUgbpbxPiRG8mLi1npr3ZfMOqPAGuRr9QIKy4kHLjYNDF6ZE72k:yGmUgbVxioOpr4JWi1sLjYNDFj6k
MD5:	3680D736210531165A16C206FEA15866
SHA1:	23C51FBEC98BC0F5C344559317665CD013DF40B5
SHA-256:	854210B41571DABCDC27D57D2FD7779D8DA2774CE1A20C10EA9AA35BB9079EF1
SHA-512:	EB662E2AB7D6A513EA2891560C11A1ED16BCC8BFED14BEA66815DD7046326E91D257472D679A11733D6F71CE33289AE9E920972968CA52E7A0D472C2B19F4B33
Malicious:	false
Reputation:	low
URL:	http://iwu.marketing/favicon.ico
Preview:	......00..........6... ......................h.......(...0...`....................................\..k0..............zzz.............U...d&..H...............J...........eee........._...~K..........^^^.s;......ppp......w.........YYY.....................f......K...VVV...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsujgtyvS0PsrgAnvZfT7D02LSgvzH5tFIK7ImSfMTGLgL9e8axLlbmwkOk8HJhoUSrB2MZjfdaYOcK3IARTobs54ibTbxE_MR5Bgs_OtFD5SjuwBMz6BinppJ6D2AXgThc1ibJ-eRUL89hVIRR5aY6GVp5NNkQ2TKM&sig=Cg0ArKJSzOxcwOL6XZROEAE&id=lidar2&mcvt=1010&p=95,856,375,1192&mtos=1010,1010,1010,1010,1010&tos=1010,0,0,0,0&v=20240313&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=19&adk=2065841319&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=671173000&rst=1710778928591&rpt=5213&isd=0&lsd=0&met=ie&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 64464, version 4.262
Category:	downloaded
Size (bytes):	64464
Entropy (8bit):	7.997087814135465
Encrypted:	true
SSDEEP:	1536:wOhGmmMET1VwoQNDerkOtxhncPvaAAGzw9jD8RlhANsK1q:JhkhVINDerkO+aAAGA/aANX1q
MD5:	4B5A84AAF1C9485E060C503A0FF8CADB
SHA1:	574EA2698C03AE9477DB2EA3BAF460EE32F1A7EA
SHA-256:	3C4A1BB7CE3234407184F0D80CC4DEC075E4AD616B44DCC5778E1CFB1BC24019
SHA-512:	05196036C41398616C077925FC4BF252E81F11B6EBEF8745047D75CB2C8B80441B8C3593F4D5B2617089E9F3D8D957F9EDCDF8E43993661A277BE8F4B6A32111
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.4.0/fonts/fontawesome-webfont.woff2?v=4.4.0
Preview:	wOF2...................q........................?FFTM....`..j.....\..X.6.$..D..r.. .....7?webf.[f......!...8...4..D...U..a.....f......GE.L..n..@UU._....A.{..{.)).4c....2i..\|.I.N../l.j...:..o.r..A.h$W<.@.3.....c.+VNt..tz.8..h..:.:....W6....e'[T.,.d47n.a.6.nlsm.c..li....K.w..c.f..3.&......&.m^....O...{..-r.......]~Ck.SM..UfH...>.F......G..Z1..X.aY..[.(...X.e..._..o.S..8.s@.....oy...5#d......x....LTUw....dT....W..:.9@..(....EBL...0.TP@.{f.=usF/ts.n.\.v]..W..._...].3.O...j.."...H.&..~?..A....B.s.0...?..5..;...8....(....w.....1......@X%..A.\..8.....[R..`...F..F.Q5h...BJ.NP...~D...........`$3......Wg.,Wg...{....!........S...H...t..?...+..K.dSL7.O.l#&...>...@.K<.6u'....Wr.q.....Tu......F.8.....1..f...T..}U.....I...<..>"....p.xxy.?..........`..By...Zm.?......X...Vnj.S.^.....j...x3..9...@7..t....:.gS[Y>.&,8............5.).w...e.eI.I....9..^..wj.d;.d')<$.0..[v...~fz..;..N..vJ..]F......*S=..b....I......7uk.....)...L\w.k.n.vq.=#S.=..L.kx#....

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 491 x 81
Category:	dropped
Size (bytes):	12764
Entropy (8bit):	7.87581871799207
Encrypted:	false
SSDEEP:	192:ZjJGvpCt78eZgzJ2L13OtLfKN46yfS4KYAC/A09MtcotU5xZqgZfDoQljubr:DyCJ8ey92B3Ot7KK6RC/AWMtcAmvUbr
MD5:	A08FA83818758604500787B5752B0C4D
SHA1:	2BEDCC7F1394EFFC3854D15A2BBC9385947A0D26
SHA-256:	374744E3B2D65581D27416F54509A24A11FB115FCB2E13F3B7E22E0A98D5C70D
SHA-512:	0293042B5E256E5E57C2F507EEE0E76C918804FD0346D00F94F039CE62C56CD38179D419C826BBCC775DD20E9D514705F21C49C07ED69DFAB6D40AA3854A3CBA
Malicious:	false
Reputation:	low
Preview:	GIF89a..Q......&..&.....&.....%..%..%.."..#..$..%..&..&..&..&..&.. ...u...$........)C..&..$..#.....#.."..!..#..#.. .. .$9..,..$.......".....&..&....1J..&..&.)C....&.....&.s..CZ..)..&.j\|..!.......).......$....z........1.Ug..%..8....4....... .......$..$..$..........9Q..".1K.!<...<T.CY.at..%.."..0...La.......^r...}......$....#.....%.l~......BZ..1....4.EV.......!..%...La.=U..%....%....IY..!.@W..$..#...Th.Qf.7O...fx.9K..%.Uj.9Q.Yn.."...........7P..#....1J....Yl....'....#...v..bt.."..#.. .."..9....9.....#..$...... ..$..$..!..#.AR..#.......H^..$.dx.s.......>U.....!.n{..#....5G.."..".0B..'.iv..!.cq...>O....(..$.....!..#..&.9M.. ..$.."..."..'./F....%..(.n..^l..'....'.........p... ..'..'..%..%.^p.x...%..%..%.....'..&..'.;S..!..'............!.......,......Q.@.....lP.`.....D..!A...2.8.`D..%f..#..'B..H..I..2..P.....f...b.M."r.x..g..;`..:...H.fY.&G..5RHM.t..6X.X..B.W),.5d(J..h."Y.d......-................L.....+^.....!.., .d..P.lysf.1...Ytd.MCf....

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1300
Entropy (8bit):	4.629559617079414
Encrypted:	false
SSDEEP:	24:3HSuvQgxCJ4GARi4SALGhL05+sQyBP6R2kLxyra6R2knnUfhUpaRehnn:3HSuxC1AOAQpy16Br6Bna6YE
MD5:	17AA53E2F8F1B7DA6FE591D606688287
SHA1:	8F58BADD7A5771AB66FF03078C83120552A571B4
SHA-256:	DD193BE1519796591841645F4CB2AABFC527936C8101817EA4BD93F18A5465F4
SHA-512:	5A16DDE7830A3E687466F326E6A8EFEB6B5CFCDD62979C783DDC1A70076C041441B49AFB73362F2088D2EBF172471BC902145D39D10313FD3FDCE5D79974F07A
Malicious:	false
Reputation:	low
URL:	https://secure2.indwes.edu/_scripts/jQueryPlugins/jquery.iwu.randomHeader.js
Preview:	/*.. jQuery.iwu.randomHeader - Randomly select header image based off folder name and appends it ..* to the element that the plugin is run against...* Date: 05/31/2011..* @author Joshua Flick..* @version 1.0..../....(function ($) {.. $.fn.randomHeader = function (folderName) {.. var imageURL;.. var parentElement = this;.... retrieveImage(folderName);.... function retrieveImage(theFolderName) {.. $.ajax({.. type: "POST",.. data: "{ folder: '" + theFolderName + "' }",.. dataType: "json",.. url: "https://secure2.indwes.edu/_services/Randomizer/Randomizer.asmx/RetrieveHeaderImage",.. contentType: "application/json; charset=utf-8",.. success: onSuccess,.. error: onFailure.. });.. }.... function onSuccess(msg) {.. parentElement.html("<img id='deptHeader' src='" + msg.d + "' alt='Dep

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	761
Entropy (8bit):	7.561608605657339
Encrypted:	false
SSDEEP:	12:6v/7swLdxP2F9Bk7F5qn8wyGODJdqn8oSqdedX+Blz+Byk66y5pbaR0Snn/Ty3od:hwBxY9avG8wy/DrqnRS8+GlzM36h5Zur
MD5:	73420E8A098BE473FC8A62BE7BF09206
SHA1:	6D641776ADC712B2ECE75C005C593AE2F8453517
SHA-256:	A572AC8D058F9E16158F5308391158937E15F8C033B138EE00C0AF5FFCD90C2D
SHA-512:	36D7D8386C5D195B24AA73457FC5EDAB6C47D5DB9684C5D9141E2F2049FBB055F08D48F8BEE7AAD1D53010CA5E03EEA394CE25472289B7075E400A7C3234A296
Malicious:	false
Reputation:	low
URL:	https://browser-update.org/static/img/compatibility.png
Preview:	.PNG........IHDR... ... .....D.......PLTE..........................................................................................................................G!.....tRNS....fD."...X....IDAT8.}R.b.0..GZ.)..v....B....[<..8../..$...r....:j"D\|..=...9..3.#O'..~....S....X3....:_..F.q`......S....L$<.%...4........<._...3..'CqT....H1..R.F.pP.R.9.e.1%..d.a`...y.._@..$..]j..&)%/lh.<-....s.@....L...]Z.-...B.DZ.4......+..(G2..E.,.f.J{.c.Pl.A.P..e>....0...j..B..G.79.....-...F.h.q5]GG..BT.w.._.n. (.]..(u0.~......."...R.Y%..{..;..'.....xL._9W..c...o o..c.{)Y......4Y..`....i..l.Y...O*..3U..%e....5....`......p...n...O....ooo.m.n....>...o..w.....+..b_....'Q..!..c........<....2JJ..!.;&..Z..$Xq...w.....Q...>...G...n42GA."....IEND.B`.

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8487), with no line terminators
Category:	downloaded
Size (bytes):	8487
Entropy (8bit):	5.044765845954023
Encrypted:	false
SSDEEP:	192:/DUEq+JVRtR9lQGiVQ6h2sCW3P2zH67mxrPQ7M7:/DUEfllQGi+6hmWeG7mZ4M7
MD5:	B8D4EDE888D284C51CBF85D686E02DA3
SHA1:	AEA504A314FCFDC65F3013E13219B8C92776FFDB
SHA-256:	9140213F193F683CCEE63ED57BB1E303D1E156AF982FB15D4C1B03DC1EEFDC60
SHA-512:	3E6DC196EDB84D996BC26BC5DFBEB16D1646D758D35E7974CF9F40A971C73F04DDDEE9AA50A841D568A5A825A4B596B4DA6001BE1F4519505BE6FFBAD83D5CE0
Malicious:	false
Reputation:	low
URL:	http://iwu.marketing/js/scrollreveal.min.js
Preview:	!function(e,t){"function"==typeof define&&define.amd?define(t):"object"==typeof exports?module.exports=t(require,exports,module):e.ScrollReveal=t()}(this,function(e,t,n){return function(){"use strict";var e,t,n;this.ScrollReveal=function(){function i(n){return"undefined"==typeof this\|\|Object.getPrototypeOf(this)!==i.prototype?new i(n):(e=this,e.tools=new t,e.isSupported()?(e.tools.extend(e.defaults,n\|\|{}),o(e.defaults),e.store={elements:{},containers:[]},e.sequences={},e.history=[],e.uid=0,e.initialized=!1):"undefined"!=typeof console&&null!==console,e)}function o(t){var n=t.container;return n&&"string"==typeof n?t.container=window.document.querySelector(n):(n&&!e.tools.isNode(n)&&(t.container=null),null==n&&(t.container=window.document.documentElement),t.container)}function r(){return++e.uid}function s(t,n){t.config?t.config=e.tools.extendClone(t.config,n):t.config=e.tools.extendClone(e.defaults,n),"top"===t.config.origin\|\|"bottom"===t.config.origin?t.config.axis="Y":t.config.axis="X"

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2634 x 1361, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	129763
Entropy (8bit):	7.42673048319842
Encrypted:	false
SSDEEP:	3072:0cURC6yqdmpCHxF1l9yMiNPXe3aKaE1mZqXa60Nts41:0dXmpCv1uMm/TKaE1m8Xa64F1
MD5:	627E1F1B5C271F1E7A341A01BAC59321
SHA1:	116F8CCCA7778123C02AA96FEFAD8A19007B650E
SHA-256:	B0C315E82D2162017AF6D338A3D2258E254ADFAB1475BF3682E2EEDBABABB9F2
SHA-512:	3EEE16033804CE7A0270DDB7BD9357CCB0A28BA754E4CA93404CE9D97EB0E43DDDA24599C573167547763430E2A69B971D80472C4792933F6F0C71B4C329BFF9
Malicious:	false
Reputation:	low
URL:	https://indwes.tfaforms.net/forms/get_image/1/MqqGsVxq5heqLeiklT0qTYKa21Fex14qTlVGnmtc08YnIBwpyPMWpGlSrWqrBYae-MasterLogo_white.png
Preview:	.PNG........IHDR...J...Q......VG.....sRGB........neXIfMM.*...................1.........2.i.........D....Adobe ImageReady...........................J...........Q.....o......iTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:xmp="http://ns.adobe.com/xap/1.0/">. <tiff:Orientation>1</tiff:Orientation>. <xmp:CreatorTool>Adobe ImageReady</xmp:CreatorTool>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>.QWz...@.IDATx....r.8......WpW6.....y.q..&%.......-.@.i&.a........ @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @.......

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	92110
Entropy (8bit):	6.002746273112066
Encrypted:	false
SSDEEP:	1536:r7mDgoV8C5x2kzhnEoG7mMoV/A7oC5xYAAnqA7B3oS:GD4kFnbJ28AAnq2Bz
MD5:	4E427D91CEFD45C4B08F870FFB7C7547
SHA1:	753C98D12E83A55686A869F46C1B27526B894E22
SHA-256:	455AE491EEDB16FA48CC0A9B560F9CA18EDCA1F68A9BE84AF95AAA76EDAAFAAE
SHA-512:	5F778F00F90D06BD12602022201056C58F1B089CA02FA9DF94FBBF193DF7C52603AF479E9EE45A5E026D4143402A091B82F865A08F46430947AF030C580C2A34
Malicious:	false
Reputation:	low
Preview:	{"/71161633/BROWUPD_browserupdate/update_vrec_1":["html",1,null,null,1,250,300,0,0,null,null,1,1,[["ID=bfe9809725052a54:T=1710778929:RT=1710778929:S=ALNI_MYWqSSCQYcifsO80T1eySmuD9VO1A",1744474929,"/","browser-update.org",1],["UID=00000dd380bc0b92:T=1710778929:RT=1710778929:S=ALNI_MbVygFOgGgKV87I5rusuBPl3VNing",1744474929,"/","browser-update.org",2]],[138324663397],[208234953],[66203433],[415142193],null,null,null,null,null,null,null,1,null,null,null,null,null,null,"AOrYGsmclKd0gZ67Qr5khWv4ypASw2oRzqdMsQvq-8kbMWzsj-Nvd2ByyXfJPWc0shN02-NhqU12FGw8XCn7v28wBWcs3E4MyfY","CI6aoJOc_oQDFUADswAdF-UKWQ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"2",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,[["ID=3e364c318acf3b97:T=1710778929:RT=1710778929:S=AA-AfjaDxRi-AHfIwL7Rqq9b_NIw",1726330929,"/","browser-update.org"]],[]]}.<!doctype html><html><head></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script src=

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	26933
Entropy (8bit):	7.966990659685408
Encrypted:	false
SSDEEP:	384:TP376CKuHkHfcXSvTWuAI7EOGnfHYh8M8pP7o8oPQBTKuA4jBxrLszMMDfDUc2D:DLJrORv6urEFne8z1IbBARLszd2D
MD5:	053FF2981EA07E5060DC466935EEE0E7
SHA1:	699AD78FB83F5AF4D8B44323E3637F31A78B3E1B
SHA-256:	C6EF59E4AC95F5EFFA2D96E6D4D882FC296D68C4DB104C1577312FD8E5AC1D5A
SHA-512:	B7DD82900E2BC9CB9BC7411B4A2FFB32C4F9FEC93847C68B62D9CEC8E2570DC7080138196F4892666D4451083E7B239C6A33DDBD76DE9D1BE66E0F2CF7019F1B
Malicious:	false
Reputation:	low
URL:	https://browser-update.org/static/img/big/c.png
Preview:	.PNG........IHDR.............\r.f..h.IDATx...5v.1....i....\|._ T......a.....K.}....{.kw..E...............0........0)V.3.(.......y.....\H6...n..~............SX.......Mx.3yO..:.p9.2z...........H.&lnw.5z......Hg...H.......fY.....md.&......v...:...{dnX.....p.V..2n./};.QzQS...r.+,..Vf.#...n..5..!........o..s....V.)s...a_.................Mb.ib.#.w..r.E.......z.kU..9sf.+.U....v...S..k.%..........H<9q..D...I...-..Q]....C.....3&...N\|>q..A>.....)....`....'6._..H#..@.y...J.J.z.U..H......#....r.^.....@n..2F ..H.].......H.y..80..'Ar.2.E.....:....A.?L.Dq.P%D^..t.0{?,~.Z...Lb..h8....R.....W.PB...s...w......n.,...Pw...<.....,.0.$..D(.1.,.F!)}...Y...._ zk}y E@@....>S.T ...D..us.>B.=0{3..;.g.y._.j.]..B....JH..Q....L.j}$.w..w..Z.]..n.p-...w..:...B.......@ ..D.(l..,...8b.v=.......>o.....Zm^..}........v...v. .......C(..8.WE.J......^...Z......>.".....q.y..*..f..#B .C8.p....'.E.y...Aq.<...E.U'..$1DW..\."..y7....C...........Wq.p.F..Ne..gY/.._.q.m...O..'..

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=simplifi&google_hm=D1B83109A4A44EA780D9F28ECD179B12&google_push=AXcoOmTFNla6Hw2h9aKfvF63BybpjLoIszIEu_rWQibVbccfBDwBwo1WW40QV9L5rWgZLFRnkHVGid7aSs69DTzdjTuVRINES1g
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1054)
Category:	downloaded
Size (bytes):	2689
Entropy (8bit):	5.40021492400263
Encrypted:	false
SSDEEP:	48:Otg7xBo1IN7Qa69Fa9FKYPCfmY/bZyf2jcju8m5I0zRHkFRvEJG:/N7QaaiC+Y/jcju8WhRHMxEJG
MD5:	9EF158292B617D358506529B02C73629
SHA1:	843852D8ADDBF1A7F96C5607179E1C9423ED8A4C
SHA-256:	3164DB7EF9EFC7121CE85192340A653C6CB87E34CAA05849C8FD47B7872F9FC5
SHA-512:	D4B0E6E8900043C9C4EE010ABFD00A51D891FE4B4F424418DC1A75075E3DF931D0558BFB3E983190079EDDD0BF11D7604E70CEAF119351690812EBC21D7EAEB8
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240313/r20110914/client/window_focus_fy2021.js
Preview:	(function(){'use strict';function f(a,b,e){a.addEventListener&&a.addEventListener(b,e,!1)};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a,b,e){if(Array.isArray(b))for(var c=0;c<b.length;c++)g(a,String(b[c]),e);else null!=b&&e.push(a+(""===b?"":"="+encodeURIComponent(String(b))))};function l(a=document){return a.createElement("img")};function m(a,b,e=null,c=!1){n(a,b,e,c)}function n(a,b,e,c){a.google_image_requests\|\|(a.google_image_requests=[]);const d=l(a.document);if(e\|\|c){const k=h=>{e&&e(h);if(c){h=a.google_image_requests;const v=Array.prototype.indexOf.call(h,d,void 0);0<=v&&Array.prototype.splice.call(h,v,1)}d.removeEventListener&&d.removeEventListener("load",k,!1);d.removeEventListener&&d.removeEventListener("error",k,!1)};f(d,"load",k);f(d,"error",k)}d.src=b;a.google_image_requests.push(d)};function p(a=null){return a&&"22"===a.getAttribute("data-jc")?a:document.querySelector('[data-jc="22"]')};var q=document,r=window;functi

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:d:d
MD5:	9DD4E461268C8034F5C8564E155C67A6
SHA1:	11F6AD8EC52A2984ABAAFD7C3B516503785C2072
SHA-256:	2D711642B726B04401627CA9FBAC32F5C8530FB1903CC4DB02258717921A4881
SHA-512:	A4ABD4448C49562D828115D13A1FCCEA927F52B4D5459297F8B43E42DA89238BC13626E43DCB38DDB082488927EC904FB42057443983E88585179D50551AFE62
Malicious:	false
Reputation:	low
Preview:	x

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	5239
Entropy (8bit):	5.247648549227464
Encrypted:	false
SSDEEP:	96:zylQF5QFKRNAkUAZEWfrQGeHg8qSCCksArt5BWElvPpiXOferQO1:zyl858K3AFAPQGehCRt5BlFh4ZrQg
MD5:	E6E78E426F8FB275497E4F549DC626F2
SHA1:	BD1342753D439A6C032709B0F885FF30AA5AD3DA
SHA-256:	33BC2B20040C6DF0761AF1B99B7D83DE0A22ECF7BB98EAFC8B3B281738F3FEFC
SHA-512:	302CF5173C63BABB12504267F6B1DCD9547AC4D00949B856287CC81A8AFC87E537B65DEC9CB200C3FE7F34865295BFB05E13B260BFF93F7821319D2EFE35AF5D
Malicious:	false
Reputation:	low
URL:	https://secure2.indwes.edu/_css/indwesFormsColumns.css
Preview:	html, .indwesBody {...height:100% !important;...margin:0 !important;...padding:0 !important;...border:none;...font-family:arial, helvetica, verdana, sans-serf;...font-size: 10pt;...}....#content_text table {...font-family:arial, helvetica, verdana, sans-serf !important;...font-size: 10pt !important;....color:#606060;...line-height:16pt..}....#content_text td {...padding: 1px 15px 1px 0px;...vertical-align: top;..}....#content_text th {...padding: 1px 15px 1px 0px;...vertical-align: top;..}...indwesBody {...background:#fff;..}.....clearBoth {...clear:both;...font-size:0px;...line-heght:0px;...overflow:hidden;...height:0px;..}.....clearRight {...clear:right;...font-size:0px;...line-heght:0px;...overflow:hidden;...height:0px;...}....#logoDiv { ...float:left;..}....#secondaryLogo {..float:right;...margin:0 10px 0 0;..}....#redHeaderLeft {...font-size:1px;...line-height:1px;...height:81px;...background:url(../_img/hdr_form_stripe_bg.gif) top right repeat-x #ae0936;...}..#redHeaderMiddle {..

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39257), with CRLF line terminators
Category:	downloaded
Size (bytes):	40326
Entropy (8bit):	5.245555585297941
Encrypted:	false
SSDEEP:	384:bvrc3TrJ1vMZCKZ4pLRy6DkfDLcbTzcXanT2rxb64aKQr1vySAwBaPUge6ydE:bTaYB4Hy7mTzcaTKStrwSAwBaPUTdE
MD5:	DA9DC1C32E89C02FC1E9EEB7E5AAB91E
SHA1:	3EFB110EFA6068CE6B586A67F87DA5125310BC30
SHA-256:	398CDF1B27EF247E5BC77805F266BB441E60355463FC3D1776F41AAE58B08CF1
SHA-512:	D4730EBC4CA62624B8300E292F27FD79D42A9277E409545DF7DC916189ED9DF13E46FAA37E3924B85A7C7EA8C76BF65A05ECA69B4029B550430536EC6DF8552A
Malicious:	false
Reputation:	low
URL:	https://secure2.indwes.edu/Marketing/Project-Request/ScriptResource.axd?d=E2lUT6wbt033uxREsuESVxB4DxgbJUlw5yEW8lQCs7oU1kEiezMUR7cfsCpSVfodXXGFcTAdhcgDzYQaN9YMr4UnCsyYbJ9Use1HrwHt8lk0xPMIsl_44PxA3JefaxK4ykHf1Ar06AAkNMn1Kja71QhuaEa2Rp180_J0Cl4qz8xa4VhiR1jlvmVzmHqDaH6F0&t=511fa37d
Preview:	//----------------------------------------------------------..// Copyright (C) Microsoft Corporation. All rights reserved...//----------------------------------------------------------..// MicrosoftAjaxWebForms.js..Type._registerScript("MicrosoftAjaxWebForms.js",["MicrosoftAjaxCore.js","MicrosoftAjaxSerialization.js","MicrosoftAjaxNetwork.js","MicrosoftAjaxComponentModel.js"]);Type.registerNamespace("Sys.WebForms");Sys.WebForms.BeginRequestEventArgs=function(c,b,a){Sys.WebForms.BeginRequestEventArgs.initializeBase(this);this._request=c;this._postBackElement=b;this._updatePanelsToUpdate=a};Sys.WebForms.BeginRequestEventArgs.prototype={get_postBackElement:function(){return this._postBackElement},get_request:function(){return this._request},get_updatePanelsToUpdate:function(){return this._updatePanelsToUpdate?Array.clone(this._updatePanelsToUpdate):[]}};Sys.WebForms.BeginRequestEventArgs.registerClass("Sys.WebForms.BeginRequestEventArgs",Sys.EventArgs);Sys.WebForms.EndRequestEventArgs=fun

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18007), with no line terminators
Category:	downloaded
Size (bytes):	18007
Entropy (8bit):	5.1408711541118866
Encrypted:	false
SSDEEP:	192:b9gEjDIs3d1MfQfjE2PD/JfKKswnBwt0LJhU2ncsHxHoHFHwA81Hvo92RQoqnlFZ:WEjEiv1tfKXwDRIlQnO/W/OtL7jV18sZ
MD5:	580E229EAB2600AD967D950B8112E523
SHA1:	D9AFD942AF919AF6718EA57CBBDFFBDF5B1D2EEE
SHA-256:	8DF030C1B759E7B584A7C97C779BFC72B45CD56A4DEBA17B1C89D14B94725192
SHA-512:	6685BB9CE6752E74BA2231C6938C61E9180D9CF49EB62E5112370F65D407F1A2574D430C43C5C760E5D25EFB36507E57479FAE498D3D89DD1CF73B3F79D87CD3
Malicious:	false
Reputation:	low
URL:	https://indwes.tfaforms.net/uploads/themes/theme-55.css
Preview:	@import url(https://fonts.googleapis.com/css?family=Open+Sans:300,400,700);@import url(https://fonts.googleapis.com/css?family=Roboto:300,400,700);@import url(https://fonts.googleapis.com/css?family=Roboto+Slab:300,400,700);@import url(https://stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css);.wFormContainer{font-family:"Open Sans",sans-serif;font-size:16px}.wFormContainer a{text-decoration:none;color:#a6192e}.wFormContainer a:hover{text-decoration:underline;color:#a6192e}.wForm :link{text-decoration:none;color:#a6192e}.wFormContainer .htmlSection{margin:1em auto}.wFormContainer .wForm{background-color:#fff;color:#000;border:1px solid #000;border-radius:.2rem;padding:0!important;margin-top:1em}.wFormContainer .wForm form{padding:0 3rem 2rem 3rem}.wFormThankYou{padding:20px 30px!important;min-height:110px!important}.wFormContainer .wFormHelp{padding:20px 30px!important;min-height:110px!important}.reviewHeader,.reviewResponse,.reviewFooter{padding:20px!important;bac

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent=
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	30758
Entropy (8bit):	5.088077927351156
Encrypted:	false
SSDEEP:	384:v4oDbxnuXCx+xn3DxNSlbEfsnlDrpsJvLe40z3YzecUUlMDR7igWKVNyW+VHZxp4:goPaBxBwzYfw+HhCLU0JEKW/K/v3
MD5:	D38FBDCE19B2495B1E7ECA7F6ED91AE9
SHA1:	BBA8E504F116A8DC5909F2047D6C4F3F0FCA12D6
SHA-256:	9ECD3D0AD6BFB3D656606EEB5C7EE15805495C858C1DD4E9E90E3DA5DEEDE10A
SHA-512:	4E8A928AD885B147FC8BA6B8F82F82A485DF837B3E660B2CBFE124100D059E8BE2456E4FD479B9BBBEDEC5AAAA1716552F6BEEA90C0FF17972CE9F03B4CD4EFC
Malicious:	false
Reputation:	low
URL:	https://indwes.tfaforms.net/dist/form-builder/5.0.0/wforms-layout.css?v=8b5c9ffd0b6fc88dc72529725004f6b69b9e0ae8
Preview:	* {..-webkit-font-smoothing: antialiased;.}../* Reset CSS - scope limited to .wForm - based on YUI reset. * --------------------------------------------------------. */..wForm dl, .wForm dt, .wForm dd, .wForm ul, .wForm ol, .wForm li, .wForm div, .wForm th,..wForm h1, .wForm h2, .wForm h3, .wForm h4, .wForm h5, .wForm h6, .wForm pre, .wForm td,..wForm form, .wForm fieldset, .wForm input, .wForm textarea, .wForm p, .wForm blockquote {..margin:0; padding:0; }..wForm table { border-collapse:collapse; border-spacing:0; }..wForm fieldset, .wForm img { border:0; }..wForm address, .wForm caption, .wForm cite, .wForm code, .wForm dfn,.wForm em, .wForm strong, .wForm th, .wForm var {..font-style:normal; font-weight:normal; }..wForm ol, .wForm ul { list-style:none; }..wForm caption, .wForm th { text-align:left; }..wForm h1, .wForm h2, .wForm h3:not(.wFormTitle), .wForm h4, .wForm h5, .wForm h6 { font-size:100%; font-weight:normal; }..wForm q:before, .wForm q:after { content:''; }..wForm abbr, .w

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (563), with no line terminators
Category:	downloaded
Size (bytes):	563
Entropy (8bit):	5.118838318797205
Encrypted:	false
SSDEEP:	12:2JqxHIvmlANm4pM86VVC05Zs5ohgwML9cVvHGNZtYETL51VodQXvloub:2JpvxNfm8uVCxwgxkHEZ1VZflok
MD5:	985C10C6060CE6C118838E1A2ABD188E
SHA1:	044966723106BCED65D6C13DA37954403202A824
SHA-256:	82DBC310B5AC625469EE2C9A3EC74D22DF15D7D43D88EF59F25E1AAEF62D1ECB
SHA-512:	9D459FB0EE8AF36CD9630DC0D0CD61F18961ACB3675AAC7BF084A23121B3913700C4DD673229519AD9059C01C07BF0C946F00C01B7EFD63C2422CC263AD4C47E
Malicious:	false
Reputation:	low
URL:	https://config.aps.amazon-adsystem.com/configs/8b48e249-e9e6-4a52-8b48-396ea93403e8
Preview:	(function () {try {const accountId = "8b48e249-e9e6-4a52-8b48-396ea93403e8";window._aps = window._aps \|\| new Map();if (!_aps.has(accountId)) {_aps.set(accountId, { queue: new Array(), store: new Map() });}function record(name, detail) {_aps.get(accountId).queue.push(new CustomEvent(name, { detail: detail }));}} catch (e) {console.error(e);}try {record("_config/requestViewerCountry/define", {"code": "US"});record("analytics/sampling/set", {"rates": {"error": 0.001, "status": 0.0001}});record("_config/config/didLoad", {});} catch (e) {console.error(e);} })();

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65367), with CRLF line terminators
Category:	downloaded
Size (bytes):	120263
Entropy (8bit):	5.093485114629697
Encrypted:	false
SSDEEP:	768:Ry3Gxw/jc/QWlJxtQ8IuiHlqLmzI4X8OAduFKbv2ctg2Bd8JP7ecAVvH1Fx:Dw/o1BIuiHlqLmN8lDbNmPbE
MD5:	6726D71EFAF54DF4991E108F90F5DA55
SHA1:	5D910A201FD8B5D7F58A3CED12EFBA3F358456A1
SHA-256:	270514BC826D29B3D86000BBD89DE35176A06174E9D8E698B583DEF1FDFD2D22
SHA-512:	3507F45134CEA6F9D41507097F654811E129FBB9C87D3641791BA7AE3962BBB30F4A519B240DAB2F508586109EAC680B807FECED0E8E9B0EA3348237D047590E
Malicious:	false
Reputation:	low
URL:	http://iwu.marketing/css/bootstrap.min.css
Preview:	/!.. Bootstrap v3.3.6 (http://getbootstrap.com).. * Copyright 2011-2015 Twitter, Inc... * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE).. //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{font-family:sans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{margin:.67em 0;font-size:2em}mark{color:#000;background:#ff0}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40p

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2854)
Category:	downloaded
Size (bytes):	20056
Entropy (8bit):	5.522696203648707
Encrypted:	false
SSDEEP:	384:8ArQ8Iu5bYFSPRxx+4wVCBfjGnibDUJ0k9rBSzicqwQRQPX7uS6aRxSQXanNVY3D:zrQDuFYFSP/xGEBbGnibgJ53kicqwQ6t
MD5:	9135330874533FFA24A7C51F6889B238
SHA1:	F0BF43FB1500BDA83A0406354635F3624B6C2487
SHA-256:	594EA28ECE633B47536A3549082809E82C6772E5F2F324F26F8BC0F5DE6842D2
SHA-512:	781F96C5B6E960C602CC4D5208028F84CC070B40DF013EC524B818C7A75040463B28FB4EA417DCE095DD48E61F3990299589E57E41E0E80783E525C9F7FFC23F
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240313/r20110914/client/qs_click_protection_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var q=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=q,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1}function ba(a,b,c){return a.call.apply(a.bind,arguments)}function ca(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}} .function r(a,b,c){r=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?ba:ca;return r.apply(null,arguments)}function ia(a,b){function c(){}c.prototype=b.prototype;a.O=b.prototype;a.prototype=new c;a.prototype.constructor=a;a.P=function(d,e,g){for(var f=Array(arguments.length-2),k=2;k<arguments.length;k++)f[k-2]=arguments[k];return b.prototype[e].apply(d,f

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072971&val=9892abd7-2a3a-4a40-95c8-94f2d71ac262&ttd_puid=e161e7f6-42d8-3d4c-742d-4b64cdd4674d&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsuzD_cryh0dvvVlrEx-UwPlq-hHZQPOnpfeisyQiwTd_QO1Z_UXGbiED1FFfTdERuhX5ynZrVTIsCMxWVQCxW_ixMA4ZTYnvsOmA4SMRippVr5BzjUqVvZE4_gNv9vtQp17lDrFNDxujEwQ8o5yQ-wt6I9yGKzUX4bXKU7ElScDjzm29wtnUe9sun8utFeMOWffgGW51CUbip0oenMtrjVEo1d8iPoAik_ba2lK&sig=Cg0ArKJSzPhy7q2awu7BEAE&id=lidar2&mcvt=1178&p=0,0,480,320&mtos=1178,1178,1178,1178,1178&tos=2137,0,0,0,0&v=20240313&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=20&adk=2017541439&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=671172900&rst=1710778928119&rpt=2220&met=mue&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 336x336, components 3
Category:	downloaded
Size (bytes):	8025
Entropy (8bit):	7.665606701385958
Encrypted:	false
SSDEEP:	96:ghSpE/RP8wTNr4sw6CJImIBxq9Q9JvtSEV3sXeHAGrnEtccajYi:mqQ8Kasw6CJGBkQ9JvtfRo2AGAtccaL
MD5:	C797619B270D5E7EEB243E0382FBCADC
SHA1:	3D5E6A58D33F0EEEB3BE2A8C1C341F431E533FC4
SHA-256:	DB9F35F475E4F2DE77712C171E4BA7593941067048F339379A4E5EDC0C5DCD17
SHA-512:	A468697EBB2B9A50E98ACD6C1D013837FC966A1A6C55055409693A56CB5C4AF55E12F9BC870F98805B02774EEC2DE73B45586DF7C987E234F712D330B6088F25
Malicious:	false
Reputation:	low
URL:	https://rtgcdn.2trk.info/imageresize?url=width=336::height=336::imgurl=https%253A%252F%252Fcdn.shopify.com%252Fs%252Ffiles%252F1%252F1996%252F9707%252Ffiles%252Fecoflow-us-ecoflow-portable-camping-chair-30383581397065.png%253Fv%253D1689747202::campaignId=64180
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......P.P.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(..

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	56115
Entropy (8bit):	5.347323537885137
Encrypted:	false
SSDEEP:	384:+bOClrtwMZbq990nhHGOf0wtb9ZSq99NnMU8OhqqtJXZ0q99HnCafOWJ3tsIZfqW:IDvN1pXzv1QIIMwi
MD5:	3C89B4E5563F4BA0410A1D7D4F3AD23E
SHA1:	6455000459BF2AD68625B8B554A652CC84145261
SHA-256:	B17609553B24140FC01409B78FA834FE878DE6410FE9E8996B0A5F6A984DDD6D
SHA-512:	F85D5BA57633E85A9A3DC826A33DE76FF22725DE7398FC0049E1395CD46603F0B1F2E1BB47422BCF0D2D71FC2BA497322CFC40EF5101A3FF25E89757E4F6CA56
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Open+Sans:300italic,400italic,600italic,700italic,800italic,400,300,600,700,800"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtE6F15M.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6F15M.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtU6F15M.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Open Sans';. font-style

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://ad-delivery.net/px.gif?ch=2
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65354)
Category:	dropped
Size (bytes):	96004
Entropy (8bit):	5.274683121744756
Encrypted:	false
SSDEEP:	1536:duJA48KogwpmzkCwVk9gA6mFwTKNhuDQo/hGpeOn/cN:xqwpbkiA6mfnpeaG
MD5:	3AF4D03948A8CF4BA1006EFF4B55AA60
SHA1:	9596FBC5DE70DC37BFAB277C6D989E0F551867C3
SHA-256:	ED3DC50AA8E28EA856D113DFBD2BD12DBB09CEB4381F2BDF8DBA7B14B2A00108
SHA-512:	50AF65CAD3DC3C289EF3AA21CD4C1CBE6165D51AD4DE4448E1006F3CE8637F91D1E0A421C8748667466C17D3D1F1FD170563339E521C7EB5DD97CB9578ED88BE
Malicious:	false
Reputation:	low
Preview:	// Hash: eMYEaEeUSUZGQCr4GiVU/1qDSBVsN9OtdNYDPWA2zlZPpmhHaAJd/fiYc78jMPlDWrY3ZVELhfcfzAPYHG6BjDU9n0wPs8e3bgvMv54AQ0yPuy0XmfZF8/k1QHhrnbghXZ99Yy8o2FlpUtiKKpmGILN8oXh+Qu81x31oynpqLkY=.!function(e){"use strict";var n=function(e,t){return(n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var i in t)t.hasOwnProperty(i)&&(e[i]=t[i])})(e,t)};function t(e,t){function i(){this.constructor=e}n(e,t),e.prototype=null===t?Object.create(t):(i.prototype=t.prototype,new i)}var D=function(){return(D=Object.assign\|\|function(e){for(var t,i=1,n=arguments.length;i<n;i++)for(var r in t=arguments[i])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function i(e,t){var i={};for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&t.indexOf(n)<0&&(i[n]=e[n]);if(null!=e&&"function"==typeof Object.getOwnPropertySymbols){var r=0;for(n=Object.getOwnPropertySymbols(e);r<n.length;r++)t.indexOf(n[r])<0&&Object.prototype.pro

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	401
Entropy (8bit):	5.246698466034722
Encrypted:	false
SSDEEP:	6:2LGJum9EGZZ1e/lhry3dggO9lztRWTx646pdu3+MIwJJOAHEAcrEYdEQAAV:2M7eXy3dYZRWlF6IzIwvvHpcrE+rV
MD5:	B876FBCCDB291F12852F3C1DB691ECB9
SHA1:	75183315FDA5EBD56BD591D105A1B291B22697A2
SHA-256:	CCF74E5CA78062B72E33435DE98A8786674AA5314BE85D324E7EE3C46F1CABDF
SHA-512:	071C890343518DB6A3BC9CC0DDF4874277936236387CF5E8709814895EF869FD733231BD355C0F0239275716F0C534F4FC72671748EFB0B389FA7444DC09E641
Malicious:	false
Reputation:	low
URL:	https://secure2.indwes.edu/_scripts/GoogleAnalytics/ga-secure.js
Preview:	(function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]\|\|function(){..(i[r].q=i[r].q\|\|[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),..m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)..})(window,document,'script','//www.google-analytics.com/analytics.js','gaSecure');....gaSecure('create', 'UA-10897322-13', 'auto');..gaSecure('send', 'pageview');

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2634 x 1361, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	129763
Entropy (8bit):	7.42673048319842
Encrypted:	false
SSDEEP:	3072:0cURC6yqdmpCHxF1l9yMiNPXe3aKaE1mZqXa60Nts41:0dXmpCv1uMm/TKaE1m8Xa64F1
MD5:	627E1F1B5C271F1E7A341A01BAC59321
SHA1:	116F8CCCA7778123C02AA96FEFAD8A19007B650E
SHA-256:	B0C315E82D2162017AF6D338A3D2258E254ADFAB1475BF3682E2EEDBABABB9F2
SHA-512:	3EEE16033804CE7A0270DDB7BD9357CCB0A28BA754E4CA93404CE9D97EB0E43DDDA24599C573167547763430E2A69B971D80472C4792933F6F0C71B4C329BFF9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...J...Q......VG.....sRGB........neXIfMM.*...................1.........2.i.........D....Adobe ImageReady...........................J...........Q.....o......iTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:xmp="http://ns.adobe.com/xap/1.0/">. <tiff:Orientation>1</tiff:Orientation>. <xmp:CreatorTool>Adobe ImageReady</xmp:CreatorTool>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>.QWz...@.IDATx....r.8......WpW6.....y.q..&%.......-.@.i&.a........ @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @.......

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	16598
Entropy (8bit):	6.017482339638111
Encrypted:	false
SSDEEP:	384:maBg/RTm9V/JSttDDph7KSKvRKR2XlKN80v1L4l257tuw66TUYVr:may/FmYXnt0NUn88uCLB
MD5:	AE583E8DEDA3566C053E14C2515F3CE2
SHA1:	DEE992A792CD73AC29AA1F09F80FD00297219A06
SHA-256:	F29F585B940D041859AE7A5DC07BB98F6E00F4DA549BAACEF4537EACB12AB8A5
SHA-512:	EF452C1E0C596835C8B510AD8CA31DE54A6FDA59ED17D7A377B783212E3278AAC45965DAF9ED5059DB9F07107223D3CD85007B859DD5CA97E2A5228C8CF97843
Malicious:	false
Reputation:	low
Preview:	{"sodar_query_id":"PWr4ZbCOJZn5_tMPxeChkAo","injector_basename":"sodar2","bg_hash_basename":"J7jMHEcdr0lVSatsUU1en4le0CiJfA3--2xrJ7e0v4U","bg_binary":"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

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	26826
Entropy (8bit):	7.962384718747582
Encrypted:	false
SSDEEP:	384:Pl0J+ToFtyx/kd57yXSlNYLDIB8FMWiKPiHVdLhFhOA6pmP7QQ1IsiSYeJCA2kXN:Pl0J+0FtMI57yXSlunIBTEdUQoIjEC4L
MD5:	B0349CCCA36912B8CFF07E71D0A80770
SHA1:	E3B9C1C472ED7DCE9ABDD2497DF7B9D5FC9217A3
SHA-256:	C6D5FDEB4E7F7B423B878EBD2289D186D98C2EE1D3F02761477E904C0122B2C4
SHA-512:	D56A9F1561319ECD4A076266839A27A958A3CBEFA4615C1159061E99929042B66D3400A5D373B77985A327F7EFA71F53D5F38E8FF818F3382C0E3E060914F496
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............\r.f..h.IDATx.....................f...$.-..VV}..l.m.m.m.m....T.../n.dLFW..s...q"O..9.....G..........=..(\s_.........4G.?...7h.+.B....%....Ah37...-M..'.......P........1.....c.G...ax...u.l...{z.W.].N.F.........g.3..M..f>#.0&...).......O.L4.;.k.P.x...x.<.....Q.@Q...2N.2..1.....%.S....W..w.$..R.U..;....S....f....).F........eN.f...5.7.hg.P4tb.T.W...O.o.....?..Y064t.h.7.....D.6..{3j.8............f.:..A....z#*.R.5...).w...?.......].Ja#..:r...........S.......,/F.....P.ZLH..@...Y..LFp.{....E._.....4~.W..Lt..3.<...8r....kD_.. /N_./.'.......\O.]..b...T.....zm[Q.....?.?I...8.....~.... ..?... .N.....E_..6^.>.......]....A.=SU.E9....U9.R.@.?......N..r4.ot..G..1?.5wo..K.7....@.=`.Y..a...1...e[p....33@7R.J...M.6..@..Da..A.Y....9..;.`........S......\|./s...V..(go..6....!-.3.....W.o.?.l...{.u.g...v....B.............&.<..Fp.\|..1..pXKQ..'k.EI.5.m./..L...d.....s..W8....\.j.`.7...)........5.7...g.....i..+...........

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1564), with no line terminators
Category:	downloaded
Size (bytes):	1564
Entropy (8bit):	5.631536028716269
Encrypted:	false
SSDEEP:	24:CGrwWa1jda1rHa1dra1S27SVTMiw1ydNn1MGBjMnfTs1TSegamlg:CcRCjdCrHCZCS5VohydNnqGafTAcjq
MD5:	D10747C78FD6AA9C36CB5D90DFCED960
SHA1:	58D655B7A2AE3DA0A570C76F1E06AC1C64733625
SHA-256:	BC56E5ED32E520031BEF20DB283FE385E4E6D2C15CAAA9A4A053FFC6F2378990
SHA-512:	C6CF87730824B0AFFDBCEE65C542779241042620A5B2FF19FA2CF02E04600E907997D7A0C94C029EF1DCC20C38539D30B9746E6320D5C9058326484EF93600AB
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=71058137&p=156011&s=165626&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://crb.kargo.com/api/v1/dsync/Martin?exid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://sync.bfmio.com/sync?pid=187&uid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://ups.analytics.yahoo.com/ups/58292/sync?_origin=1&uid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&redir=true&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://ib.adnxs.com/getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://sync.ipredictive.com/d/sync/cookie/generic?https://simage2.pu

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	130471
Entropy (8bit):	5.280782428885507
Encrypted:	false
SSDEEP:	1536:zurftsZ2TV5wQkKiOa7eagGrx6EI9FAtkXRq:CR5r31a7eaVrx66Eg
MD5:	DAAAF358AF8C22D4BD795B9547BCC828
SHA1:	468D3AFCA4719FD10C160684C49701EA032C2789
SHA-256:	ACF524B1B2CB231C38C5A010BE4DB5AF9F9E75B9E09E60D51F5CBF405A380214
SHA-512:	29911724FEC3B5C4E1E41A2DC781C653651BEC9F22028E21EC6C45EE7FD9F15FCFFFAE459BA2A3E41689235C2D93E3E2D0D092D5C8A4B5122E64000B526DF45C
Malicious:	false
Reputation:	low
URL:	https://btloader.com/tag?o=5708166709903360&upapi=true
Preview:	!function(){"use strict";var e=function(){return e=Object.assign\|\|function(e){for(var t,n=1,s=arguments.length;n<s;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e},e.apply(this,arguments)};function t(e,t,n,s){return new(n\|\|(n=Promise))((function(r,i){function o(e){try{c(s.next(e))}catch(e){i(e)}}function a(e){try{c(s.throw(e))}catch(e){i(e)}}function c(e){var t;e.done?r(e.value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(o,a)}c((s=s.apply(e,t\|\|[])).next())}))}function n(e,t){var n,s,r,i,o={label:0,sent:function(){if(1&r[0])throw r[1];return r[1]},trys:[],ops:[]};return i={next:a(0),throw:a(1),return:a(2)},"function"==typeof Symbol&&(i[Symbol.iterator]=function(){return this}),i;function a(i){return function(a){return function(i){if(n)throw new TypeError("Generator is already executing.");for(;o;)try{if(n=1,s&&(r=2&i[0]?s.return:i[0]?s.throw\|\|((r=s.return)&&r.call(s),0):s.next)&&!(r=r.call(s,i[1])).done)return r;switch(s=

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	14212
Entropy (8bit):	5.430429896145071
Encrypted:	false
SSDEEP:	384:UQ4EsxWTuqErxBURM4EQxy/iV4EpxxGLkFXcXHYl:pqIp
MD5:	4F2CB7FB29460A2A8113BC501186C8AC
SHA1:	A6AC2F45C9DB7A3CC595A110F46916F947921E80
SHA-256:	0C6052AEC7F2A1BF0E35F8A3E9B8A18793A6BC96FD01981467202159EDD5CB81
SHA-512:	E334174A953613823876B53F7FAF3873BC410B10E9EF08F0F7CC556CC58141D8B1C48FAD837AD798B3501DBF44A90C8AB545D7FE8426CEA46A1196699B47FB53
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Merriweather:400,300,300italic,400italic,700,700italic,900,900italic"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Merriweather';. font-style: italic;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR7lXff1jvzRPA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Merriweather';. font-style: italic;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR7lXff8jvzRPA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese */.@font-face {. font-family: 'Merriweather';. font-style: italic;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR7lXff3jvzRPA.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20A

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 263 x 81
Category:	downloaded
Size (bytes):	2090
Entropy (8bit):	7.709979636708156
Encrypted:	false
SSDEEP:	48:SOs3Xbic7ERAM2nSCGBIz0u/QPcWskekmH:S9ioE2STOz0gWakO
MD5:	1B9EE43DD42F1EED1A729FD9B6F04911
SHA1:	4B74B5F099797B59A4630C7060899AD99C7C5F50
SHA-256:	93FE81DB61D9535E11FE400603D155F0291A6B275A3FDCE7B3C715A965EF9FB5
SHA-512:	A1942B1C56962450B0F76397AF461E172EFD15A697918BBE3BB3AE9586FBC252D69E5C8D504B0ED11A77DEB4B43BF7EB8589144580BD8DD85B405687BB4A6295
Malicious:	false
Reputation:	low
URL:	https://secure2.indwes.edu/_img/formHeadings/hdr_MD.gif
Preview:	GIF89a..Q......&.....#.."..%..%..%..$..%..&..!.. ..#..$..#..#..$..,..!..#..$.."..!..&...........{..J`.9Q.)C.......4...k}.Zn..)C..4.....9Q...........................................................!.......,......Q.@..@.pH,...r.l:..tJ.Z..v..z..xL....z.n...\|....!....9\|$Dv\|..%C.B".w.\|.~....w...~B... w .yF..#.D...B. .C.w.C.....\|%...E..C...v!E..%.w.tG......."....w....x{.....D....\|.w.....C....H.E.v.....4b..%.!.q..%,bg..F.le$.... C..I...(S.\...0c.L@...8s.......@...J...HyNX...P.J.J...X.j....S...K...h.]...p..K..]............L.....+^.8..U....#n..]...S......]..7Z4&B.).%..?!.....OZ....8.0+.AY.UM..!..M.C.x.b...]m.......k...(.....O......_........^.............(....h...&....6....F(.."...f...v... .(.$.h.(...,...0.(.`....C......ROB.......:..c.f.....v.VJF..F.r..... d..).......Q.B.....m..o...C .8.D:..d..b.1.....YR...}c...t.=.LgO#.T..>.l.....r......e$Bq.x..m.Y.OE.}..~MSNB...<.v..h.`.A...j.fB..P.:..P).j@.A.Z..4oN......C..*..x..Q...3..#.N'D.

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (41496), with no line terminators
Category:	downloaded
Size (bytes):	41496
Entropy (8bit):	6.006408330317341
Encrypted:	false
SSDEEP:	768:Xm5QJJS94XvM0CN72nMek7/NoFH+s1twkrgpM9B7yFdZjg4qECCarAb7ZdBSvAWl:NWa3TegXCarAb7ZdBhaOoUnqEm
MD5:	3F7672594C926BCE20887FA22B8D9F0C
SHA1:	353CB9DA9FBE3C455AA85A4E3277E5D6A805F016
SHA-256:	FC5084F3D68881286440499D4144FDA3B15E1C16C43BCF3B649D3D261D0DFAA2
SHA-512:	D56A9F60DBCEC75A55EBECA957DA72B5D0C3BE13BA29EC83636918A9D9CF3B1F95ED8B9DE5FB4A3949BE88239CC9378E9EAE897E67F7C1FCD48034437043F37A
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5884294479391638&output=html&h=90&slotname=3654094576&adk=228266070&adf=3493768505&pi=t.ma~as.3654094576&w=970&url=https%3A%2F%2Fbrowser-update.org%2F&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1710778930134&bpp=1204&bdt=1441&idt=2890&shv=r20240313&mjsv=m202403130201&ptt=5&saldr=sd&correlator=966864692783&frm=24&ife=3&pv=2&ga_vid=751177015.1710778933&ga_sid=1710778933&ga_hid=640648971&ga_fc=0&nhd=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=-12245933&bih=-12245933&isw=970&ish=90&ifk=1017635361&scr_x=-12245933&scr_y=-12245933&eid=44759875%2C44759926%2C44759842%2C31081793%2C95325975%2C95327950%2C95327954%2C31081901%2C95320376%2C95322388%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=862165079531677&tmod=1386792793&uas=0&nvt=1&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C970%2C90&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=1.bp47bps3drp4&fsb=1&dtd=2937
Preview:	<!doctype html><html><head><script>var jscVersion = 'r20240313';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {ebrpfa: true,};</script><script data-jc="40" data-jc-version="r20240313" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb/%<1245;05!=nehu`~"]">(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var q=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=q,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1};var ba=aa(610401301),ca=aa(188588736);var t;const da=q.navigator;t=da?da.userAgentData\|\|null:null;function ea(a){return ba?t?t.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function v(a){var b;a:{if(b=q.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};func

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsu8BD8lP5DRbWMTOa_IGkk8syQUGkltNGqzRDio-VG6pP8uVh1EIEfWTBVFL60hqRGNye3MeCS56W3xJYJnyrjIDDDPIvcf72LYQFDXzudiU5z7QZbvZKN67Af7tspBqthDRpS2NkzNHVqkIEENe6tCM-ESKg6yrFA&sig=Cg0ArKJSzLD-8coTsXrlEAE&id=lidar2&mcvt=1018&p=817,146,907,1116&mtos=1018,1018,1018,1018,1018&tos=1018,0,0,0,0&v=20240313&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=19&adk=1568334319&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=671173000&rst=1710778928676&rpt=8493&isd=0&lsd=0&met=ie&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x627, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	70272
Entropy (8bit):	7.997406941965109
Encrypted:	true
SSDEEP:	1536:HOE8qD6UkirDZKpwvqgtK6FhW1S+fyC3Q6sWFdqMm6zF:ugGUnp0w3tK6FhW1S+qCf3zF
MD5:	4FF03C4B83F6FBF0BC586D64A2BBE796
SHA1:	8AC92323C154E510BC7E6D9C26F3A68F02CC14B4
SHA-256:	1581F261DD14666B30C218F26D4D99DC5DB2F6C091A0F1C7D09121A036E3978D
SHA-512:	249DCF561F5729690286F3E579FE45FE4B2F060BF6F02BA0175AE75250FAA1FC009A2AA22572831B98B0EE655E7BCEABC5E2BF690AC28C55E4D3544349434248
Malicious:	false
Reputation:	low
Preview:	RIFFx...WEBPVP8 l...0......s.>m2.G$#$.......ci.....ib\.i.u....e.K...9sR.)...;..<....w..U.&.....W......$.at..Q.q.o...?....../.n..O.o..n.....\|.....t.y~..../a....or......._...=L..._.?............~Z.........;./.?.x.~............p?I.w..........}Z...?..5.V...9..3Q.1.&...).mD.mD.B5@ai.$.4.=..R.p._w...c...D..&3.(Dg.....j..N....y86.V...j?.n...".G......W...o..p\.rl..;1..B..jO\.t...y..X!Ho\.......H..7..G..+..y..]vk..x&..V...O....`?..^.?.G.#..m.4,$...j.>[..C.p^k..t.p..x..S.w..a.2./...,.[.h\.um.]....M.2L...6..Q...v)..f4...........V...j.U..~=..-.qU.ur.B....M.J..&^hc.h.Z.Q.y...........3.6...?B.-.,..%.[..<...zQaMJ..(....f....3c.0...6......l3..6.rK.p.....>..y..ti.\|u..... x..!.}......<.!.VM.....;....T.z....h..Y..^MV..=0....].O:..V..;.0.}H@= ...~..v.....r..R...\|....C..g......9.......m...Bh,.c$..+..Q......J.w.BaV.F.....J.3..+oe_.....w.;{...J.o&......Y..(...W.73..+.9I...V....}f.V).vU....V....-...8...ET...y."&~.v.........~u.@..).$... :.....1*.V..6D....6...+W5..~i

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	downloaded
Size (bytes):	604
Entropy (8bit):	5.861246086925173
Encrypted:	false
SSDEEP:	6:NCuxkVoA5eAEkZgoy+S+M5vWHKh7ISanZj3yG6c3FQLUAAWnprYsYqHxn:IEkvzEGLM5eqh7IziE3FEnFYsY2xn
MD5:	6D1F95AB9C97F037107D6B274B6FB0ED
SHA1:	9984B0530BFFCFEA89D2D9E0FBFBD4CBB6712AB2
SHA-256:	DBF67F8F94FB5C080F60C8A42AA93BD3C6E89A5041DC534AD2C3D58C41316C25
SHA-512:	8A4557A11B1C3B006D06B815FD4F190CDFCB897BE876E58290F45E1DC00600F7D41546FD32541270BCB91BC7A855C9F858516313854B356B6E0A0A80A6679486
Malicious:	false
Reputation:	low
URL:	https://browser-update.org/static/img/dialog-warning.gif
Preview:	GIF89a.....I.............................................................111. .....'.@@@CCC.1"MMM.;.)).//.E0.33.F1ZZZ[[[.99.<<.AAhhh.bE.h.o..w...~....................................................................................................................................................................................................................................!.......,............E..5..5...!..!..4....4....22....3.&77&.3...1..1.../.%8..8%./...0:..:0...,.$9;##;9$.,.C...>=''=>...C.. <A>66>A< .*E?..-DBA..ABD- 4..".. F........R<.....B..A."...&..IR...(..X..J.(...;

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3381)
Category:	downloaded
Size (bytes):	212851
Entropy (8bit):	5.405066868865096
Encrypted:	false
SSDEEP:	3072:HxYvSmtZXfDRNA4d8v9DErXrWry2ufi0XDA3gI8aVNHirodW:HqvSmvbATe7cyffDA3gI8EHi8dW
MD5:	377F245E144C1702957AAB23B4CF0966
SHA1:	65D61AB3C508A7BFAD5D8EA14F305D82FD8927E5
SHA-256:	3EDCA7294F70460740B307B1B70E7356A6165CB7A76C774F65398D0D052AC8C8
SHA-512:	2DC748F310E537DDEB53E5DAD566C263FA1DEB9CD94B2FDFF3A5CFAF854DF96A4F911F7AE13EDB294699365CDF94C97F8D17D5DA4E5D09583119F62B0B2F1019
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),q=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.q("Symbol",function(a){if(a)return a;var b=function(f,g){this.Og=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Og};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4772), with no line terminators
Category:	downloaded
Size (bytes):	4772
Entropy (8bit):	5.141941817217871
Encrypted:	false
SSDEEP:	96:g06dV3N6IzdloOl+ak/AyYvPVipZdOoCKh+sh+mP7gpz+I:k16IzdloOlNkWuh+sh+mP7gYI
MD5:	0E9D49CF436B439A7A1E8B6BECB90711
SHA1:	A73D840CF61BCC17FD8B35F5A215DA278E57FA70
SHA-256:	99A6642D424FC3A9FBAAAE2188F62B790E0E0F7B032A79C83B144A107259AD71
SHA-512:	1AB251A06646B1237391A08FBE4C360EAEB625E5CA06F1D947E125A20691081DF3CB4EA81229DD41FCD3E14B8C4FAC4632B9F526A5AACE2E5208A1F8729BBCB4
Malicious:	false
Reputation:	low
URL:	https://cdn.2trk.info/rtgstat/50version/css/logico-three.css
Preview:	@import 'https://fonts.googleapis.com/css?family=Muli';{font-family:muli,sans-serif;font-size:12px;font-weight:500}{box-sizing:border-box}a{color:inherit}body{text-align:center;padding:0;margin:0 auto;text-transform:none;background-color:#fff}div[class^=banner-]{position:relative;overflow:hidden}div[class^=col-]{position:relative;float:left;cursor:pointer;padding:2px}div[class^=logo-] img{width:auto;max-height:100%;max-width:100%}div[class^=img-]{text-align:center;width:100%;position:relative}div[class^=img-] img{width:auto;max-height:100%;max-width:100%}div[class^=img-] span{color:#fff;position:absolute;left:10px;top:5px;font-size:10px;padding:2px}div[class^=title-]{padding:1px 10px;height:14px;overflow:hidden;line-height:14px}div[class^=detail-]{text-align:center;width:100%;height:50px;top:0;left:0}div[class^=price-]{font-weight:700;padding-bottom:2px}div[class^=price-] span{font-weight:400;text-decoration:line-through;font-size:8px;padding-right:5px;color:initial}div[class^=btn-]{

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7038), with CRLF line terminators
Category:	downloaded
Size (bytes):	38100
Entropy (8bit):	5.604908456226419
Encrypted:	false
SSDEEP:	768:GyLMcW3+Jn+/0dirSviXagxHmBa02nHA3en74IL97iayePge:GyLqSvHayePge
MD5:	9E0865A0F3F1CB9A4DB00EFB14BACE88
SHA1:	8D5C0A1DD75FF993EBF269600CC60CE6D47982AC
SHA-256:	3B296271924212BD3A9D35E87D5A00AB8A482D00F7258824930E40B1A0913552
SHA-512:	EDF5EE1F27446F1AD62755F211D1FDF9578300D75A8495B83F0F9C576B26FC8D0FCD85B42AC0C0C6FDA3F529C9C959ADCCADCA894616BEC31A77B7B6C128BCBA
Malicious:	false
Reputation:	low
URL:	https://secure2.indwes.edu/Marketing/Project-Request/
Preview:	....<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head id="ctl00_Head1"><title>...Marketing - Project Request Form \| Indiana Wesleyan University..</title>.. .. <link rel="stylesheet" type="text/css" href="/_css/indwesFormsColumns.css" />.. <script type='text/javascript' src='/_scripts/GoogleAnalytics/ga-secure.js'></script>..</head>..<body class="indwesBody">.. <table width="100%" border="0" cellpadding="0" cellspacing="0" height="81">.. <tr>.. <td>.. <div id="redHeaderLeft">..  </div>.. redHeaderLeft-->.. </td>.. <td width="960">.. <div id="redHeaderMiddle">.. <div id="logoDiv">.. <a href="http://www.indwes.edu">.. <img src="/_img/hdr_form_iwuLogo.gif" id="iwuLogo" alt="Indiana Wesleyan University logo" border="0" /></a>..

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36526)
Category:	downloaded
Size (bytes):	89460
Entropy (8bit):	5.597948828396872
Encrypted:	false
SSDEEP:	1536:BeG73fsMQzgEpUM5Tch6KgHsmV6dtZioh:L3fbh6Z0
MD5:	73381E5ADCCA0DB9E5EAC18429079880
SHA1:	8901C40D291E6A40B7496EA1CD33788E010DC06E
SHA-256:	D1F1DEEABB6003BFA53F5766D6395F03F6A88F6B46E8C5ADE38A8455264C2B9F
SHA-512:	445DEA176FE97EDE3196D504F1AEA30D8E56FD5CF4CE851C551FDC5E62CB3891C6F1715F97041F61031E16A6D078A0D893670744B2DB6D9D4688B2DF8591FDE4
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/tag/js/gpt.js
Preview:	(function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),ea="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),t={},fa={},u=function(a,b,c){if(!c\|\|null!=a){c=fa[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}},v=function(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in t?f=t:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))brea

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:d:d
MD5:	9DD4E461268C8034F5C8564E155C67A6
SHA1:	11F6AD8EC52A2984ABAAFD7C3B516503785C2072
SHA-256:	2D711642B726B04401627CA9FBAC32F5C8530FB1903CC4DB02258717921A4881
SHA-512:	A4ABD4448C49562D828115D13A1FCCEA927F52B4D5459297F8B43E42DA89238BC13626E43DCB38DDB082488927EC904FB42057443983E88585179D50551AFE62
Malicious:	false
Reputation:	low
URL:	https://cdn.fuseplatform.net/telemetry/noconsent?cwvRep=%5B%7B%22name%22%3A%22TTFB%22%2C%22value%22%3A%221133.6000000000058%22%2C%22rating%22%3A%22needs-improvement%22%2C%22id%22%3A%22v3-1710778924288-6840755102223%22%2C%22delta%22%3A%221133.6000000000058%22%7D%5D&cmpj=unknown&v=1&ttm=1710778942089&cookie=true&res=1280x1024&device=desktop&browser=chrome&fuuid=e77f8bfe-60b6-5c8b-a657-64bfafdad065&fid=2789&pubid=5&url=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html&sid=bac552fa15f25121a86b&srate=100&adserver=gpt&etm=20057&e=web-vitals&tenant=publift&account=browserupdate
Preview:	x

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 336x336, components 3
Category:	dropped
Size (bytes):	5272
Entropy (8bit):	7.319499115875755
Encrypted:	false
SSDEEP:	96:ghSpEMl89deNsT0438U6iKQVC3ghl4m6ph9WTb:mqJUdeNsAB8c83zv
MD5:	5EC71A45E472B6939BD8D457FB10438D
SHA1:	433BED91F64940014BD7AE38F81BF6AC7C6046E8
SHA-256:	7AE1715BA052F7E2CC97319019A945B7FFFF2AE35E7731B7C30A1315F3D0A26C
SHA-512:	BCDD636C2442818FB14EAC1022893C749999A4A00FF514133E66BA96EB85782B5D2EB6621B633721A0DE2A9CD4D327F4B7407CF97DF2F3D80C71251CF60B520D
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......P.P.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(..

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Macintosh, datetime=2010:12:02 13:23:51], baseline, precision 8, 960x123, components 3
Category:	downloaded
Size (bytes):	160795
Entropy (8bit):	7.929977169099737
Encrypted:	false
SSDEEP:	3072:/kE1PZDat+10raivWqVMzv93/i9adqlDVU/lq:/kiRv10+6WqVMzvccdoVU/k
MD5:	62BA40333F91BAFEC828693941537F5A
SHA1:	7D5F62C3453A79F7E1E7118205ADC057D9C75029
SHA-256:	A4BC14AD3DCE069F66D77ED13026FCEF79C131AF0A7BE6C9FCBECF24FADD0277
SHA-512:	20EAC461869A8DA2F3597F8B7D475957B4AF6F98F90ED1A7E5B9C339DE5F9FF63D9F45CE2CFE6C5CCF0F52893D47327EBED7AC46C2F41A426A7C8DEF8E2D7C0D
Malicious:	false
Reputation:	low
URL:	https://secure2.indwes.edu/_img/headerImages/generic_iwu/generic_iwu.jpg
Preview:	......JFIF.....H.H......Exif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS4 Macintosh.2010:12:02 13:23:51......................................{...........................................&.(.........................................H.......H..........JFIF.....H.H......Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.\|.:}-...E....\.`.k..?.c....k....._m.k76.{..0\.......O.Z.o.#5...^.+s.Ac@.....C....C.......5.OU../.P....3.o..O1....Y.}

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (32764)
Category:	downloaded
Size (bytes):	91556
Entropy (8bit):	5.372460179402328
Encrypted:	false
SSDEEP:	1536:ErtkIFev1ONjOe7evh0HWJxRckSTcncz/z34yfbvTXYActjaO7fiSXHB27SaDqMS:C+1yPWTRXkT4i5K7hZp8+J
MD5:	A1A8CB16A060F6280A767187FD22E037
SHA1:	7622C9AC2335BE6DCD3AB8B47132E94089CEF931
SHA-256:	D16D07A0353405FCEC95F7EFC50A2621BC7425F9A5E8895078396FB0DC460C4F
SHA-512:	252476E9F94A6DB579E14CDF1197555E856E6B80DBCD78C46B9345CE6605A1CD69DA0DAB2A4C475B51D2103404D2C61ACD18490E005D625ECA06AFE4D75C8A6C
Malicious:	false
Reputation:	low
URL:	https://secure2.indwes.edu/_scripts/jquery-1.6.2.min.js
Preview:	/!. jQuery JavaScript Library v1.6.2. * http://jquery.com/. . Copyright 2011, John Resig. * Dual licensed under the MIT or GPL Version 2 licenses.. * http://jquery.org/license. . Includes Sizzle.js. * http://sizzlejs.com/. * Copyright 2011, The Dojo Foundation. * Released under the MIT, BSD, and GPL Licenses.. . Date: Thu Jun 30 14:16:56 2011 -0400. */.(function(a,b){function cv(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cs(a){if(!cg[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");d.remove();if(e==="none"\|\|e===""){ch\|\|(ch=c.createElement("iframe"),ch.frameBorder=ch.width=ch.height=0),b.appendChild(ch);if(!ci\|\|!ch.createElement)ci=(ch.contentWindow\|\|ch.contentDocument).document,ci.write((c.compatMode==="CSS1Compat"?"<!doctype html>":"")+"<html><body>"),ci.close();d=ci.createElement(a),ci.body.appendChild(d),e=f.css(d,"display"),b.removeChild(ch)}cg[a]=e}return cg[a]}function cr(a,b){var c={};f.each(cm.concat.apply([],cm.

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 248 x 52, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5875
Entropy (8bit):	7.954846255234901
Encrypted:	false
SSDEEP:	96:9A5ROHyrOA6H619tB418TmwfN0I3wv+9phdJR84h2wDRO61IUeMx8tuy:9A5ROdA6a19L4SKojhpnJm4hNDRO6Lz+
MD5:	4DFBC33983F38FF31B7AEA7EF3DE9831
SHA1:	65726959859519B4A8965EE807F9182734B762D5
SHA-256:	F7B6E85729B62123B8CA1E685C957486326CA952E8EF3AC6F14D28AC82A75C29
SHA-512:	D971E02537C2C1998B450DA5DC7A9153F37352AB01D90A7E17E1BC2D88481215316DF242DD21858523117047CBC0CDE0CA1463BB1D0FD24738481A46EFF31067
Malicious:	false
Reputation:	low
URL:	https://browser-update.org/static/img/wmp_logo.png
Preview:	.PNG........IHDR.......4......%......PLTE...........................<<<:::.........999>>>EEE.........@@@.........444......qqq777.....BBB....???......hhhfffDDDkkkYYYCCCAAA222...lllOOO888........]]]........pppIII000........vvvQQQGGG666......}}}yyytttSSSMML......UUU.............{{{WWWHHH..........nnnbbb...........sssooo................___NNN....................uuu........```...................xxxddd......KKK..............aaa.....................)))..............................ts.TL.QH.NA.R@.K?.M<.R4.K4..........................\|.XR.ZP.RB..............................................\|.y{.l.OO.ZG?8A.Y?.R6.E5.M..@.....................................\|{.\|o.xh.eU.cQ.ON.BA.R=$$$.Z ........................................x.sf[ha.c`.gL.B>OE<@39<B6.K112.6).K(.{U.....IDATh...?k.A.....f..'9.. !..E...AD."..... ..w`.A$Z.H.F..]...........&.{0..>.4...,;..p.L-!..fFs$P..C.9.\X....R:x]m...Qb\!...u........&}n.v....k..Nc.......{.$..gA.D&@......n).,...J2. 9

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 336x336, components 3
Category:	dropped
Size (bytes):	5886
Entropy (8bit):	7.344971691011853
Encrypted:	false
SSDEEP:	96:ghSpEFM+W7kZ5dC1qBBaO7P2nEFbrC7YuM83EVeEcn1T3+Xm1q:mqFZ7kZja6CnEFCm8U2n1TuXmM
MD5:	5787798A2B6D350885574866F13E2D30
SHA1:	18E2C4F1F9300F7E272BABDD912722BF149B929B
SHA-256:	E3CE403915CE22195CEB0806FF6286353A28B81D1A295691003196681FF15F03
SHA-512:	73F25957F27B2350F94DBF9CABC1C64B2B48E4B76958C02D40388CF3147CCDC3EEDD89AF5DA3D20091942A916B6EDE7DBD30FD7FD561C2E4ADBDD82E6089A7CE
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......P.P.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...jw.?.o/......AH..NH..rp.8.q.........xV..ai-..\G..a....?y....#...n.e.i.j.}.\Z.....

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1024 x 90, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	126615
Entropy (8bit):	7.995405855330611
Encrypted:	true
SSDEEP:	3072:wvm/QKt0bv9fOJFqFjtSVqXm9hZUCjAsVr1+qteU+XHGYD:wvWq9OJFKjtSVWQUCPrGGYD
MD5:	A5BACC7C739BE8375BDF25A18F883DD0
SHA1:	89850FB60978E6543A98886E62806E286688A6B5
SHA-256:	AFA0ECB0C8B95432E1EBCE06E6D70DAA10BC505094ABFCF5FB177BA6DB8BFDFD
SHA-512:	88FC24562058A68644FB1FB1701AB382A6C51C8FB90B45C22980EE90F564A437E910A4D1B0ED9CE41FE656B865FA1AAC4B4E8DFC4AAAF13F15263321EC294570
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......Z......%.V....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.5 (Windows)" xmpMM:InstanceID="xmp.iid:E27BDA68DD3011EEB33FE4363A0518CF" xmpMM:DocumentID="xmp.did:E27BDA69DD3011EEB33FE4363A0518CF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E27BDA66DD3011EEB33FE4363A0518CF" stRef:documentID="xmp.did:E27BDA67DD3011EEB33FE4363A0518CF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>4._7....IDATx..w.e.Y'x..'..b.WI...K.e..-c9..8....`.=...n.i.g.^..Y....5&t7.....Lp.Y....,.B.*.x.........}..z.?G.(

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19780, version 1.0
Category:	downloaded
Size (bytes):	19780
Entropy (8bit):	7.990380388082591
Encrypted:	true
SSDEEP:	384:FHq25NFct2aU+TpWwDerMxbep9UtPsoKQFMOFr8AbwbTXsT+5Nc:o25XctFUSWwDx4YsaMORzbwbT8a5Nc
MD5:	03717344E4DBB2DE44988B281BB7430B
SHA1:	0CD3F7724BD0A5BF2460E1A85E35CCFBD5E85C05
SHA-256:	499EC54EB2AFD103EC37505E23C6570FC7D89A0D728DDE19D87A092E4A3261B4
SHA-512:	476FFC9297D158C60821DEF833EDDA9FADEA435FDD98F5BD862F0F5A88A31BA64AB2F696BC90E4B757624785B695BDE0CE9F448F92B04CC3C3497C73B75CCDEB
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/merriweather/v30/u-4m0qyriQwlOrhSvowK_l5-eRZOf-I.woff2
Preview:	wOF2......MD..........L..........................L..B..2.`........m.....<..b..&..6.$..H. ..j..v..1.g.%...H q.Q....V....l.........T.0.=i.3..D...Pu!..I.F&u....A...N...M..4.,.B.'n.sA\..jv\|.)5..+.c.T...=qD..?...3-m...<`...-M..6............G...\|...>U....<....hB..b.....&jl..X.`k..b...U.m$.....b....._.....~....<.f..O....0y..03......7..V..4...K.,OOc.7..%$Y.u...4-..8.......Z.....=.Z{.8..q......(`6...F...K....DI.3..r...+oC..T3...e...!-..~P.u..S.....S+........v..g........{.wo.5@%..e.Q_\.2X8]....0..#..n7.=......Q,....m..tL..dwo{?.....n.I/....A...:T..c\.c....l.6.H....w.....)s.X.1.b.....{._.,...WU.W...>.....mC..Tu.....T..B..z.{..JJrz.k?..G...C..(4J$...T....r,..(.[..hl~a...i..:9...L.<z]S..3l..%k.>.[.}..<&jVKL'..r$&..U..WS.0MCW..U....^..F.....;A...~..h.t..i....V....}...p(w....$.+...F....X..X......\|.!(..JK..a[ok...oz.......& ..@..."(.PO:..o.....B......"..sh..@..(.......d~UJ..N.F!M%l!.Bf.t...~..........t...D`.P...CoI..M.?.UKdO.6......b$!c. .&...R....V.

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	81200
Entropy (8bit):	5.297297592251199
Encrypted:	false
SSDEEP:	768:fIS+2oN0GjY1bz8h7lu/PtPjBh0FP3RBGKM4gnRQWiPaCyYDLjm:TxGwUhZuNPFeBGKM4gRSPpm
MD5:	DB15665AF721B4E523DFBE9C4CC84A71
SHA1:	5057BCF9E2B4431DC17616121F5F74FCEC1AE189
SHA-256:	D5D5D976AB32FAC4758F26605A380FC60F41ECE88E60633464368C3367C8A4DC
SHA-512:	F8E8B4EA8FE93695E26DFE5B21ADAE1F7EE3841B2833E25F3C5B50BEC1FF61CAF389F0C5C578FA820900928E13CDAE5B2E6C6E919D8DE9C60C34045711F0D6D4
Malicious:	false
Reputation:	low
URL:	https://indwes.tfaforms.net/dist/open-telemetry/open-telemetry.3e6c1bedaa7fb4452dd0.js
Preview:	!function(){"use strict";var t={};t.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(t){if("object"==typeof window)return window}}();var e="object"==typeof globalThis?globalThis:"object"==typeof self?self:"object"==typeof window?window:"object"==typeof t.g?t.g:{},n="1.3.0",r=/^(\d+)\.(\d+)\.(\d+)(-(.+))?$/,o=function(t){var e=new Set([t]),n=new Set,o=t.match(r);if(!o)return function(){return!1};var i=+o[1],a=+o[2],s=+o[3];if(null!=o[4])return function(e){return e===t};function u(t){return n.add(t),!1}function c(t){return e.add(t),!0}return function(t){if(e.has(t))return!0;if(n.has(t))return!1;var o=t.match(r);if(!o)return u(t);var l=+o[1],f=+o[2],p=+o[3];return null!=o[4]\|\|i!==l?u(t):0===i?a===f&&s<=p?c(t):u(t):a<=f?c(t):u(t)}}(n),i=n.split(".")[0],a=Symbol.for("opentelemetry.js.api."+i),s=e;function u(t,e,r,o){var i;void 0===o&&(o=!1);var u=s[a]=null!==(i=s[a])&&void 0!==i?i:{version:n};if(!o&&u[t]){var c=new Error("@op

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	16791
Entropy (8bit):	5.340651755522299
Encrypted:	false
SSDEEP:	192:N/dB0q4e6uyfrbqGIwYMH17o/A85q1H6uy2rbqGIwYRe1qh/ZFgqsC6uyrrbqGIA:ZFuq9PUhq915Cq9C
MD5:	91AC03E451A4BAAE0CF9B1704A46298E
SHA1:	89F3C96528C24B8CFAAD5B25EB6D7B650944EB7F
SHA-256:	3309A12DA2ED18DB77A65BFD52B4FB97A0DFD77E4F22889BD708A010FFD2F9C3
SHA-512:	D78D4569B84F52CF05D081D0999B8FB7A140A9F253AD3ABC1A91121CF93431247003A79D47CC2E090594EC53EC85948383EBBAB22CA950043D53226BB9F7B227
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Open+Sans:300,400,700"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Open Sans';. font-style: normal;

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 145, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5380
Entropy (8bit):	7.9138219412651
Encrypted:	false
SSDEEP:	96:FdmpwsMHIQhDke1g5U2xzDHThuXawymN2AOdBlVYUL+C/ixSZEQ1mmQ1aX3gt:Fc6sYrCN4KMN2tBPYS+XQsmFnc
MD5:	5B6D9A172800420E357FEFCD6FFF108B
SHA1:	A0AC05607E8532124D76ADDD8D66BF68BB557755
SHA-256:	921849FD090598E7C4F2F6DD057A0C9B54D8D40A2737B19F48DCEA591646BC57
SHA-512:	F3C09B8C918A9EE70892FA8D5EA19DBCDECC1D55715048CE2DE3C8E01E2E37103B94287CA447828DFE10E742D97BDAA8094BF6D8B589BE24C1A41FFE27802E09
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X.........(.6.....gAMA......a.....sRGB.........PLTE... "! .\.K .{E.`..h..h..g..h.l>.m= .o;..hm.U!......=D..RW......KD....Z.]C....N..S..Tt.v....J-...+8;D..1RZ1p..xL_.."..................tRNS.bz..H+.....#...Kv...w.......IDATx..yw.8...M.B1I e)...{.....b/6^..+......c.)C.-.x."....H$..D".H$..D".H$..D...r....d4.....V....._htH..o...Z.D.Z.\|%.H.............U.Tm.&.HNfUS5[.....b"...X....m...Z...Z$.V3Sn.j..R.uFh. }...j...^\\|.tqq;Rr....r-R'.Zm...hC.dZ.#.I..].n..$..:.S<$..'8W+#U.o..pH.Er...Xmmk.5.L.T.p.q...z>.P8$......w...~]otyy..5j.pH.Zo...7o.....T...N..!........~.P.T5lm..MkHd.W.WEv..j.QU..X,..n...4....E.....k-..pxFdQ=XII...O....Z%Y.9......N..../..5-...."..<..:....dW...LK..%YC".....+........%.D...,.g.<q........-..2......K..0Ww?@Uhm.....eMh..p.s...U..L....4.s .....Ww?LzljC..u..S...@(d.....XT..B!k.fm-..,2..Vo;p.%.J.m.e.'4.=5..).j.z}~z(.....u.....C..=...z.u.q..4..j..UYV.u..-kN.a...M7.-7...T

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65440)
Category:	downloaded
Size (bytes):	305153
Entropy (8bit):	5.28871415824133
Encrypted:	false
SSDEEP:	6144:MZShGIKSCu4DzPF0BfZiP9GwBKn3YifcN1:MZShqSCu4DzP+fkPkw2fcb
MD5:	B9E5BC6AE2304C1FF623D74C6E93FE00
SHA1:	BF769EAF9695B695795D2292DF891E3FB1B5E8DA
SHA-256:	2F2EF1A173106EFC9F1E2048EE2A1F0ECAC78E166A57E83128776F565312357E
SHA-512:	D9C8E8E2219DA99EAEBA57E2648CA41935008CDDF44BB1BC1BE7E2B94B28DB2E046BFDD8ECEFE5A38B0CF611F91BAE1BD03BEE3C46C756876DBDE49C77675F44
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/aax2/apstag.js
Preview:	/! @amzn/apswebapstaglibrary - web-client-bundle - v24.305.1002 - 2024-03-05 10:02:18 /.!function(){"use strict";var t=function(e,n){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&(t[n]=e[n])},t(e,n)};var e=function(){return e=Object.assign\|\|function(t){for(var e,n=1,o=arguments.length;n<o;n++)for(var r in e=arguments[n])Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r]);return t},e.apply(this,arguments)};function n(t,e,n,o){var r,i=arguments.length,a=i<3?e:null===o?o=Object.getOwnPropertyDescriptor(e,n):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(t,e,n,o);else for(var c=t.length-1;c>=0;c--)(r=t[c])&&(a=(i<3?r(a):i>3?r(e,n,a):r(e,n))\|\|a);return i>3&&a&&Object.defineProperty(e,n,a),a}function o(t,e,n,o){return new(n\|\|(n=Promise))((function(r,i){function a(t){try{u(o.next(t))}catch(t){i(t)}}function c(t){try{u(o.throw(t))}c

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1595
Entropy (8bit):	4.552418287032655
Encrypted:	false
SSDEEP:	48:YZXkF/y/rLCcx/Wo1CJRenRHc69w3PskwyDVfowl:EkF/8vt1IRwH19w3flVXl
MD5:	34A291DED495B0CA7733D12A34D96A2F
SHA1:	016E3673434C1338A149D15F1B194CCF5F42FABD
SHA-256:	218AEBE6C4D9C9B534344427A433F7B243D3F42D3A3814AF49013D70C26EF505
SHA-512:	A11E4C1FF4ADBC7999BBA9FEB6E7107222F9105AA60BA3D10ECE38CF5BF45ED89E96E0AC1B2C9635027226C1E416B5C6883391702A26740B1E6A9FBA32C8C877
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/gh/prebid/currency-file@1/latest.json?date=20240318
Preview:	{"dataAsOf":"2024-03-18T00:00:00.000Z","generatedAt":"2024-03-18T16:00:35.664Z","conversions":{"USD":{"USD":1,"JPY":149.20124862284246,"BGN":1.795629820051414,"CZK":23.13624678663239,"DKK":6.846584649283878,"GBP":0.7852093279471172,"HUF":362.6055820785898,"PLN":3.9582262210796917,"RON":4.564450973191333,"SEK":10.39092912229159,"CHF":0.884135145060595,"ISK":136.70583914799855,"NOK":10.610080793242748,"TRY":32.301230260741825,"AUD":1.5224935732647817,"BRL":4.992838780756519,"CAD":1.3537458685273596,"CNY":7.198127065736321,"HKD":7.819316929856776,"IDR":15718.949687844291,"ILS":3.6502937936099893,"INR":82.89111274329784,"KRW":1333.777084098421,"MXN":16.728516342269558,"MYR":4.718508997429306,"NZD":1.6416636063165626,"PHP":55.60044069041499,"SGD":1.338138082996695,"THB":35.96492838780757,"ZAR":18.900018362100624,"EUR":0.9181050312155711},"GBP":{"USD":1.2735457468576439,"JPY":190.01461560947092,"BGN":2.2868167202572347,"CZK":29.465068693364515,"DKK":8.719438760596317,"GBP":1,"HUF":461.794796

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1074
Entropy (8bit):	4.974926836448504
Encrypted:	false
SSDEEP:	24:vdnelacjkK4SQbArtnmYYbbvqawYCBHkKQn8VH:vojQSQbANmYYbxwXlkvnsH
MD5:	40635054E327B749517FBFC876906D27
SHA1:	ED913A5402B9EEFB57BF8C869F6746BDC1D264A9
SHA-256:	C499A934A3A4111346993C847D1B0ECD309295FB2D3F0E57B9D44ECAAC732E17
SHA-512:	CB5C9F5D6BDB5E0828B3583C6D986DA6B95EF56763910B56AE49594244E9B2043183E6F981D7A58C9F88EA2B240EADF0E79AE7775C7A6BA5BEC47C0066ECF5A1
Malicious:	false
Reputation:	low
URL:	http://iwu.marketing/js/jquery.fittext.js
Preview:	/global jQuery /./!. FitText.js 1.2.. Copyright 2011, Dave Rupert http://daverupert.com.* Released under the WTFPL license.* http://sam.zoy.org/wtfpl/.. Date: Thu May 05 14:23:00 2011 -0600./..(function( $ ){.. $.fn.fitText = function( kompressor, options ) {.. // Setup options. var compressor = kompressor \|\| 1,. settings = $.extend({. 'minFontSize' : Number.NEGATIVE_INFINITY,. 'maxFontSize' : Number.POSITIVE_INFINITY. }, options);.. return this.each(function(){.. // Store the object. var $this = $(this);.. // Resizer() resizes items based on the object width divided by the compressor 10. var resizer = function () {. $this.css('font-size', Math.max(Math.min($this.width() / (compressor*10), parseFloat(settings.maxFontSize)), parseFloat(settings.minFontSize)));. };.. // Call once to set.. resizer();.. // Call on resize. Opera debounces their resize by default.. $(window).on('resize.fi

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	16194
Entropy (8bit):	6.017387050538598
Encrypted:	false
SSDEEP:	384:8JlC4GSV6abzJes8Slu/FurO4AyeeT/T45WI+U1df1E6l0:8zC21mFb4A1eT745WI+U1p1EQ0
MD5:	7628EDA53139DD77129434AEB7BB4F23
SHA1:	1FFFA6BAB4277824E0B22236368CBC861E000646
SHA-256:	561763BB2644B0388CBD993E057C0D891A8362AF8D79151141286092179DFD97
SHA-512:	FA42EEEEDEA792F8AF9E5B63EE828054E9A3EEC01A94A5ED83BF63CDEF9979A9A4B932FF0B37A2E0C1C38AC459B79B77AD31B19E0CEEA53199C6467BC655AD79
Malicious:	false
Reputation:	low
Preview:	{"sodar_query_id":"O2r4ZdrvCNfq_tMPprmQkAo","injector_basename":"sodar2","bg_hash_basename":"J7jMHEcdr0lVSatsUU1en4le0CiJfA3--2xrJ7e0v4U","bg_binary":"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

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	33
Entropy (8bit):	4.55954563450997
Encrypted:	false
SSDEEP:	3:YJH/+MRD0hxscO4:YJ/+Mu3sE
MD5:	A6F56954B75E37F162252087934FDBEF
SHA1:	658DD1130189D1B00A1DF8F80916CF965F4B1400
SHA-256:	15E7158B0572901120AC1814466DA5BD856D8FDE801AB8E7A78304B0325C4CD4
SHA-512:	3834848E361626EFEAF9CB7611D2B37B51986FC4E4A2AEFA2363685ED8DFDD7C29384C7CCE5F9B5056255F91A0E0C8477463775EF5F339A878E3B90570441EE4
Malicious:	false
Reputation:	low
URL:	https://lb.eu-1-id5-sync.com/lb/v1
Preview:	{"lb":"8yJ1xvfQDu3lmwDaqIUESQ=="}

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	761
Entropy (8bit):	7.594779111754463
Encrypted:	false
SSDEEP:	12:6v/7sQeIl//VWv0ETCX443vvrkwQdRdU7wppxmb0WGOFwNM0Ix:hQeI93XPvrkBW4pxmb00wNM0Ix
MD5:	AF985E11B8EF341341D8C44FA00B5D0F
SHA1:	BF443D37DA964CEA50DD5CD792F13258506DC7FE
SHA-256:	B72FEFB656009443D88CFDACD5CAAD8969FDAB1BF6DF78C8BFC687ECFB5FE0DA
SHA-512:	140467E975C1376B00C2FB45F1C4BD2425F96E98ECA6769B54CC37AC98AA37450A566A283A86B5F030793EA612280BDEB968FA298EDB5C9614EE0B40B0BFB106
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....D.......PLTE...............................................................................................................................................................................g.V.....tRNS..D..f."Rw.i....IDAT8...0..`2.......)...j....k/.!..Hs.~...J..t.k+...W.t....W1I}..S.<..\|..A.nt.i..X_.'.[.F.k.v.T}3.._..W%d.....N......dW+....L.!.P...QT1..P`.U...k..K.Sa#...._....u]Q"{t.\|o.....f..K...x.......@...H...B..B.e(p7v..o.S...5......^.......lD...>.@[aL.8.56"qb.m.O."m.qJx....S.:.c...(0.<=r....x...\....3...I@9...l>"dP.<......i)".1..2..,]..>,.BH...]9...TUU.A5G.Wa...8...q...\2.0...).C.:...`..(....n.7...=:.....o..K_.....oMs..IM2}.......?_..G..<......u..q............Y..5...G.u....>.7&.....IEND.B`.

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 15, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	183
Entropy (8bit):	6.075702118355463
Encrypted:	false
SSDEEP:	3:yionv//thPl8kllZRthwkBDsTBZt8AnlTpNm1rBxtUFBPbG4EZDKMSQb7Slp:6v/lhP6s9nDspDn7AtUFBPbEZ5elp
MD5:	FE4BDF0F314B68757F2EE5C63EDD4C2D
SHA1:	75C4F1569DC0D425B847895ABA46AACE2868CE13
SHA-256:	20D9446B589F06289E3A2F62CD749F76B571C6ACC63EC6E1E93710854017C6BF
SHA-512:	2C790E0F271C26B4989D68C87BB2A442D668161B32332700BA25463CC102AAC5FC4ACBCA48D83F621C793FCD5C7500CB2F76082C4E3B56121CAB5FF8F1D08FB2
Malicious:	false
Reputation:	low
URL:	https://cdn.2trk.info/rtgstat/adchoice-links/nai_smallpreciso.png
Preview:	.PNG........IHDR...............$.....tEXtSoftware.Adobe ImageReadyq.e<...YIDATx.b....f.....a...T.f.o..L.T.,.L...]M.%..j}@....x...Nj&...af......`...d........ ..e5.3.:......IEND.B`.

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26548)
Category:	downloaded
Size (bytes):	26711
Entropy (8bit):	4.753681219070429
Encrypted:	false
SSDEEP:	384:/i5yWeTUKW+KlkJ5de2UYmydfwYUas8l8yQ/7:klr+Klk3YlKfwYUf8l8yQ/7
MD5:	0831CBA6A670E405168B84AA20798347
SHA1:	05EA25BC9B3AC48993E1FEE322D3BC94B49A6E22
SHA-256:	936FFCCDC35BC55221E669D0E76034AF76BA8C080C1B1149144DBBD3B5311829
SHA-512:	655F4A6B01B62DE824C29DE7025C4B21516E7536AE5AE0690B5D2E11A7CC1D82F449AAEBCF903B1BBF645E1E7EE7EC28C50E47339E7D5D7D94663309DFA5A996
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.4.0/css/font-awesome.min.css
Preview:	/!. Font Awesome 4.4.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.4.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.4.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.4.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.4.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.4.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.4.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	199
Entropy (8bit):	4.965965753516
Encrypted:	false
SSDEEP:	6:8WiIUemo/H1fCYKbY4De1kqAV3IaiSO73s6t5oeX:8DIGoNfCYKbgXG4pBLspeX
MD5:	F423194388CFE13A3E49129A828EEE00
SHA1:	A49D38626CD7481F51F4D6EE7359CBD758AB38BE
SHA-256:	516985516A0E69346B8FC2CEC6D7F2B2DC0F5039A6A3BDF7DF2A4F0D62C926E8
SHA-512:	12060503A66CBCB34F1946018DED04DA4A202EF1C6A1291BCDE197DBAEC9487A067B892834B15187D9C56CED7F2874D7DA979831843DFBC627D93B96808FC1ED
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-mediagrid_n-adMediaV1_pm-db5_n-simpli.fi_n-baidu_n-Beeswax_ox-db5_smrt_n-inmobi_sovrn_3lift_n-Outbrain","cb":"0"})

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:d:d
MD5:	9DD4E461268C8034F5C8564E155C67A6
SHA1:	11F6AD8EC52A2984ABAAFD7C3B516503785C2072
SHA-256:	2D711642B726B04401627CA9FBAC32F5C8530FB1903CC4DB02258717921A4881
SHA-512:	A4ABD4448C49562D828115D13A1FCCEA927F52B4D5459297F8B43E42DA89238BC13626E43DCB38DDB082488927EC904FB42057443983E88585179D50551AFE62
Malicious:	false
Reputation:	low
Preview:	x

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 336x336, components 3
Category:	dropped
Size (bytes):	9354
Entropy (8bit):	7.7586842615088765
Encrypted:	false
SSDEEP:	192:mqP17vsstL7uV+bsXEN+fVuUtkuMBOqcR4fxlb7Pt:lPpvssgV1XdfVbMIqo4Lt
MD5:	417D5E45EFF316522924574A13DC270F
SHA1:	7E2BE450DF6CD7074F9E0B8C4D7A52B02EBEC546
SHA-256:	3D282F6180231B7C54722C0B14EBA943A74BB32C805F543468184C2137E5C18D
SHA-512:	720CAB3778C2669B376EB7EDB2E13D4AB16C3FF9EA991D94B788877AF81A367C4945E9CE49F0450AEEFF1220F9BE91EB8A17E568F9950A66710FCCBEC79D0B23
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......P.P.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(..

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1549
Entropy (8bit):	7.68911639521585
Encrypted:	false
SSDEEP:	24:Py1nfBWui8FepGcWGRp7YqGqwXeIiMNZIFJd7kG5H7a1dlgwm/2IlMTEGe:I8BG0VYqG5l1NZWJf7YgvVloEGe
MD5:	B2B37AA9F64082EEEDB9670C620BACA1
SHA1:	BAE0DECAF4DD31625A5E9E1D384AC0D85FAD0E4E
SHA-256:	C9658821B2D9D149EB6D868C6CE8811406C6E8FB1F74104EB480264F94836428
SHA-512:	86AEE8D58393F05D769E978FDCDA738FBCBFB8545F419E4D92F75E0D4AB43A9E846B66EBD8D348DD20A4BD2F906E117C0192AA8FB604F937CB7A1FFF30000723
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2......?.....KiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about=""/>. </rdf:RDF>.</x:xmpmeta>.<?xpacket end="r"?> I.:...}IDATh.._L[U..?-.C:]...%lns]..f.Ix....\R6c......,[4Y...o.,.D....23.6....&.1c. ..0W.HL.2...i..pn).{...s`.'........;....>dQ.<...{.G...7....?._.)`...fd.;l&..h.Z..-........U#V.y......V.W..\|......\......-.l..\|^....t..n..f..x.U..5.t.($.....!.d...]..!'..........L..ac..r%R.\|.4H4e....r....q!>.:...R..`.%..p@.#.<..i4`.H.....G'..g.2.m..kb....^.X.....k.........A....zi..WA....N....{.M...'\......g ... S....d.$.<J'....2..... .......w_...i.@{....U).]nN..J...e^..-.%...^.....r..~6.9..U.Zv.pg..c....x.x.....GdE.i1../SYR...5.v.9..!\|.\|Dg..$..+!@....u..Y.3Q..^.v[-.......GI.&.i1..7..1......K.!Jue.......Cve.p..O.

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (30991)
Category:	downloaded
Size (bytes):	104272
Entropy (8bit):	5.474971745289862
Encrypted:	false
SSDEEP:	1536:tYagKkecz5KA3bwcoct0xqK3jnLkV9YHBTdDeigsFBqPYXxxh8ITTOt+:B3uec1tRK3Hg9YHB/gsFYQ2QN
MD5:	0024C9313DE2C7103BB881331FD6BA36
SHA1:	55331D30BA7F5426CBF052F05A95EBF68849007C
SHA-256:	4441DE9415E76A67C7B828DA7C43582E2E6B9ACA3BD07E4D3CC41F0704A38C59
SHA-512:	5D439392C949A3B33B0A0E51C9FE5D3DC4980E10901A2055B14670B62C4580034A840EE174562318959A0930777BF3AFBAC0148A61626F12F7C224C990028428
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8" />. <title>Topics Frame</title>. <meta. http-equiv="origin-trial". content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=". />. <script>. ./.. Copyright 2022 Google LLC. SPDX-License-Identifier: Apache-2.0./.var m,aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	23063
Entropy (8bit):	4.7535440881548165
Encrypted:	false
SSDEEP:	384:GvUzYI+Vi4g1V5it1ONhA6w+Kv8i/4CYzLKL4DrLU0iTxZTAzIzrwDlTWMClQip9:bkON69kClQq8hDRJHp2tWU25Zt/gREVG
MD5:	90EA7274F19755002360945D54C2A0D7
SHA1:	647B5D8BF7D119A2C97895363A07A0C6EB8CD284
SHA-256:	40732E9DCFA704CF615E4691BB07AECFD1CC5E063220A46E4A7FF6560C77F5DB
SHA-512:	7474667800FF52A0031029CC338F81E1586F237EB07A49183008C8EC44A8F67B37E5E896573F089A50283DF96A1C8F185E53D667741331B647894532669E2C07
Malicious:	false
Reputation:	low
URL:	https://secure2.indwes.edu/Marketing/Project-Request/WebResource.axd?d=PRiIs6mOtMtRlOJgHrMPuowRdjdCZFYN0fVvfLDr-wofI5YK65nPuyqX9Pggn5E6Ee4oLQKxW1oFtXVElWxfouPM8goxbIB2hLry3iCpcpg1&t=638393069798026697
Preview:	function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) {.. this.eventTarget = eventTarget;.. this.eventArgument = eventArgument;.. this.validation = validation;.. this.validationGroup = validationGroup;.. this.actionUrl = actionUrl;.. this.trackFocus = trackFocus;.. this.clientSubmit = clientSubmit;..}..function WebForm_DoPostBackWithOptions(options) {.. var validationResult = true;.. if (options.validation) {.. if (typeof(Page_ClientValidate) == 'function') {.. validationResult = Page_ClientValidate(options.validationGroup);.. }.. }.. if (validationResult) {.. if ((typeof(options.actionUrl) != "undefined") && (options.actionUrl != null) && (options.actionUrl.length > 0)) {.. theForm.action = options.actionUrl;.. }.. if (options.trackFocus) {.. var lastFocus = theForm.elements["__LASTFOCUS"];.. if ((typeo

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1024 x 90, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	126615
Entropy (8bit):	7.995405855330611
Encrypted:	true
SSDEEP:	3072:wvm/QKt0bv9fOJFqFjtSVqXm9hZUCjAsVr1+qteU+XHGYD:wvWq9OJFKjtSVWQUCPrGGYD
MD5:	A5BACC7C739BE8375BDF25A18F883DD0
SHA1:	89850FB60978E6543A98886E62806E286688A6B5
SHA-256:	AFA0ECB0C8B95432E1EBCE06E6D70DAA10BC505094ABFCF5FB177BA6DB8BFDFD
SHA-512:	88FC24562058A68644FB1FB1701AB382A6C51C8FB90B45C22980EE90F564A437E910A4D1B0ED9CE41FE656B865FA1AAC4B4E8DFC4AAAF13F15263321EC294570
Malicious:	false
Reputation:	low
URL:	https://cdn.2trk.info/rtgbannerimage/2024-03-11-0723162901024.png
Preview:	.PNG........IHDR.......Z......%.V....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.5 (Windows)" xmpMM:InstanceID="xmp.iid:E27BDA68DD3011EEB33FE4363A0518CF" xmpMM:DocumentID="xmp.did:E27BDA69DD3011EEB33FE4363A0518CF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E27BDA66DD3011EEB33FE4363A0518CF" stRef:documentID="xmp.did:E27BDA67DD3011EEB33FE4363A0518CF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>4._7....IDATx..w.e.Y'x..'..b.WI...K.e..-c9..8....`.=...n.i.g.^..Y....5&t7.....Lp.Y....,.B.*.x.........}..z.?G.(

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=540245193&val=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65386)
Category:	downloaded
Size (bytes):	447232
Entropy (8bit):	5.506302239784326
Encrypted:	false
SSDEEP:	6144:hqiJd9redYgN4g2QmlrXeWBW9h1yIwVEDuaP+keZEAO9WAM:QijNq4g2TOyIweu6WEPMF
MD5:	35B7A64E7A2AD4E880714BE5FB0EE06E
SHA1:	D27F18BC34B105CF817AAF30DAC2C575A99FA135
SHA-256:	1B02035774D9978A0656512051C97EC80F62A4DA90137B41E4E998D5CBB7B957
SHA-512:	EE22726071867367386D417803FDA551EA734CE7787DC312BC7F23A368ADE60AAF2B4A7A62FC5EE9714AD9E38B60487BAA763BFB20B66C2BBFB2118B0CA02F0C
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202403140101/pubads_impl.js
Preview:	(function(_){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ ./ . . SPDX-License-Identifier: Apache-2.0 .*/ .var ba,da,ia,la,na,pa,ua,ta,va,wa,xa,ya,Aa,Ca,Ea,Ha,Ia,Ja,Ka,La,Oa,Va,bb,cb,jb,mb,nb,ob,pb,rb,vb,xb,Cb,Eb,Jb,Lb,Nb,Sb,Tb,Xb,$b,Zb,ac,bc,Ub,fc,gc,hc,kc,lc,nc,oc,pc,rc,sc,vc,xc,yc,Ac,Bc,Ec,Fc,Hc,Jc,Kc,Mc,Tc,Uc,Wc,Xc,Yc,$c,ed,fd,gd,hd,cd,ld,bd,ad,md,nd,od,rd,sd,vd,ud,xd,yd,Ad,Dd,Ed,Gd,Pd,Qd,Ud,Wd,Vd,Zd,ae,$d,ce,be,de,fe,Fd,ke,le,me,pe,De,qe,se,Ce,Ee,Fe,He,Ie,Je,Me,Ne,Oe,Pe,re,Qe,Re,Se,Ue,Ve,We,Xe,af,bf,cf,Ze,kf,$e,lf,Af,Df,Ff,Jf,Kf,Lf,Pf,Qf,Rf,Tf,Uf,Vf,Wf,Xf,$f,dg,fg,eg,jg,lg,mg,Eg,Fg,Hg,Jg,Mg,Pg,Qg,Sg,Ug,Wg,Xg,$g,ah,bh,ch,dh,eh,fh,hh,ih,kh,lh,mh,nh,oh,ph,sh,uh,yh,wh,Ph,Qh,Rh,Nh,Oh,Sh,Th,ei,ci,hi,pi,Uh,yi,Ki,Li,Pi,Qi,Wi,Yi,Zi,bj,ej,tj,wj,xj,zj,Aj,Bj,Cj,Dj,Ej,Fj,Gj,Ij,Lj,Jj,Mj,Kj,Nj,Pj,Tj,Vj,Wj,Zj,Xj,ck,dk,ek,ik,jk,pk,qk,Ck,Ik,Gk,Hk,Nk,Rk,Tk,Uk,Vk,Xk,al,hl,dl,Yk,pl,nl,ol,rl,sl,vl,Bl,El,Fl,M,Gl,Ml,Kl,Xl,P,Zl,$l,am,cm,em,fm,mm,nm,pm,qm,vm,Cm,Em

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	220883
Entropy (8bit):	5.385409712971463
Encrypted:	false
SSDEEP:	3072:Qm+0+g54nbhuXljBdrMRJONFsOVNRqk6iomjWV2eo:WnkN7VNRh6iomL
MD5:	CB9B016BBF86EC470C4352A47123D4B6
SHA1:	08A9FB188D557571E36A6449B1B3DBD014B46AD0
SHA-256:	421E3DFCC4E42AD0E9535DEB48C371AA602A9C4F0210DA5B6553BB2647C6203E
SHA-512:	3CFA2AEB5DF4BF8ADD6331C68340CBEB19417C0255D4F31CB27FB58A41FF0DC58A192C9246C76652642FC3B6016AD651321C39308E9F49AEC635D2252A0DF507
Malicious:	false
Reputation:	low
URL:	https://indwes.tfaforms.net/wForms/3.11/js/wforms.js?v=8b5c9ffd0b6fc88dc72529725004f6b69b9e0ae8
Preview:	var base2={name:"base2",version:"1.0",exports:"Base,Package,Abstract,Module,Enumerable,Map,Collection,RegGrp,Undefined,Null,This,True,False,assignID,detect,global",namespace:""};new function(_no_shrink_){var Undefined=K(),Null=K(null),True=K(!0),False=K(!1),This=function(){return this},global=This(),base2=global.base2,_FORMAT=/%([1-9])/g,_LTRIM=/^\s\s/,_RTRIM=/\s\s$/,_RESCAPE=/([\/()[\]{}\|+-.,^$?\\])/g,_BASE=/try/.test(detect)?/\bbase\b/:/./,_HIDDEN=["constructor","toString","valueOf"],_MSIE_NATIVE_FUNCTION=detect("(jscript)")?new RegExp("^"+rescape(isNaN).replace(/isNaN/,"\\w+")+"$"):{test:False},_counter=1,_slice=Array.prototype.slice;function assignID(e){return e.base2ID\|\|(e.base2ID="b2_"+_counter++),e.base2ID}_Function_forEach();var _subclass=function(e,t){base2.__prototyping=this.prototype;var n=new this;e&&extend(n,e),delete base2.__prototyping;var a,i=n.constructor;function r(){if(!base2.__prototyping){if(this.constructor!=arguments.callee&&!this.__constructing)return extend

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with very long lines (322), with CRLF line terminators
Category:	downloaded
Size (bytes):	16168
Entropy (8bit):	5.116214424204637
Encrypted:	false
SSDEEP:	192:PIU91+b+rwtp1DDvTbzAjn7BFPTxz4r4fQMVW55Wog97Pr6JROxq/p5pR3arfTH1:PRth9TIArbH6En4bO
MD5:	D11381338ECC330C417A0DC1D5F3986B
SHA1:	038292A31B81344EF58756CA12752B513C196B64
SHA-256:	128C687D1438BE3C567BA2AC46CABE6C93DC003C8F532805513812D6786FB88A
SHA-512:	83A020767556F4EF08FF1A99DB0F28C7775825E78F6C18E69066ECE574B75713583AC9D07C75E634F83C0989363C60201779FDC9243AC1E59B1A89776901C5A9
Malicious:	false
Reputation:	low
URL:	http://iwu.marketing/css/creative.css
Preview:	/!.. Creative v1.0.4 (http://startbootstrap.com/template-overviews/creative).. * Copyright 2013-2016 Start Bootstrap.. * Licensed under MIT (https://github.com/BlackrockDigital/startbootstrap/blob/gh-pages/LICENSE).. */....html,..body {.. height: 100%;.. width: 100%;..}..body {.. font-family: 'Merriweather', 'Helvetica Neue', Arial, sans-serif;..}..hr {.. border-color: #ab192a;.. border-width: 3px;.. max-width: 50px;..}..hr.long {.. border-color: #ab192a;.. border-width: 1.5px;.. max-width: 600px;..}..hr.light {.. border-color: white;..}..a {.. -webkit-transition: all 0.35s;.. -moz-transition: all 0.35s;.. transition: all 0.35s;.. color: #ab192a;..}..a:hover,..a:focus {.. color: #ab192a;..}..h1,..h2,..h3,..h4,..h5,..h6 {.. font-family: 'Open Sans', 'Helvetica Neue', Arial, sans-serif;..}..p {.. font-size: 16px;.. line-height: 1.5;.. margin-bottom: 20px;..}...bg-primary {.. background-color: #ab192a;..}...bg-dark {.. background-color: #222222;.. color: white;..}

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1414), with no line terminators
Category:	downloaded
Size (bytes):	1414
Entropy (8bit):	5.515042948572119
Encrypted:	false
SSDEEP:	24:CO+yja1OyHa1DG9lY1JT2aMMOIMUusijp1h1u7MnqMvmlg:C+COoCaDUAj/ZUusyjruwTOq
MD5:	7DB1413AECEF4460E11B5A63376E7266
SHA1:	939EFD935EF108BA8AF55CBF68AB8B99851DD369
SHA-256:	1512A275336F7C7347EB8B2C16B66B96746B0C267A8BC3F1D59E399E39CA4D27
SHA-512:	35BE7A9F518041ABA749C83E8EACA59B809BEB13A6B9DB01BD0C6527F2F3E88DC42D47FC4B94D252102F8CABBDA44F7AB63963E6F4AF1D02F80A1A89B937274B
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=9859246&p=156011&s=165626&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn.com/712188.gif?partner_uid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35/gdpr=0/gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://match.deepintent.com/usersync/141?gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=');PubMatic.loadAsyncImage

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16686), with no line terminators
Category:	downloaded
Size (bytes):	16686
Entropy (8bit):	5.03642667072669
Encrypted:	false
SSDEEP:	192:CwqAnjWK2pPqxZOc+WDrGZdifqlDzSMZtQoZrmDkNE:wAnjWK2pPqxZOc+WDElDzSMZtg
MD5:	2E1EFBC903A08CA509C496F6995EF991
SHA1:	B76E410884891B2747C6685379B1D402412DBC46
SHA-256:	1A5FE5D03C3F0603D6FB4CFDA187A29E2E7128E01A17AC1F3D23D97BEA90D4A4
SHA-512:	9737D9B104E1C2E7DC1008925F4165D0AB7A5633629A61D1311360DE964E33F676B30F0667266EDC285AC024ABC5B38B425D8F2278F6CB5E45BEB38EF8D1821A
Malicious:	false
Reputation:	low
URL:	https://cdn.2trk.info/rtgstat/50version/css/promo.css
Preview:	@font-face{font-family:consul;font-style:normal;font-weight:300;src:url(https://d2hzip0rm2jjhg.cloudfront.net/consul/fonts/consulcoheadline_std_lt-webfont.eot),url(https://d2hzip0rm2jjhg.cloudfront.net/consul/fonts/consulcoheadline_std_lt-webfont.eot#iefix) format("embedded-opentype"),url(https://d2hzip0rm2jjhg.cloudfront.net/consul/fonts/consulcoheadline_std_lt-webfont.svg#consul) format("svg"),url(https://d2hzip0rm2jjhg.cloudfront.net/consul/fonts/consulcoheadline_std_lt-webfont.ttf) format("truetype"),url(https://d2hzip0rm2jjhg.cloudfront.net/consul/fonts/consulcoheadline_std_lt-webfont.woff) format("woff"),url(https://d2hzip0rm2jjhg.cloudfront.net/consul/fonts/consulcoheadline_std_lt-webfont.woff2) format("woff2")}@font-face{font-family:consul;font-style:normal;font-weight:700;src:url(https://d2hzip0rm2jjhg.cloudfront.net/consul/fonts/consulcoheadline_std_bd-webfont.eot),url(https://d2hzip0rm2jjhg.cloudfront.net/consul/fonts/consulcoheadline_std_bd-webfont.eot#iefix) format("embedd

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 77 x 15, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1710
Entropy (8bit):	7.85670347672967
Encrypted:	false
SSDEEP:	24:VzPjuV+pzYMkJEKcP1VPdSbEx6UpZXjYNHpIzrYtJzwiaPVrU6CUyZJFC/u:VzP4+2MkJcDVSQ8+djYNHpAeUia9rCzL
MD5:	A4F2DC3F5B82A3CDCF7D575429449177
SHA1:	1A756BF326F9F9CFB98F38F3E034EDCED707FCC6
SHA-256:	C7B4E0EAD046AAF8BF5CCBFC2CACB1034484502F3EDEF69134A060F49EDDA834
SHA-512:	6489C84E25DDE400C11DC740F20CDF72A28B2ABD5285AEA10CDE2039BC2271ECD0272281E27EF8AF778B5580844EC6424BF37D59370A86B6B7DD2318F4AEEAD0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...M...........B.....tEXtSoftware.Adobe ImageReadyq.e<...PIDATx..W.l.U.~s...=:...t.......`............Z...D@A..A.`@LHA0jr.B..-GK.\-GK/zn.{_.;o\|S.!....%.O^&3......?...<.E.........M..A.N....u..=...x@..7g....q....'..~..c.6....hw._.9u..`...@...v..9....V..t: .h...X..b`.i :..fN.._b.]eE.39;....W...8) E\..H.2...C...4.9.J....b..`.]@......./..3h$..X5.0.........Zf..B.!.y..{..h.w.tiw...l......s.K...n0.<...W.tz.(y..5g.....\|B............(....R..I.&. .o.F...Fz...f{.=...E.....`.VqY.Q. .c...c.}Z.......n..z....f.3{i7@!.W.......T..4....s..4..@...<]c.. ..xbS.-...!..HB...f.Qy8.3..b:rO..D.....}y.../x".,.FjH../.F\ka....z..SDs..6^.S^.Q.1...,.Q.~....@.BB.H..I...AH.p....r.&.......l.Qh./y........x....I..Il.G.&....`...=....Fv.kp..B"..3...k...S.S.v.Iol...v.1.iL..\|....Z...;.l..lqF....{5#.z.du.....,.8m(Np.@).8):.N'G9.N..u.zSs.1.-"..2`..[.......$..D.T`c)...)%t.oV...;.w'..3h,...c..M.n..CEq..K..6Z.iF...4...yb~..9.v.c.....%m.[o.Ky.PH%....S...%....$.eZ..q.O..aJ..

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (410)
Category:	downloaded
Size (bytes):	6667
Entropy (8bit):	5.069716690998825
Encrypted:	false
SSDEEP:	96:8/S3/6euOX0LGupd1OeNy8y2Vp4rRk4tj9SkVyjaA9EHu6gtePEjHzZq:8RZqahr1FNy8y2Vp4lk4tYkVNA+HIu4q
MD5:	ED9CE1C9A5C3FE48B885185B42D21F1D
SHA1:	F5EAF7512E6742CA964AB87AC6CAE600B583034D
SHA-256:	546B29C0D58453484FE0EFE4E8715A16F88594CE3EC85AC598E2D1A065347DF4
SHA-512:	0A764C241F4CDB3E162F8422BE36AC4EC7267417D2402DE9A1D53F4987D5F468FB2FFC88194BAF78B00350E8734357E6C0DB6F6F91FAFB6156D9436B7EB09914
Malicious:	false
Reputation:	low
URL:	https://indwes.tfaforms.net/wForms/3.11/js/localization-en_US.js?v=8b5c9ffd0b6fc88dc72529725004f6b69b9e0ae8
Preview:	.if (typeof wFORMS.behaviors.validation.messages === 'undefined') {. wFORMS.behaviors.validation.messages = {};.};..(function () {. var key, tmp;. for (key in (tmp = {. oneRequired: "This section is required.",. isRequired: "This field is required.",. isAlpha: "The text must use alphabetic characters only (a-z, A-Z). Numbers are not allowed.",. isEmail: "This does not appear to be a valid email address.",. isInteger: "Please enter a number (without decimals).",. isFloat: "Please enter a number (e.g. 1.9).",. isAlphanum: "Please use alpha-numeric characters only [a-z 0-9].",. isDate: "This does not appear to be a valid date.",. isDateTime: "This does not appear to be a valid date/time.",. isTime: "This does not appear to be a valid time.",. isPhone: "Please enter a valid phone number.",. isCustom: "Please enter a valid value.",. isHostname: "This does not appear to be a valid hostname.",.

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (658)
Category:	downloaded
Size (bytes):	207146
Entropy (8bit):	5.269464692189229
Encrypted:	false
SSDEEP:	3072:LXyB2c+RHZHL6Qt5VE6DXNykF/hkaqQ2CV:DyB5+RJ5Jr/t
MD5:	1F8CFEFFE7C643C9F219B180612085AF
SHA1:	777046D84CE3B57FAC146218DA57AF39C924A6EB
SHA-256:	14A07D25823F4119E1F55C6EF5A0696F98861BAF113AEF76519AAD93F01A32C5
SHA-512:	2A42D1DC4FC2E7E359E3CF9B445B1DABD5CFCE0A93F4D5790A6A7AFFECF91A494D4680E99ECA653C6FDDFC87187344BE7F099157061F801BD61E40BAD7F6ED3B
Malicious:	false
Reputation:	low
URL:	https://secure2.indwes.edu/_scripts/jquery-ui-1.8.9.custom.min.js
Preview:	/!. jQuery UI 1.8.9. . Copyright 2011, AUTHORS.txt (http://jqueryui.com/about). * Dual licensed under the MIT or GPL Version 2 licenses.. * http://jquery.org/license. . http://docs.jquery.com/UI. */.(function(c,j){function k(a){return!c(a).parents().andSelf().filter(function(){return c.curCSS(this,"visibility")==="hidden"\|\|c.expr.filters.hidden(this)}).length}c.ui=c.ui\|\|{};if(!c.ui.version){c.extend(c.ui,{version:"1.8.9",keyCode:{ALT:18,BACKSPACE:8,CAPS_LOCK:20,COMMA:188,COMMAND:91,COMMAND_LEFT:91,COMMAND_RIGHT:93,CONTROL:17,DELETE:46,DOWN:40,END:35,ENTER:13,ESCAPE:27,HOME:36,INSERT:45,LEFT:37,MENU:93,NUMPAD_ADD:107,NUMPAD_DECIMAL:110,NUMPAD_DIVIDE:111,NUMPAD_ENTER:108,NUMPAD_MULTIPLY:106,.NUMPAD_SUBTRACT:109,PAGE_DOWN:34,PAGE_UP:33,PERIOD:190,RIGHT:39,SHIFT:16,SPACE:32,TAB:9,UP:38,WINDOWS:91}});c.fn.extend({_focus:c.fn.focus,focus:function(a,b){return typeof a==="number"?this.each(function(){var d=this;setTimeout(function(){c(d).focus();b&&b.call(d)},a)}):this._focus.apply(th

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:+:+
MD5:	7DBADB869DD6E6B43C22497758DA0718
SHA1:	C4B8709ED3E5BBCD8619BBD5CF10C8AA7A6619A8
SHA-256:	F4BFD04FF1EFA6CCC4F0A37DA8D3EDD76A4FFA0337DB1BA3F1D609B5A51415BA
SHA-512:	01FBACEC540A2F30A4988418D9BFE2B1491C39075DE0CA7043FCA53B3E93335F58D27B6159DECDF0893FEAD61FA9E5853288B61B5A8BDE39E30CD5220A1F1E46
Malicious:	false
Reputation:	low
Preview:	okview

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (829), with no line terminators
Category:	downloaded
Size (bytes):	829
Entropy (8bit):	5.408774784674973
Encrypted:	false
SSDEEP:	24:4Hksnq5/Jz2pRNrBZJuvu8goqc0ioNhc+y4+mI:2qz2bNrVENtmN+C+j
MD5:	0141DD26D143496D37015A22961ED99B
SHA1:	9FA088D8A51CB04233AD5822B64B03FAFA8A4738
SHA-256:	32B605C42CC5DF6A42FAFE736891C2488B841AB2189BACD4F08E0DB5D82A1B84
SHA-512:	FB99C6788C8459CD2056C0B66C240E3C6191595560360711E3DA796D3C81B1803A1F9F976E2F973192D42AD35F1B181ECD4C938EC169CE8D62CFD4B0829A2BB4
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/aframe
Preview:	<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="fSbudfdMWGRNOYL-ViLTxQ">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha / try{var clients={'sodar':'https://pagead2.googlesyndication.com/pagead/sodar?'};window.addEventListener("message",function(a){try{if(a.source===window.parent){var b=JSON.parse(a.data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("rc::a")?sessionStorage.getItem("rc::b"):"");window.document.body.appendChild(d);sessionStorage.setItem("rc::e",parseInt(sessionStorage.getItem("rc::e")\|\|0)+1);localStorage.setItem("rc::h",'1710778937056');}}}catch(b){}});window.parent.postMessage("_grecaptcha_ready", "");}catch(b){}</script></body></html>

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	88
Entropy (8bit):	4.5956132955577145
Encrypted:	false
SSDEEP:	3:70SVku/7SCf7onRyJnoSMDiuTSo7Y:5OuDS6RK7Y
MD5:	3D68B2CA83149196319D13183E64B9F2
SHA1:	F3F74FD05BA98B4931D8CE39D276A7C3FEB622A7
SHA-256:	88E79CD1207EF2D173F8C8F0A9E952D31A5EB04D713CE7490AC1F4C00C3405D3
SHA-512:	E454D1FC8ADC5D98914E393A2446DC88C01B71EA6D0609A8F5813B1FE705A0A4DB6320F75604ECCD0AD43D4A2AEA654D8BB0A6528C85FCB21022CE28E1452703
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISOglrsqzBdew8NBIFDR-uDRMSBQ15ts2DEgUNu0SfcRIFDUG1YdcSBQ1fdLy8EgUNf3sytRIFDQDDiQg=?alt=proto
Preview:	Cj8KBw0frg0TGgAKBw15ts2DGgAKBw27RJ9xGgAKBw1BtWHXGgAKBw1fdLy8GgAKBw1/ezK1GgAKBw0Aw4kIGgA=

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (14301)
Category:	downloaded
Size (bytes):	14612
Entropy (8bit):	5.420526445147015
Encrypted:	false
SSDEEP:	384:Ss9t0S/g8UoDthaNyvhCCVKTKWhKPKiX2BKIQNv+bnKlRCLJT9KpW:N7/DLDth68X22jR8T/
MD5:	A4B07E166B2E7B204F2BDA4086E78BBA
SHA1:	B1A71DD22C97D7DAB8EA6F300DCF6A536B5FCAE1
SHA-256:	8DEB4DCD9CE02AFC82CD8EE1938A02D0C40BD438FA8DA4F22A255676FBE543E9
SHA-512:	FB9BB5333604FF75AA229017C5B40AEB9752E37046F5CE7EC4F766C25DA896CEF69864CB8CD19A3D4C4B03EDB108B6F6862D4C8AE803DCB6AD79B041A99260B5
Malicious:	false
Reputation:	low
URL:	https://gum.criteo.com/syncframe?origin=publishertag&topUrl=browser-update.org
Preview:	<!DOCTYPE html>.<html>.<head>. <script type="text/javascript">. window.CONFIG_CSM_DOMAIN_NAME = "csm.va.us.criteo.net";. window.CONFIG_CSM_RATIO = 100;. window.GUM_DOMAIN = "gum.criteo.com";. </script>. <script type="text/javascript">. !function(){"use strict";var i=function(t,e){return(i=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)e.hasOwnProperty(n)&&(t[n]=e[n])})(t,e)};function t(t,e){function n(){this.constructor=t}i(t,e),t.prototype=null===e?Object.create(e):(n.prototype=e.prototype,new n)}var e=function(){return(e=Object.assign\|\|function(t){for(var e,n=1,i=arguments.length;n<i;n++)for(var o in e=arguments[n])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t}).apply(this,arguments)};function n(r,s,a,l){return new(a=a\|\|Promise)(function(t,e){function n(t){try{o(l.next(t))}catch(t){e(t)}}function i(t){try{o(l.throw(t))}catch(t){e(t)}}function o(e){e.done?t(e.value

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23523), with no line terminators
Category:	downloaded
Size (bytes):	23523
Entropy (8bit):	5.012026330401321
Encrypted:	false
SSDEEP:	384:JXkTa6GaGW7KbT+w5UR+rwx1SuYOMVuGZSXLxUSK7hOyN6nFRflFCM2KOuDrJw9:JC1SuQsGofiMvFrJw9
MD5:	311CA6022249BBA7DF100863C8BCCBA5
SHA1:	BA609E40AC2E3B062BDE256A02428675B7D46E6F
SHA-256:	CFC2428C22EE3BC362EC4423BAAD407259A89F564DCE35A3A3352C6190655651
SHA-512:	94B944ED9B4E35B21523D69F387B67735F1CB59F6B4B20F2990EAC8D59D63C88CAC7B78BDE6C9C199E637ECA18F02FAF78ED7929C6358F3B7D536EF4385EF23A
Malicious:	false
Reputation:	low
URL:	https://cdn.2trk.info/rtgstat/50version/js/slider.js
Preview:	!function(t){var e={mode:"horizontal",slideSelector:"",infiniteLoop:!0,hideControlOnEnd:!1,speed:500,easing:null,slideMargin:0,startSlide:0,randomStart:!1,captions:!1,ticker:!1,tickerHover:!1,adaptiveHeight:!1,adaptiveHeightSpeed:500,video:!1,useCSS:!0,preloadImages:"visible",responsive:!0,slideZIndex:50,wrapperClass:"mainad-wrapper",touchEnabled:!0,swipeThreshold:50,oneToOneTouch:!0,preventDefaultSwipeX:!0,preventDefaultSwipeY:!1,ariaLive:!0,ariaHidden:!0,keyboardEnabled:!1,pager:!0,pagerType:"full",pagerShortSeparator:" / ",pagerSelector:null,buildPager:null,pagerCustom:null,controls:!0,nextText:"Next",prevText:"Prev",nextSelector:null,prevSelector:null,autoControls:!1,startText:"Start",stopText:"Stop",autoControlsCombine:!1,autoControlsSelector:null,auto:!1,pause:4e3,autoStart:!0,autoDirection:"next",stopAutoOnClick:!1,autoHover:!1,autoDelay:0,autoSlideForOnePage:!1,minSlides:1,maxSlides:1,moveSlides:0,slideWidth:0,shrinkItems:!1,onSliderLoad:function(){return!0},onSlideBefore:funct

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6951
Entropy (8bit):	4.7983161646914905
Encrypted:	false
SSDEEP:	192:hRQ4fS5bzRyIy++mcS3n2s96/LEpeXHFykgxe:Alx3pSFh
MD5:	30B593B71D7672658F89BFEA0AB360C9
SHA1:	D6963DB6FAA9294387BB3175813A61BC3F859437
SHA-256:	45D1F5F6CF913746C45DD697B1A8F3B719C02D8B3F678DC7FC2766D54E1AAF6E
SHA-512:	58440DBFD777FACAB21E3AEA519A1B0E11404590E4A36C2959D7DCA6FE3896CCA9B12B8C3B490719DDCC43CAEBB019FF41ADFD5688E985D53A08C92925498357
Malicious:	false
Reputation:	low
URL:	http://iwu.marketing/css/magnific-popup.css
Preview:	/* Magnific Popup CSS */..mfp-bg {. top: 0;. left: 0;. width: 100%;. height: 100%;. z-index: 1042;. overflow: hidden;. position: fixed;. background: #0b0b0b;. opacity: 0.8; }...mfp-wrap {. top: 0;. left: 0;. width: 100%;. height: 100%;. z-index: 1043;. position: fixed;. outline: none !important;. -webkit-backface-visibility: hidden; }...mfp-container {. text-align: center;. position: absolute;. width: 100%;. height: 100%;. left: 0;. top: 0;. padding: 0 8px;. box-sizing: border-box; }...mfp-container:before {. content: '';. display: inline-block;. height: 100%;. vertical-align: middle; }...mfp-align-top .mfp-container:before {. display: none; }...mfp-content {. position: relative;. display: inline-block;. vertical-align: middle;. margin: 0 auto;. text-align: left;. z-index: 1045; }...mfp-inline-holder .mfp-content,..mfp-ajax-holder .mfp-content {. width: 100%;. cursor: auto; }...mfp-ajax-cur {. cursor: progress; }...mfp-zoom-out-cur, .mfp-zoom-out-

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 248 x 52, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5875
Entropy (8bit):	7.954846255234901
Encrypted:	false
SSDEEP:	96:9A5ROHyrOA6H619tB418TmwfN0I3wv+9phdJR84h2wDRO61IUeMx8tuy:9A5ROdA6a19L4SKojhpnJm4hNDRO6Lz+
MD5:	4DFBC33983F38FF31B7AEA7EF3DE9831
SHA1:	65726959859519B4A8965EE807F9182734B762D5
SHA-256:	F7B6E85729B62123B8CA1E685C957486326CA952E8EF3AC6F14D28AC82A75C29
SHA-512:	D971E02537C2C1998B450DA5DC7A9153F37352AB01D90A7E17E1BC2D88481215316DF242DD21858523117047CBC0CDE0CA1463BB1D0FD24738481A46EFF31067
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......4......%......PLTE...........................<<<:::.........999>>>EEE.........@@@.........444......qqq777.....BBB....???......hhhfffDDDkkkYYYCCCAAA222...lllOOO888........]]]........pppIII000........vvvQQQGGG666......}}}yyytttSSSMML......UUU.............{{{WWWHHH..........nnnbbb...........sssooo................___NNN....................uuu........```...................xxxddd......KKK..............aaa.....................)))..............................ts.TL.QH.NA.R@.K?.M<.R4.K4..........................\|.XR.ZP.RB..............................................\|.y{.l.OO.ZG?8A.Y?.R6.E5.M..@.....................................\|{.\|o.xh.eU.cQ.ON.BA.R=$$$.Z ........................................x.sf[ha.c`.gL.B>OE<@39<B6.K112.6).K(.{U.....IDATh...?k.A.....f..'9.. !..E...AD."..... ..w`.A$Z.H.F..]...........&.{0..>.4...,;..p.L-!..fFs$P..C.9.\X....R:x]m...Qb\!...u........&}n.v....k..Nc.......{.$..gA.D&@......n).,...J2. 9

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	133
Entropy (8bit):	4.6958883925642665
Encrypted:	false
SSDEEP:	3:yLRwBWTe1RACC87KaLRp1QLsaNR1XzWeddTSFNmLRpywv:yLzCRo6lpaZzDW+TEclpdv
MD5:	239A1B15CB6DD4F2D54BCE30A8EDAC83
SHA1:	8803CFDC2A8504734534E029FB42D14542D7726B
SHA-256:	7B0F0CF1437E94DA0A6BB82E8CF96F237E23FC304F4A365EDF936B554FB5CEDD
SHA-512:	63BD0B875624131D7006D6AF12657D88F07B9856EB5F7494ECBFC01A85B580DF7D2162F0B9A04F7D224C0EE9D7BBFA9E8134752B5A3119B800DF55580E3B9CDB
Malicious:	false
Reputation:	low
URL:	https://indwes.tfaforms.net/js/FA__DOMContentLoadedEventDispatcher.js
Preview:	document.addEventListener('DOMContentLoaded', function () {. document.dispatchEvent(new CustomEvent('FA__DOMContentLoaded'));.});.

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9197), with CRLF line terminators
Category:	downloaded
Size (bytes):	9348
Entropy (8bit):	5.4343007565312025
Encrypted:	false
SSDEEP:	192:ZQq0JO3fJ6qQBJ835S5+GE+aB1GHT1tDQdt0f7001U/VXeQjglAr:ZQcQqIC5S5+Z+M1GHgdtW7R1ue3lAr
MD5:	1A63394653608C743A7F66F960206E2A
SHA1:	76A73D5436EB3A33D2E7370580CA2906C8F40282
SHA-256:	DB4F2B9FC29875847E047AC95C45F345F09989F7B5D82B733051DF20C1C27F36
SHA-512:	0E4F45300D9E3C2D41D01DC2425A7089C2B8F0EF06B4C6BD2D87FD224B022E6FAFC890B8078123B1D6B72963CF46354E57F1F1BA8AF631D21B17C19FFEB390D9
Malicious:	false
Reputation:	low
URL:	https://browser-update.org/update.min.js
Preview:	//(c)2021, MIT Style License <browser-update.org/LICENSE.txt>..//it is recommended to directly link to this file because we update the detection code.."use strict";var $bu_=new function(){var s=this;this.version="3.3.51";this.vsakt={c:"122",f:"123",s:"17.3.1",e:"122",i:"12",ios:"15.6",samsung:"23",o:"105",e_a:"120",o_a:"79",y:"22.11.0",v:"6.4",uc:"13.5.8"};this.vsinsecure_below={c:"119",f:"115",s:"11.1.1",e:"119",i:11,ios:"12.3",samsung:12.0,o:62,o_a:78,y:"20",v:"6.0",uc:"13.4"};this.vsdefault={c:-3,f:-3,s:-2,e:17,i:11,ios:10,samsung:9.9,o:-3,o_a:-3,y:20.4,v:2.6,uc:13.0,a:535};this.names={c:"Chrome",f:'Firefox',s:'Safari',e:"Edge",i:'Internet Explorer',ios:"iOS",samsung:"Samsung Internet",o:'Opera',o_a:'Opera',e_a:"Edge",y:"Yandex Browser",v:"Vivaldi",uc:"UC Browser",a:"Android Browser",x:"Other",silk:"Silk"};this.get_browser=function(ua){var n,ua=(ua\|\|navigator.userAgent).replace("_","."),r={n:"x",v:0,t:"other browser",age_years:undefined,no_device_update:false,available:s.vsakt};func

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35/gdpr=0/gdpr_consent=
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	587
Entropy (8bit):	7.353364888547681
Encrypted:	false
SSDEEP:	12:6v/7s6uxrvtrBQIunXuycw8toGufjibQLTlkULUjGwLDXuhBuBGxz:hZpYIGubwPtfe0tkRjGwLTuhBeGh
MD5:	E2777B6F454A35516C560607F5C98DB6
SHA1:	A27ED3357F2EB51153820F12CF4C6253944D587F
SHA-256:	785A18AEF2086A8EBE4DF2B351D4656C03E110F3FEBF4220424049716B085BA1
SHA-512:	40C8FC8E030DAA91CAFC5C3B0B0BA9117AB8C1D11C7C93338028456EF8ABBDD8ECB02B7CE79D8C87E6E6C1A9F0A966D7F98A344848E9E4EB6C4EAC53A426C80B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....D.......gAMA......a.....PLTE....)g......ZZZUUU.....J..H..M............Qaaa{{{iii.....p.......ppp......G.....Y.a..5o.V..G\|.............^.........................F.........8a....ZIDAT8...r.0.E...f......B........d...Cgz...{$Y.......r...s..H.$.4.B...B).......B..@..k.%.b...B6T.J..iZ.,.>ji..#U..d.u.L..K..1..H%..r....;.;.zDf.X...Q..l.w....8.\C.fD..]...d.A.1v8.pp.......Vc.W..L.d7.........6...A^..`.8G<:....&.u..T.Y...n.OV.....H.`.....t8..r.lK.&.*.Yf..(`b....AN..@..q.A....}r..m.@...rw..\]...A#.A..dm..o.^.P..q..J..b....IEND.B`.

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 336x336, components 3
Category:	downloaded
Size (bytes):	11456
Entropy (8bit):	7.795377119677486
Encrypted:	false
SSDEEP:	192:mqzVf+T4qh7Rrrbfj3DYfgPlC0dK6MAWV0x0q52tYV9IVjHI9UHLzQPq+:lzw4qh9fbr3DYAXw+Wq0q5IgI69iPmq+
MD5:	EAF37E3DA1DDDA65356DC6B89748C668
SHA1:	5E5D443077265C2B4CE7332D6C2DEE5FC4397773
SHA-256:	F67573ED34266DAEA2D1A67002D785D30CF4CFEFCDE9335E0E74F15819C528C1
SHA-512:	2D4DB40263E97F44FB66BB005C494888AAA086C022EF7627DB1498AF52FFEA0FB94E4FCD806B7934748B49A2B6CD65EAE53FABC32197349FF4FD6646E4342054
Malicious:	false
Reputation:	low
URL:	https://rtgcdn.2trk.info/imageresize?url=width=336::height=336::imgurl=https%253A%252F%252Fcdn.shopify.com%252Fs%252Ffiles%252F1%252F1996%252F9707%252Ffiles%252Fecoflow-us-ecoflow-blade-robotic-lawn-mower-blade-robotic-lawn-mower-30305163903049.png%253Fv%253D1682662842::campaignId=64180
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......P.P.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(..

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16202
Entropy (8bit):	6.018789075073316
Encrypted:	false
SSDEEP:	384:+r2tksOFr/9zmDR8OlPu23zCTySDYSgBNFI7Y:c2qstDR8FhTbUzZ7
MD5:	1BE536B5B9A548DF8A26209E4CB370EB
SHA1:	653C10ABEFECCC8B73E0C14FF31478B5697D0BBD
SHA-256:	C37CC54344BC43BB9972188CCBE2DDAA9738F93321C3A09F26419B4E0B7F2702
SHA-512:	4264D847B3EE37035DBD81C33983ED11B12D2E79CB8410016F4F44E43B0AD64385709089B8AECC3DD7EAEEF803E1E301F566DA1392A7DA292CA594B2695A04B5
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=m202403140101&st=env
Preview:	{"sodar_query_id":"PWr4ZdjMA5Cni9YPtZ6G-As","injector_basename":"sodar2","bg_hash_basename":"J7jMHEcdr0lVSatsUU1en4le0CiJfA3--2xrJ7e0v4U","bg_binary":"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

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	71825
Entropy (8bit):	5.566710757009572
Encrypted:	false
SSDEEP:	1536:I6YJGGg62Ol3cGwPDVpNlGomQjd7zsIf2vakUxmD+nqu/XVU:vnGyV1Lz9mCdi
MD5:	349CEC5CA41BBEC51A724D9C00DBFAF1
SHA1:	DAD4FC106B6E34A120756091A791BBCD74CFEBD5
SHA-256:	8119B7BE6C01DFDFE82F5A34CDC996D650BFC7636B76ED776F102C01E7A187CB
SHA-512:	7CE80109C530C8BA66D0AED1B8C7928495B4547508931966EF71DEDB1A7BE4B0E44C7D340944FB147F5730D10C2F99064F78AE0C73CEDD9C7700F533A6362146
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1702785379071819&correlator=202337239561750&eid=31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403140101&ptt=17&impl=fifs&iu_parts=71161633%3A1007669%2CBROWUPD_browserupdate%2Cweb_interstitial&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=1x1&ifi=1&sfv=1-0-40&ists=1&fas=8&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1710778926434&lmt=1710778926&adxs=-9&adys=-9&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=-1&ucis=1&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&vis=1&psz=0x-1&msz=0x-1&fws=2&ohw=0&ga_vid=1126053991.1710778926&ga_sid=1710778926&ga_hid=1902104362&ga_fc=false&td=1&topics=9&tps=9&htps=10&a3p=EhwKDWNyd2RjbnRybC5uZXQYhIn7kuUxSABSAghk&nt=1&psd=WzE1LFsyLFtbIi83MTE2MTYzMywxMDA3NjY5L0JST1dVUERfYnJvd3NlcnVwZGF0ZS93ZWJfaW50ZXJzdGl0aWFsIixbXV1dXSxudWxsLDNd&dlt=1710778923330&idt=2820&prev_scp=in2w_key20%3D1x09%2C1x0r%2C1x0x%26in2w_key15%3Du0&cust_params=in2w_key15%3Du0%26intowow_optimized%3Dfalse%26fuse_site%3Dbrowser-update.org%26fuse_path%3D%252Fupdate-browser.html%26fuse_query%3D%26fuse_category%3D%26fuse_industry_2%3DIAB19%26testmode%3Dfalse%26inskin_yes%3Dtrue%26fuse_uuid%3De77f8bfe-60b6-5c8b-a657-64bfafdad065%26fuse_publication_id%3D5%26fuse_flavour%3Ddefault%26GPT_READY_MS%3D4000-4999%26PREBID_READY_MS%3D3000-3499%26UAM_READY_MS%3D3500-3999%26CMP_DETERMINED_MS%3Ddisabled%26CMP_GDPR_CACHED%3Dfalse%26FUSE_LOADED_MS%3D2000-2499%26FIRST_ZONE_MS%3D3500-3999%26HB_AUCTION_START_MS%3D3500-3999%26CMP_JURISDICTION%3Dunknown%26CMP_ALLOW_PERSONAL%3Dtrue%26fuse_exp_0%3Dfalse%26fuse_exp_2%3Dtrue%26fuse_exp_3%3Dtrue%26fuse_exp_4%3Dtrue%26fuse_exp_5%3Dtrue%26fuse_exp_6%3Dtrue%26fuse_exp_7%3Dtrue%26fuse_exp_8%3Dtrue%26fuse_exp_9%3Dfalse%26fuse_exp_10%3Dfalse%26chrome_label%3Dstandard&adks=2017541439&frm=20
Preview:	{"/71161633/BROWUPD_browserupdate/web_interstitial":["html",1,null,null,1,907,1263,0,0,null,null,1,1,[["ID=5a9f359be0303d9a:T=1710778927:RT=1710778927:S=ALNI_Ma9yaCuGv-ZYWhwWv3gI5bdi8k99g",1744474927,"/","browser-update.org",1],["UID=00000a13783a1269:T=1710778927:RT=1710778927:S=ALNI_MbSGCweUkaD9Yy6qZXDj1Dag705jQ",1744474927,"/","browser-update.org",2]],[138455875322],[6421268774],[5368063343],[3273656843],[486307],null,null,null,null,null,null,1,null,null,null,null,null,null,"AOrYGsllk8n3toZecWNRgQ2zsHNIveEyhrXLvH3LnEaJZpZcJZdHH0L6-cYZwwRIk44kkC-8RWP8KE4PRKtJWWtLLjU2ayVPu53lsaooIQumjA","CLXfppKc_oQDFbKvgwgdO1wIKA",null,null,null,null,null,null,null,null,null,null,null,null,null,[null,null,null,null,"ca-pub-5884294479391638",8,null,null,null,null,1263,907,[["i-fvs","true"],["stop_word","ad choices;adchoices;advertise;cart;checkout;conditions;contact;copyright;desktop;disclaimer;faq;help;log in;log off;log on;log out;login;logoff;logon;logout;member;menu;policy;privacy;register;registra

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent=
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5266
Entropy (8bit):	7.938123734383485
Encrypted:	false
SSDEEP:	96:b/Gy+1jFLQKd97xI8gQpyeF3v0LxQjrOCEwm/yz01TwHdt3uYJM:bONRQKd91hgiyY3cTCEwTz04IYJM
MD5:	4BD4CBD809C772307C7D5180F5B8D333
SHA1:	B93DBFD9FC6AE921090265A09167BDF1F42A32F8
SHA-256:	6D494DA8CE6F6B9B5D5A3716CCFA1339262E33DA13319E97D71DCBB9A998E00A
SHA-512:	8DE8F79DD354BA8F32B273AAF27C83D79490B40454457A0D4C4B2E577FDAB7AA4B2EA614CB2A316E16AC6115BB5E2319FF1B5BDDBA4CD56B5C179346A97BE5D0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...n...n......[&....YIDATx...yxTU...7kU..T.TV. .!la.P...@.Ag.y.......{..u......q.iP.A....Ve...".e1H.A..o.5...;.X.U.....sI...{.9wI.....>...0.^......0...P.v.N....Ka2...C...N.F;#..n.........'-..).0.............`\|..;].Ew.j.B5.".... \.+k"\|....b.e0.t..}/.>... Rc. ....q(m.1<..R.k...,h.s....h.@.....2.tcN.....X.vw............M..r8..l.P..P.@.\.uK..26.~(2.;.l.f..o4.l.C". .N.......p..pT..,^_e.#.C.->..2.....O1.?.M..jb%uv\.d..M..R...l...1..$r...o...S..m.~..9..t...([..WY.....5Nr.........]...b.Nc.u...,.l_.l...G..p. .....~.....&.....O...b...w,...#.U.Y.Sj.T...6..V.G........!...'b1V.&.g..(>T........Z.........\|&...[9.t....s..&o.A.+.....R...W...O.(.......I ....o..P.+B..d...y.@%\Y+......sX....x&..m.>.`.w....... l...a.)~......,.S9...3Y.@ju.:.y9.r.UV..k...m..O,....B.........S._.....N*..a......=..).,.....i.!&HL..]0...<_.;.Kar.N.G....oO..p..P.1V.N..pF.......~F..p.rVY...>..s....0.3......).d<7_.o...R.z.y...z}.^./E!!...\s...r.........I..M..yuh....w.0D.j..`

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	34
Entropy (8bit):	3.5251270918749356
Encrypted:	false
SSDEEP:	3:n9m6QiFL4:nVm
MD5:	B205296F7C49C67BAF5B78E8163061A7
SHA1:	828DED5C881601F44CE02CCB9E8B98D214B5E9AA
SHA-256:	281A6CECFF9B473286243BDC58329C1D8141B979E8985EA968D7D975F3A50E05
SHA-512:	ABBB243E84448F153F337C61919C36F68F2503F14F7301A903ED76B5A321C60C09C5E5D1174E77EBE3199A1F7A900A0668555B729F008547DD26A00937FF7B5B
Malicious:	false
Reputation:	low
Preview:	partner parameter must not be null

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	787
Entropy (8bit):	7.535224668131678
Encrypted:	false
SSDEEP:	24:YgktmKBgMJliZv7AmrYq1Yv6Bv9aRdgcafK:Yge5lgv7AFqm81qdgcafK
MD5:	43F0AB4CBCC999CF3D3BD81BB05FE952
SHA1:	8B0F5C1805305E826C8457935C6BE08C22C46A85
SHA-256:	5F979BB91EAF11B4A8F292CF49BAB2250EB755CFF8F6A10169977DB44ACABD3E
SHA-512:	1F164474D779239ECDAE5A39CDF1D13AD93CD1B2920600FF4364E2A429DED442702B84E03449D08ED9740564125DFB56FFE8FE59D77E29BE2ED951EC74C7DAD5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S....PLTE...E.J....hW.gW7.@.aQ..7.F9.A.^P.^P.........z.4B.EF.F. ..G@.DI.G......RG....#."...QG.gV=.B.'F8.AL.H9.A.[N.U>7.A...dT.cS.QG.......\O.G@.D<.B>..B.D?.D:.A.G@...T..Dq..N..]....s.]O3.NG.F-.-,.+.w$.v#...%...................X...........v.......R..G..?.......e..\|..V..R..6~.'q......g...........q...}..w.hb,.O..N..L(.I..G.PGD.E6.D{.A:.?..>.8>a.:..7.=7.;7.)4.!2.'0,...4...,..(.%. ..cu...........................v....)j. ...*tRNS.....d#...................zzsnlkgeXSJ....c.......IDAT..c..M6.ff.9..(P....[.6._V..$@\|..SS.ZW.j= P``.`,..h....uvrvRgP.,..........pw.d.e.k..........fb...kN..177.I...2...7.E&...&..x.D....}-..,.r.Z......-,".<....8.....m..m.t.......M.B5.e=..f.2 ......g....A<..iR.....(....0?...;...H/4.........IEND.B`.

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	74964
Entropy (8bit):	5.626510359529987
Encrypted:	false
SSDEEP:	1536:ZBJGGg62Ol3cGwPDVpNlGom0puZSNS7GjlksIf2vakU+mD+JSsu/XV5:QnGyV1DpukI70mamC07b
MD5:	70FEC0495D4F858EB3BECD265E4EE381
SHA1:	4CBBF7DC68E17C78635C3BB29BE96AE26B5B61E1
SHA-256:	BDB22AD3E326E69985A537B54398CBB8286CBF0C5025314AFF479EC06014F8E4
SHA-512:	3DE1C2589A93AF4C61E01837110E676EC3735D26E423417C0BB0724C8AF75C92CD542B1D20CC323A6F2025828217016F41B76BBF826ADB9A74D17CC6BD285EFC
Malicious:	false
Reputation:	low
Preview:	{"/71161633/BROWUPD_browserupdate/web_interstitial":["html",1,null,null,1,907,1263,0,0,null,null,1,1,[["ID=93be3f0e1a6ee495:T=1710778929:RT=1710778929:S=ALNI_MaGweKP94IA5MZJNpMskHuGvKHdVw",1744474929,"/","browser-update.org",1],["UID=00000dd3816ab126:T=1710778929:RT=1710778929:S=ALNI_MYOipLQe4irkqR5j6kjn7OdRUtvPw",1744474929,"/","browser-update.org",2]],[138455875322],[6421268774],[5368063343],[3273656843],[486307],null,null,null,null,null,null,1,null,null,null,null,null,null,"AOrYGsl-gk97A1y6EILIjLxm4x0kvb6EhD1Nax7ycDo59V6vJ6DjQez0UPA9-sOKg1bfnTy4fGRKOrkUAml1eVKzYLRyN1qRkM5If7GHU7BbTg","CLLci5Oc_oQDFbPH4wcdTDQEiw",null,null,null,null,null,null,null,null,null,null,null,null,null,[null,null,null,null,"ca-pub-5884294479391638",8,null,null,null,null,1263,907,[["i-fvs","true"],["stop_word","ad choices;adchoices;advertise;cart;checkout;conditions;contact;copyright;desktop;disclaimer;faq;help;log in;log off;log on;log out;login;logoff;logon;logout;member;menu;policy;privacy;register;registra

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6482), with no line terminators
Category:	downloaded
Size (bytes):	6482
Entropy (8bit):	5.386219794662181
Encrypted:	false
SSDEEP:	192:UaveH+XTFLLgXxQRCJS3ZE1m1j/YMvKTP+pmY2/:UdqTFPKt16EMiY2/
MD5:	A4D296427FC806B21335359E398C025C
SHA1:	46928CCD1407B4E55192BB9D0A07DCFEBD9687B7
SHA-256:	06B99248A163333E36980A6CFB756F1A7DE60FA49517162B87B1A44D5D48F844
SHA-512:	4C0326040E2C7837FA78185CC5A185EA43697DD4F3591757F84BDA76BAC746BADFBE047DAC2C1DC677561FD6CC6C5D5B4BEBB7D671CB82AB04E070DA766FE6AF
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
Preview:	var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"adViewability":[{"error": {"m": "'+amzn_aps_csm.errors[b]+'"}}], "c": "aps_communicator", "api": "RTB", "error": 1}',"https:"===document.location.protocol&&/^http:\/\//.test(a)===!0&&(a=a.replace("http://","https://")),(new Image).src=a+c+"?cb="+Math.round(1e7*Math.random());amzn_aps_csm.errors=[]},function(a){function b(a){return a?a.replace(/^\s+\|\s+$/g,""):a}function c(a){if(a&&a.s){var b,c=a.s.length>0?a.s[0]:"",d=a.s.length>1?a.s[1]:"";c&&(b=c.match(j)),b&&3===b.length\|\|!d\|\|(b=d.match(i)),b&&3===b.length&&(a.f=b[1],a.l=b[2])}}function d(a,d){if(d=d\|\|{},!a)return{};a.m&&a.m.message&&(a=a.m);var i,j,k,l,m,n={m:e(a,d),c:a.c?""+a.c:a.c,s:[],l:a.l\|\|a.line\|\|a.lineno\|\|a.lineNumber,name:a.name,type:a.type},o=0,p=0;if(i=a.stack\|\|(a.err?a.err

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 8 bits/pixel, 32x32, 8 bits/pixel
Category:	dropped
Size (bytes):	7406
Entropy (8bit):	3.459195366273547
Encrypted:	false
SSDEEP:	48:yGmUgbpbxPiRG8mLi1npr3ZfMOqPAGuRr9QIKy4kHLjYNDF6ZE72k:yGmUgbVxioOpr4JWi1sLjYNDFj6k
MD5:	3680D736210531165A16C206FEA15866
SHA1:	23C51FBEC98BC0F5C344559317665CD013DF40B5
SHA-256:	854210B41571DABCDC27D57D2FD7779D8DA2774CE1A20C10EA9AA35BB9079EF1
SHA-512:	EB662E2AB7D6A513EA2891560C11A1ED16BCC8BFED14BEA66815DD7046326E91D257472D679A11733D6F71CE33289AE9E920972968CA52E7A0D472C2B19F4B33
Malicious:	false
Reputation:	low
Preview:	......00..........6... ......................h.......(...0...`....................................\..k0..............zzz.............U...d&..H...............J...........eee........._...~K..........^^^.s;......ppp......w.........YYY.....................f......K...VVV...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://pmp.mxptint.net/sn.ashx?ak=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32003)
Category:	downloaded
Size (bytes):	36868
Entropy (8bit):	5.176279342143451
Encrypted:	false
SSDEEP:	768:4UfYD27UwlNHMl9lqNuCPNjhqg8epm5CCJFXflA8Gf3ZTbQ:z/76whqKGvlm3ZXQ
MD5:	C5B5B2FA19BD66FF23211D9F844E0131
SHA1:	791AA054A026BDDC0DE92BAD6CF7A1C6E73713D5
SHA-256:	2979F9A6E32FC42C3E7406339EE9FE76B31D1B52059776A02B4A7FA6A4FD280A
SHA-512:	D9EF2AAB411371F5912381C9073422037528C8593AB5B3721BEA926880592F25BD5DFDEC5991CDFE5C5EF5F4E1D54E390E93DFD3BCA3F782AC5071D67B8624D4
Malicious:	false
Reputation:	low
URL:	http://iwu.marketing/js/bootstrap.min.js
Preview:	/!. Bootstrap v3.3.6 (http://getbootstrap.com). * Copyright 2011-2015 Twitter, Inc.. * Licensed under the MIT license. */.if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){"use strict";var b=a.fn.jquery.split(" ")[0].split(".");if(b[0]<2&&b[1]<9\|\|1==b[0]&&9==b[1]&&b[2]<1\|\|b[0]>2)throw new Error("Bootstrap's JavaScript requires jQuery version 1.9.1 or higher, but lower than version 3")}(jQuery),+function(a){"use strict";function b(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var c in b)if(void 0!==a.style[c])return{end:b[c]};return!1}a.fn.emulateTransitionEnd=function(b){var c=!1,d=this;a(this).one("bsTransitionEnd",function(){c=!0});var e=function(){c\|\|a(d).trigger(a.support.transition.end)};return setTimeout(e,b),this},a(function(){a.support.transition=b(),a.support.transition&&(a.event.

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Macintosh, datetime=2010:12:02 13:23:51], baseline, precision 8, 960x123, components 3
Category:	dropped
Size (bytes):	160795
Entropy (8bit):	7.929977169099737
Encrypted:	false
SSDEEP:	3072:/kE1PZDat+10raivWqVMzv93/i9adqlDVU/lq:/kiRv10+6WqVMzvccdoVU/k
MD5:	62BA40333F91BAFEC828693941537F5A
SHA1:	7D5F62C3453A79F7E1E7118205ADC057D9C75029
SHA-256:	A4BC14AD3DCE069F66D77ED13026FCEF79C131AF0A7BE6C9FCBECF24FADD0277
SHA-512:	20EAC461869A8DA2F3597F8B7D475957B4AF6F98F90ED1A7E5B9C339DE5F9FF63D9F45CE2CFE6C5CCF0F52893D47327EBED7AC46C2F41A426A7C8DEF8E2D7C0D
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H......Exif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS4 Macintosh.2010:12:02 13:23:51......................................{...........................................&.(.........................................H.......H..........JFIF.....H.H......Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.\|.:}-...E....\.`.k..?.c....k....._m.k76.{..0\.......O.Z.o.#5...^.+s.Ac@.....C....C.......5.OU../.P....3.o..O1....Y.}

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 293 x 74, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	6678
Entropy (8bit):	7.900158196878789
Encrypted:	false
SSDEEP:	96:k2i6GMjpzc60jpzdhk8uubom7/aHE0/NCwYE9GCUoWZgcH8XQcGR0L:k6QxV2u/aHE01Cy2olG4WO
MD5:	80F0222C7250CC52B9812A9B29DFDA34
SHA1:	880E754313F9348F18B07A0E98592CB0712F7BCE
SHA-256:	725EC649CF9D4C2C8379F101B3DEC55E8321E3F489CE534F93B382BB4382B4CA
SHA-512:	DAAC06CAD6DEADC3AA4B9752BCB918AAC3D6B76A2328ABEF2C395D4C6658800510589FB13DFD93108274178DEC51093C73445D69D4B0513DF9F745C3072FFC72
Malicious:	false
Reputation:	low
URL:	https://cdn.2trk.info/rtgbannerimage/2023-11-10-042550749ecoflow.png
Preview:	.PNG........IHDR...%...J.....r.......tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:45 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 24.6 (Windows)" xmpMM:InstanceID="xmp.iid:2F89E8687EC111EE9857E3A98FCC4DB0" xmpMM:DocumentID="xmp.did:2F89E8697EC111EE9857E3A98FCC4DB0"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2F89E8667EC111EE9857E3A98FCC4DB0" stRef:documentID="xmp.did:2F89E8677EC111EE9857E3A98FCC4DB0"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>dp......IDATx..il...g..6..W..7...0e.`..J!MBr.)Q..(../..M#>.Ro.$7Ro..6R....(..C......l.}....x.bl.=s....2......=

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9197), with CRLF line terminators
Category:	downloaded
Size (bytes):	9348
Entropy (8bit):	5.4343007565312025
Encrypted:	false
SSDEEP:	192:ZQq0JO3fJ6qQBJ835S5+GE+aB1GHT1tDQdt0f7001U/VXeQjglAr:ZQcQqIC5S5+Z+M1GHgdtW7R1ue3lAr
MD5:	1A63394653608C743A7F66F960206E2A
SHA1:	76A73D5436EB3A33D2E7370580CA2906C8F40282
SHA-256:	DB4F2B9FC29875847E047AC95C45F345F09989F7B5D82B733051DF20C1C27F36
SHA-512:	0E4F45300D9E3C2D41D01DC2425A7089C2B8F0EF06B4C6BD2D87FD224B022E6FAFC890B8078123B1D6B72963CF46354E57F1F1BA8AF631D21B17C19FFEB390D9
Malicious:	false
Reputation:	low
URL:	https://browser-update.org/update.min.js
Preview:	//(c)2021, MIT Style License <browser-update.org/LICENSE.txt>..//it is recommended to directly link to this file because we update the detection code.."use strict";var $bu_=new function(){var s=this;this.version="3.3.51";this.vsakt={c:"122",f:"123",s:"17.3.1",e:"122",i:"12",ios:"15.6",samsung:"23",o:"105",e_a:"120",o_a:"79",y:"22.11.0",v:"6.4",uc:"13.5.8"};this.vsinsecure_below={c:"119",f:"115",s:"11.1.1",e:"119",i:11,ios:"12.3",samsung:12.0,o:62,o_a:78,y:"20",v:"6.0",uc:"13.4"};this.vsdefault={c:-3,f:-3,s:-2,e:17,i:11,ios:10,samsung:9.9,o:-3,o_a:-3,y:20.4,v:2.6,uc:13.0,a:535};this.names={c:"Chrome",f:'Firefox',s:'Safari',e:"Edge",i:'Internet Explorer',ios:"iOS",samsung:"Samsung Internet",o:'Opera',o_a:'Opera',e_a:"Edge",y:"Yandex Browser",v:"Vivaldi",uc:"UC Browser",a:"Android Browser",x:"Other",silk:"Silk"};this.get_browser=function(ua){var n,ua=(ua\|\|navigator.userAgent).replace("_","."),r={n:"x",v:0,t:"other browser",age_years:undefined,no_device_update:false,available:s.vsakt};func

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 16 colors, 32x32, 16 colors
Category:	downloaded
Size (bytes):	1078
Entropy (8bit):	1.240940859118772
Encrypted:	false
SSDEEP:	3:etFEh9HYflvlNl/AXll1pe/WNN00000000000000000000000000000000000001:QNtY6+lKY6
MD5:	4123CE1E1732F202F60292941FF1487D
SHA1:	9F12B11BDE582DAE37CE8C160537D919C561C464
SHA-256:	D961B08E4321250926DE6F79087594975FE20AD1518DE8F91EB711AF5D1A6EF8
SHA-512:	11B24C2E622C408E4774FAE120B719A21A0B2ACFA53230126C35AD6CA57D33D4DE79CBE11D296CFBDE9613CAA03D66B721BD20CF4EE030CF75F5A1FD8A286DA9
Malicious:	false
Reputation:	low
URL:	https://ad.doubleclick.net/favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250
Preview:	..............(...&... ..........N...(....... ...............................................................................................................................................................................................................................................................................................(... ...@.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	30334
Entropy (8bit):	5.405536255443099
Encrypted:	false
SSDEEP:	384:UJXE05IsF53BGAS1StSZSGotLr33LBEJPORgFfwKYlf29u9z5:Q35Isug4sGa3OmL20
MD5:	2DCEB08E80AF1C7716B7F95E6907B07E
SHA1:	BF73062E8279801D7B0633771CC0BEEADB4FF23D
SHA-256:	55431CA9A362ED0CC015CD9A19FE0B555B07B7AE90F8B218411B03642F251C40
SHA-512:	B1D84061CC1EFB7A6D71BC33401A5B55025065600AAC2F90B71B24A84EF6C72F5AAFA892FA49618A637D1E5B9407BDC188B73E7B54258033B068FF89A2EE42B8
Malicious:	false
Reputation:	low
URL:	http://iwu.marketing/img/iwu.marketing-logo.png
Preview:	.PNG........IHDR.......<.......H.....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=adkernel&google_hm=QTY5MDg5MzAxMDY3MTI1OTg5NjE&google_push=AXcoOmRHIuYnNYmsy0Z_gNPsNzwlvDtMNyUw7iNTqgOpZI5LrFyBaLnedgfLvobEkvt8An6sNNdFJGFu75PygYHMm5nDFaD-2Ng
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	199
Entropy (8bit):	4.965965753516
Encrypted:	false
SSDEEP:	6:8WiIUemo/H1fCYKbY4De1kqAV3IaiSO73s6t5oeX:8DIGoNfCYKbgXG4pBLspeX
MD5:	F423194388CFE13A3E49129A828EEE00
SHA1:	A49D38626CD7481F51F4D6EE7359CBD758AB38BE
SHA-256:	516985516A0E69346B8FC2CEC6D7F2B2DC0F5039A6A3BDF7DF2A4F0D62C926E8
SHA-512:	12060503A66CBCB34F1946018DED04DA4A202EF1C6A1291BCDE197DBAEC9487A067B892834B15187D9C56CED7F2874D7DA979831843DFBC627D93B96808FC1ED
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&pid=dELdySLbcyIwE&cb=0&ws=1280x907&v=24.305.1002&t=2000&slots=%5B%7B%22sd%22%3A%22fuse-slot-22728807289-1%22%2C%22s%22%3A%5B%22300x250%22%2C%22336x280%22%5D%2C%22sn%22%3A%22%2F71161633%2C1007669%2FBROWUPD_browserupdate%2Fupdate_vrec_1%22%7D%2C%7B%22sd%22%3A%22fuse-slot-22728806944-1%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%5D%2C%22sn%22%3A%22%2F71161633%2C1007669%2FBROWUPD_browserupdate%2Fsticky_footer%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22mobile%22%3A0%2C%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1!publift.com%2C01FY417JCJKFQDQNA30FCX4RZF%2C1%2C%2C%2C&sm=f401e106-9815-45f3-82fa-11a4f7f4db10&pubid=8b48e249-e9e6-4a52-8b48-396ea93403e8&gdprl=%7B%22status%22%3A%22no-cmp%22%2C%22cmpTimeout%22%3A0%7D
Preview:	apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-mediagrid_n-adMediaV1_pm-db5_n-simpli.fi_n-baidu_n-Beeswax_ox-db5_smrt_n-inmobi_sovrn_3lift_n-Outbrain","cb":"0"})

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23577)
Category:	downloaded
Size (bytes):	23739
Entropy (8bit):	4.757288600127199
Encrypted:	false
SSDEEP:	192:nqxrZX8W+ab2edrKeTUKuErArKlcZJVrJ3ee+cR6waYm215bvfhf5DrkHUasT:Ws5yWeTUKb+KlkJ5de2UYmyTfhYUasT
MD5:	04425BBDC6243FC6E54BF8984FE50330
SHA1:	8C15C6BD82C71E9EF1BB11CF24E502FE07518AC5
SHA-256:	541AC58217A8ADE1A5E292A65A0661DC9DB7A49AE13654943817A4FBC6761AFD
SHA-512:	8BCF90CAD84E6324247BA5DB4AD8EDF53E3240786133EF58F724D8D5F3B1A03430B10A4A304A48A12419F265689AD9D509FF4F06FA100E72A5D3A80638E0F5F5
Malicious:	false
Reputation:	low
URL:	http://iwu.marketing/font-awesome/css/font-awesome.min.css
Preview:	/!. Font Awesome 4.3.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.3.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.3.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.3.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.3.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.3.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.3.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;transform:translate(0, 0)}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{fon

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	11
Entropy (8bit):	3.2776134368191165
Encrypted:	false
SSDEEP:	3:LUQ9:LUA
MD5:	825644F747BAAB2C00E420DBBC39E4B3
SHA1:	10588307553E766AB3C7D328D948DC6754893CEF
SHA-256:	7C41B898C5DA0CFA4AA049B65EF50248BCE9A72D24BEF4C723786431921B75AA
SHA-512:	BFE6E8DF36C78CBFD17BA9270C86860EE9B051B82594FB8F34A0ADF6A14E1596D2A9DCDC7EB6857101E1502AFF6FF515A36E8BA6C80DA327BC11831624A5DAEA
Malicious:	false
Reputation:	low
Preview:	Bad Request

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39780)
Category:	downloaded
Size (bytes):	40832
Entropy (8bit):	5.660429788614811
Encrypted:	false
SSDEEP:	768:jRpdm7nfqAQGv1ErZ760oBOr+g7GSOgErhBkE2iaet+DXh4o8xyqLS:jRPyjs760oBOCg7GcErhBks+DXhZC7S
MD5:	D07D2022BB595C713A9D51625695EE0B
SHA1:	684A746A5862B63D4F7ABC14AAEEA2774429E111
SHA-256:	27B8CC1C471DAF495549AB6C514D5E9F895ED028897C0DFEFB6C6B27B7B4BF85
SHA-512:	B1A4B7D0B797B8ABBA8BC96287FD9EE70B72C2BF0674BAA60D239346FFCD266AA9399604663635E540B539FC42738871A40F95E04D796BCB3B064FEFE7D21DD1
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/J7jMHEcdr0lVSatsUU1en4le0CiJfA3--2xrJ7e0v4U.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==. (function(){function l(G){return G}var k=this\|\|self,m=function(G,u,E,x,B){if(!(x=(B=k.trustedTypes,G),B)\|\|!B.createPolicy)return x;try{x=B.createPolicy(E,{createHTML:Y,createScript:Y,createScriptURL:Y})}catch(n){if(k.console)k.console[u](n.message)}return x},Y=function(G){return l.call(this,G)};(0,eval)(function(G,u){return(u=m(null,"error","bg"))&&1===G.eval(u.createScript("1"))?function(E){return u.createScript(E)}:function(E){return""+E}}(k)(Array(7824Math.random()\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==',.'(function(){/'

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1131
Entropy (8bit):	5.384211907889318
Encrypted:	false
SSDEEP:	24:81/V0OYsOK/AZzhV0OYsOn5RVc+u/rV0OYsObwy96DGSSf7:cyOLOKeEOLOn5RVc+u+OLObN0oD
MD5:	ADE983E694C073BF029371D5DE8DB557
SHA1:	37EB0F9EE6A6B4D9CF840AE3AA5AF197CEED43A6
SHA-256:	9C794D3451E5654D3E69690E0B07887F7F28A5C4EE275F728CA0B63D11288C50
SHA-512:	CA1982515D9E63647EB7D6B82B5836640794CE8463257C3FD9078EDE74623CA215153605226A955EA70D78C51BA5B8951315230A7BA900350AA2060D7B74E99D
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Muli
Preview:	/* vietnamese /.@font-face {. font-family: 'Muli';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/muli/v29/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk40eiNxw.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext /.@font-face {. font-family: 'Muli';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/muli/v29/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk50eiNxw.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Muli';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/muli/v29/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk30eg.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:d:d
MD5:	9DD4E461268C8034F5C8564E155C67A6
SHA1:	11F6AD8EC52A2984ABAAFD7C3B516503785C2072
SHA-256:	2D711642B726B04401627CA9FBAC32F5C8530FB1903CC4DB02258717921A4881
SHA-512:	A4ABD4448C49562D828115D13A1FCCEA927F52B4D5459297F8B43E42DA89238BC13626E43DCB38DDB082488927EC904FB42057443983E88585179D50551AFE62
Malicious:	false
Reputation:	low
Preview:	x

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20087)
Category:	downloaded
Size (bytes):	20216
Entropy (8bit):	5.338721920008614
Encrypted:	false
SSDEEP:	384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst
MD5:	BA6CF724C8BB1CF5B084E79FF230626E
SHA1:	F455C5F153F872E52265F87A644FF89FE14A6FB6
SHA-256:	3FDDC6D28ABA3C13D64CFD4847C333FF48C71D4A5A58BD1A0494CA6AE8AC1BB4
SHA-512:	22C361E44DDE632DEDAFF2625F6631E2FB02BA3B6487097B48BAA09F02CD81FD381EBB7D053F525E52E56655B1F8E2B89DDCC0A002E1B0C35C0A6920823641D7
Malicious:	false
Reputation:	low
URL:	http://iwu.marketing/js/jquery.magnific-popup.min.js
Preview:	/! Magnific Popup - v1.1.0 - 2016-02-20. http://dimsemenov.com/plugins/magnific-popup/.* Copyright (c) 2016 Dmitry Semenov; */.!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):a("object"==typeof exports?require("jquery"):window.jQuery\|\|window.Zepto)}(function(a){var b,c,d,e,f,g,h="Close",i="BeforeClose",j="AfterClose",k="BeforeAppend",l="MarkupParse",m="Open",n="Change",o="mfp",p="."+o,q="mfp-ready",r="mfp-removing",s="mfp-prevent-close",t=function(){},u=!!window.jQuery,v=a(window),w=function(a,c){b.ev.on(o+a+p,c)},x=function(b,c,d,e){var f=document.createElement("div");return f.className="mfp-"+b,d&&(f.innerHTML=d),e?c&&c.appendChild(f):(f=a(f),c&&f.appendTo(c)),f},y=function(c,d){b.ev.triggerHandler(o+c,d),b.st.callbacks&&(c=c.charAt(0).toLowerCase()+c.slice(1),b.st.callbacks[c]&&b.st.callbacks[c].apply(b,a.isArray(d)?d:[d]))},z=function(c){return c===g&&b.currTemplate.closeBtn\|\|(b.currTemplate.closeBtn=a(b.st.closeMarkup.replace("%title%",b.st.tClose)),g=c),

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1321)
Category:	downloaded
Size (bytes):	17314
Entropy (8bit):	5.342134706855769
Encrypted:	false
SSDEEP:	384:cCDFzlR6exHAiyyrYuy9ckdnfczIk7LcuNP/p:DlsexHAlii9NmIeLcE
MD5:	2CC87E9764AEBCBBF36FF2061E6A2793
SHA1:	B4F2FFDF4C695AA79F0E63651C18A88729C2407B
SHA-256:	61C32059A5E94075A7ECFF678B33907966FC9CFA384DAA01AA057F872DA14DBB
SHA-512:	4ED31BF4F54EB0666539D6426C851503E15079601A2B7EC7410EBF0F3D1EEC6A09F9D79F5CF40106249A710037A36DE58105A72D8A909E0CFCE872C736CB5E48
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var l="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ba(this),p="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),r={},u={};function w(a,b){var c=u[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}.function x(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var g=d[0],h;!a&&g in r?h=r:h=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in h))break a;h=h[e]}d=d[d.length-1];c=p&&"es6"===c?h[d]:null;b=b(c);

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65354)
Category:	downloaded
Size (bytes):	96004
Entropy (8bit):	5.274683121744756
Encrypted:	false
SSDEEP:	1536:duJA48KogwpmzkCwVk9gA6mFwTKNhuDQo/hGpeOn/cN:xqwpbkiA6mfnpeaG
MD5:	3AF4D03948A8CF4BA1006EFF4B55AA60
SHA1:	9596FBC5DE70DC37BFAB277C6D989E0F551867C3
SHA-256:	ED3DC50AA8E28EA856D113DFBD2BD12DBB09CEB4381F2BDF8DBA7B14B2A00108
SHA-512:	50AF65CAD3DC3C289EF3AA21CD4C1CBE6165D51AD4DE4448E1006F3CE8637F91D1E0A421C8748667466C17D3D1F1FD170563339E521C7EB5DD97CB9578ED88BE
Malicious:	false
Reputation:	low
URL:	https://static.criteo.net/js/ld/publishertag.prebid.136.js
Preview:	// Hash: eMYEaEeUSUZGQCr4GiVU/1qDSBVsN9OtdNYDPWA2zlZPpmhHaAJd/fiYc78jMPlDWrY3ZVELhfcfzAPYHG6BjDU9n0wPs8e3bgvMv54AQ0yPuy0XmfZF8/k1QHhrnbghXZ99Yy8o2FlpUtiKKpmGILN8oXh+Qu81x31oynpqLkY=.!function(e){"use strict";var n=function(e,t){return(n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var i in t)t.hasOwnProperty(i)&&(e[i]=t[i])})(e,t)};function t(e,t){function i(){this.constructor=e}n(e,t),e.prototype=null===t?Object.create(t):(i.prototype=t.prototype,new i)}var D=function(){return(D=Object.assign\|\|function(e){for(var t,i=1,n=arguments.length;i<n;i++)for(var r in t=arguments[i])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function i(e,t){var i={};for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&t.indexOf(n)<0&&(i[n]=e[n]);if(null!=e&&"function"==typeof Object.getOwnPropertySymbols){var r=0;for(n=Object.getOwnPropertySymbols(e);r<n.length;r++)t.indexOf(n[r])<0&&Object.prototype.pro

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 220 x 220, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	52207
Entropy (8bit):	7.989766275001399
Encrypted:	false
SSDEEP:	1536:o37fcMNCSfk5/OApo+J0kyXbFx8yB/R4ss93pOUX:o3DjaO4XyXbFx8yuF
MD5:	DEA65EDE5744C26DAF5209CF9DA9E7BD
SHA1:	84D99BF7B697F20C04810E8DC7A4BD85E4150C27
SHA-256:	DB52A0D0D38C5DE44851BAF95826AD010E4F17FDB16057F5EF2D4C6039A10515
SHA-512:	86A3ACA7D9EBE988579AA7054DB0C499F4917856A469D375DB65CA9B5439C1238996D661C9C5C1C70690DE709BBC552B3C431694788B11B880C6816ABDC23B15
Malicious:	false
Reputation:	low
URL:	https://browser-update.org/static/img/big/s.png
Preview:	.PNG........IHDR..............Z.....sBIT....\|.d.....pHYs.........^.......tEXtSoftware.www.inkscape.org..<... .IDATx..w.%E...~..O.a.3..9.D..b.T.......~.?].......~..YuE...... ....s.&.;7..]....s.I..5.;..s.....S......O...S.)fkw..T.k....Se....H.........Tu\|......Se.E...[.....1fGk.I..)"{.c....T...........1 .....0..q..e...;.,.w...'.....S.{.J...{:..1f.$I.4..)"{.j......T....;.sw.c........5....'(.....4=<M..1....v....t.]..v/.v.......;..T....P...\..a....4=\D..K..".snY...9w....z.~....sy.p.....&.#k..QI..."...L.'..[...n.{i..(..sf.9..;..T..............1....'...T..N..v....3gf[.CO....6QFGGw...o..j.P..v..T.q..v.}j..>y.....>.%....(etttF..xS...P...[.V........N.sr....Y....y2...W)...{.....[...\U ..`m.....u`2..<.G!.....#.U.._.@b..V..@..y..u.2...#...<y.t:...5.....O../O.....?..l~.x..!.ms.X.2.{G....U.)xx.Z.........#......p.. ...G...5....F.g6.=...+.......[455.e..........p.../J..3....v.@..lL.j.0..D....`..x&..HF..""H...g.....T.dJ......?_).w..3....:<}...LH-

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:d:d
MD5:	9DD4E461268C8034F5C8564E155C67A6
SHA1:	11F6AD8EC52A2984ABAAFD7C3B516503785C2072
SHA-256:	2D711642B726B04401627CA9FBAC32F5C8530FB1903CC4DB02258717921A4881
SHA-512:	A4ABD4448C49562D828115D13A1FCCEA927F52B4D5459297F8B43E42DA89238BC13626E43DCB38DDB082488927EC904FB42057443983E88585179D50551AFE62
Malicious:	false
Reputation:	low
Preview:	x

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.1961893998690174
Encrypted:	false
SSDEEP:	3:CUU0/wv/p/Hh/:S0+/
MD5:	45CF913E5D9D3C9B2058033056D3DD23
SHA1:	30CB5D44E276505B1D4C053C8B25525DA228DB30
SHA-256:	42B976597A2D977D0E300F6D06BC903DB389E5C112D33C1C8C249690A522D9F2
SHA-512:	16DD1560FDD43C3EEE7BCF622D940BE93E7E74DEE90286DA37992D69CEA844130911B97F41C71F8287B54F00BD3A388191112F490470CF27C374D524F49BA516
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1238)
Category:	downloaded
Size (bytes):	1239
Entropy (8bit):	5.068464054671174
Encrypted:	false
SSDEEP:	24:ch63Cf5W8QPIHRZ3hwVFS39bYGwNef1yTZsNUkQ1sZmSuLqNWRco5Jcn5IKM6cuY:C6SQnw/x+SR8ZZkQbp1RZ5JwiKMm7Zc
MD5:	9E8F56E8E1806253BA01A95CFC3D392C
SHA1:	A8AF90D7482E1E99D03DE6BF88FED2315C5DD728
SHA-256:	2595496FE48DF6FCF9B1BC57C29A744C121EB4DD11566466BC13D2E52E6BBCC8
SHA-512:	63F0F6F94FBABADC3F774CCAA6A401696E8A7651A074BC077D214F91DA080B36714FD799EB40FED64154972008E34FC733D6EE314AC675727B37B58FFBEBEBEE
Malicious:	false
Reputation:	low
URL:	https://browser-update.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
Preview:	!function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href")\|\|""}function r(e,t){var r=e.substr(t,2);return parseInt(r,16)}function n(n,c){for(var o="",a=r(n,c),i=c+2;i<n.length;i+=2){var l=r(n,i)^a;o+=String.fromCharCode(l)}try{o=decodeURIComponent(escape(o))}catch(u){e(u)}return t(o)}function c(t){for(var r=t.querySelectorAll("a"),c=0;c<r.length;c++)try{var o=r[c],a=o.href.indexOf(l);a>-1&&(o.href="mailto:"+n(o.href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var r=t.querySelectorAll("template"),n=0;n<r.length;n++)try{i(r[n].content)}catch(c){e(c)}}function i(t){try{c(t),o(t),a(t)}catch(r){e(r

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2020)
Category:	downloaded
Size (bytes):	12817
Entropy (8bit):	5.34459161517544
Encrypted:	false
SSDEEP:	192:Gq6KPV24ZKs86O/DfVcOfFmI46coWCTGdhFKdbsWkzY:GkxI603wI46xWSGdhUr
MD5:	1D3D22DF067F5219073F9C0FABB74FDD
SHA1:	D5C226022639323D93946DF3571404116041E588
SHA-256:	55A119C0394F901A8A297E109C17B5E5402689708B999AB10691C16179F32A4A
SHA-512:	0B6B13B576E8CC05BD85B275631879875A5DBCB70FD78E6C93B259317ED6FD5D886F37D0CC6E099C3D3A8B66FEA2A4C2C631EB5548C1AB2CD7CB5FA4D41EA769
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function m(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var p="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};.function aa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");}var r=aa(this),u="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),v={},w={};function x(a,b){var d=w[b];if(null==d)return a[b];d=a[d];return void 0!==d?d:a[b]}.function y(a,b,d){if(b)a:{var e=a.split(".");a=1===e.length;var g=e[0],k;!a&&g in v?k=v:k=r;for(g=0;g<e.length-1;g++){var c=e[g];if(!(c in k))break a;k=k[c]}e=e[

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2487)
Category:	downloaded
Size (bytes):	23118
Entropy (8bit):	5.493607717604929
Encrypted:	false
SSDEEP:	384:k5SYT18ljxD492dnZNaaYMSkT3yHI7YybBosxsM/TSOLmfmKzy4zl9WylRiRrAN4:+S81UxD4odnZNaThkT3yHI7toQ/TSOau
MD5:	93B7449E57666ED584C348BB411AD762
SHA1:	D283DBCA480AB458AA9BB593AF9C185A831AA5C7
SHA-256:	0585C17865B250DF20A5C5DBF25274D44443F26D24ED58BBE3215DD54DD864B1
SHA-512:	9D95A0296D369401169AB48D6BD82DB109C2A76212C13BADAC22C68D4C9EA1F047C7FB0682D4472B65557FFDDA1A6E5709B1B0E07E89656916E296A10630098E
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240313/r20110914/abg_lite_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=m,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1}function ba(a){return a};var ca=aa(610401301),ea=aa(188588736);var n;const fa=m.navigator;n=fa?fa.userAgentData\|\|null:null;function ha(a){return ca?n?n.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function q(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};function r(){return ca?!!n&&0<n.brands.length:!1}function ia(){return r()?ha("Chromium"):(q("Chrome")\|\|q("CriOS"))&&!(r()?0:q("Edge"))\|\|q("Silk")};function ja(a,b){return Array.prototype.indexOf.call(a,b,void 0)};function ka(a){ka[" "](a);return a}ka[" "]=function(){};!q("Android")\|\|ia();ia();q("Safari")&&(ia()\|\|(r()?0:q("Coast"))\|\|(r()?0:q("Opera"))\|\|(r()?0:q("Edge"))\|\|(r()?ha("Microsoft Edge"):q("Edg/"))\|\|r()&&ha("Opera")

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Macintosh, datetime=2010:12:02 13:59:00], baseline, precision 8, 960x123, components 3
Category:	dropped
Size (bytes):	71730
Entropy (8bit):	7.80036827058976
Encrypted:	false
SSDEEP:	768:gi7KmGGy7KmGG2+G0vE2VpNLDzk/Eji2zW/+R3ezl70YHqLrksGQkOWGIe4LoD/7:JtitggtLfkcmVRzl4YHKksGPOV7/KxEv
MD5:	D363CF7CD842422DCF24587029BB7C8D
SHA1:	4A3A7F7BEFA1FF62033C3244DF4BA3F7EBCFD140
SHA-256:	4D52AC1840076B23B422792CD8770185812A65C9975CD9DA37ABBF36D6784138
SHA-512:	223FE571E44722CCB2F7B2E8A50452FB440AA2D4DCC0B2F5A3C13521E70E17DBBC4237EA6C1AE1DDDA64767A92BA441145F636D4BB212FE6EBF2509E3EBF23E9
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....3Exif..MM..............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS4 Macintosh.2010:12:02 13:59:00......................................{...........................................&.(.........................................H.......H..........JFIF.....H.H......Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..1.;.....h.!..._.....s\.e...W.,.o..O.3..1.1M.7.".C...[..o.l...g..o././t..E.[.X.}.m._m...{YN&k.;.....sl..o....O.}n....

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1648
Entropy (8bit):	7.786749089214657
Encrypted:	false
SSDEEP:	48:htwnSuGFD+gPdAptKl+BcgpkDm1kbd++W5QaVxZB8WVJX:HwdGBdAptKl+BcUkdfW5Q8ZB8E
MD5:	BE21696F629097B8307EC8E367237237
SHA1:	233840D45987FA0A682F4DB3E92C4E7431C3AF69
SHA-256:	1157C6EBF919D190B667C67173E1B5CB2B1A17BAD529B242044F1690ED105B7C
SHA-512:	A7251654B233C9A4DDBF90B38FECD54F9B2FE14260C4C6EB5F8FA06B73FA98CE3E576377396EC8CAEB0BF663FCFDD3CD70DDDD7F83857227ACB936FA53CF7F0F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....D.......PLTE..........................8.....Z..........f..I..>.........P..E..................{..x..@..<...................n..\..V..<..<................s..k..c.._.[..R..G..@.................xx..v..j..i.h..b..X..S..N..M..C..@.1)..............................................uu.p.n.f..X..V..O..M..K..J..I..D..0..............................................}..}..\|..y..ssrr..i.bb..a..a..`.X.W..G..C.s7....................................................................................................................\|..{.{..y..y..v..v..u..s..s..s..q.qq..o.oo..m.m.k..i..i..h..fqqd.c.a.a..a..`qq`\|z^..].\\..V.T.QQ.QQ.P..L..I.G..E.EE.D..C.hC.BB..7.3.c0....?+.B(.j'.n&.X$./".".(".D.....(........&....tRNS..fD..."........IDAT8.b@..F9V..VVI!.....;..i..v.u.0........e.5v...1@./.........q.5v1=V..,_.R...k(##c...'k.j."..B>....WFMU.^M..BN._.sG..!,9.\|<...e..*a.............;.>.C..O%(

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2854)
Category:	downloaded
Size (bytes):	20056
Entropy (8bit):	5.522696203648707
Encrypted:	false
SSDEEP:	384:8ArQ8Iu5bYFSPRxx+4wVCBfjGnibDUJ0k9rBSzicqwQRQPX7uS6aRxSQXanNVY3D:zrQDuFYFSP/xGEBbGnibgJ53kicqwQ6t
MD5:	9135330874533FFA24A7C51F6889B238
SHA1:	F0BF43FB1500BDA83A0406354635F3624B6C2487
SHA-256:	594EA28ECE633B47536A3549082809E82C6772E5F2F324F26F8BC0F5DE6842D2
SHA-512:	781F96C5B6E960C602CC4D5208028F84CC070B40DF013EC524B818C7A75040463B28FB4EA417DCE095DD48E61F3990299589E57E41E0E80783E525C9F7FFC23F
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240313/r20110914/client/qs_click_protection_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var q=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=q,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1}function ba(a,b,c){return a.call.apply(a.bind,arguments)}function ca(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}} .function r(a,b,c){r=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?ba:ca;return r.apply(null,arguments)}function ia(a,b){function c(){}c.prototype=b.prototype;a.O=b.prototype;a.prototype=new c;a.prototype.constructor=a;a.P=function(d,e,g){for(var f=Array(arguments.length-2),k=2;k<arguments.length;k++)f[k-2]=arguments[k];return b.prototype[e].apply(d,f

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3829
Entropy (8bit):	5.227153554526095
Encrypted:	false
SSDEEP:	48:UJFG9a73d0xU2oaGh9xcZ0EHZmHzSub0L3EDGj27RLtZuh6Zu++uys98YM9U3ehw:U3mufREHWbIaRZ0hJQys6YM9UqrxIl
MD5:	34890A4CF29B7A275C8E969A4158976F
SHA1:	04BA67DDCA66ACD3C13A654E5A4D47E216034D27
SHA-256:	6C4A3D8CA7482CE29B48D5A636CAA0010DCE6B8BF952B55FC2D96CBFFD0A0118
SHA-512:	26E0E1571C5D2641E02F5C3931DEB24E4197A901327F5FE92A25BB672BDF3ABC88A19C8CF15D91EDDAD76E433BD33B6A86862F7FA4D998DBAE46DC0D99D8D359
Malicious:	false
Reputation:	low
URL:	https://indwes.tfaforms.net/wForms/3.11/js/wforms_calendar.js
Preview:	(function() {....if(typeof Kalendae == 'undefined') { return false; }....if(!wFORMS.helpers.calendar) {wFORMS.helpers.calendar = {}};..wFORMS.helpers.calendar.alreadyApplied = false;. ..wFORMS.behaviors.calendar = {...CSS_SELECTOR : ".validate-datecal",...target: null,....applyTo: function(form) {....var instances = []....// Save reference to the form to find validation behavior later....// becuase repeted sections call applyTo we only need to store the value once....if (this.target == null) { this.target = form }.....this.generateDefaultSettings();... Kalendae.moment.lang('zz',{. months: cfg.MONTHS_LONG, weekdaysMin: cfg.WEEKDAYS_SHORT. });.....var elems = base2.DOM.Element.querySelectorAll(form, this.CSS_SELECTOR);....for(var i = 0; i<elems.length; i++) {.....instances.push(new wFORMS.behaviors.calendar.instance(elems.item(i)));.....}.....return instances;...},......generateDefaultSettings : function(){....var locale = [];........ try{.....cfg =

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6681
Entropy (8bit):	5.098294977068893
Encrypted:	false
SSDEEP:	96:vhgZLiGmoBqN342/pcBcyMRxtUf7R2nFjItMCApc1l:aZLtwN3vmNaZCFX
MD5:	F4E78D7D2C825DBE75AB8881E89CF2B1
SHA1:	B0277C55B8F6B302677E7DE3445DB6CDA74C6CA1
SHA-256:	F5F0B0856B1C58A3F1BF8BE1170222E4675AAB6C46462E2139A9500B06FCD447
SHA-512:	859D31075283A6708F26BFB7D491058B35265F1403675AE741ED8EE991981AC172DEFA22AFB328CF1F2B478CBA75677CDC6A2188A9767DE5B8676E2DB159BC9D
Malicious:	false
Reputation:	low
URL:	https://indwes.tfaforms.net/css/kalendae.css
Preview:	/ Base container /..kalendae {..display: inline-block;zoom:1;display:inline;..background:#eee;..padding:10px;..margin:5px;..border-radius:5px;..-moz-border-radius: 5px;..-webkit-border-radius: 5px;..font-size:11px;..font-family:'Helvetica Neue', 'Helvetica';..cursor:default;..position:relative;.}../* Popup Container for Kalendae.Input /..kalendae.k-floating {..position:absolute;..top:0;..left:0;..z-index:100000;..margin:0;..box-shadow:0 1px 3px rgba(0,0,0,0.75);..-moz-box-shadow:0 1px 3px rgba(0,0,0,0.75);..-webkit-box-shadow:0 1px 3px rgba(0,0,0,0.75);.}../ Kalendae.Input's popup close button **/..kalendae .k-btn-close {..position:absolute;..top:-8px;..right:-8px;..width:16px;..height:16px;..background:white;..border:2px solid #ccc;..color:#999;..line-height:17px;..text-align:center;..font-size:13px;..border-radius:10px;..box-shadow:0 1px 3px rgba(0,0,0,0.75);..cursor:pointer;..text-decoration:none;.}..kalendae .k-btn-close:after {content:"\2716";}..kalendae .k-btn-close:hov

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16414
Entropy (8bit):	6.018051395086597
Encrypted:	false
SSDEEP:	384:YlIfAlzNf/VsrHUk5KGmS2zoUDdkQHM8k5D0K2uIY9Lx:YSA7VMHU0qpcUDd5sQK2uF9Lx
MD5:	F731B712142691B271AC48801272C607
SHA1:	9E0D127BCB0894EB044B5AEABF15F74CD9D7E95C
SHA-256:	3FABB5283B4B959C82DD99F0A5CCA507148088C7209B86B1A6363DD65DE838B2
SHA-512:	4D5E245E564DEFF2C9FC1D1FBCD27FD90C7F16596256A97E7C4A282656C0F30F08689157A66AD3277079EB7F8D92F739393009171E97EBC982DCB32A3BAFF7EB
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20240313&st=env
Preview:	{"sodar_query_id":"Omr4Zc3TH8adi9YPgrmFwAY","injector_basename":"sodar2","bg_hash_basename":"J7jMHEcdr0lVSatsUU1en4le0CiJfA3--2xrJ7e0v4U","bg_binary":"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

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 16 colors, 32x32, 16 colors
Category:	dropped
Size (bytes):	1078
Entropy (8bit):	1.240940859118772
Encrypted:	false
SSDEEP:	3:etFEh9HYflvlNl/AXll1pe/WNN00000000000000000000000000000000000001:QNtY6+lKY6
MD5:	4123CE1E1732F202F60292941FF1487D
SHA1:	9F12B11BDE582DAE37CE8C160537D919C561C464
SHA-256:	D961B08E4321250926DE6F79087594975FE20AD1518DE8F91EB711AF5D1A6EF8
SHA-512:	11B24C2E622C408E4774FAE120B719A21A0B2ACFA53230126C35AD6CA57D33D4DE79CBE11D296CFBDE9613CAA03D66B721BD20CF4EE030CF75F5A1FD8A286DA9
Malicious:	false
Reputation:	low
Preview:	..............(...&... ..........N...(....... ...............................................................................................................................................................................................................................................................................................(... ...@.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3381)
Category:	downloaded
Size (bytes):	212851
Entropy (8bit):	5.405066868865096
Encrypted:	false
SSDEEP:	3072:HxYvSmtZXfDRNA4d8v9DErXrWry2ufi0XDA3gI8aVNHirodW:HqvSmvbATe7cyffDA3gI8EHi8dW
MD5:	377F245E144C1702957AAB23B4CF0966
SHA1:	65D61AB3C508A7BFAD5D8EA14F305D82FD8927E5
SHA-256:	3EDCA7294F70460740B307B1B70E7356A6165CB7A76C774F65398D0D052AC8C8
SHA-512:	2DC748F310E537DDEB53E5DAD566C263FA1DEB9CD94B2FDFF3A5CFAF854DF96A4F911F7AE13EDB294699365CDF94C97F8D17D5DA4E5D09583119F62B0B2F1019
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),q=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.q("Symbol",function(a){if(a)return a;var b=function(f,g){this.Og=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Og};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2406)
Category:	downloaded
Size (bytes):	4135
Entropy (8bit):	5.400061384025375
Encrypted:	false
SSDEEP:	96:BdvzQYh76QVWlP/Or3VazkP2TBxj6kDxx1vryS159O84+SGyDZTxSf0v:BdvMXlpW0kOTflDBOQB4+PkVxScv
MD5:	706182B3F15765C096ED8660374C12BF
SHA1:	14334D589B9812B73CA593807E3601D9EA7931C6
SHA-256:	C056DC1F3BCFED323FFFCE5688EAFF6D921CF4C33905D96C69ED10FF34DA0565
SHA-512:	1A82E616812D882E76DBA20760BDC0571C250ED6F1F8242ABB4CE90290CC968A1A444F6A2BE9557DDC0467BCE72E29D050622C3999B1777578D5F37435D4F6A1
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/js/car.js
Preview:	/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var e=this\|\|self,f=function(a){return a};/ . . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a){return Object.isFrozen(a)&&Object.isFrozen(a.raw)}function h(a){return-1===a.toString().indexOf("`")}const k=h(a=>a``)\|\|h(a=>a`\0`)\|\|h(a=>a`\n`)\|\|h(a=>a`\u0000`),l=g``&&g`\0`&&g`\n`&&g`\u0000`;var m;var p=class{constructor(a){if(n!==n)throw Error("TrustedResourceUrl is not meant to be built directly");this.l=a}toString(){return this.l+""}},n={},q=function(a){if(void 0===m){var b=null;var d=e.trustedTypes;if(d&&d.createPolicy)try{b=d.createPolicy("goog#html",{createHTML:f,createScript:f,createScriptURL:f})}catch(c){e.console&&e.console.error(c.message)}m=b}a=(b=m)?b.createScriptURL(a):a;return new p(a)};var t=class{constructor(a){if(r!==r)throw Error("SafeUrl is not meant to be built directly");this.j=a}toString(){return this.j.toString()}},r={};new t("about:invalid#zClosurez");new t("about:blank")

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:H1DuiYn:EL
MD5:	7D0BE47218A164E9EDFE3A0FD45BF9CD
SHA1:	CC4DB87063A91F77A894C3B37CA4EBD4E4F63DF4
SHA-256:	F34E84CD80D444C972B52CCDF1D6A681A5BD3C4B7343679AF28B52D0B5C399AD
SHA-512:	7B5F82B3FD8BA986CC4105434DF40075D515E60CBF4E9006B5A7060EA2AB7823A45ABC82F85FE61724D29BCF8639F7E89DDD1AFD7A677307586FF78508369FDD
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmckP8C6LXQYRIFDX1p96c=?alt=proto
Preview:	CgkKBw19afenGgA=

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	19821
Entropy (8bit):	5.206102717938152
Encrypted:	false
SSDEEP:	384:QdnHVOOnidsKPHinaPXJpEJY+TWegF5XE6jD:gOOn9aAgegFu6jD
MD5:	FFDB073FF7AA7A95A1594D57D6D65018
SHA1:	23271FFCA649C11B2BDFF26FF154B578E77E5F9F
SHA-256:	6E1556BCDD02762DF4CF669F1FCCEE91CC0E00453C84749553381E629581C560
SHA-512:	F4664521AEF91B7560E283C6F7E28915C9EBCF86B7069CC13EEA0E72D2B9B00862913ECFC3115591CD9B507E02BE2CD4A61C169B83DA19AE18CEE97CA63DAF27
Malicious:	false
Reputation:	low
URL:	https://browser-update.org/
Preview:	<!DOCTYPE html >.<html lang="en">.<head>.<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />.<title>Notifies visitors to update their browser - Browser-Update.org</title>.<meta name="description" content />.<meta name="keywords" content="browser, webbrowser, upgrade browser, update browser, choice, change browser, firefox, safari, opera, firefox, upgrade internet explorer, internet explorer update, ie, safari, konqueror" />.<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">.<script src="/cdn-cgi/apps/head/dSTaMRtp7Uh77lw_sJp5-4w_sZY.js"></script><link rel="shortcut icon" href="/static/img/favicon.png" type="image/png" />.<link rel="icon" href="/static/img/favicon.png" type="image/png" />.<meta name="robots" content="index,follow" />.<link rel="stylesheet" href="/static/base2.css" type="text/css" />. [if lte IE 7]>. <link rel="stylesheet" href="/static/drecksie.css" type="text/css" />. <![endif]-->. [

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:+:+
MD5:	7DBADB869DD6E6B43C22497758DA0718
SHA1:	C4B8709ED3E5BBCD8619BBD5CF10C8AA7A6619A8
SHA-256:	F4BFD04FF1EFA6CCC4F0A37DA8D3EDD76A4FFA0337DB1BA3F1D609B5A51415BA
SHA-512:	01FBACEC540A2F30A4988418D9BFE2B1491C39075DE0CA7043FCA53B3E93335F58D27B6159DECDF0893FEAD61FA9E5853288B61B5A8BDE39E30CD5220A1F1E46
Malicious:	false
Reputation:	low
URL:	https://browser-update.org/cnt?what=view&cv=base&tv=0&ref=iwu.marketing&from=c&fromv=117&dice=47&rnd=0.8140456435354542
Preview:	okview

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18500, version 1.0
Category:	downloaded
Size (bytes):	18500
Entropy (8bit):	7.989500817921123
Encrypted:	false
SSDEEP:	384:IUJdn4+badWw0HC6S1IzpEn7jjdaPGNDcOobkrz8hV1lnDES+IOw:BDbLw76fz6nJaPGNDsb+8hFDEkOw
MD5:	4868DD20C7C64A087DDE7426200C3C0E
SHA1:	602F24BCF3A112718917140E1F605BC6C2D2A6DC
SHA-256:	BCB3C99616A6B90084E82690AB8519141A78FEA94C0AB3A3A5CA7611C0D77E4C
SHA-512:	72326C1F86BCC9A2A1CF73B9DBE07B00327CF5442E163F1CA74251EAC1449E7ED4CD0159475FEE300AF0A9BC29093EB63411813F62987A4C779D5C1767928E6D
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/muli/v29/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk30eg.woff2
Preview:	wOF2......HD..........G..............................F..(.`?STATD..............p.....&..6.$..H. ..X..[..K.............X.....aasG!.q..._B...9Ie.M.O[A.9...r8..,'..,.<qV...E%..c.e......=...l.0tX.B...q....^.6.mJ$Bg......J...3.Mu...s.....i.a......X..P..?.....-......-T..~E `6..Z..=7nQE...fk.;..F.$'/.Or.W.t...;kF`d ........y...w.G.U.N..D...FE..SD.@{...J...\......... .(.f..2...J.... A.!I...t..K.+]T.._....i<....G.r....$..m...t..A.B_.QG.....3P...v.^...E....+....N8z..[.%.1...+......x..{.........t....VW=...4..e.._.L.......t_n_U...Jf...........I..78..#..?.6.i..:....<.7dr...\|..yK.G6.2 }.."Y&i.A.=.....Q..".bK2b...D.N..2......)S.D...r@o..e..6..q..\......IJ.aI..........pFt8ifw...=.<.......w.>....P..,Y&-[...>%'..<.%...)yRVp..?.K......n.&V.).[....-..^PA!..u...T.f...>..y..lsk0..}`?fIK...zs.7.7`1....b.J ..e.Ts.v..AE..h...kw..Kr...p..""%H&!..D..s.]h...7D.!!.x{X.1......H.Q&....}..~I*.9.3......AX........@t.@.....A... 4...b&....Rc.d.Q0]. ..\............9.`.n....S.j2.

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1322 x 375, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	110584
Entropy (8bit):	7.98475068529157
Encrypted:	false
SSDEEP:	3072:lPjABVEpD7sVtXWEnMaGg6C1hwLjMSJCFXCCp/I:hsVERsVtXddddvSGp/I
MD5:	691C5749F07BD8AEDED6C5AD91AA8CCF
SHA1:	9B33145C138DCFD551A70E71C2086C7EAC30E3DE
SHA-256:	DB06BA8AF68A1F707C09A24C3BC992C4F2E14FB87B79D086B765FB955CC5D250
SHA-512:	37B8284A66CE4CBEBE86FFC8E75DBFFBD23041EB58FF8AB78F77A60B486437D2D213F8A142FEAFA26AA3340186927F52711A98B385C503D5206930B5C2908A41
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...*...w.....-.......sRGB.........gAMA......a.....pHYs..........o.d....IDATx^....$Iv..........V].......\....KrI..%....G.a.....%...I.#..X,@...f......Z....R...P....s.......NQ..K.g...G.....B..e...................VAAAAAAAAAAAAAAa...............C.o................................+.E...............V..~+(((((((((((((.8..VPPPPPPPPPPPPPXq(.................P.[AAAAAAAAAAAAAa...............C.o................................+.E...............V..~+(((((((((((((.8..VPPPPPPPPPPPPPXq(.................P.[AAAAAAAAAAAAAa...............C.o................................+.E...............V..~+(((((((((((((.8..VPPPPPPPPPPPPPXq(.................P.[AAAAAAAAAAAAAa...............C.o................................+.E...............V..~+(((((((((((((.8..VPPPPPPPPPPPPPXq(.................P.[AAAAAAAAAAAAAa...............C.o................................+.E...............V..~+(((((((((((((.8..VPPPPPPPPPPPPPXq(.................P.[AAAAAAAAAAAAAa...............C.o......

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=Sculpt, LLC], baseline, precision 8, 1900x1267, components 3
Category:	dropped
Size (bytes):	89996
Entropy (8bit):	7.696934796502958
Encrypted:	false
SSDEEP:	1536:eGp8Naq3sw8fe1V+m64UkUzAl40uEog+Krp/HNC1Z8LSgFMoFazpppp7:xjloFHUzA6KrttC1Z8LSgFMoFwB7
MD5:	6DB34A0BA78EABD5335C4226D952BFEE
SHA1:	CEC2BBE8DE0F98EEC22EC3C5C6A4E40E7E427AB7
SHA-256:	18DFC557A05E684C754FF7AFA861446BFC44441E3579A91233CEB8EAF896151B
SHA-512:	FBF4144685092A14EFFE284601F305E5147B8C622AA370D66AC9E5C754B1526F4201AF91695808BE5F7B65FB48ED2F8FA218DA0DA86C862751A3321072C66248
Malicious:	false
Reputation:	low
Preview:	.....0Exif..II*.......................Sculpt, LLC.......Ducky.......A......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="B6F344504FD15F75833FB6D747997549" xmpMM:DocumentID="xmp.did:FD7B5824317611E68F0EC9A0A96D40F0" xmpMM:InstanceID="xmp.iid:FD7B5823317611E68F0EC9A0A96D40F0" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:c11de58c-4a2e-412c-b720-438cfd8e5786" stRef:documentID="adobe:docid:photoshop:5594953d-7954-1179-893e-ca3674ef4385"/> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-defa

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (3601)
Category:	downloaded
Size (bytes):	5564
Entropy (8bit):	5.551910906243356
Encrypted:	false
SSDEEP:	96:uBm7MaOr8uroJzDV6u3R3zd4j6zp4tSZCHjuwE9nCDTVpWZ:pQaOr8ur83V33R3hq6+uwLvo
MD5:	9CDA9E740BBF260A190F4041132B5105
SHA1:	603599B494C5F0C9ED5D11CCEA03CA6517DA46DC
SHA-256:	ECFC183E33D25D24AA7C06218E0A413488FFF8774E4B4B87543C766DB9B0B8BA
SHA-512:	EB05AE2C63BA13A30C3B4E5D99507FCD70915B2DB611E8005135EAD278F43D6AC09F92DDDC1C50051B3FD01CA2A0708D075D98C9510AB934944B97A543390326
Malicious:	false
Reputation:	low
URL:	http://iwu.marketing/js/jquery.easing.min.js
Preview:	/. jQuery Easing v1.3 - http://gsgd.co.uk/sandbox/jquery/easing/. . Uses the built in easing capabilities added In jQuery 1.1. * to offer multiple easing options. . TERMS OF USE - EASING EQUATIONS. * . * Open source under the BSD License. . * . * Copyright .... 2001 Robert Penner. * All rights reserved.. . TERMS OF USE - jQuery Easing. * . * Open source under the BSD License. . * . * Copyright .... 2008 George McGinley Smith. * All rights reserved.. . Redistribution and use in source and binary forms, with or without modification, . * are permitted provided that the following conditions are met:. * . * Redistributions of source code must retain the above copyright notice, this list of . * conditions and the following disclaimer.. * Redistributions in binary form must reproduce the above copyright notice, this list . * of conditions and the following disclaimer in the documentation and/or other materials . * provided with the distribution.. * . * Neither the nam

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjstNHLIE_hgtuciJ5kD2SVvm9EuKBLciPuafz3wCowuqNcCXMXMqvX1V15z7O0NTdP-YNB-dNhn3RPz94IBkGDMTWLCLIO6Pw8YrbBUgXGj355p7ov1X6qR-6wmGxHfqvfjpZdVnx7s&sig=Cg0ArKJSzGHsoaDMhjNQEAE&id=lidar2&mcvt=1165&p=0,0,90,970&mtos=1165,1165,1165,1165,1165&tos=1165,0,0,0,0&v=20240313&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=20&adk=228266070&rs=2&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=671173500&rst=1710778933074&rpt=2110&met=ie&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 18, 2024 17:21:50.395006895 CET	192.168.2.4	1.1.1.1	0x9d41	Standard query (0)	iwu.marketing	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:21:50.397264957 CET	192.168.2.4	1.1.1.1	0x1549	Standard query (0)	iwu.marketing	65	IN (0x0001)	false
Mar 18, 2024 17:21:51.102701902 CET	192.168.2.4	1.1.1.1	0x2d47	Standard query (0)	secure2.indwes.edu	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:21:51.102941990 CET	192.168.2.4	1.1.1.1	0x84ae	Standard query (0)	secure2.indwes.edu	65	IN (0x0001)	false
Mar 18, 2024 17:21:51.467957973 CET	192.168.2.4	1.1.1.1	0xe9e1	Standard query (0)	iwu.marketing	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:21:51.468200922 CET	192.168.2.4	1.1.1.1	0x5a12	Standard query (0)	iwu.marketing	65	IN (0x0001)	false
Mar 18, 2024 17:21:52.029536963 CET	192.168.2.4	1.1.1.1	0x78b5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:21:52.030488968 CET	192.168.2.4	1.1.1.1	0x935d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 18, 2024 17:21:52.319786072 CET	192.168.2.4	1.1.1.1	0xc94	Standard query (0)	browser-update.org	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:21:52.320734978 CET	192.168.2.4	1.1.1.1	0x23ba	Standard query (0)	browser-update.org	65	IN (0x0001)	false
Mar 18, 2024 17:21:52.465339899 CET	192.168.2.4	1.1.1.1	0xad44	Standard query (0)	browser-update.org	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:21:52.465626001 CET	192.168.2.4	1.1.1.1	0xe38b	Standard query (0)	browser-update.org	65	IN (0x0001)	false
Mar 18, 2024 17:21:52.483939886 CET	192.168.2.4	1.1.1.1	0xbf37	Standard query (0)	blocked.by.waap.network	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:21:52.484241009 CET	192.168.2.4	1.1.1.1	0x4dd7	Standard query (0)	blocked.by.waap.network	65	IN (0x0001)	false
Mar 18, 2024 17:21:53.468055010 CET	192.168.2.4	1.1.1.1	0xc2cd	Standard query (0)	secure2.indwes.edu	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:21:53.470211983 CET	192.168.2.4	1.1.1.1	0xf45c	Standard query (0)	secure2.indwes.edu	65	IN (0x0001)	false
Mar 18, 2024 17:21:54.428487062 CET	192.168.2.4	1.1.1.1	0x3c88	Standard query (0)	browser-update.org	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:21:54.429613113 CET	192.168.2.4	1.1.1.1	0xb690	Standard query (0)	browser-update.org	65	IN (0x0001)	false
Mar 18, 2024 17:22:02.849715948 CET	192.168.2.4	1.1.1.1	0xd345	Standard query (0)	browser-update.org	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:02.850460052 CET	192.168.2.4	1.1.1.1	0x9bf2	Standard query (0)	browser-update.org	65	IN (0x0001)	false
Mar 18, 2024 17:22:04.154999018 CET	192.168.2.4	1.1.1.1	0x3591	Standard query (0)	cdn.fuseplatform.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:04.159527063 CET	192.168.2.4	1.1.1.1	0x475c	Standard query (0)	cdn.fuseplatform.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:05.185522079 CET	192.168.2.4	1.1.1.1	0x39da	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:05.186016083 CET	192.168.2.4	1.1.1.1	0xc559	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:05.187304974 CET	192.168.2.4	1.1.1.1	0x7a85	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:05.187637091 CET	192.168.2.4	1.1.1.1	0xe661	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:05.604728937 CET	192.168.2.4	1.1.1.1	0xe44b	Standard query (0)	cdn.fuseplatform.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:05.605072021 CET	192.168.2.4	1.1.1.1	0x785b	Standard query (0)	cdn.fuseplatform.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:05.940351009 CET	192.168.2.4	1.1.1.1	0xd540	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:05.941421032 CET	192.168.2.4	1.1.1.1	0x51c0	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:06.597157001 CET	192.168.2.4	1.1.1.1	0xc090	Standard query (0)	config.aps.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.597481966 CET	192.168.2.4	1.1.1.1	0x2873	Standard query (0)	config.aps.amazon-adsystem.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:06.613718033 CET	192.168.2.4	1.1.1.1	0xe7dc	Standard query (0)	bidder.criteo.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.614125967 CET	192.168.2.4	1.1.1.1	0x29c8	Standard query (0)	bidder.criteo.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:06.616895914 CET	192.168.2.4	1.1.1.1	0xced5	Standard query (0)	prebid.media.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.617280960 CET	192.168.2.4	1.1.1.1	0xb0ac	Standard query (0)	prebid.media.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:06.620213032 CET	192.168.2.4	1.1.1.1	0xe6fe	Standard query (0)	tlx.3lift.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.621433973 CET	192.168.2.4	1.1.1.1	0xdebb	Standard query (0)	tlx.3lift.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:06.627173901 CET	192.168.2.4	1.1.1.1	0x66a6	Standard query (0)	hbopenbid.pubmatic.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:06.627173901 CET	192.168.2.4	1.1.1.1	0x977b	Standard query (0)	hbopenbid.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.632891893 CET	192.168.2.4	1.1.1.1	0x524f	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.632891893 CET	192.168.2.4	1.1.1.1	0x208	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:06.636236906 CET	192.168.2.4	1.1.1.1	0x2c9e	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.636576891 CET	192.168.2.4	1.1.1.1	0x74db	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:06.640431881 CET	192.168.2.4	1.1.1.1	0xf566	Standard query (0)	prebid.a-mo.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.641094923 CET	192.168.2.4	1.1.1.1	0x84b1	Standard query (0)	prebid.a-mo.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:06.692169905 CET	192.168.2.4	1.1.1.1	0x90bf	Standard query (0)	g2.gumgum.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.692169905 CET	192.168.2.4	1.1.1.1	0x29a1	Standard query (0)	g2.gumgum.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:06.747443914 CET	192.168.2.4	1.1.1.1	0xf1fc	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.747800112 CET	192.168.2.4	1.1.1.1	0x51a3	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:07.495378017 CET	192.168.2.4	1.1.1.1	0x1c5e	Standard query (0)	btloader.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:07.499044895 CET	192.168.2.4	1.1.1.1	0xfce3	Standard query (0)	btloader.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:07.504092932 CET	192.168.2.4	1.1.1.1	0x15ae	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:07.504532099 CET	192.168.2.4	1.1.1.1	0x46dd	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:07.505305052 CET	192.168.2.4	1.1.1.1	0x120e	Standard query (0)	tags.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:07.505667925 CET	192.168.2.4	1.1.1.1	0xde1d	Standard query (0)	tags.crwdcntrl.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:07.577891111 CET	192.168.2.4	1.1.1.1	0x231a	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:07.578782082 CET	192.168.2.4	1.1.1.1	0xd551	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:08.147847891 CET	192.168.2.4	1.1.1.1	0x5c28	Standard query (0)	static.criteo.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.148302078 CET	192.168.2.4	1.1.1.1	0x181d	Standard query (0)	static.criteo.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:08.247225046 CET	192.168.2.4	1.1.1.1	0x6939	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.247718096 CET	192.168.2.4	1.1.1.1	0x5815	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:08.306385994 CET	192.168.2.4	1.1.1.1	0x967b	Standard query (0)	api.btloader.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.306909084 CET	192.168.2.4	1.1.1.1	0x39f1	Standard query (0)	api.btloader.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:08.308361053 CET	192.168.2.4	1.1.1.1	0x62fd	Standard query (0)	ad-delivery.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.308785915 CET	192.168.2.4	1.1.1.1	0x2ce4	Standard query (0)	ad-delivery.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:08.309678078 CET	192.168.2.4	1.1.1.1	0xea3e	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.310112953 CET	192.168.2.4	1.1.1.1	0x31e9	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:08.658198118 CET	192.168.2.4	1.1.1.1	0x47c	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.658674002 CET	192.168.2.4	1.1.1.1	0xfc8a	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:08.681720972 CET	192.168.2.4	1.1.1.1	0xf22f	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.682048082 CET	192.168.2.4	1.1.1.1	0xa525	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:08.683844090 CET	192.168.2.4	1.1.1.1	0x723f	Standard query (0)	g2.gumgum.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.684103966 CET	192.168.2.4	1.1.1.1	0x36f8	Standard query (0)	g2.gumgum.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:08.692642927 CET	192.168.2.4	1.1.1.1	0x9bda	Standard query (0)	tlx.3lift.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.693026066 CET	192.168.2.4	1.1.1.1	0xf67	Standard query (0)	tlx.3lift.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:08.695137978 CET	192.168.2.4	1.1.1.1	0x422f	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.695461035 CET	192.168.2.4	1.1.1.1	0x6311	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:08.698431969 CET	192.168.2.4	1.1.1.1	0x932e	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.698652029 CET	192.168.2.4	1.1.1.1	0xe0fa	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:08.703032970 CET	192.168.2.4	1.1.1.1	0xd17d	Standard query (0)	prebid.media.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.703252077 CET	192.168.2.4	1.1.1.1	0x3924	Standard query (0)	prebid.media.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:08.713141918 CET	192.168.2.4	1.1.1.1	0xd9a0	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.713468075 CET	192.168.2.4	1.1.1.1	0x691e	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:08.943754911 CET	192.168.2.4	1.1.1.1	0x13f8	Standard query (0)	de9a11s35xj3d.cloudfront.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.944156885 CET	192.168.2.4	1.1.1.1	0x9613	Standard query (0)	de9a11s35xj3d.cloudfront.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:08.946243048 CET	192.168.2.4	1.1.1.1	0xa15e	Standard query (0)	rtb-use.mfadsrvr.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.947117090 CET	192.168.2.4	1.1.1.1	0x6429	Standard query (0)	rtb-use.mfadsrvr.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:08.975596905 CET	192.168.2.4	1.1.1.1	0xddce	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.976227045 CET	192.168.2.4	1.1.1.1	0x9afd	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:08.997827053 CET	192.168.2.4	1.1.1.1	0x7c6f	Standard query (0)	static.criteo.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.998264074 CET	192.168.2.4	1.1.1.1	0x9535	Standard query (0)	static.criteo.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:08.998913050 CET	192.168.2.4	1.1.1.1	0x234e	Standard query (0)	ad-delivery.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.999264002 CET	192.168.2.4	1.1.1.1	0x700a	Standard query (0)	ad-delivery.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:09.001507998 CET	192.168.2.4	1.1.1.1	0xaf2e	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.001791000 CET	192.168.2.4	1.1.1.1	0x5670	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:09.030158043 CET	192.168.2.4	1.1.1.1	0x6725	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.030478954 CET	192.168.2.4	1.1.1.1	0xb4cc	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:09.525274038 CET	192.168.2.4	1.1.1.1	0x3060	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.525937080 CET	192.168.2.4	1.1.1.1	0x3378	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:09.526396990 CET	192.168.2.4	1.1.1.1	0x7740	Standard query (0)	pixel.s3xified.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.526660919 CET	192.168.2.4	1.1.1.1	0x76ce	Standard query (0)	pixel.s3xified.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:09.528491020 CET	192.168.2.4	1.1.1.1	0xa95a	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.528736115 CET	192.168.2.4	1.1.1.1	0x9544	Standard query (0)	um.simpli.fi	65	IN (0x0001)	false
Mar 18, 2024 17:22:09.529150963 CET	192.168.2.4	1.1.1.1	0x5e5c	Standard query (0)	trace.mediago.io	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.529462099 CET	192.168.2.4	1.1.1.1	0x230	Standard query (0)	trace.mediago.io	65	IN (0x0001)	false
Mar 18, 2024 17:22:09.531284094 CET	192.168.2.4	1.1.1.1	0xad0c	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.531970024 CET	192.168.2.4	1.1.1.1	0xaec8	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Mar 18, 2024 17:22:09.532587051 CET	192.168.2.4	1.1.1.1	0x4eff	Standard query (0)	b1sync.zemanta.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.532852888 CET	192.168.2.4	1.1.1.1	0x593d	Standard query (0)	b1sync.zemanta.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:09.542113066 CET	192.168.2.4	1.1.1.1	0xa61e	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.545819998 CET	192.168.2.4	1.1.1.1	0xb31d	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:09.571703911 CET	192.168.2.4	1.1.1.1	0x4859	Standard query (0)	u.openx.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.572084904 CET	192.168.2.4	1.1.1.1	0xcc94	Standard query (0)	u.openx.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:09.584731102 CET	192.168.2.4	1.1.1.1	0xadb0	Standard query (0)	ssbsync-us.smartadserver.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.585024118 CET	192.168.2.4	1.1.1.1	0xae2b	Standard query (0)	ssbsync-us.smartadserver.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:09.865163088 CET	192.168.2.4	1.1.1.1	0x5e41	Standard query (0)	sync.inmobi.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.865428925 CET	192.168.2.4	1.1.1.1	0x593e	Standard query (0)	sync.inmobi.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:09.966244936 CET	192.168.2.4	1.1.1.1	0x9f38	Standard query (0)	de9a11s35xj3d.cloudfront.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.966541052 CET	192.168.2.4	1.1.1.1	0x7693	Standard query (0)	de9a11s35xj3d.cloudfront.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:09.968301058 CET	192.168.2.4	1.1.1.1	0x28f9	Standard query (0)	api.btloader.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.968349934 CET	192.168.2.4	1.1.1.1	0xffcc	Standard query (0)	api.btloader.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:09.998076916 CET	192.168.2.4	1.1.1.1	0xb369	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.998451948 CET	192.168.2.4	1.1.1.1	0xb8d8	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:10.007577896 CET	192.168.2.4	1.1.1.1	0x90f6	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.007890940 CET	192.168.2.4	1.1.1.1	0xdd0f	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:10.101217031 CET	192.168.2.4	1.1.1.1	0x9292	Standard query (0)	sync.intentiq.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.101552963 CET	192.168.2.4	1.1.1.1	0xd089	Standard query (0)	sync.intentiq.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:10.167994976 CET	192.168.2.4	1.1.1.1	0x8e60	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.168257952 CET	192.168.2.4	1.1.1.1	0x4fd3	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:10.293760061 CET	192.168.2.4	1.1.1.1	0x6f0a	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.294121981 CET	192.168.2.4	1.1.1.1	0x8977	Standard query (0)	image6.pubmatic.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:10.378103018 CET	192.168.2.4	1.1.1.1	0x3f6b	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.378388882 CET	192.168.2.4	1.1.1.1	0x2da2	Standard query (0)	id5-sync.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:10.498562098 CET	192.168.2.4	1.1.1.1	0xa2e9	Standard query (0)	rtb.mfadsrvr.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.498732090 CET	192.168.2.4	1.1.1.1	0x79a8	Standard query (0)	rtb.mfadsrvr.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:10.499226093 CET	192.168.2.4	1.1.1.1	0x71b1	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.499866962 CET	192.168.2.4	1.1.1.1	0xaca5	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:10.617605925 CET	192.168.2.4	1.1.1.1	0x9a55	Standard query (0)	sync1.intentiq.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.617928028 CET	192.168.2.4	1.1.1.1	0x5ee5	Standard query (0)	sync1.intentiq.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:10.692084074 CET	192.168.2.4	1.1.1.1	0xd84	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.692421913 CET	192.168.2.4	1.1.1.1	0x3a16	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:10.728549957 CET	192.168.2.4	1.1.1.1	0x2eac	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.728761911 CET	192.168.2.4	1.1.1.1	0x7b66	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:10.736362934 CET	192.168.2.4	1.1.1.1	0x73fd	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.736757040 CET	192.168.2.4	1.1.1.1	0xc27f	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Mar 18, 2024 17:22:10.799124956 CET	192.168.2.4	1.1.1.1	0xc8d1	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.799382925 CET	192.168.2.4	1.1.1.1	0x5c3	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:10.800596952 CET	192.168.2.4	1.1.1.1	0x74f6	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.800946951 CET	192.168.2.4	1.1.1.1	0x3420	Standard query (0)	id5-sync.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:10.839694977 CET	192.168.2.4	1.1.1.1	0x8a95	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.839694977 CET	192.168.2.4	1.1.1.1	0x51d8	Standard query (0)	us01.z.antigena.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:10.839694977 CET	192.168.2.4	1.1.1.1	0x2fd6	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:10.839694977 CET	192.168.2.4	1.1.1.1	0x9e7c	Standard query (0)	us01.z.antigena.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.039589882 CET	192.168.2.4	1.1.1.1	0x9df0	Standard query (0)	bh.contextweb.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.039937019 CET	192.168.2.4	1.1.1.1	0x880	Standard query (0)	bh.contextweb.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:11.043055058 CET	192.168.2.4	1.1.1.1	0x10a9	Standard query (0)	creativecdn.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.043648005 CET	192.168.2.4	1.1.1.1	0x7b92	Standard query (0)	creativecdn.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:11.048392057 CET	192.168.2.4	1.1.1.1	0x32	Standard query (0)	data.adsrvr.org	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.049453020 CET	192.168.2.4	1.1.1.1	0xab77	Standard query (0)	data.adsrvr.org	65	IN (0x0001)	false
Mar 18, 2024 17:22:11.051673889 CET	192.168.2.4	1.1.1.1	0xb598	Standard query (0)	pixel-us-east.rubiconproject.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.051992893 CET	192.168.2.4	1.1.1.1	0x521	Standard query (0)	pixel-us-east.rubiconproject.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:11.055368900 CET	192.168.2.4	1.1.1.1	0xc0b	Standard query (0)	rtb.mfadsrvr.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.055665016 CET	192.168.2.4	1.1.1.1	0x91c0	Standard query (0)	rtb.mfadsrvr.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:11.240196943 CET	192.168.2.4	1.1.1.1	0xfe81	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.240454912 CET	192.168.2.4	1.1.1.1	0x61a1	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:11.260766983 CET	192.168.2.4	1.1.1.1	0x50a2	Standard query (0)	sync1.intentiq.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.261001110 CET	192.168.2.4	1.1.1.1	0x4609	Standard query (0)	sync1.intentiq.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:11.271907091 CET	192.168.2.4	1.1.1.1	0x40	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.272202969 CET	192.168.2.4	1.1.1.1	0xb6b2	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:11.287915945 CET	192.168.2.4	1.1.1.1	0xa651	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.288244009 CET	192.168.2.4	1.1.1.1	0xb0c4	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:11.395056009 CET	192.168.2.4	1.1.1.1	0x7889	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.397329092 CET	192.168.2.4	1.1.1.1	0xf508	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:11.448666096 CET	192.168.2.4	1.1.1.1	0x85db	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.448852062 CET	192.168.2.4	1.1.1.1	0xd80c	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:11.628674030 CET	192.168.2.4	1.1.1.1	0x8ff1	Standard query (0)	pool.admedo.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.629152060 CET	192.168.2.4	1.1.1.1	0x126	Standard query (0)	pool.admedo.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:11.655841112 CET	192.168.2.4	1.1.1.1	0x8a6	Standard query (0)	lb.eu-1-id5-sync.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.656076908 CET	192.168.2.4	1.1.1.1	0x7399	Standard query (0)	lb.eu-1-id5-sync.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:11.669343948 CET	192.168.2.4	1.1.1.1	0x5fa2	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.669675112 CET	192.168.2.4	1.1.1.1	0x7f51	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:11.761930943 CET	192.168.2.4	1.1.1.1	0xa103	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.762353897 CET	192.168.2.4	1.1.1.1	0x391d	Standard query (0)	id5-sync.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:11.886678934 CET	192.168.2.4	1.1.1.1	0xe2e6	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.887320042 CET	192.168.2.4	1.1.1.1	0x494a	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:11.890235901 CET	192.168.2.4	1.1.1.1	0x54b8	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.890687943 CET	192.168.2.4	1.1.1.1	0xf2b6	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:11.891732931 CET	192.168.2.4	1.1.1.1	0xb89	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.892020941 CET	192.168.2.4	1.1.1.1	0xcdf1	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:11.999639988 CET	192.168.2.4	1.1.1.1	0x48cb	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:12.000160933 CET	192.168.2.4	1.1.1.1	0x4626	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:12.068511963 CET	192.168.2.4	1.1.1.1	0x651e	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:12.068721056 CET	192.168.2.4	1.1.1.1	0x699f	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:12.140469074 CET	192.168.2.4	1.1.1.1	0x9e9c	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:12.140899897 CET	192.168.2.4	1.1.1.1	0x74ac	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:12.447899103 CET	192.168.2.4	1.1.1.1	0x546c	Standard query (0)	lb.eu-1-id5-sync.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:12.448244095 CET	192.168.2.4	1.1.1.1	0xa390	Standard query (0)	lb.eu-1-id5-sync.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:12.512954950 CET	192.168.2.4	1.1.1.1	0xeb0a	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:12.513326883 CET	192.168.2.4	1.1.1.1	0xd260	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:13.216568947 CET	192.168.2.4	1.1.1.1	0x8a20	Standard query (0)	simage4.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:13.216895103 CET	192.168.2.4	1.1.1.1	0x6bd	Standard query (0)	simage4.pubmatic.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:13.264273882 CET	192.168.2.4	1.1.1.1	0xb003	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:13.264853001 CET	192.168.2.4	1.1.1.1	0x81e5	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:13.952076912 CET	192.168.2.4	1.1.1.1	0xc41c	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:13.952282906 CET	192.168.2.4	1.1.1.1	0xab64	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:14.088587999 CET	192.168.2.4	1.1.1.1	0xed39	Standard query (0)	cm.adgrx.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.088850975 CET	192.168.2.4	1.1.1.1	0xe033	Standard query (0)	cm.adgrx.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:14.219841957 CET	192.168.2.4	1.1.1.1	0x56cd	Standard query (0)	thrtle.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.220396042 CET	192.168.2.4	1.1.1.1	0xac60	Standard query (0)	thrtle.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:14.223786116 CET	192.168.2.4	1.1.1.1	0x8696	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.223978043 CET	192.168.2.4	1.1.1.1	0x448	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:14.225327969 CET	192.168.2.4	1.1.1.1	0x4085	Standard query (0)	sync.bfmio.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.225634098 CET	192.168.2.4	1.1.1.1	0xee5c	Standard query (0)	sync.bfmio.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:14.227319956 CET	192.168.2.4	1.1.1.1	0x534e	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.227514029 CET	192.168.2.4	1.1.1.1	0xe894	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:14.228982925 CET	192.168.2.4	1.1.1.1	0xffe1	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.229337931 CET	192.168.2.4	1.1.1.1	0x6ada	Standard query (0)	sync.ipredictive.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:14.230899096 CET	192.168.2.4	1.1.1.1	0xe643	Standard query (0)	pubmatic-match.dotomi.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.231277943 CET	192.168.2.4	1.1.1.1	0xa24a	Standard query (0)	pubmatic-match.dotomi.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:14.728889942 CET	192.168.2.4	1.1.1.1	0xe23c	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.729263067 CET	192.168.2.4	1.1.1.1	0x81c4	Standard query (0)	image4.pubmatic.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:14.737327099 CET	192.168.2.4	1.1.1.1	0xb122	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.737584114 CET	192.168.2.4	1.1.1.1	0xabbb	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:14.779189110 CET	192.168.2.4	1.1.1.1	0xdaad	Standard query (0)	rtgcloudsql.2trk.info	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.779880047 CET	192.168.2.4	1.1.1.1	0x95e	Standard query (0)	rtgcloudsql.2trk.info	65	IN (0x0001)	false
Mar 18, 2024 17:22:14.811300039 CET	192.168.2.4	1.1.1.1	0xad8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.811791897 CET	192.168.2.4	1.1.1.1	0xd0fc	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:15.099411011 CET	192.168.2.4	1.1.1.1	0xd62d	Standard query (0)	thrtle.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:15.099688053 CET	192.168.2.4	1.1.1.1	0x2ccd	Standard query (0)	thrtle.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:15.261202097 CET	192.168.2.4	1.1.1.1	0x5ac8	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:15.261701107 CET	192.168.2.4	1.1.1.1	0x354a	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:15.395591974 CET	192.168.2.4	1.1.1.1	0x3d6c	Standard query (0)	cdn.2trk.info	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:15.395981073 CET	192.168.2.4	1.1.1.1	0xed8	Standard query (0)	cdn.2trk.info	65	IN (0x0001)	false
Mar 18, 2024 17:22:15.550131083 CET	192.168.2.4	1.1.1.1	0xc4ee	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:15.550563097 CET	192.168.2.4	1.1.1.1	0xfffb	Standard query (0)	image4.pubmatic.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:16.124908924 CET	192.168.2.4	1.1.1.1	0xfb31	Standard query (0)	rtgcdn.2trk.info	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:16.125669956 CET	192.168.2.4	1.1.1.1	0xae8	Standard query (0)	rtgcdn.2trk.info	65	IN (0x0001)	false
Mar 18, 2024 17:22:16.127518892 CET	192.168.2.4	1.1.1.1	0x910c	Standard query (0)	cdn.2trk.info	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:16.127794981 CET	192.168.2.4	1.1.1.1	0xdae3	Standard query (0)	cdn.2trk.info	65	IN (0x0001)	false
Mar 18, 2024 17:22:16.338279963 CET	192.168.2.4	1.1.1.1	0x2aef	Standard query (0)	cms.quantserve.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:16.338459015 CET	192.168.2.4	1.1.1.1	0x34a5	Standard query (0)	cms.quantserve.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:16.413752079 CET	192.168.2.4	1.1.1.1	0x7b25	Standard query (0)	dsp.adkernel.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:16.414563894 CET	192.168.2.4	1.1.1.1	0xb10e	Standard query (0)	dsp.adkernel.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:16.534271002 CET	192.168.2.4	1.1.1.1	0x6f2e	Standard query (0)	a.rfihub.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:16.534538031 CET	192.168.2.4	1.1.1.1	0xde	Standard query (0)	a.rfihub.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:16.536299944 CET	192.168.2.4	1.1.1.1	0xaa8a	Standard query (0)	gtrace.mediago.io	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:16.536562920 CET	192.168.2.4	1.1.1.1	0x981d	Standard query (0)	gtrace.mediago.io	65	IN (0x0001)	false
Mar 18, 2024 17:22:17.398668051 CET	192.168.2.4	1.1.1.1	0x34db	Standard query (0)	sync.technoratimedia.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:17.398911953 CET	192.168.2.4	1.1.1.1	0xabaa	Standard query (0)	sync.technoratimedia.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:17.474430084 CET	192.168.2.4	1.1.1.1	0x9c1a	Standard query (0)	bid.2trk.info	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:17.474697113 CET	192.168.2.4	1.1.1.1	0x6ec1	Standard query (0)	bid.2trk.info	65	IN (0x0001)	false
Mar 18, 2024 17:22:17.508502007 CET	192.168.2.4	1.1.1.1	0xa530	Standard query (0)	cms.quantserve.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:17.508976936 CET	192.168.2.4	1.1.1.1	0xf880	Standard query (0)	cms.quantserve.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:17.511677027 CET	192.168.2.4	1.1.1.1	0x9ad	Standard query (0)	rtgcdn.2trk.info	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:17.511894941 CET	192.168.2.4	1.1.1.1	0x5495	Standard query (0)	rtgcdn.2trk.info	65	IN (0x0001)	false
Mar 18, 2024 17:22:17.872270107 CET	192.168.2.4	1.1.1.1	0x4ce4	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:17.872454882 CET	192.168.2.4	1.1.1.1	0xf7c3	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:18.004357100 CET	192.168.2.4	1.1.1.1	0xc7f8	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:18.004574060 CET	192.168.2.4	1.1.1.1	0xe01c	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:18.014553070 CET	192.168.2.4	1.1.1.1	0x2591	Standard query (0)	bid.2trk.info	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:18.015552044 CET	192.168.2.4	1.1.1.1	0xd98	Standard query (0)	bid.2trk.info	65	IN (0x0001)	false
Mar 18, 2024 17:22:19.127625942 CET	192.168.2.4	1.1.1.1	0x963d	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:19.127846003 CET	192.168.2.4	1.1.1.1	0xe3a1	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:20.405045033 CET	192.168.2.4	1.1.1.1	0x7050	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:20.405333042 CET	192.168.2.4	1.1.1.1	0x3b9e	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:23.383722067 CET	192.168.2.4	1.1.1.1	0x38ef	Standard query (0)	d31otfhas71ais.cloudfront.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:23.384027958 CET	192.168.2.4	1.1.1.1	0xfc48	Standard query (0)	d31otfhas71ais.cloudfront.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:23.859600067 CET	192.168.2.4	1.1.1.1	0xa6a8	Standard query (0)	d31otfhas71ais.cloudfront.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:23.859880924 CET	192.168.2.4	1.1.1.1	0xb817	Standard query (0)	d31otfhas71ais.cloudfront.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:40.803340912 CET	192.168.2.4	1.1.1.1	0x1abe	Standard query (0)	indwes.tfaforms.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:40.804603100 CET	192.168.2.4	1.1.1.1	0x800d	Standard query (0)	indwes.tfaforms.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:41.891515970 CET	192.168.2.4	1.1.1.1	0x9db	Standard query (0)	match.deepintent.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:41.892086029 CET	192.168.2.4	1.1.1.1	0xe809	Standard query (0)	match.deepintent.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:41.983001947 CET	192.168.2.4	1.1.1.1	0x6c05	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:41.983644962 CET	192.168.2.4	1.1.1.1	0x3172	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:42.196557999 CET	192.168.2.4	1.1.1.1	0xcd05	Standard query (0)	ad.mrtnsvr.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:42.197033882 CET	192.168.2.4	1.1.1.1	0xcc36	Standard query (0)	ad.mrtnsvr.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:42.619190931 CET	192.168.2.4	1.1.1.1	0xccea	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:42.669101000 CET	192.168.2.4	1.1.1.1	0x930e	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:42.824481964 CET	192.168.2.4	1.1.1.1	0x7b61	Standard query (0)	synchroscript.deliveryengine.adswizz.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:42.825774908 CET	192.168.2.4	1.1.1.1	0xa8bf	Standard query (0)	synchroscript.deliveryengine.adswizz.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:42.827374935 CET	192.168.2.4	1.1.1.1	0xafe9	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:42.827887058 CET	192.168.2.4	1.1.1.1	0x610a	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:43.004345894 CET	192.168.2.4	1.1.1.1	0xd03b	Standard query (0)	rtb-use.mfadsrvr.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:43.004539013 CET	192.168.2.4	1.1.1.1	0x9524	Standard query (0)	rtb-use.mfadsrvr.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:43.673481941 CET	192.168.2.4	1.1.1.1	0x7ed7	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:43.674563885 CET	192.168.2.4	1.1.1.1	0x5cd4	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:43.731339931 CET	192.168.2.4	1.1.1.1	0x64fd	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:43.731755018 CET	192.168.2.4	1.1.1.1	0xd053	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:43.839484930 CET	192.168.2.4	1.1.1.1	0xecae	Standard query (0)	synchroscript.deliveryengine.adswizz.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:43.840264082 CET	192.168.2.4	1.1.1.1	0xc922	Standard query (0)	synchroscript.deliveryengine.adswizz.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:44.138420105 CET	192.168.2.4	1.1.1.1	0x8a02	Standard query (0)	pippio.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:44.138818026 CET	192.168.2.4	1.1.1.1	0x8866	Standard query (0)	pippio.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:44.481640100 CET	192.168.2.4	1.1.1.1	0x4702	Standard query (0)	rtb.adentifi.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:44.482760906 CET	192.168.2.4	1.1.1.1	0xb70b	Standard query (0)	rtb.adentifi.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:44.490461111 CET	192.168.2.4	1.1.1.1	0x5c24	Standard query (0)	pmp.mxptint.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:44.491349936 CET	192.168.2.4	1.1.1.1	0xb6e9	Standard query (0)	pmp.mxptint.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:44.637645006 CET	192.168.2.4	1.1.1.1	0x3dcf	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:44.638608932 CET	192.168.2.4	1.1.1.1	0x76e7	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:46.610492945 CET	192.168.2.4	1.1.1.1	0xcaee	Standard query (0)	www.indwes.edu	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:46.611428022 CET	192.168.2.4	1.1.1.1	0xa90f	Standard query (0)	www.indwes.edu	65	IN (0x0001)	false
Mar 18, 2024 17:22:47.821700096 CET	192.168.2.4	1.1.1.1	0x1304	Standard query (0)	indwes.tfaforms.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:47.822144985 CET	192.168.2.4	1.1.1.1	0xf86e	Standard query (0)	indwes.tfaforms.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:47.824605942 CET	192.168.2.4	1.1.1.1	0xafe	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:47.824927092 CET	192.168.2.4	1.1.1.1	0x2502	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:47.825515032 CET	192.168.2.4	1.1.1.1	0xd9dc	Standard query (0)	www.indwes.edu	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:47.825875998 CET	192.168.2.4	1.1.1.1	0x68fe	Standard query (0)	www.indwes.edu	65	IN (0x0001)	false
Mar 18, 2024 17:22:48.080724001 CET	192.168.2.4	1.1.1.1	0xa230	Standard query (0)	pmp.mxptint.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:48.081191063 CET	192.168.2.4	1.1.1.1	0x694	Standard query (0)	pmp.mxptint.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:48.617019892 CET	192.168.2.4	1.1.1.1	0x1729	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:48.617511034 CET	192.168.2.4	1.1.1.1	0xd3a5	Standard query (0)	pm.w55c.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:48.714180946 CET	192.168.2.4	1.1.1.1	0x1400	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:48.714509010 CET	192.168.2.4	1.1.1.1	0x8117	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:48.849272966 CET	192.168.2.4	1.1.1.1	0x1fab	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:48.849807978 CET	192.168.2.4	1.1.1.1	0x21ac	Standard query (0)	p.rfihub.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:48.929399967 CET	192.168.2.4	1.1.1.1	0x70be	Standard query (0)	bpi.rtactivate.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:48.929764032 CET	192.168.2.4	1.1.1.1	0x2965	Standard query (0)	bpi.rtactivate.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:48.931622028 CET	192.168.2.4	1.1.1.1	0xc469	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:48.932166100 CET	192.168.2.4	1.1.1.1	0x1578	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:49.051439047 CET	192.168.2.4	1.1.1.1	0x38ea	Standard query (0)	r.bidswitch.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:49.051753044 CET	192.168.2.4	1.1.1.1	0x83d0	Standard query (0)	r.bidswitch.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:49.484061003 CET	192.168.2.4	1.1.1.1	0x8483	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:49.486778021 CET	192.168.2.4	1.1.1.1	0x78d1	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:49.486778021 CET	192.168.2.4	1.1.1.1	0x8514	Standard query (0)	bpi.rtactivate.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:49.487271070 CET	192.168.2.4	1.1.1.1	0x909e	Standard query (0)	bpi.rtactivate.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:49.890549898 CET	192.168.2.4	1.1.1.1	0xd6ff	Standard query (0)	live.rezync.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:49.890856981 CET	192.168.2.4	1.1.1.1	0xa822	Standard query (0)	live.rezync.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:49.991506100 CET	192.168.2.4	1.1.1.1	0x9d40	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:49.991507053 CET	192.168.2.4	1.1.1.1	0x46ec	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:49.996526957 CET	192.168.2.4	1.1.1.1	0x45cf	Standard query (0)	io.narrative.io	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:49.996910095 CET	192.168.2.4	1.1.1.1	0x64c4	Standard query (0)	io.narrative.io	65	IN (0x0001)	false
Mar 18, 2024 17:22:50.000296116 CET	192.168.2.4	1.1.1.1	0x3384	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:50.000296116 CET	192.168.2.4	1.1.1.1	0xfd90	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Mar 18, 2024 17:22:51.261233091 CET	192.168.2.4	1.1.1.1	0x8957	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:51.262640953 CET	192.168.2.4	1.1.1.1	0x2b0e	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:51.506846905 CET	192.168.2.4	1.1.1.1	0x89c2	Standard query (0)	us-east-1-otel.formassembly.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:51.508147001 CET	192.168.2.4	1.1.1.1	0x3326	Standard query (0)	us-east-1-otel.formassembly.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:51.648808002 CET	192.168.2.4	1.1.1.1	0x97bf	Standard query (0)	ad.turn.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:51.649712086 CET	192.168.2.4	1.1.1.1	0x9d79	Standard query (0)	ad.turn.com	65	IN (0x0001)	false
Mar 18, 2024 17:22:54.162062883 CET	192.168.2.4	1.1.1.1	0x44a5	Standard query (0)	pippio.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:54.162811041 CET	192.168.2.4	1.1.1.1	0x748f	Standard query (0)	pippio.com	65	IN (0x0001)	false
Mar 18, 2024 17:23:13.566811085 CET	192.168.2.4	1.1.1.1	0x4ce3	Standard query (0)	beacon.lynx.cognitivlabs.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:13.566988945 CET	192.168.2.4	1.1.1.1	0xfb07	Standard query (0)	beacon.lynx.cognitivlabs.com	65	IN (0x0001)	false
Mar 18, 2024 17:23:13.592046022 CET	192.168.2.4	1.1.1.1	0x4988	Standard query (0)	dis.criteo.com	65	IN (0x0001)	false
Mar 18, 2024 17:23:13.592046022 CET	192.168.2.4	1.1.1.1	0xe048	Standard query (0)	dis.criteo.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:13.601041079 CET	192.168.2.4	1.1.1.1	0xe53a	Standard query (0)	a.tribalfusion.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:13.601193905 CET	192.168.2.4	1.1.1.1	0x891d	Standard query (0)	a.tribalfusion.com	65	IN (0x0001)	false
Mar 18, 2024 17:23:13.614018917 CET	192.168.2.4	1.1.1.1	0xc5a2	Standard query (0)	ums.acuityplatform.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:13.614362955 CET	192.168.2.4	1.1.1.1	0x3acb	Standard query (0)	ums.acuityplatform.com	65	IN (0x0001)	false
Mar 18, 2024 17:23:13.720278025 CET	192.168.2.4	1.1.1.1	0x729d	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:13.720417023 CET	192.168.2.4	1.1.1.1	0xd777	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Mar 18, 2024 17:23:13.720813990 CET	192.168.2.4	1.1.1.1	0xfad2	Standard query (0)	a.audrte.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:13.720813990 CET	192.168.2.4	1.1.1.1	0xa0da	Standard query (0)	a.audrte.com	65	IN (0x0001)	false
Mar 18, 2024 17:23:13.721199036 CET	192.168.2.4	1.1.1.1	0xfe73	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:13.721199036 CET	192.168.2.4	1.1.1.1	0xe0aa	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Mar 18, 2024 17:23:14.168123960 CET	192.168.2.4	1.1.1.1	0x2fa6	Standard query (0)	s.tribalfusion.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:14.168123960 CET	192.168.2.4	1.1.1.1	0x8385	Standard query (0)	s.tribalfusion.com	65	IN (0x0001)	false
Mar 18, 2024 17:23:14.207720995 CET	192.168.2.4	1.1.1.1	0x88c9	Standard query (0)	uipglob.semasio.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:14.207720995 CET	192.168.2.4	1.1.1.1	0xc2d2	Standard query (0)	uipglob.semasio.net	65	IN (0x0001)	false
Mar 18, 2024 17:23:14.209377050 CET	192.168.2.4	1.1.1.1	0x438c	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:14.209503889 CET	192.168.2.4	1.1.1.1	0xa5aa	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Mar 18, 2024 17:23:14.681324959 CET	192.168.2.4	1.1.1.1	0xf612	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:14.681442976 CET	192.168.2.4	1.1.1.1	0xd395	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Mar 18, 2024 17:23:15.351512909 CET	192.168.2.4	1.1.1.1	0x290b	Standard query (0)	uipglob.semasio.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:15.351697922 CET	192.168.2.4	1.1.1.1	0x2a52	Standard query (0)	uipglob.semasio.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 18, 2024 17:21:50.491277933 CET	1.1.1.1	192.168.2.4	0x9d41	No error (0)	iwu.marketing		216.21.12.179	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:21:51.193636894 CET	1.1.1.1	192.168.2.4	0x2d47	No error (0)	secure2.indwes.edu		199.8.17.71	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:21:51.556505919 CET	1.1.1.1	192.168.2.4	0xe9e1	No error (0)	iwu.marketing		216.21.12.179	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:21:52.118211031 CET	1.1.1.1	192.168.2.4	0x78b5	No error (0)	www.google.com		142.250.81.228	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:21:52.118586063 CET	1.1.1.1	192.168.2.4	0x935d	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 18, 2024 17:21:52.420581102 CET	1.1.1.1	192.168.2.4	0xc94	No error (0)	browser-update.org		104.26.12.241	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:21:52.420581102 CET	1.1.1.1	192.168.2.4	0xc94	No error (0)	browser-update.org		104.26.13.241	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:21:52.420581102 CET	1.1.1.1	192.168.2.4	0xc94	No error (0)	browser-update.org		172.67.69.206	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:21:52.420641899 CET	1.1.1.1	192.168.2.4	0x23ba	No error (0)	browser-update.org			65	IN (0x0001)	false
Mar 18, 2024 17:21:52.553416014 CET	1.1.1.1	192.168.2.4	0xad44	No error (0)	browser-update.org		104.26.13.241	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:21:52.553416014 CET	1.1.1.1	192.168.2.4	0xad44	No error (0)	browser-update.org		172.67.69.206	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:21:52.553416014 CET	1.1.1.1	192.168.2.4	0xad44	No error (0)	browser-update.org		104.26.12.241	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:21:52.553997993 CET	1.1.1.1	192.168.2.4	0xe38b	No error (0)	browser-update.org			65	IN (0x0001)	false
Mar 18, 2024 17:21:52.697598934 CET	1.1.1.1	192.168.2.4	0xbf37	No error (0)	blocked.by.waap.network		199.38.148.58	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:21:53.557941914 CET	1.1.1.1	192.168.2.4	0xc2cd	No error (0)	secure2.indwes.edu		199.8.17.71	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:21:54.518156052 CET	1.1.1.1	192.168.2.4	0x3c88	No error (0)	browser-update.org		104.26.13.241	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:21:54.518156052 CET	1.1.1.1	192.168.2.4	0x3c88	No error (0)	browser-update.org		172.67.69.206	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:21:54.518156052 CET	1.1.1.1	192.168.2.4	0x3c88	No error (0)	browser-update.org		104.26.12.241	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:21:54.518172979 CET	1.1.1.1	192.168.2.4	0xb690	No error (0)	browser-update.org			65	IN (0x0001)	false
Mar 18, 2024 17:22:02.938816071 CET	1.1.1.1	192.168.2.4	0x9bf2	No error (0)	browser-update.org			65	IN (0x0001)	false
Mar 18, 2024 17:22:02.938906908 CET	1.1.1.1	192.168.2.4	0xd345	No error (0)	browser-update.org		104.26.13.241	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:02.938906908 CET	1.1.1.1	192.168.2.4	0xd345	No error (0)	browser-update.org		104.26.12.241	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:02.938906908 CET	1.1.1.1	192.168.2.4	0xd345	No error (0)	browser-update.org		172.67.69.206	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:04.244894981 CET	1.1.1.1	192.168.2.4	0x3591	No error (0)	cdn.fuseplatform.net	cdn.fuseplatform.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:04.248902082 CET	1.1.1.1	192.168.2.4	0x475c	No error (0)	cdn.fuseplatform.net	cdn.fuseplatform.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:05.274045944 CET	1.1.1.1	192.168.2.4	0x39da	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:05.274045944 CET	1.1.1.1	192.168.2.4	0x39da	No error (0)	d1ykf07e75w7ss.cloudfront.net		108.138.115.149	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:05.274178028 CET	1.1.1.1	192.168.2.4	0xc559	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:05.275032043 CET	1.1.1.1	192.168.2.4	0x7a85	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:05.275032043 CET	1.1.1.1	192.168.2.4	0x7a85	No error (0)	securepubads46.g.doubleclick.net		142.250.80.98	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:05.276285887 CET	1.1.1.1	192.168.2.4	0xe661	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:05.693475008 CET	1.1.1.1	192.168.2.4	0xe44b	No error (0)	cdn.fuseplatform.net	cdn.fuseplatform.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:05.693581104 CET	1.1.1.1	192.168.2.4	0x785b	No error (0)	cdn.fuseplatform.net	cdn.fuseplatform.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:06.028105974 CET	1.1.1.1	192.168.2.4	0xd540	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:06.028105974 CET	1.1.1.1	192.168.2.4	0xd540	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.028105974 CET	1.1.1.1	192.168.2.4	0xd540	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.028105974 CET	1.1.1.1	192.168.2.4	0xd540	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.028105974 CET	1.1.1.1	192.168.2.4	0xd540	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.031949043 CET	1.1.1.1	192.168.2.4	0x51c0	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:06.261957884 CET	1.1.1.1	192.168.2.4	0xfb2d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:06.261957884 CET	1.1.1.1	192.168.2.4	0xfb2d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.689826965 CET	1.1.1.1	192.168.2.4	0xc090	No error (0)	config.aps.amazon-adsystem.com		108.138.106.108	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.689826965 CET	1.1.1.1	192.168.2.4	0xc090	No error (0)	config.aps.amazon-adsystem.com		108.138.106.59	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.689826965 CET	1.1.1.1	192.168.2.4	0xc090	No error (0)	config.aps.amazon-adsystem.com		108.138.106.70	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.689826965 CET	1.1.1.1	192.168.2.4	0xc090	No error (0)	config.aps.amazon-adsystem.com		108.138.106.56	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.701667070 CET	1.1.1.1	192.168.2.4	0xe7dc	No error (0)	bidder.criteo.com	bidder.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:06.701667070 CET	1.1.1.1	192.168.2.4	0xe7dc	No error (0)	bidder.va1.vip.prod.criteo.com		74.119.119.129	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.702456951 CET	1.1.1.1	192.168.2.4	0x29c8	No error (0)	bidder.criteo.com	bidder.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:06.704446077 CET	1.1.1.1	192.168.2.4	0xced5	No error (0)	prebid.media.net		34.120.63.153	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.710108042 CET	1.1.1.1	192.168.2.4	0xe6fe	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:06.710108042 CET	1.1.1.1	192.168.2.4	0xe6fe	No error (0)	us-east-tlx.3lift.com		34.199.60.123	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.710108042 CET	1.1.1.1	192.168.2.4	0xe6fe	No error (0)	us-east-tlx.3lift.com		52.202.189.95	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.710108042 CET	1.1.1.1	192.168.2.4	0xe6fe	No error (0)	us-east-tlx.3lift.com		34.235.66.232	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.710108042 CET	1.1.1.1	192.168.2.4	0xe6fe	No error (0)	us-east-tlx.3lift.com		54.87.151.16	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.710108042 CET	1.1.1.1	192.168.2.4	0xe6fe	No error (0)	us-east-tlx.3lift.com		50.16.228.46	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.710108042 CET	1.1.1.1	192.168.2.4	0xe6fe	No error (0)	us-east-tlx.3lift.com		34.236.126.215	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.710108042 CET	1.1.1.1	192.168.2.4	0xe6fe	No error (0)	us-east-tlx.3lift.com		34.236.28.68	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.710108042 CET	1.1.1.1	192.168.2.4	0xe6fe	No error (0)	us-east-tlx.3lift.com		34.200.44.154	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.710123062 CET	1.1.1.1	192.168.2.4	0xdebb	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:06.715353012 CET	1.1.1.1	192.168.2.4	0x977b	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:06.715353012 CET	1.1.1.1	192.168.2.4	0x977b	No error (0)	hbprebid-v3.pubmnet.com	gob-njr3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:06.715353012 CET	1.1.1.1	192.168.2.4	0x977b	No error (0)	gob-njr3.pubmnet.com		104.36.115.111	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.715460062 CET	1.1.1.1	192.168.2.4	0x66a6	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:06.715460062 CET	1.1.1.1	192.168.2.4	0x66a6	No error (0)	hbprebid-v3.pubmnet.com	gob-njr3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:06.720980883 CET	1.1.1.1	192.168.2.4	0x524f	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:06.720980883 CET	1.1.1.1	192.168.2.4	0x524f	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:06.720980883 CET	1.1.1.1	192.168.2.4	0x524f	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.720980883 CET	1.1.1.1	192.168.2.4	0x524f	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.720980883 CET	1.1.1.1	192.168.2.4	0x524f	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.720980883 CET	1.1.1.1	192.168.2.4	0x524f	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.720980883 CET	1.1.1.1	192.168.2.4	0x524f	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.720980883 CET	1.1.1.1	192.168.2.4	0x524f	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.720980883 CET	1.1.1.1	192.168.2.4	0x524f	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.720980883 CET	1.1.1.1	192.168.2.4	0x524f	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.720980883 CET	1.1.1.1	192.168.2.4	0x524f	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.720980883 CET	1.1.1.1	192.168.2.4	0x524f	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.720980883 CET	1.1.1.1	192.168.2.4	0x524f	No error (0)	ib.anycast.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.720980883 CET	1.1.1.1	192.168.2.4	0x524f	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.724250078 CET	1.1.1.1	192.168.2.4	0x2c9e	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:06.724250078 CET	1.1.1.1	192.168.2.4	0x2c9e	No error (0)	vap.lijit.com	nae.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:06.724250078 CET	1.1.1.1	192.168.2.4	0x2c9e	No error (0)	nae.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:06.724250078 CET	1.1.1.1	192.168.2.4	0x2c9e	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		54.208.230.72	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.724250078 CET	1.1.1.1	192.168.2.4	0x2c9e	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		3.219.136.222	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.724250078 CET	1.1.1.1	192.168.2.4	0x2c9e	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		52.205.53.165	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.724250078 CET	1.1.1.1	192.168.2.4	0x2c9e	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		52.22.76.231	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.724250078 CET	1.1.1.1	192.168.2.4	0x2c9e	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		44.198.118.241	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.724250078 CET	1.1.1.1	192.168.2.4	0x2c9e	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		34.196.171.240	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.724250078 CET	1.1.1.1	192.168.2.4	0x2c9e	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		52.54.240.30	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.724250078 CET	1.1.1.1	192.168.2.4	0x2c9e	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		18.210.101.188	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.728733063 CET	1.1.1.1	192.168.2.4	0xf566	No error (0)	prebid.a-mo.net	ny5-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:06.728733063 CET	1.1.1.1	192.168.2.4	0xf566	No error (0)	ny5-prebid.a-mx.net		147.75.198.144	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.728733063 CET	1.1.1.1	192.168.2.4	0xf566	No error (0)	ny5-prebid.a-mx.net		147.75.195.55	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.728733063 CET	1.1.1.1	192.168.2.4	0xf566	No error (0)	ny5-prebid.a-mx.net		147.75.195.77	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.729682922 CET	1.1.1.1	192.168.2.4	0x84b1	No error (0)	prebid.a-mo.net	dc13-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:06.737971067 CET	1.1.1.1	192.168.2.4	0x74db	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:06.737971067 CET	1.1.1.1	192.168.2.4	0x74db	No error (0)	vap.lijit.com	nae.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:06.737971067 CET	1.1.1.1	192.168.2.4	0x74db	No error (0)	nae.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:06.780688047 CET	1.1.1.1	192.168.2.4	0x90bf	No error (0)	g2.gumgum.com		44.207.26.76	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.780688047 CET	1.1.1.1	192.168.2.4	0x90bf	No error (0)	g2.gumgum.com		3.224.52.235	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.780688047 CET	1.1.1.1	192.168.2.4	0x90bf	No error (0)	g2.gumgum.com		54.209.123.161	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.780688047 CET	1.1.1.1	192.168.2.4	0x90bf	No error (0)	g2.gumgum.com		44.220.113.62	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.780688047 CET	1.1.1.1	192.168.2.4	0x90bf	No error (0)	g2.gumgum.com		18.210.160.10	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.780688047 CET	1.1.1.1	192.168.2.4	0x90bf	No error (0)	g2.gumgum.com		3.222.223.225	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.780688047 CET	1.1.1.1	192.168.2.4	0x90bf	No error (0)	g2.gumgum.com		54.81.188.163	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.780688047 CET	1.1.1.1	192.168.2.4	0x90bf	No error (0)	g2.gumgum.com		54.82.116.222	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.835916996 CET	1.1.1.1	192.168.2.4	0xf1fc	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:06.835916996 CET	1.1.1.1	192.168.2.4	0xf1fc	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:06.835916996 CET	1.1.1.1	192.168.2.4	0xf1fc	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:06.835916996 CET	1.1.1.1	192.168.2.4	0xf1fc	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		108.138.122.147	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:06.836180925 CET	1.1.1.1	192.168.2.4	0x51a3	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:06.836180925 CET	1.1.1.1	192.168.2.4	0x51a3	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:06.836180925 CET	1.1.1.1	192.168.2.4	0x51a3	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:07.582839966 CET	1.1.1.1	192.168.2.4	0x1c5e	No error (0)	btloader.com		104.22.75.216	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:07.582839966 CET	1.1.1.1	192.168.2.4	0x1c5e	No error (0)	btloader.com		172.67.41.60	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:07.582839966 CET	1.1.1.1	192.168.2.4	0x1c5e	No error (0)	btloader.com		104.22.74.216	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:07.588943958 CET	1.1.1.1	192.168.2.4	0xfce3	No error (0)	btloader.com			65	IN (0x0001)	false
Mar 18, 2024 17:22:07.591784954 CET	1.1.1.1	192.168.2.4	0x46dd	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:07.591911077 CET	1.1.1.1	192.168.2.4	0x15ae	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:07.591911077 CET	1.1.1.1	192.168.2.4	0x15ae	No error (0)	securepubads46.g.doubleclick.net		142.251.40.226	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:07.593461990 CET	1.1.1.1	192.168.2.4	0x120e	No error (0)	tags.crwdcntrl.net		108.138.128.124	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:07.593461990 CET	1.1.1.1	192.168.2.4	0x120e	No error (0)	tags.crwdcntrl.net		108.138.128.28	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:07.593461990 CET	1.1.1.1	192.168.2.4	0x120e	No error (0)	tags.crwdcntrl.net		108.138.128.34	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:07.593461990 CET	1.1.1.1	192.168.2.4	0x120e	No error (0)	tags.crwdcntrl.net		108.138.128.46	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:07.612773895 CET	1.1.1.1	192.168.2.4	0x335d	No error (0)	pagead-googlehosted.l.google.com		142.250.80.1	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:07.666682959 CET	1.1.1.1	192.168.2.4	0x231a	No error (0)	s.amazon-adsystem.com		209.54.182.161	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.236488104 CET	1.1.1.1	192.168.2.4	0x5c28	No error (0)	static.criteo.net	static.va1.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:08.236488104 CET	1.1.1.1	192.168.2.4	0x5c28	No error (0)	static.va1.vip.prod.criteo.net		74.119.119.131	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.236571074 CET	1.1.1.1	192.168.2.4	0x181d	No error (0)	static.criteo.net	static.va1.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:08.335640907 CET	1.1.1.1	192.168.2.4	0x6939	No error (0)	bcp.crwdcntrl.net		44.205.216.19	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.335640907 CET	1.1.1.1	192.168.2.4	0x6939	No error (0)	bcp.crwdcntrl.net		34.198.123.133	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.335640907 CET	1.1.1.1	192.168.2.4	0x6939	No error (0)	bcp.crwdcntrl.net		34.224.142.24	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.335640907 CET	1.1.1.1	192.168.2.4	0x6939	No error (0)	bcp.crwdcntrl.net		52.207.168.130	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.335640907 CET	1.1.1.1	192.168.2.4	0x6939	No error (0)	bcp.crwdcntrl.net		18.214.22.186	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.335640907 CET	1.1.1.1	192.168.2.4	0x6939	No error (0)	bcp.crwdcntrl.net		44.219.90.173	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.335640907 CET	1.1.1.1	192.168.2.4	0x6939	No error (0)	bcp.crwdcntrl.net		44.194.38.192	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.335640907 CET	1.1.1.1	192.168.2.4	0x6939	No error (0)	bcp.crwdcntrl.net		18.207.42.67	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.395050049 CET	1.1.1.1	192.168.2.4	0x967b	No error (0)	api.btloader.com		130.211.23.194	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.396855116 CET	1.1.1.1	192.168.2.4	0x62fd	No error (0)	ad-delivery.net		104.26.2.70	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.396855116 CET	1.1.1.1	192.168.2.4	0x62fd	No error (0)	ad-delivery.net		104.26.3.70	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.396855116 CET	1.1.1.1	192.168.2.4	0x62fd	No error (0)	ad-delivery.net		172.67.69.19	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.397138119 CET	1.1.1.1	192.168.2.4	0x2ce4	No error (0)	ad-delivery.net			65	IN (0x0001)	false
Mar 18, 2024 17:22:08.397732973 CET	1.1.1.1	192.168.2.4	0xea3e	No error (0)	ad.doubleclick.net		142.251.40.230	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.398041010 CET	1.1.1.1	192.168.2.4	0x31e9	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 18, 2024 17:22:08.746601105 CET	1.1.1.1	192.168.2.4	0x47c	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:08.746601105 CET	1.1.1.1	192.168.2.4	0x47c	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.746601105 CET	1.1.1.1	192.168.2.4	0x47c	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.746601105 CET	1.1.1.1	192.168.2.4	0x47c	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.746601105 CET	1.1.1.1	192.168.2.4	0x47c	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.748594046 CET	1.1.1.1	192.168.2.4	0xfc8a	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:08.770348072 CET	1.1.1.1	192.168.2.4	0xf22f	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:08.770348072 CET	1.1.1.1	192.168.2.4	0xf22f	No error (0)	vap.lijit.com	nae.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:08.770348072 CET	1.1.1.1	192.168.2.4	0xf22f	No error (0)	nae.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:08.770348072 CET	1.1.1.1	192.168.2.4	0xf22f	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		67.202.24.120	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.770348072 CET	1.1.1.1	192.168.2.4	0xf22f	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		52.200.35.219	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.770348072 CET	1.1.1.1	192.168.2.4	0xf22f	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		54.221.0.170	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.770348072 CET	1.1.1.1	192.168.2.4	0xf22f	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		35.171.245.183	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.770348072 CET	1.1.1.1	192.168.2.4	0xf22f	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		23.23.25.135	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.770348072 CET	1.1.1.1	192.168.2.4	0xf22f	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		54.85.139.144	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.770348072 CET	1.1.1.1	192.168.2.4	0xf22f	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		54.208.230.72	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.770348072 CET	1.1.1.1	192.168.2.4	0xf22f	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		34.202.94.175	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.771024942 CET	1.1.1.1	192.168.2.4	0xa525	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:08.771024942 CET	1.1.1.1	192.168.2.4	0xa525	No error (0)	vap.lijit.com	nae.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:08.771024942 CET	1.1.1.1	192.168.2.4	0xa525	No error (0)	nae.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:08.772254944 CET	1.1.1.1	192.168.2.4	0x723f	No error (0)	g2.gumgum.com		44.210.155.144	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.772254944 CET	1.1.1.1	192.168.2.4	0x723f	No error (0)	g2.gumgum.com		44.217.65.112	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.772254944 CET	1.1.1.1	192.168.2.4	0x723f	No error (0)	g2.gumgum.com		18.210.160.10	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.772254944 CET	1.1.1.1	192.168.2.4	0x723f	No error (0)	g2.gumgum.com		54.81.188.163	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.772254944 CET	1.1.1.1	192.168.2.4	0x723f	No error (0)	g2.gumgum.com		3.224.52.235	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.772254944 CET	1.1.1.1	192.168.2.4	0x723f	No error (0)	g2.gumgum.com		44.220.113.62	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.772254944 CET	1.1.1.1	192.168.2.4	0x723f	No error (0)	g2.gumgum.com		54.242.45.237	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.772254944 CET	1.1.1.1	192.168.2.4	0x723f	No error (0)	g2.gumgum.com		100.24.133.95	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.781271935 CET	1.1.1.1	192.168.2.4	0x9bda	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:08.781271935 CET	1.1.1.1	192.168.2.4	0x9bda	No error (0)	us-east-tlx.3lift.com		3.222.162.217	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.781271935 CET	1.1.1.1	192.168.2.4	0x9bda	No error (0)	us-east-tlx.3lift.com		3.214.52.170	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.781271935 CET	1.1.1.1	192.168.2.4	0x9bda	No error (0)	us-east-tlx.3lift.com		52.2.205.120	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.781271935 CET	1.1.1.1	192.168.2.4	0x9bda	No error (0)	us-east-tlx.3lift.com		18.215.208.55	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.781271935 CET	1.1.1.1	192.168.2.4	0x9bda	No error (0)	us-east-tlx.3lift.com		107.22.223.49	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.781271935 CET	1.1.1.1	192.168.2.4	0x9bda	No error (0)	us-east-tlx.3lift.com		54.90.176.248	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.781271935 CET	1.1.1.1	192.168.2.4	0x9bda	No error (0)	us-east-tlx.3lift.com		174.129.198.57	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.781271935 CET	1.1.1.1	192.168.2.4	0x9bda	No error (0)	us-east-tlx.3lift.com		3.226.34.86	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.781408072 CET	1.1.1.1	192.168.2.4	0xf67	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:08.783236027 CET	1.1.1.1	192.168.2.4	0x422f	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:08.783236027 CET	1.1.1.1	192.168.2.4	0x422f	No error (0)	d1ykf07e75w7ss.cloudfront.net		18.238.48.238	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.784221888 CET	1.1.1.1	192.168.2.4	0x6311	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:08.786535025 CET	1.1.1.1	192.168.2.4	0x932e	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:08.786535025 CET	1.1.1.1	192.168.2.4	0x932e	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:08.786535025 CET	1.1.1.1	192.168.2.4	0x932e	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:08.786535025 CET	1.1.1.1	192.168.2.4	0x932e	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		18.164.117.3	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.786550045 CET	1.1.1.1	192.168.2.4	0xe0fa	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:08.786550045 CET	1.1.1.1	192.168.2.4	0xe0fa	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:08.786550045 CET	1.1.1.1	192.168.2.4	0xe0fa	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:08.792188883 CET	1.1.1.1	192.168.2.4	0xd17d	No error (0)	prebid.media.net		34.120.63.153	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.801188946 CET	1.1.1.1	192.168.2.4	0xd9a0	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:08.801188946 CET	1.1.1.1	192.168.2.4	0xd9a0	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:08.801188946 CET	1.1.1.1	192.168.2.4	0xd9a0	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.801188946 CET	1.1.1.1	192.168.2.4	0xd9a0	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.801188946 CET	1.1.1.1	192.168.2.4	0xd9a0	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.801188946 CET	1.1.1.1	192.168.2.4	0xd9a0	No error (0)	ib.anycast.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.801188946 CET	1.1.1.1	192.168.2.4	0xd9a0	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.801188946 CET	1.1.1.1	192.168.2.4	0xd9a0	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.801188946 CET	1.1.1.1	192.168.2.4	0xd9a0	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.801188946 CET	1.1.1.1	192.168.2.4	0xd9a0	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.801188946 CET	1.1.1.1	192.168.2.4	0xd9a0	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.801188946 CET	1.1.1.1	192.168.2.4	0xd9a0	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.801188946 CET	1.1.1.1	192.168.2.4	0xd9a0	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:08.801188946 CET	1.1.1.1	192.168.2.4	0xd9a0	No error (0)	ib.anycast.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.034929991 CET	1.1.1.1	192.168.2.4	0x6429	No error (0)	rtb-use.mfadsrvr.com	pool-bid-gce-us.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:09.035103083 CET	1.1.1.1	192.168.2.4	0xa15e	No error (0)	rtb-use.mfadsrvr.com	pool-bid-gce-us.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:09.035103083 CET	1.1.1.1	192.168.2.4	0xa15e	No error (0)	pool-bid-gce-us.dorpat.iponweb.net		35.207.24.140	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.041820049 CET	1.1.1.1	192.168.2.4	0x13f8	No error (0)	de9a11s35xj3d.cloudfront.net		18.238.79.139	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.041820049 CET	1.1.1.1	192.168.2.4	0x13f8	No error (0)	de9a11s35xj3d.cloudfront.net		18.238.79.3	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.041820049 CET	1.1.1.1	192.168.2.4	0x13f8	No error (0)	de9a11s35xj3d.cloudfront.net		18.238.79.136	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.041820049 CET	1.1.1.1	192.168.2.4	0x13f8	No error (0)	de9a11s35xj3d.cloudfront.net		18.238.79.125	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.064039946 CET	1.1.1.1	192.168.2.4	0xddce	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:09.064039946 CET	1.1.1.1	192.168.2.4	0xddce	No error (0)	securepubads46.g.doubleclick.net		142.250.65.162	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.064498901 CET	1.1.1.1	192.168.2.4	0x9afd	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:09.085619926 CET	1.1.1.1	192.168.2.4	0x7c6f	No error (0)	static.criteo.net	static.va1.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:09.085619926 CET	1.1.1.1	192.168.2.4	0x7c6f	No error (0)	static.va1.vip.prod.criteo.net		74.119.119.131	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.086139917 CET	1.1.1.1	192.168.2.4	0x9535	No error (0)	static.criteo.net	static.va1.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:09.087295055 CET	1.1.1.1	192.168.2.4	0x234e	No error (0)	ad-delivery.net		172.67.69.19	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.087295055 CET	1.1.1.1	192.168.2.4	0x234e	No error (0)	ad-delivery.net		104.26.3.70	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.087295055 CET	1.1.1.1	192.168.2.4	0x234e	No error (0)	ad-delivery.net		104.26.2.70	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.087378979 CET	1.1.1.1	192.168.2.4	0x700a	No error (0)	ad-delivery.net			65	IN (0x0001)	false
Mar 18, 2024 17:22:09.089582920 CET	1.1.1.1	192.168.2.4	0xaf2e	No error (0)	bcp.crwdcntrl.net		52.207.168.130	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.089582920 CET	1.1.1.1	192.168.2.4	0xaf2e	No error (0)	bcp.crwdcntrl.net		44.205.216.19	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.089582920 CET	1.1.1.1	192.168.2.4	0xaf2e	No error (0)	bcp.crwdcntrl.net		54.234.166.1	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.089582920 CET	1.1.1.1	192.168.2.4	0xaf2e	No error (0)	bcp.crwdcntrl.net		44.219.90.173	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.089582920 CET	1.1.1.1	192.168.2.4	0xaf2e	No error (0)	bcp.crwdcntrl.net		44.194.38.192	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.089582920 CET	1.1.1.1	192.168.2.4	0xaf2e	No error (0)	bcp.crwdcntrl.net		18.207.42.67	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.089582920 CET	1.1.1.1	192.168.2.4	0xaf2e	No error (0)	bcp.crwdcntrl.net		18.214.22.186	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.089582920 CET	1.1.1.1	192.168.2.4	0xaf2e	No error (0)	bcp.crwdcntrl.net		34.224.142.24	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.118194103 CET	1.1.1.1	192.168.2.4	0x6725	No error (0)	ad.doubleclick.net		142.250.81.230	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.118963957 CET	1.1.1.1	192.168.2.4	0xb4cc	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 18, 2024 17:22:09.614161015 CET	1.1.1.1	192.168.2.4	0x3060	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:09.614161015 CET	1.1.1.1	192.168.2.4	0x3060	No error (0)	user-data-us-east.bidswitch.net		35.211.178.172	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.614483118 CET	1.1.1.1	192.168.2.4	0x3378	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:09.614936113 CET	1.1.1.1	192.168.2.4	0x7740	No error (0)	pixel.s3xified.com		67.231.251.190	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.616895914 CET	1.1.1.1	192.168.2.4	0xa95a	No error (0)	um.simpli.fi		35.236.220.17	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.616895914 CET	1.1.1.1	192.168.2.4	0xa95a	No error (0)	um.simpli.fi		34.150.170.96	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.616895914 CET	1.1.1.1	192.168.2.4	0xa95a	No error (0)	um.simpli.fi		35.194.66.159	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.617348909 CET	1.1.1.1	192.168.2.4	0x5e5c	No error (0)	trace.mediago.io		35.208.249.213	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.619746923 CET	1.1.1.1	192.168.2.4	0xad0c	No error (0)	match.prod.bidr.io		54.144.102.188	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.619746923 CET	1.1.1.1	192.168.2.4	0xad0c	No error (0)	match.prod.bidr.io		52.86.1.243	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.619746923 CET	1.1.1.1	192.168.2.4	0xad0c	No error (0)	match.prod.bidr.io		54.159.223.60	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.619746923 CET	1.1.1.1	192.168.2.4	0xad0c	No error (0)	match.prod.bidr.io		54.146.102.148	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.619746923 CET	1.1.1.1	192.168.2.4	0xad0c	No error (0)	match.prod.bidr.io		54.156.94.41	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.619746923 CET	1.1.1.1	192.168.2.4	0xad0c	No error (0)	match.prod.bidr.io		54.144.55.148	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.619746923 CET	1.1.1.1	192.168.2.4	0xad0c	No error (0)	match.prod.bidr.io		54.159.69.47	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.619746923 CET	1.1.1.1	192.168.2.4	0xad0c	No error (0)	match.prod.bidr.io		52.7.132.209	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.620702982 CET	1.1.1.1	192.168.2.4	0x4eff	No error (0)	b1sync.zemanta.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:09.620702982 CET	1.1.1.1	192.168.2.4	0x4eff	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:09.620702982 CET	1.1.1.1	192.168.2.4	0x4eff	No error (0)	zemanta-nychi2.outbrain.org	chidc2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:09.620702982 CET	1.1.1.1	192.168.2.4	0x4eff	No error (0)	chidc2.outbrain.org		50.31.142.191	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.620953083 CET	1.1.1.1	192.168.2.4	0x593d	No error (0)	b1sync.zemanta.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:09.620953083 CET	1.1.1.1	192.168.2.4	0x593d	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:09.620953083 CET	1.1.1.1	192.168.2.4	0x593d	No error (0)	zemanta-nychi2.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:09.630856037 CET	1.1.1.1	192.168.2.4	0xa61e	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:09.633696079 CET	1.1.1.1	192.168.2.4	0xb31d	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:09.659632921 CET	1.1.1.1	192.168.2.4	0x4859	No error (0)	u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.659632921 CET	1.1.1.1	192.168.2.4	0x4859	No error (0)	u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.673772097 CET	1.1.1.1	192.168.2.4	0xadb0	No error (0)	ssbsync-us.smartadserver.com	ssbsync-use1.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:09.673772097 CET	1.1.1.1	192.168.2.4	0xadb0	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.116	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.673772097 CET	1.1.1.1	192.168.2.4	0xadb0	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.117	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.673772097 CET	1.1.1.1	192.168.2.4	0xadb0	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.53	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.673772097 CET	1.1.1.1	192.168.2.4	0xadb0	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.158	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.673772097 CET	1.1.1.1	192.168.2.4	0xadb0	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.4	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.673772097 CET	1.1.1.1	192.168.2.4	0xadb0	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.68	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.673772097 CET	1.1.1.1	192.168.2.4	0xadb0	No error (0)	ssbsync-use1.smartadserver.com		23.105.14.101	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.673772097 CET	1.1.1.1	192.168.2.4	0xadb0	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.52	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.673772097 CET	1.1.1.1	192.168.2.4	0xadb0	No error (0)	ssbsync-use1.smartadserver.com		23.105.14.100	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.673772097 CET	1.1.1.1	192.168.2.4	0xadb0	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.170	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.673772097 CET	1.1.1.1	192.168.2.4	0xadb0	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.36	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.673772097 CET	1.1.1.1	192.168.2.4	0xadb0	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.69	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.673772097 CET	1.1.1.1	192.168.2.4	0xadb0	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.171	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.673772097 CET	1.1.1.1	192.168.2.4	0xadb0	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.37	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.673772097 CET	1.1.1.1	192.168.2.4	0xadb0	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.143	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.673772097 CET	1.1.1.1	192.168.2.4	0xadb0	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.5	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.673772097 CET	1.1.1.1	192.168.2.4	0xadb0	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.142	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.673772097 CET	1.1.1.1	192.168.2.4	0xadb0	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.159	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:09.677124977 CET	1.1.1.1	192.168.2.4	0xae2b	No error (0)	ssbsync-us.smartadserver.com	ssbsync-use1.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:09.952919006 CET	1.1.1.1	192.168.2.4	0x5e41	No error (0)	sync.inmobi.com	pixel-sync.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:09.954510927 CET	1.1.1.1	192.168.2.4	0x593e	No error (0)	sync.inmobi.com	pixel-sync.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:10.055046082 CET	1.1.1.1	192.168.2.4	0x9f38	No error (0)	de9a11s35xj3d.cloudfront.net		18.238.79.3	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.055046082 CET	1.1.1.1	192.168.2.4	0x9f38	No error (0)	de9a11s35xj3d.cloudfront.net		18.238.79.139	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.055046082 CET	1.1.1.1	192.168.2.4	0x9f38	No error (0)	de9a11s35xj3d.cloudfront.net		18.238.79.125	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.055046082 CET	1.1.1.1	192.168.2.4	0x9f38	No error (0)	de9a11s35xj3d.cloudfront.net		18.238.79.136	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.056030035 CET	1.1.1.1	192.168.2.4	0x28f9	No error (0)	api.btloader.com		130.211.23.194	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.086314917 CET	1.1.1.1	192.168.2.4	0xb369	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:10.086314917 CET	1.1.1.1	192.168.2.4	0xb369	No error (0)	vap.lijit.com	nae.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:10.086314917 CET	1.1.1.1	192.168.2.4	0xb369	No error (0)	nae.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:10.086314917 CET	1.1.1.1	192.168.2.4	0xb369	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		23.22.53.123	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.086314917 CET	1.1.1.1	192.168.2.4	0xb369	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		54.243.225.61	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.086314917 CET	1.1.1.1	192.168.2.4	0xb369	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		34.197.87.129	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.086314917 CET	1.1.1.1	192.168.2.4	0xb369	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		3.232.214.90	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.086314917 CET	1.1.1.1	192.168.2.4	0xb369	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		52.0.209.18	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.086314917 CET	1.1.1.1	192.168.2.4	0xb369	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		3.223.11.207	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.086314917 CET	1.1.1.1	192.168.2.4	0xb369	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		18.210.101.188	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.086314917 CET	1.1.1.1	192.168.2.4	0xb369	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		54.204.221.6	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.086776972 CET	1.1.1.1	192.168.2.4	0xb8d8	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:10.086776972 CET	1.1.1.1	192.168.2.4	0xb8d8	No error (0)	vap.lijit.com	nae.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:10.086776972 CET	1.1.1.1	192.168.2.4	0xb8d8	No error (0)	nae.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:10.095535994 CET	1.1.1.1	192.168.2.4	0x90f6	No error (0)	cm.g.doubleclick.net		142.250.176.194	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.189718962 CET	1.1.1.1	192.168.2.4	0x9292	No error (0)	sync.intentiq.com		18.173.132.107	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.189718962 CET	1.1.1.1	192.168.2.4	0x9292	No error (0)	sync.intentiq.com		18.173.132.82	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.189718962 CET	1.1.1.1	192.168.2.4	0x9292	No error (0)	sync.intentiq.com		18.173.132.13	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.189718962 CET	1.1.1.1	192.168.2.4	0x9292	No error (0)	sync.intentiq.com		18.173.132.46	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.255791903 CET	1.1.1.1	192.168.2.4	0x8e60	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:10.255791903 CET	1.1.1.1	192.168.2.4	0x8e60	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:10.255791903 CET	1.1.1.1	192.168.2.4	0x8e60	No error (0)	us-east-eb2.3lift.com		35.71.139.29	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.255791903 CET	1.1.1.1	192.168.2.4	0x8e60	No error (0)	us-east-eb2.3lift.com		52.223.22.214	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.256500959 CET	1.1.1.1	192.168.2.4	0x4fd3	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:10.256500959 CET	1.1.1.1	192.168.2.4	0x4fd3	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:10.381735086 CET	1.1.1.1	192.168.2.4	0x8977	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:10.381735086 CET	1.1.1.1	192.168.2.4	0x8977	No error (0)	image6v2.pubmnet.com	pugm-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:10.381804943 CET	1.1.1.1	192.168.2.4	0x6f0a	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:10.381804943 CET	1.1.1.1	192.168.2.4	0x6f0a	No error (0)	image6v2.pubmnet.com	pugm88000nfc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:10.381804943 CET	1.1.1.1	192.168.2.4	0x6f0a	No error (0)	pugm88000nfc.pubmnet.com		104.36.115.113	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.466123104 CET	1.1.1.1	192.168.2.4	0x3f6b	No error (0)	id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.466123104 CET	1.1.1.1	192.168.2.4	0x3f6b	No error (0)	id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.466123104 CET	1.1.1.1	192.168.2.4	0x3f6b	No error (0)	id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.466123104 CET	1.1.1.1	192.168.2.4	0x3f6b	No error (0)	id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.466123104 CET	1.1.1.1	192.168.2.4	0x3f6b	No error (0)	id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.466123104 CET	1.1.1.1	192.168.2.4	0x3f6b	No error (0)	id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.466123104 CET	1.1.1.1	192.168.2.4	0x3f6b	No error (0)	id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.466123104 CET	1.1.1.1	192.168.2.4	0x3f6b	No error (0)	id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.466123104 CET	1.1.1.1	192.168.2.4	0x3f6b	No error (0)	id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.466123104 CET	1.1.1.1	192.168.2.4	0x3f6b	No error (0)	id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.586872101 CET	1.1.1.1	192.168.2.4	0xa2e9	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:10.586872101 CET	1.1.1.1	192.168.2.4	0xa2e9	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:10.586872101 CET	1.1.1.1	192.168.2.4	0xa2e9	No error (0)	dorpat.geo.iponweb.net		35.207.24.140	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.587248087 CET	1.1.1.1	192.168.2.4	0x71b1	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:10.587248087 CET	1.1.1.1	192.168.2.4	0x71b1	No error (0)	ce-ue1.lijit.com	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:10.587248087 CET	1.1.1.1	192.168.2.4	0x71b1	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		52.86.98.54	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.587248087 CET	1.1.1.1	192.168.2.4	0x71b1	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.220.153.228	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.587248087 CET	1.1.1.1	192.168.2.4	0x71b1	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.225.194.253	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.587248087 CET	1.1.1.1	192.168.2.4	0x71b1	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.85.187.66	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.587248087 CET	1.1.1.1	192.168.2.4	0x71b1	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.208.192.93	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.587248087 CET	1.1.1.1	192.168.2.4	0x71b1	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		52.200.163.44	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.587248087 CET	1.1.1.1	192.168.2.4	0x71b1	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		34.236.106.57	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.587248087 CET	1.1.1.1	192.168.2.4	0x71b1	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.229.145.105	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.587676048 CET	1.1.1.1	192.168.2.4	0x79a8	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:10.587676048 CET	1.1.1.1	192.168.2.4	0x79a8	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:10.589895010 CET	1.1.1.1	192.168.2.4	0xaca5	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:10.589895010 CET	1.1.1.1	192.168.2.4	0xaca5	No error (0)	ce-ue1.lijit.com	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:10.705655098 CET	1.1.1.1	192.168.2.4	0x9a55	No error (0)	sync1.intentiq.com		18.173.132.107	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.705655098 CET	1.1.1.1	192.168.2.4	0x9a55	No error (0)	sync1.intentiq.com		18.173.132.46	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.705655098 CET	1.1.1.1	192.168.2.4	0x9a55	No error (0)	sync1.intentiq.com		18.173.132.82	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.705655098 CET	1.1.1.1	192.168.2.4	0x9a55	No error (0)	sync1.intentiq.com		18.173.132.13	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.780114889 CET	1.1.1.1	192.168.2.4	0xd84	No error (0)	s.amazon-adsystem.com		52.46.155.104	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.817127943 CET	1.1.1.1	192.168.2.4	0x2eac	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:10.817127943 CET	1.1.1.1	192.168.2.4	0x2eac	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.200.142.234	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.817127943 CET	1.1.1.1	192.168.2.4	0x2eac	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		3.234.96.174	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.817127943 CET	1.1.1.1	192.168.2.4	0x2eac	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		3.237.59.142	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.817127943 CET	1.1.1.1	192.168.2.4	0x2eac	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.231.142.244	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.817652941 CET	1.1.1.1	192.168.2.4	0x7b66	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:10.824306011 CET	1.1.1.1	192.168.2.4	0x73fd	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.824306011 CET	1.1.1.1	192.168.2.4	0x73fd	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.824306011 CET	1.1.1.1	192.168.2.4	0x73fd	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.824306011 CET	1.1.1.1	192.168.2.4	0x73fd	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.887458086 CET	1.1.1.1	192.168.2.4	0xc8d1	No error (0)	gum.criteo.com	gum.da1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:10.887458086 CET	1.1.1.1	192.168.2.4	0xc8d1	No error (0)	gum.da1.vip.prod.criteo.com		74.119.118.149	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.887473106 CET	1.1.1.1	192.168.2.4	0x5c3	No error (0)	gum.criteo.com	gum.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:10.888763905 CET	1.1.1.1	192.168.2.4	0x74f6	No error (0)	id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.888763905 CET	1.1.1.1	192.168.2.4	0x74f6	No error (0)	id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.888763905 CET	1.1.1.1	192.168.2.4	0x74f6	No error (0)	id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.888763905 CET	1.1.1.1	192.168.2.4	0x74f6	No error (0)	id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.888763905 CET	1.1.1.1	192.168.2.4	0x74f6	No error (0)	id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.888763905 CET	1.1.1.1	192.168.2.4	0x74f6	No error (0)	id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.888763905 CET	1.1.1.1	192.168.2.4	0x74f6	No error (0)	id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.888763905 CET	1.1.1.1	192.168.2.4	0x74f6	No error (0)	id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.888763905 CET	1.1.1.1	192.168.2.4	0x74f6	No error (0)	id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.888763905 CET	1.1.1.1	192.168.2.4	0x74f6	No error (0)	id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.928529024 CET	1.1.1.1	192.168.2.4	0x8a95	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:10.936994076 CET	1.1.1.1	192.168.2.4	0x9e7c	No error (0)	us01.z.antigena.com		40.76.134.238	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.128149986 CET	1.1.1.1	192.168.2.4	0x880	No error (0)	bh.contextweb.com	lga-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:11.128149986 CET	1.1.1.1	192.168.2.4	0x880	No error (0)	lga-bh.contextweb.com	lga-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:11.128357887 CET	1.1.1.1	192.168.2.4	0x9df0	No error (0)	bh.contextweb.com	lga-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:11.128357887 CET	1.1.1.1	192.168.2.4	0x9df0	No error (0)	lga-bh.contextweb.com	lga-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:11.128357887 CET	1.1.1.1	192.168.2.4	0x9df0	No error (0)	lga-direct-bgp.contextweb.com		198.148.27.131	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.132145882 CET	1.1.1.1	192.168.2.4	0x10a9	No error (0)	creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.136653900 CET	1.1.1.1	192.168.2.4	0x32	No error (0)	data.adsrvr.org	match.adsrvr.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:11.136653900 CET	1.1.1.1	192.168.2.4	0x32	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.136653900 CET	1.1.1.1	192.168.2.4	0x32	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.136653900 CET	1.1.1.1	192.168.2.4	0x32	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.136653900 CET	1.1.1.1	192.168.2.4	0x32	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.138434887 CET	1.1.1.1	192.168.2.4	0xab77	No error (0)	data.adsrvr.org	match.adsrvr.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:11.140044928 CET	1.1.1.1	192.168.2.4	0x521	No error (0)	pixel-us-east.rubiconproject.com	pixel-us-east.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:11.140320063 CET	1.1.1.1	192.168.2.4	0xb598	No error (0)	pixel-us-east.rubiconproject.com	pixel-us-east.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:11.143610954 CET	1.1.1.1	192.168.2.4	0xc0b	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:11.143610954 CET	1.1.1.1	192.168.2.4	0xc0b	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:11.143610954 CET	1.1.1.1	192.168.2.4	0xc0b	No error (0)	dorpat.geo.iponweb.net		35.207.24.140	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.144619942 CET	1.1.1.1	192.168.2.4	0x91c0	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:11.144619942 CET	1.1.1.1	192.168.2.4	0x91c0	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:11.328063965 CET	1.1.1.1	192.168.2.4	0xfe81	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.328063965 CET	1.1.1.1	192.168.2.4	0xfe81	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.348848104 CET	1.1.1.1	192.168.2.4	0x50a2	No error (0)	sync1.intentiq.com		18.173.132.13	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.348848104 CET	1.1.1.1	192.168.2.4	0x50a2	No error (0)	sync1.intentiq.com		18.173.132.82	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.348848104 CET	1.1.1.1	192.168.2.4	0x50a2	No error (0)	sync1.intentiq.com		18.173.132.107	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.348848104 CET	1.1.1.1	192.168.2.4	0x50a2	No error (0)	sync1.intentiq.com		18.173.132.46	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.360377073 CET	1.1.1.1	192.168.2.4	0x40	No error (0)	cm.g.doubleclick.net		142.251.41.2	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.375735044 CET	1.1.1.1	192.168.2.4	0xa651	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:11.375735044 CET	1.1.1.1	192.168.2.4	0xa651	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:11.375735044 CET	1.1.1.1	192.168.2.4	0xa651	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.376298904 CET	1.1.1.1	192.168.2.4	0xb0c4	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:11.376298904 CET	1.1.1.1	192.168.2.4	0xb0c4	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:11.486043930 CET	1.1.1.1	192.168.2.4	0x7889	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:11.486043930 CET	1.1.1.1	192.168.2.4	0x7889	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		3.234.96.174	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.486043930 CET	1.1.1.1	192.168.2.4	0x7889	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.200.142.234	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.486043930 CET	1.1.1.1	192.168.2.4	0x7889	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.206.29.11	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.486043930 CET	1.1.1.1	192.168.2.4	0x7889	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		54.160.126.74	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.487952948 CET	1.1.1.1	192.168.2.4	0xf508	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:11.539040089 CET	1.1.1.1	192.168.2.4	0xd80c	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:11.539040089 CET	1.1.1.1	192.168.2.4	0xd80c	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:11.539347887 CET	1.1.1.1	192.168.2.4	0x85db	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:11.539347887 CET	1.1.1.1	192.168.2.4	0x85db	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:11.539347887 CET	1.1.1.1	192.168.2.4	0x85db	No error (0)	us-east-eb2.3lift.com		52.223.22.214	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.539347887 CET	1.1.1.1	192.168.2.4	0x85db	No error (0)	us-east-eb2.3lift.com		35.71.139.29	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.718777895 CET	1.1.1.1	192.168.2.4	0x8ff1	No error (0)	pool.admedo.com	pool-com.adizio.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:11.718777895 CET	1.1.1.1	192.168.2.4	0x8ff1	No error (0)	pool-com.adizio.iponweb.net	adizio.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:11.718777895 CET	1.1.1.1	192.168.2.4	0x8ff1	No error (0)	adizio.geo.iponweb.net		35.210.53.219	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.719414949 CET	1.1.1.1	192.168.2.4	0x126	No error (0)	pool.admedo.com	pool-com.adizio.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:11.719414949 CET	1.1.1.1	192.168.2.4	0x126	No error (0)	pool-com.adizio.iponweb.net	adizio.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:11.747406006 CET	1.1.1.1	192.168.2.4	0x8a6	No error (0)	lb.eu-1-id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.747406006 CET	1.1.1.1	192.168.2.4	0x8a6	No error (0)	lb.eu-1-id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.747406006 CET	1.1.1.1	192.168.2.4	0x8a6	No error (0)	lb.eu-1-id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.747406006 CET	1.1.1.1	192.168.2.4	0x8a6	No error (0)	lb.eu-1-id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.747406006 CET	1.1.1.1	192.168.2.4	0x8a6	No error (0)	lb.eu-1-id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.747406006 CET	1.1.1.1	192.168.2.4	0x8a6	No error (0)	lb.eu-1-id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.747406006 CET	1.1.1.1	192.168.2.4	0x8a6	No error (0)	lb.eu-1-id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.747406006 CET	1.1.1.1	192.168.2.4	0x8a6	No error (0)	lb.eu-1-id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.747406006 CET	1.1.1.1	192.168.2.4	0x8a6	No error (0)	lb.eu-1-id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.747406006 CET	1.1.1.1	192.168.2.4	0x8a6	No error (0)	lb.eu-1-id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.757546902 CET	1.1.1.1	192.168.2.4	0x5fa2	No error (0)	googleads.g.doubleclick.net		142.251.35.162	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.758121967 CET	1.1.1.1	192.168.2.4	0x7f51	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Mar 18, 2024 17:22:11.850013971 CET	1.1.1.1	192.168.2.4	0xa103	No error (0)	id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.850013971 CET	1.1.1.1	192.168.2.4	0xa103	No error (0)	id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.850013971 CET	1.1.1.1	192.168.2.4	0xa103	No error (0)	id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.850013971 CET	1.1.1.1	192.168.2.4	0xa103	No error (0)	id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.850013971 CET	1.1.1.1	192.168.2.4	0xa103	No error (0)	id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.850013971 CET	1.1.1.1	192.168.2.4	0xa103	No error (0)	id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.850013971 CET	1.1.1.1	192.168.2.4	0xa103	No error (0)	id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.850013971 CET	1.1.1.1	192.168.2.4	0xa103	No error (0)	id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.850013971 CET	1.1.1.1	192.168.2.4	0xa103	No error (0)	id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.850013971 CET	1.1.1.1	192.168.2.4	0xa103	No error (0)	id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.975704908 CET	1.1.1.1	192.168.2.4	0xe2e6	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:11.975704908 CET	1.1.1.1	192.168.2.4	0xe2e6	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:11.975704908 CET	1.1.1.1	192.168.2.4	0xe2e6	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.975893974 CET	1.1.1.1	192.168.2.4	0x494a	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:11.975893974 CET	1.1.1.1	192.168.2.4	0x494a	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:11.979017019 CET	1.1.1.1	192.168.2.4	0x54b8	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:11.979501009 CET	1.1.1.1	192.168.2.4	0xf2b6	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:11.980624914 CET	1.1.1.1	192.168.2.4	0xb89	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:11.980624914 CET	1.1.1.1	192.168.2.4	0xb89	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:12.087160110 CET	1.1.1.1	192.168.2.4	0x48cb	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:12.087160110 CET	1.1.1.1	192.168.2.4	0x48cb	No error (0)	simage2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:12.087160110 CET	1.1.1.1	192.168.2.4	0x48cb	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:12.087712049 CET	1.1.1.1	192.168.2.4	0x4626	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:12.087712049 CET	1.1.1.1	192.168.2.4	0x4626	No error (0)	simage2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:12.156497002 CET	1.1.1.1	192.168.2.4	0x651e	No error (0)	gum.criteo.com	gum.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:12.156497002 CET	1.1.1.1	192.168.2.4	0x651e	No error (0)	gum.va1.vip.prod.criteo.com		74.119.119.139	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:12.156805038 CET	1.1.1.1	192.168.2.4	0x699f	No error (0)	gum.criteo.com	gum.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:12.228784084 CET	1.1.1.1	192.168.2.4	0x9e9c	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:12.228784084 CET	1.1.1.1	192.168.2.4	0x9e9c	No error (0)	ce-ue1.lijit.com	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:12.228784084 CET	1.1.1.1	192.168.2.4	0x9e9c	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		34.236.106.57	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:12.228784084 CET	1.1.1.1	192.168.2.4	0x9e9c	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.208.192.93	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:12.228784084 CET	1.1.1.1	192.168.2.4	0x9e9c	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.225.194.253	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:12.228784084 CET	1.1.1.1	192.168.2.4	0x9e9c	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		44.198.4.159	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:12.228784084 CET	1.1.1.1	192.168.2.4	0x9e9c	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.229.145.105	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:12.228784084 CET	1.1.1.1	192.168.2.4	0x9e9c	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		52.86.98.54	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:12.228784084 CET	1.1.1.1	192.168.2.4	0x9e9c	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		52.200.163.44	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:12.228784084 CET	1.1.1.1	192.168.2.4	0x9e9c	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		44.198.252.238	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:12.229850054 CET	1.1.1.1	192.168.2.4	0x74ac	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:12.229850054 CET	1.1.1.1	192.168.2.4	0x74ac	No error (0)	ce-ue1.lijit.com	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:12.536005020 CET	1.1.1.1	192.168.2.4	0x546c	No error (0)	lb.eu-1-id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:12.536005020 CET	1.1.1.1	192.168.2.4	0x546c	No error (0)	lb.eu-1-id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:12.536005020 CET	1.1.1.1	192.168.2.4	0x546c	No error (0)	lb.eu-1-id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:12.536005020 CET	1.1.1.1	192.168.2.4	0x546c	No error (0)	lb.eu-1-id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:12.536005020 CET	1.1.1.1	192.168.2.4	0x546c	No error (0)	lb.eu-1-id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:12.536005020 CET	1.1.1.1	192.168.2.4	0x546c	No error (0)	lb.eu-1-id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:12.536005020 CET	1.1.1.1	192.168.2.4	0x546c	No error (0)	lb.eu-1-id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:12.536005020 CET	1.1.1.1	192.168.2.4	0x546c	No error (0)	lb.eu-1-id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:12.536005020 CET	1.1.1.1	192.168.2.4	0x546c	No error (0)	lb.eu-1-id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:12.536005020 CET	1.1.1.1	192.168.2.4	0x546c	No error (0)	lb.eu-1-id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:12.600759029 CET	1.1.1.1	192.168.2.4	0xeb0a	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:12.600759029 CET	1.1.1.1	192.168.2.4	0xeb0a	No error (0)	simage2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:12.600759029 CET	1.1.1.1	192.168.2.4	0xeb0a	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:12.602596998 CET	1.1.1.1	192.168.2.4	0xd260	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:12.602596998 CET	1.1.1.1	192.168.2.4	0xd260	No error (0)	simage2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:13.304497957 CET	1.1.1.1	192.168.2.4	0x8a20	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:13.304497957 CET	1.1.1.1	192.168.2.4	0x8a20	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:13.304497957 CET	1.1.1.1	192.168.2.4	0x8a20	No error (0)	spug-vac.pubmnet.com		8.28.7.84	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:13.305103064 CET	1.1.1.1	192.168.2.4	0x6bd	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:13.305103064 CET	1.1.1.1	192.168.2.4	0x6bd	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:13.352695942 CET	1.1.1.1	192.168.2.4	0xb003	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.040353060 CET	1.1.1.1	192.168.2.4	0xc41c	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:14.040353060 CET	1.1.1.1	192.168.2.4	0xc41c	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:14.040353060 CET	1.1.1.1	192.168.2.4	0xc41c	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.040353060 CET	1.1.1.1	192.168.2.4	0xc41c	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.040353060 CET	1.1.1.1	192.168.2.4	0xc41c	No error (0)	ib.anycast.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.040353060 CET	1.1.1.1	192.168.2.4	0xc41c	No error (0)	ib.anycast.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.040353060 CET	1.1.1.1	192.168.2.4	0xc41c	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.040353060 CET	1.1.1.1	192.168.2.4	0xc41c	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.040353060 CET	1.1.1.1	192.168.2.4	0xc41c	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.040353060 CET	1.1.1.1	192.168.2.4	0xc41c	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.040353060 CET	1.1.1.1	192.168.2.4	0xc41c	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.040353060 CET	1.1.1.1	192.168.2.4	0xc41c	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.040353060 CET	1.1.1.1	192.168.2.4	0xc41c	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.040353060 CET	1.1.1.1	192.168.2.4	0xc41c	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.178354025 CET	1.1.1.1	192.168.2.4	0xe033	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:14.178354025 CET	1.1.1.1	192.168.2.4	0xe033	No error (0)	rtb.adgrx.com	rtb.adgrx.com.tech.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:14.181996107 CET	1.1.1.1	192.168.2.4	0xed39	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:14.181996107 CET	1.1.1.1	192.168.2.4	0xed39	No error (0)	rtb.adgrx.com	rtb.adgrx.com.tech.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:14.308762074 CET	1.1.1.1	192.168.2.4	0x56cd	No error (0)	thrtle.com		52.204.113.215	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.308762074 CET	1.1.1.1	192.168.2.4	0x56cd	No error (0)	thrtle.com		67.202.50.136	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.308762074 CET	1.1.1.1	192.168.2.4	0x56cd	No error (0)	thrtle.com		35.173.73.21	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.308762074 CET	1.1.1.1	192.168.2.4	0x56cd	No error (0)	thrtle.com		3.222.237.51	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.312549114 CET	1.1.1.1	192.168.2.4	0x8696	No error (0)	crb.kargo.com		34.196.130.100	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.312549114 CET	1.1.1.1	192.168.2.4	0x8696	No error (0)	crb.kargo.com		52.200.154.160	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.312549114 CET	1.1.1.1	192.168.2.4	0x8696	No error (0)	crb.kargo.com		52.202.181.167	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.312549114 CET	1.1.1.1	192.168.2.4	0x8696	No error (0)	crb.kargo.com		34.237.39.192	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.312549114 CET	1.1.1.1	192.168.2.4	0x8696	No error (0)	crb.kargo.com		3.209.218.8	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.312549114 CET	1.1.1.1	192.168.2.4	0x8696	No error (0)	crb.kargo.com		34.192.240.196	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.313690901 CET	1.1.1.1	192.168.2.4	0x4085	No error (0)	sync.bfmio.com	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:14.313690901 CET	1.1.1.1	192.168.2.4	0x4085	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.22.88.168	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.313690901 CET	1.1.1.1	192.168.2.4	0x4085	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.6.51.10	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.313690901 CET	1.1.1.1	192.168.2.4	0x4085	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.70.146.159	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.313690901 CET	1.1.1.1	192.168.2.4	0x4085	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.70.84.90	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.313690901 CET	1.1.1.1	192.168.2.4	0x4085	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.6.199.203	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.313690901 CET	1.1.1.1	192.168.2.4	0x4085	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.71.140.242	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.313690901 CET	1.1.1.1	192.168.2.4	0x4085	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.4.225.113	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.313690901 CET	1.1.1.1	192.168.2.4	0x4085	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.73.30.136	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.313951969 CET	1.1.1.1	192.168.2.4	0xee5c	No error (0)	sync.bfmio.com	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:14.315685987 CET	1.1.1.1	192.168.2.4	0x534e	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:14.315685987 CET	1.1.1.1	192.168.2.4	0x534e	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:14.315685987 CET	1.1.1.1	192.168.2.4	0x534e	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:14.315685987 CET	1.1.1.1	192.168.2.4	0x534e	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.315685987 CET	1.1.1.1	192.168.2.4	0x534e	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.316318035 CET	1.1.1.1	192.168.2.4	0xe894	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:14.316318035 CET	1.1.1.1	192.168.2.4	0xe894	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:14.316318035 CET	1.1.1.1	192.168.2.4	0xe894	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:14.316356897 CET	1.1.1.1	192.168.2.4	0xffe1	No error (0)	sync.ipredictive.com		52.2.85.165	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.316356897 CET	1.1.1.1	192.168.2.4	0xffe1	No error (0)	sync.ipredictive.com		54.166.159.113	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.316356897 CET	1.1.1.1	192.168.2.4	0xffe1	No error (0)	sync.ipredictive.com		54.158.64.147	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.316356897 CET	1.1.1.1	192.168.2.4	0xffe1	No error (0)	sync.ipredictive.com		52.87.49.60	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.316356897 CET	1.1.1.1	192.168.2.4	0xffe1	No error (0)	sync.ipredictive.com		52.3.141.88	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.316356897 CET	1.1.1.1	192.168.2.4	0xffe1	No error (0)	sync.ipredictive.com		54.159.66.10	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.316356897 CET	1.1.1.1	192.168.2.4	0xffe1	No error (0)	sync.ipredictive.com		52.71.44.145	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.316356897 CET	1.1.1.1	192.168.2.4	0xffe1	No error (0)	sync.ipredictive.com		52.44.255.182	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.319096088 CET	1.1.1.1	192.168.2.4	0xe643	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:14.319904089 CET	1.1.1.1	192.168.2.4	0xa24a	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:14.817982912 CET	1.1.1.1	192.168.2.4	0xe23c	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:14.817982912 CET	1.1.1.1	192.168.2.4	0xe23c	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:14.817982912 CET	1.1.1.1	192.168.2.4	0xe23c	No error (0)	spug-vac.pubmnet.com		8.28.7.84	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.818537951 CET	1.1.1.1	192.168.2.4	0x81c4	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:14.818537951 CET	1.1.1.1	192.168.2.4	0x81c4	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:14.827126026 CET	1.1.1.1	192.168.2.4	0xb122	No error (0)	crb.kargo.com		34.196.130.100	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.827126026 CET	1.1.1.1	192.168.2.4	0xb122	No error (0)	crb.kargo.com		52.200.154.160	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.827126026 CET	1.1.1.1	192.168.2.4	0xb122	No error (0)	crb.kargo.com		34.192.240.196	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.827126026 CET	1.1.1.1	192.168.2.4	0xb122	No error (0)	crb.kargo.com		3.209.218.8	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.827126026 CET	1.1.1.1	192.168.2.4	0xb122	No error (0)	crb.kargo.com		34.237.39.192	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.827126026 CET	1.1.1.1	192.168.2.4	0xb122	No error (0)	crb.kargo.com		52.202.181.167	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.869750023 CET	1.1.1.1	192.168.2.4	0x95e	No error (0)	rtgcloudsql.2trk.info			65	IN (0x0001)	false
Mar 18, 2024 17:22:14.870671034 CET	1.1.1.1	192.168.2.4	0xdaad	No error (0)	rtgcloudsql.2trk.info		172.67.161.117	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.870671034 CET	1.1.1.1	192.168.2.4	0xdaad	No error (0)	rtgcloudsql.2trk.info		104.21.82.186	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.898946047 CET	1.1.1.1	192.168.2.4	0xad8	No error (0)	www.google.com		142.250.81.228	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:14.899671078 CET	1.1.1.1	192.168.2.4	0xd0fc	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 18, 2024 17:22:15.190326929 CET	1.1.1.1	192.168.2.4	0xd62d	No error (0)	thrtle.com		52.204.113.215	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:15.190326929 CET	1.1.1.1	192.168.2.4	0xd62d	No error (0)	thrtle.com		67.202.50.136	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:15.190326929 CET	1.1.1.1	192.168.2.4	0xd62d	No error (0)	thrtle.com		35.173.73.21	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:15.190326929 CET	1.1.1.1	192.168.2.4	0xd62d	No error (0)	thrtle.com		3.222.237.51	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:15.349487066 CET	1.1.1.1	192.168.2.4	0x5ac8	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:15.349487066 CET	1.1.1.1	192.168.2.4	0x5ac8	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.8	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:15.349487066 CET	1.1.1.1	192.168.2.4	0x5ac8	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.9	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:15.349487066 CET	1.1.1.1	192.168.2.4	0x5ac8	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.172	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:15.349487066 CET	1.1.1.1	192.168.2.4	0x5ac8	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.151	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:15.349487066 CET	1.1.1.1	192.168.2.4	0x5ac8	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.121	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:15.349487066 CET	1.1.1.1	192.168.2.4	0x5ac8	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.41	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:15.349487066 CET	1.1.1.1	192.168.2.4	0x5ac8	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.40	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:15.349487066 CET	1.1.1.1	192.168.2.4	0x5ac8	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.57	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:15.349487066 CET	1.1.1.1	192.168.2.4	0x5ac8	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.73	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:15.349487066 CET	1.1.1.1	192.168.2.4	0x5ac8	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.105	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:15.349487066 CET	1.1.1.1	192.168.2.4	0x5ac8	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.106	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:15.349487066 CET	1.1.1.1	192.168.2.4	0x5ac8	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.120	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:15.349487066 CET	1.1.1.1	192.168.2.4	0x5ac8	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.136	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:15.349487066 CET	1.1.1.1	192.168.2.4	0x5ac8	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.150	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:15.349487066 CET	1.1.1.1	192.168.2.4	0x5ac8	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.56	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:15.349487066 CET	1.1.1.1	192.168.2.4	0x5ac8	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.137	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:15.349487066 CET	1.1.1.1	192.168.2.4	0x5ac8	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.72	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:15.349487066 CET	1.1.1.1	192.168.2.4	0x5ac8	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.173	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:15.350754023 CET	1.1.1.1	192.168.2.4	0x354a	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:15.485625982 CET	1.1.1.1	192.168.2.4	0x3d6c	No error (0)	cdn.2trk.info		172.67.161.117	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:15.485625982 CET	1.1.1.1	192.168.2.4	0x3d6c	No error (0)	cdn.2trk.info		104.21.82.186	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:15.487118959 CET	1.1.1.1	192.168.2.4	0xed8	No error (0)	cdn.2trk.info			65	IN (0x0001)	false
Mar 18, 2024 17:22:15.638624907 CET	1.1.1.1	192.168.2.4	0xc4ee	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:15.638624907 CET	1.1.1.1	192.168.2.4	0xc4ee	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:15.638624907 CET	1.1.1.1	192.168.2.4	0xc4ee	No error (0)	spug-vac.pubmnet.com		8.28.7.84	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:15.639250040 CET	1.1.1.1	192.168.2.4	0xfffb	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:15.639250040 CET	1.1.1.1	192.168.2.4	0xfffb	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:16.216598988 CET	1.1.1.1	192.168.2.4	0xfb31	No error (0)	rtgcdn.2trk.info		104.21.82.186	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:16.216598988 CET	1.1.1.1	192.168.2.4	0xfb31	No error (0)	rtgcdn.2trk.info		172.67.161.117	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:16.216732979 CET	1.1.1.1	192.168.2.4	0xae8	No error (0)	rtgcdn.2trk.info			65	IN (0x0001)	false
Mar 18, 2024 17:22:16.217236996 CET	1.1.1.1	192.168.2.4	0x910c	No error (0)	cdn.2trk.info		104.21.82.186	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:16.217236996 CET	1.1.1.1	192.168.2.4	0x910c	No error (0)	cdn.2trk.info		172.67.161.117	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:16.218389988 CET	1.1.1.1	192.168.2.4	0xdae3	No error (0)	cdn.2trk.info			65	IN (0x0001)	false
Mar 18, 2024 17:22:16.427213907 CET	1.1.1.1	192.168.2.4	0x34a5	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:16.427213907 CET	1.1.1.1	192.168.2.4	0x34a5	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:16.428535938 CET	1.1.1.1	192.168.2.4	0x2aef	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:16.428535938 CET	1.1.1.1	192.168.2.4	0x2aef	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:16.428535938 CET	1.1.1.1	192.168.2.4	0x2aef	No error (0)	global.px.quantserve.com		192.184.68.134	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:16.428535938 CET	1.1.1.1	192.168.2.4	0x2aef	No error (0)	global.px.quantserve.com		192.184.68.254	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:16.428535938 CET	1.1.1.1	192.168.2.4	0x2aef	No error (0)	global.px.quantserve.com		192.184.68.228	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:16.428535938 CET	1.1.1.1	192.168.2.4	0x2aef	No error (0)	global.px.quantserve.com		192.184.68.166	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:16.428535938 CET	1.1.1.1	192.168.2.4	0x2aef	No error (0)	global.px.quantserve.com		192.184.68.215	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:16.502152920 CET	1.1.1.1	192.168.2.4	0x7b25	No error (0)	dsp.adkernel.com		174.137.133.49	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:16.622339964 CET	1.1.1.1	192.168.2.4	0x6f2e	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:16.623809099 CET	1.1.1.1	192.168.2.4	0xde	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:16.625108004 CET	1.1.1.1	192.168.2.4	0xaa8a	No error (0)	gtrace.mediago.io		35.208.249.213	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:17.486176014 CET	1.1.1.1	192.168.2.4	0x34db	No error (0)	sync.technoratimedia.com	adserver.technoratimedia.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:17.486176014 CET	1.1.1.1	192.168.2.4	0x34db	No error (0)	adserver.technoratimedia.com		150.136.25.38	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:17.486222029 CET	1.1.1.1	192.168.2.4	0xabaa	No error (0)	sync.technoratimedia.com	adserver.technoratimedia.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:17.563536882 CET	1.1.1.1	192.168.2.4	0x9c1a	No error (0)	bid.2trk.info		104.21.82.186	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:17.563536882 CET	1.1.1.1	192.168.2.4	0x9c1a	No error (0)	bid.2trk.info		172.67.161.117	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:17.565176010 CET	1.1.1.1	192.168.2.4	0x6ec1	No error (0)	bid.2trk.info			65	IN (0x0001)	false
Mar 18, 2024 17:22:17.597062111 CET	1.1.1.1	192.168.2.4	0xf880	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:17.597062111 CET	1.1.1.1	192.168.2.4	0xf880	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:17.597558022 CET	1.1.1.1	192.168.2.4	0xa530	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:17.597558022 CET	1.1.1.1	192.168.2.4	0xa530	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:17.597558022 CET	1.1.1.1	192.168.2.4	0xa530	No error (0)	global.px.quantserve.com		192.184.68.228	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:17.597558022 CET	1.1.1.1	192.168.2.4	0xa530	No error (0)	global.px.quantserve.com		192.184.68.134	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:17.597558022 CET	1.1.1.1	192.168.2.4	0xa530	No error (0)	global.px.quantserve.com		192.184.68.166	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:17.597558022 CET	1.1.1.1	192.168.2.4	0xa530	No error (0)	global.px.quantserve.com		192.184.68.215	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:17.597558022 CET	1.1.1.1	192.168.2.4	0xa530	No error (0)	global.px.quantserve.com		192.184.68.254	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:17.602272034 CET	1.1.1.1	192.168.2.4	0x9ad	No error (0)	rtgcdn.2trk.info		172.67.161.117	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:17.602272034 CET	1.1.1.1	192.168.2.4	0x9ad	No error (0)	rtgcdn.2trk.info		104.21.82.186	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:17.604038954 CET	1.1.1.1	192.168.2.4	0x5495	No error (0)	rtgcdn.2trk.info			65	IN (0x0001)	false
Mar 18, 2024 17:22:17.960278034 CET	1.1.1.1	192.168.2.4	0xf7c3	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
Mar 18, 2024 17:22:17.960541010 CET	1.1.1.1	192.168.2.4	0x4ce4	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:17.960541010 CET	1.1.1.1	192.168.2.4	0x4ce4	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:18.092935085 CET	1.1.1.1	192.168.2.4	0xc7f8	No error (0)	googleads.g.doubleclick.net		142.251.40.194	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:18.102346897 CET	1.1.1.1	192.168.2.4	0xe01c	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Mar 18, 2024 17:22:18.104373932 CET	1.1.1.1	192.168.2.4	0xd98	No error (0)	bid.2trk.info			65	IN (0x0001)	false
Mar 18, 2024 17:22:18.106136084 CET	1.1.1.1	192.168.2.4	0x2591	No error (0)	bid.2trk.info		172.67.161.117	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:18.106136084 CET	1.1.1.1	192.168.2.4	0x2591	No error (0)	bid.2trk.info		104.21.82.186	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:19.215723991 CET	1.1.1.1	192.168.2.4	0x963d	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:20.493000984 CET	1.1.1.1	192.168.2.4	0x7050	No error (0)	gum.criteo.com	gum.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:20.493000984 CET	1.1.1.1	192.168.2.4	0x7050	No error (0)	gum.va1.vip.prod.criteo.com		74.119.119.139	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:20.493072987 CET	1.1.1.1	192.168.2.4	0x3b9e	No error (0)	gum.criteo.com	gum.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:20.826899052 CET	1.1.1.1	192.168.2.4	0x216c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:20.826899052 CET	1.1.1.1	192.168.2.4	0x216c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:23.481352091 CET	1.1.1.1	192.168.2.4	0x38ef	No error (0)	d31otfhas71ais.cloudfront.net		13.225.66.186	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:23.481352091 CET	1.1.1.1	192.168.2.4	0x38ef	No error (0)	d31otfhas71ais.cloudfront.net		13.225.66.147	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:23.481352091 CET	1.1.1.1	192.168.2.4	0x38ef	No error (0)	d31otfhas71ais.cloudfront.net		13.225.66.148	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:23.481352091 CET	1.1.1.1	192.168.2.4	0x38ef	No error (0)	d31otfhas71ais.cloudfront.net		13.225.66.213	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:23.948946953 CET	1.1.1.1	192.168.2.4	0xa6a8	No error (0)	d31otfhas71ais.cloudfront.net		13.225.66.186	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:23.948946953 CET	1.1.1.1	192.168.2.4	0xa6a8	No error (0)	d31otfhas71ais.cloudfront.net		13.225.66.148	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:23.948946953 CET	1.1.1.1	192.168.2.4	0xa6a8	No error (0)	d31otfhas71ais.cloudfront.net		13.225.66.147	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:23.948946953 CET	1.1.1.1	192.168.2.4	0xa6a8	No error (0)	d31otfhas71ais.cloudfront.net		13.225.66.213	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:38.345127106 CET	1.1.1.1	192.168.2.4	0xa7c6	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:38.345127106 CET	1.1.1.1	192.168.2.4	0xa7c6	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:40.941653013 CET	1.1.1.1	192.168.2.4	0x800d	No error (0)	indwes.tfaforms.net	ec-elb01.formassembly.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:40.941653013 CET	1.1.1.1	192.168.2.4	0x800d	No error (0)	ec-elb01.formassembly.com	ec-elbec-wg945jtfutnz-913366995.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:40.944873095 CET	1.1.1.1	192.168.2.4	0x1abe	No error (0)	indwes.tfaforms.net	ec-elb01.formassembly.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:40.944873095 CET	1.1.1.1	192.168.2.4	0x1abe	No error (0)	ec-elb01.formassembly.com	ec-elbec-wg945jtfutnz-913366995.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:40.944873095 CET	1.1.1.1	192.168.2.4	0x1abe	No error (0)	ec-elbec-wg945jtfutnz-913366995.us-east-1.elb.amazonaws.com		35.170.17.215	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:40.944873095 CET	1.1.1.1	192.168.2.4	0x1abe	No error (0)	ec-elbec-wg945jtfutnz-913366995.us-east-1.elb.amazonaws.com		44.217.137.122	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:40.944873095 CET	1.1.1.1	192.168.2.4	0x1abe	No error (0)	ec-elbec-wg945jtfutnz-913366995.us-east-1.elb.amazonaws.com		52.20.254.166	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:41.979496956 CET	1.1.1.1	192.168.2.4	0x9db	No error (0)	match.deepintent.com	m.deepintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:41.979496956 CET	1.1.1.1	192.168.2.4	0x9db	No error (0)	m.deepintent.com		8.18.47.7	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:41.979496956 CET	1.1.1.1	192.168.2.4	0x9db	No error (0)	m.deepintent.com		169.197.150.7	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:41.979496956 CET	1.1.1.1	192.168.2.4	0x9db	No error (0)	m.deepintent.com		169.197.150.8	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:41.979496956 CET	1.1.1.1	192.168.2.4	0x9db	No error (0)	m.deepintent.com		38.91.45.7	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:42.070620060 CET	1.1.1.1	192.168.2.4	0x6c05	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:42.070620060 CET	1.1.1.1	192.168.2.4	0x6c05	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:42.070620060 CET	1.1.1.1	192.168.2.4	0x6c05	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:42.072948933 CET	1.1.1.1	192.168.2.4	0x3172	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:42.072948933 CET	1.1.1.1	192.168.2.4	0x3172	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:42.072948933 CET	1.1.1.1	192.168.2.4	0x3172	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:42.284507990 CET	1.1.1.1	192.168.2.4	0xcd05	No error (0)	ad.mrtnsvr.com		34.102.163.6	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:42.707885027 CET	1.1.1.1	192.168.2.4	0xccea	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:42.707885027 CET	1.1.1.1	192.168.2.4	0xccea	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:42.757282019 CET	1.1.1.1	192.168.2.4	0x930e	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Mar 18, 2024 17:22:42.913361073 CET	1.1.1.1	192.168.2.4	0x7b61	No error (0)	synchroscript.deliveryengine.adswizz.com		18.238.55.58	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:42.913361073 CET	1.1.1.1	192.168.2.4	0x7b61	No error (0)	synchroscript.deliveryengine.adswizz.com		18.238.55.37	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:42.913361073 CET	1.1.1.1	192.168.2.4	0x7b61	No error (0)	synchroscript.deliveryengine.adswizz.com		18.238.55.15	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:42.913361073 CET	1.1.1.1	192.168.2.4	0x7b61	No error (0)	synchroscript.deliveryengine.adswizz.com		18.238.55.69	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:42.915297031 CET	1.1.1.1	192.168.2.4	0xafe9	No error (0)	idsync.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:43.092992067 CET	1.1.1.1	192.168.2.4	0x9524	No error (0)	rtb-use.mfadsrvr.com	pool-bid-gce-us.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:43.093529940 CET	1.1.1.1	192.168.2.4	0xd03b	No error (0)	rtb-use.mfadsrvr.com	pool-bid-gce-us.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:43.093529940 CET	1.1.1.1	192.168.2.4	0xd03b	No error (0)	pool-bid-gce-us.dorpat.iponweb.net		35.207.24.140	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:43.761508942 CET	1.1.1.1	192.168.2.4	0x7ed7	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:43.761508942 CET	1.1.1.1	192.168.2.4	0x7ed7	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:43.763786077 CET	1.1.1.1	192.168.2.4	0x5cd4	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Mar 18, 2024 17:22:43.819963932 CET	1.1.1.1	192.168.2.4	0x64fd	No error (0)	bcp.crwdcntrl.net		107.23.193.229	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:43.819963932 CET	1.1.1.1	192.168.2.4	0x64fd	No error (0)	bcp.crwdcntrl.net		18.207.42.67	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:43.819963932 CET	1.1.1.1	192.168.2.4	0x64fd	No error (0)	bcp.crwdcntrl.net		34.224.142.24	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:43.819963932 CET	1.1.1.1	192.168.2.4	0x64fd	No error (0)	bcp.crwdcntrl.net		54.234.166.1	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:43.819963932 CET	1.1.1.1	192.168.2.4	0x64fd	No error (0)	bcp.crwdcntrl.net		44.194.38.192	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:43.819963932 CET	1.1.1.1	192.168.2.4	0x64fd	No error (0)	bcp.crwdcntrl.net		52.207.168.130	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:43.819963932 CET	1.1.1.1	192.168.2.4	0x64fd	No error (0)	bcp.crwdcntrl.net		18.214.22.186	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:43.819963932 CET	1.1.1.1	192.168.2.4	0x64fd	No error (0)	bcp.crwdcntrl.net		34.198.123.133	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:43.928051949 CET	1.1.1.1	192.168.2.4	0xecae	No error (0)	synchroscript.deliveryengine.adswizz.com		18.238.55.69	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:43.928051949 CET	1.1.1.1	192.168.2.4	0xecae	No error (0)	synchroscript.deliveryengine.adswizz.com		18.238.55.15	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:43.928051949 CET	1.1.1.1	192.168.2.4	0xecae	No error (0)	synchroscript.deliveryengine.adswizz.com		18.238.55.58	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:43.928051949 CET	1.1.1.1	192.168.2.4	0xecae	No error (0)	synchroscript.deliveryengine.adswizz.com		18.238.55.37	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:44.227178097 CET	1.1.1.1	192.168.2.4	0x8a02	No error (0)	pippio.com		107.178.254.65	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:44.569879055 CET	1.1.1.1	192.168.2.4	0x4702	No error (0)	rtb.adentifi.com		34.197.235.192	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:44.569879055 CET	1.1.1.1	192.168.2.4	0x4702	No error (0)	rtb.adentifi.com		44.216.123.11	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:44.569879055 CET	1.1.1.1	192.168.2.4	0x4702	No error (0)	rtb.adentifi.com		54.83.86.193	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:44.569879055 CET	1.1.1.1	192.168.2.4	0x4702	No error (0)	rtb.adentifi.com		3.229.57.120	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:44.569879055 CET	1.1.1.1	192.168.2.4	0x4702	No error (0)	rtb.adentifi.com		44.197.3.66	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:44.569879055 CET	1.1.1.1	192.168.2.4	0x4702	No error (0)	rtb.adentifi.com		35.171.70.242	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:44.579287052 CET	1.1.1.1	192.168.2.4	0x5c24	No error (0)	pmp.mxptint.net		38.68.201.140	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:44.726356983 CET	1.1.1.1	192.168.2.4	0x3dcf	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:44.726356983 CET	1.1.1.1	192.168.2.4	0x3dcf	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:44.727534056 CET	1.1.1.1	192.168.2.4	0x76e7	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:44.727534056 CET	1.1.1.1	192.168.2.4	0x76e7	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:46.701843977 CET	1.1.1.1	192.168.2.4	0xcaee	No error (0)	www.indwes.edu	indwes.edu		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:46.701843977 CET	1.1.1.1	192.168.2.4	0xcaee	No error (0)	indwes.edu		216.54.215.75	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:46.702109098 CET	1.1.1.1	192.168.2.4	0xa90f	No error (0)	www.indwes.edu	indwes.edu		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:47.911906958 CET	1.1.1.1	192.168.2.4	0xafe	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:47.911906958 CET	1.1.1.1	192.168.2.4	0xafe	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:47.913436890 CET	1.1.1.1	192.168.2.4	0x2502	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:47.913436890 CET	1.1.1.1	192.168.2.4	0x2502	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:47.916532993 CET	1.1.1.1	192.168.2.4	0xd9dc	No error (0)	www.indwes.edu	indwes.edu		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:47.916532993 CET	1.1.1.1	192.168.2.4	0xd9dc	No error (0)	indwes.edu		216.54.215.75	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:47.917128086 CET	1.1.1.1	192.168.2.4	0x68fe	No error (0)	www.indwes.edu	indwes.edu		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:47.957794905 CET	1.1.1.1	192.168.2.4	0xf86e	No error (0)	indwes.tfaforms.net	ec-elb01.formassembly.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:47.957794905 CET	1.1.1.1	192.168.2.4	0xf86e	No error (0)	ec-elb01.formassembly.com	ec-elbec-wg945jtfutnz-913366995.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:47.975702047 CET	1.1.1.1	192.168.2.4	0x1304	No error (0)	indwes.tfaforms.net	ec-elb01.formassembly.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:47.975702047 CET	1.1.1.1	192.168.2.4	0x1304	No error (0)	ec-elb01.formassembly.com	ec-elbec-wg945jtfutnz-913366995.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:47.975702047 CET	1.1.1.1	192.168.2.4	0x1304	No error (0)	ec-elbec-wg945jtfutnz-913366995.us-east-1.elb.amazonaws.com		44.217.137.122	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:47.975702047 CET	1.1.1.1	192.168.2.4	0x1304	No error (0)	ec-elbec-wg945jtfutnz-913366995.us-east-1.elb.amazonaws.com		52.20.254.166	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:47.975702047 CET	1.1.1.1	192.168.2.4	0x1304	No error (0)	ec-elbec-wg945jtfutnz-913366995.us-east-1.elb.amazonaws.com		35.170.17.215	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:48.169856071 CET	1.1.1.1	192.168.2.4	0xa230	No error (0)	pmp.mxptint.net		38.68.201.140	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:48.705348015 CET	1.1.1.1	192.168.2.4	0x1729	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:48.705348015 CET	1.1.1.1	192.168.2.4	0x1729	No error (0)	cdn.w55c.net		54.145.134.218	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:48.705348015 CET	1.1.1.1	192.168.2.4	0x1729	No error (0)	cdn.w55c.net		52.7.175.103	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:48.705348015 CET	1.1.1.1	192.168.2.4	0x1729	No error (0)	cdn.w55c.net		54.156.43.152	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:48.705348015 CET	1.1.1.1	192.168.2.4	0x1729	No error (0)	cdn.w55c.net		54.145.65.124	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:48.705348015 CET	1.1.1.1	192.168.2.4	0x1729	No error (0)	cdn.w55c.net		52.6.168.171	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:48.705348015 CET	1.1.1.1	192.168.2.4	0x1729	No error (0)	cdn.w55c.net		52.7.152.73	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:48.705348015 CET	1.1.1.1	192.168.2.4	0x1729	No error (0)	cdn.w55c.net		54.208.178.145	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:48.705348015 CET	1.1.1.1	192.168.2.4	0x1729	No error (0)	cdn.w55c.net		54.165.36.24	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:48.706751108 CET	1.1.1.1	192.168.2.4	0xd3a5	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:48.802315950 CET	1.1.1.1	192.168.2.4	0x1400	No error (0)	sync.srv.stackadapt.com		54.174.97.40	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:48.802315950 CET	1.1.1.1	192.168.2.4	0x1400	No error (0)	sync.srv.stackadapt.com		52.73.22.46	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:48.802315950 CET	1.1.1.1	192.168.2.4	0x1400	No error (0)	sync.srv.stackadapt.com		52.73.237.27	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:48.802315950 CET	1.1.1.1	192.168.2.4	0x1400	No error (0)	sync.srv.stackadapt.com		52.73.238.186	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:48.802315950 CET	1.1.1.1	192.168.2.4	0x1400	No error (0)	sync.srv.stackadapt.com		54.173.43.28	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:48.802315950 CET	1.1.1.1	192.168.2.4	0x1400	No error (0)	sync.srv.stackadapt.com		54.162.77.126	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:48.802315950 CET	1.1.1.1	192.168.2.4	0x1400	No error (0)	sync.srv.stackadapt.com		54.145.217.237	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:48.802315950 CET	1.1.1.1	192.168.2.4	0x1400	No error (0)	sync.srv.stackadapt.com		54.205.171.68	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:48.936990976 CET	1.1.1.1	192.168.2.4	0x1fab	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:48.936990976 CET	1.1.1.1	192.168.2.4	0x1fab	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:48.937846899 CET	1.1.1.1	192.168.2.4	0x21ac	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:48.937846899 CET	1.1.1.1	192.168.2.4	0x21ac	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:49.018013000 CET	1.1.1.1	192.168.2.4	0x70be	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:49.018013000 CET	1.1.1.1	192.168.2.4	0x70be	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		3.215.42.230	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:49.018013000 CET	1.1.1.1	192.168.2.4	0x70be	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		3.222.105.150	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:49.018013000 CET	1.1.1.1	192.168.2.4	0x70be	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		3.224.131.173	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:49.018013000 CET	1.1.1.1	192.168.2.4	0x70be	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		100.24.217.221	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:49.019037008 CET	1.1.1.1	192.168.2.4	0x2965	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:49.019547939 CET	1.1.1.1	192.168.2.4	0xc469	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:49.019547939 CET	1.1.1.1	192.168.2.4	0xc469	No error (0)	idaas-ext.cph.liveintent.com		52.22.221.65	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:49.019547939 CET	1.1.1.1	192.168.2.4	0xc469	No error (0)	idaas-ext.cph.liveintent.com		34.202.88.34	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:49.019547939 CET	1.1.1.1	192.168.2.4	0xc469	No error (0)	idaas-ext.cph.liveintent.com		54.172.137.53	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:49.019547939 CET	1.1.1.1	192.168.2.4	0xc469	No error (0)	idaas-ext.cph.liveintent.com		54.235.71.105	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:49.019547939 CET	1.1.1.1	192.168.2.4	0xc469	No error (0)	idaas-ext.cph.liveintent.com		54.88.150.36	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:49.019547939 CET	1.1.1.1	192.168.2.4	0xc469	No error (0)	idaas-ext.cph.liveintent.com		54.204.111.143	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:49.019547939 CET	1.1.1.1	192.168.2.4	0xc469	No error (0)	idaas-ext.cph.liveintent.com		107.22.223.168	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:49.019547939 CET	1.1.1.1	192.168.2.4	0xc469	No error (0)	idaas-ext.cph.liveintent.com		34.200.9.9	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:49.020184994 CET	1.1.1.1	192.168.2.4	0x1578	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:49.139755964 CET	1.1.1.1	192.168.2.4	0x38ea	No error (0)	r.bidswitch.net	pool-use-gce-sc.reims.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:49.139755964 CET	1.1.1.1	192.168.2.4	0x38ea	No error (0)	pool-use-gce-sc.reims.iponweb.net		35.211.118.13	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:49.140511036 CET	1.1.1.1	192.168.2.4	0x83d0	No error (0)	r.bidswitch.net	pool-use-gce-sc.reims.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:49.572128057 CET	1.1.1.1	192.168.2.4	0x8483	No error (0)	sync.crwdcntrl.net		44.205.216.19	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:49.572128057 CET	1.1.1.1	192.168.2.4	0x8483	No error (0)	sync.crwdcntrl.net		18.214.22.186	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:49.572128057 CET	1.1.1.1	192.168.2.4	0x8483	No error (0)	sync.crwdcntrl.net		18.207.42.67	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:49.572128057 CET	1.1.1.1	192.168.2.4	0x8483	No error (0)	sync.crwdcntrl.net		107.23.193.229	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:49.572128057 CET	1.1.1.1	192.168.2.4	0x8483	No error (0)	sync.crwdcntrl.net		34.224.142.24	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:49.572128057 CET	1.1.1.1	192.168.2.4	0x8483	No error (0)	sync.crwdcntrl.net		54.234.166.1	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:49.572128057 CET	1.1.1.1	192.168.2.4	0x8483	No error (0)	sync.crwdcntrl.net		44.194.38.192	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:49.572128057 CET	1.1.1.1	192.168.2.4	0x8483	No error (0)	sync.crwdcntrl.net		34.198.123.133	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:49.575396061 CET	1.1.1.1	192.168.2.4	0x8514	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:49.575396061 CET	1.1.1.1	192.168.2.4	0x8514	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		3.215.42.230	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:49.575396061 CET	1.1.1.1	192.168.2.4	0x8514	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		3.222.105.150	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:49.575396061 CET	1.1.1.1	192.168.2.4	0x8514	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		100.24.217.221	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:49.575396061 CET	1.1.1.1	192.168.2.4	0x8514	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		3.224.131.173	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:49.576359034 CET	1.1.1.1	192.168.2.4	0x909e	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:49.980189085 CET	1.1.1.1	192.168.2.4	0xd6ff	No error (0)	live.rezync.com		18.164.116.23	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:49.980189085 CET	1.1.1.1	192.168.2.4	0xd6ff	No error (0)	live.rezync.com		18.164.116.67	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:49.980189085 CET	1.1.1.1	192.168.2.4	0xd6ff	No error (0)	live.rezync.com		18.164.116.120	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:49.980189085 CET	1.1.1.1	192.168.2.4	0xd6ff	No error (0)	live.rezync.com		18.164.116.105	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:50.079257011 CET	1.1.1.1	192.168.2.4	0x9d40	No error (0)	secure.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:50.079257011 CET	1.1.1.1	192.168.2.4	0x9d40	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:50.079257011 CET	1.1.1.1	192.168.2.4	0x9d40	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:50.079257011 CET	1.1.1.1	192.168.2.4	0x9d40	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:50.079257011 CET	1.1.1.1	192.168.2.4	0x9d40	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:50.079257011 CET	1.1.1.1	192.168.2.4	0x9d40	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:50.079257011 CET	1.1.1.1	192.168.2.4	0x9d40	No error (0)	ib.anycast.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:50.079257011 CET	1.1.1.1	192.168.2.4	0x9d40	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:50.079257011 CET	1.1.1.1	192.168.2.4	0x9d40	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:50.079257011 CET	1.1.1.1	192.168.2.4	0x9d40	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:50.079257011 CET	1.1.1.1	192.168.2.4	0x9d40	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:50.079257011 CET	1.1.1.1	192.168.2.4	0x9d40	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:50.079257011 CET	1.1.1.1	192.168.2.4	0x9d40	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:50.079257011 CET	1.1.1.1	192.168.2.4	0x9d40	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:50.084366083 CET	1.1.1.1	192.168.2.4	0x45cf	No error (0)	io.narrative.io		52.22.81.24	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:50.084366083 CET	1.1.1.1	192.168.2.4	0x45cf	No error (0)	io.narrative.io		52.44.153.150	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:50.084366083 CET	1.1.1.1	192.168.2.4	0x45cf	No error (0)	io.narrative.io		54.243.254.172	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:50.084366083 CET	1.1.1.1	192.168.2.4	0x45cf	No error (0)	io.narrative.io		52.55.248.240	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:50.088500023 CET	1.1.1.1	192.168.2.4	0x3384	No error (0)	sync.crwdcntrl.net		52.207.168.130	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:50.088500023 CET	1.1.1.1	192.168.2.4	0x3384	No error (0)	sync.crwdcntrl.net		34.224.142.24	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:50.088500023 CET	1.1.1.1	192.168.2.4	0x3384	No error (0)	sync.crwdcntrl.net		34.198.123.133	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:50.088500023 CET	1.1.1.1	192.168.2.4	0x3384	No error (0)	sync.crwdcntrl.net		18.207.42.67	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:50.088500023 CET	1.1.1.1	192.168.2.4	0x3384	No error (0)	sync.crwdcntrl.net		44.219.90.173	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:50.088500023 CET	1.1.1.1	192.168.2.4	0x3384	No error (0)	sync.crwdcntrl.net		107.23.193.229	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:50.088500023 CET	1.1.1.1	192.168.2.4	0x3384	No error (0)	sync.crwdcntrl.net		18.214.22.186	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:50.088500023 CET	1.1.1.1	192.168.2.4	0x3384	No error (0)	sync.crwdcntrl.net		44.194.38.192	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:51.349621058 CET	1.1.1.1	192.168.2.4	0x8957	No error (0)	pixel-sync.sitescout.com		34.36.216.150	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:51.617299080 CET	1.1.1.1	192.168.2.4	0x89c2	No error (0)	us-east-1-otel.formassembly.com		52.86.124.2	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:51.617299080 CET	1.1.1.1	192.168.2.4	0x89c2	No error (0)	us-east-1-otel.formassembly.com		52.204.126.241	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:51.737715006 CET	1.1.1.1	192.168.2.4	0x9d79	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:51.737885952 CET	1.1.1.1	192.168.2.4	0x97bf	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:54.249773026 CET	1.1.1.1	192.168.2.4	0x44a5	No error (0)	pippio.com		107.178.254.65	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:22:59.035422087 CET	1.1.1.1	192.168.2.4	0x5bbc	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:22:59.035422087 CET	1.1.1.1	192.168.2.4	0x5bbc	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:13.655512094 CET	1.1.1.1	192.168.2.4	0x4ce3	No error (0)	beacon.lynx.cognitivlabs.com	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:23:13.655512094 CET	1.1.1.1	192.168.2.4	0x4ce3	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		54.205.163.173	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:13.655512094 CET	1.1.1.1	192.168.2.4	0x4ce3	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		107.21.65.70	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:13.655512094 CET	1.1.1.1	192.168.2.4	0x4ce3	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		54.87.217.118	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:13.655512094 CET	1.1.1.1	192.168.2.4	0x4ce3	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		44.218.18.183	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:13.656095028 CET	1.1.1.1	192.168.2.4	0xfb07	No error (0)	beacon.lynx.cognitivlabs.com	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:23:13.680103064 CET	1.1.1.1	192.168.2.4	0xe048	No error (0)	dis.criteo.com	widget.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:23:13.680103064 CET	1.1.1.1	192.168.2.4	0xe048	No error (0)	widget.va1.vip.prod.criteo.com		74.119.119.150	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:13.680332899 CET	1.1.1.1	192.168.2.4	0x4988	No error (0)	dis.criteo.com	widget.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:23:13.689047098 CET	1.1.1.1	192.168.2.4	0x891d	No error (0)	a.tribalfusion.com			65	IN (0x0001)	false
Mar 18, 2024 17:23:13.689389944 CET	1.1.1.1	192.168.2.4	0xe53a	No error (0)	a.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:13.689389944 CET	1.1.1.1	192.168.2.4	0xe53a	No error (0)	a.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:13.701790094 CET	1.1.1.1	192.168.2.4	0xc5a2	No error (0)	ums.acuityplatform.com		69.90.254.78	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:13.808969021 CET	1.1.1.1	192.168.2.4	0x729d	No error (0)	s.amazon-adsystem.com		52.46.155.104	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:13.809606075 CET	1.1.1.1	192.168.2.4	0xfad2	No error (0)	a.audrte.com		34.251.192.134	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:13.809606075 CET	1.1.1.1	192.168.2.4	0xfad2	No error (0)	a.audrte.com		52.30.18.244	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:13.809606075 CET	1.1.1.1	192.168.2.4	0xfad2	No error (0)	a.audrte.com		34.255.246.57	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:13.809606075 CET	1.1.1.1	192.168.2.4	0xfad2	No error (0)	a.audrte.com		52.49.253.210	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:13.809606075 CET	1.1.1.1	192.168.2.4	0xfad2	No error (0)	a.audrte.com		3.248.111.133	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:13.809606075 CET	1.1.1.1	192.168.2.4	0xfad2	No error (0)	a.audrte.com		34.255.73.132	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:13.809642076 CET	1.1.1.1	192.168.2.4	0xe0aa	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:23:13.810506105 CET	1.1.1.1	192.168.2.4	0xfe73	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:23:13.810506105 CET	1.1.1.1	192.168.2.4	0xfe73	No error (0)	d20qwf0wrdtevy.cloudfront.net		108.138.128.44	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:13.810506105 CET	1.1.1.1	192.168.2.4	0xfe73	No error (0)	d20qwf0wrdtevy.cloudfront.net		108.138.128.83	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:13.810506105 CET	1.1.1.1	192.168.2.4	0xfe73	No error (0)	d20qwf0wrdtevy.cloudfront.net		108.138.128.21	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:13.810506105 CET	1.1.1.1	192.168.2.4	0xfe73	No error (0)	d20qwf0wrdtevy.cloudfront.net		108.138.128.14	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:14.256019115 CET	1.1.1.1	192.168.2.4	0x2fa6	No error (0)	s.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:14.256019115 CET	1.1.1.1	192.168.2.4	0x2fa6	No error (0)	s.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:14.256663084 CET	1.1.1.1	192.168.2.4	0x8385	No error (0)	s.tribalfusion.com			65	IN (0x0001)	false
Mar 18, 2024 17:23:14.295835972 CET	1.1.1.1	192.168.2.4	0x88c9	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:23:14.295835972 CET	1.1.1.1	192.168.2.4	0x88c9	No error (0)	uipus.semasio.net		50.57.31.206	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:14.296422005 CET	1.1.1.1	192.168.2.4	0xc2d2	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:23:14.297595024 CET	1.1.1.1	192.168.2.4	0x438c	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:23:14.297595024 CET	1.1.1.1	192.168.2.4	0x438c	No error (0)	d20qwf0wrdtevy.cloudfront.net		108.138.128.21	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:14.297595024 CET	1.1.1.1	192.168.2.4	0x438c	No error (0)	d20qwf0wrdtevy.cloudfront.net		108.138.128.14	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:14.297595024 CET	1.1.1.1	192.168.2.4	0x438c	No error (0)	d20qwf0wrdtevy.cloudfront.net		108.138.128.83	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:14.297595024 CET	1.1.1.1	192.168.2.4	0x438c	No error (0)	d20qwf0wrdtevy.cloudfront.net		108.138.128.44	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:14.297638893 CET	1.1.1.1	192.168.2.4	0xa5aa	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:23:14.772517920 CET	1.1.1.1	192.168.2.4	0xf612	No error (0)	cm.g.doubleclick.net		142.250.80.98	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:23:15.439603090 CET	1.1.1.1	192.168.2.4	0x2a52	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:23:15.439825058 CET	1.1.1.1	192.168.2.4	0x290b	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:23:15.439825058 CET	1.1.1.1	192.168.2.4	0x290b	No error (0)	uipus.semasio.net		50.57.31.206	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	216.21.12.179	80	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 18, 2024 17:21:50.646677971 CET	428	OUT	GET / HTTP/1.1 Host: iwu.marketing Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 18, 2024 17:21:50.825207949 CET	381	IN	HTTP/1.1 200 OK Content-Type: text/html Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Mon, 18 Mar 2024 16:21:50 GMT Set-Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; Domain=.iwu.marketing; Path=/; HttpOnly X-Cache-Control-Orig: Cache-Control: max-age=0, must-revalidate, private X-Expires-Orig: None ETag: "9b43d5-45df5b9d871f" Transfer-Encoding: chunked
Mar 18, 2024 17:21:50.825994015 CET	1220	IN	Data Raw: 34 62 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c Data Ascii: 4bf<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" lang="en"><head><meta charset="utf-8"/><title>IWU Marketing</title><meta content="width=device-width, initial-scale=1.0" name="viewport"/><meta content="noindex, nofollow"
Mar 18, 2024 17:21:50.826097012 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 3a 20 77 68 69 74 65 3b 20 6f 70 61 63 69 74 79 3a 20 39 35 25 3b 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 22 3e 3c 21 2d 2d 20 42 72 61 6e 64 20 61 6e 64 20 74 6f 67 67 6c 65 Data Ascii: 4bd: white; opacity: 95%;"><div class="container-fluid">... Brand and toggle get grouped for better mobile display --><div class="navbar-header"><button class="navbar-toggle collapsed" data-target="#bs-example-navbar-collapse-1" data-to
Mar 18, 2024 17:21:50.826179981 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 75 69 64 20 2d 2d 3e 3c 2f 6e 61 76 3e 0a 3c 68 65 61 64 65 72 20 63 6c 61 73 73 3d 22 6e 6f 6e 72 65 73 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 2d 63 6f 6e 74 65 6e 74 22 3e 0a 3c 64 69 76 20 63 6c 61 Data Ascii: 4bduid --></nav><header class="nonres"><div class="header-content"><div class="header-content-inner text-center" style="max-width: 100%;"><h1 style="color: #f5f5f5; text-shadow: 5px 3px 5px #464646;"><span class="large" style="font-siz
Mar 18, 2024 17:21:50.952950954 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 65 72 76 69 63 65 20 61 6e 64 20 65 78 63 65 6c 6c 65 6e 63 65 20 69 6e 20 61 6c 6c 20 74 68 61 74 20 77 65 20 64 6f 2e 3c 2f 70 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 70 61 67 65 2d 73 63 72 6f 6c 6c 20 62 74 6e 20 62 74 6e 2d Data Ascii: 4bdervice and excellence in all that we do.</p><a class="page-scroll btn btn-default btn-xl sr-button" href="#services">Get Started!</a></div></div></div></section><section class="bg-dark" id="services" style="padding-bottom: 2rem;">
Mar 18, 2024 17:21:50.953038931 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 64 20 73 6f 63 69 61 6c 20 6d 65 64 69 61 20 70 72 6f 70 65 72 74 69 65 73 2c 20 61 73 20 77 65 6c 6c 20 61 73 20 64 69 67 69 74 61 6c 20 61 64 76 65 72 74 69 73 69 6e 67 20 61 6e 64 20 65 6d 61 69 6c 20 6d 61 72 6b 65 74 69 Data Ascii: 4bdd social media properties, as well as digital advertising and email marketing strategies.</span></p></div></div><div class="col-md-4 text-center"><div class="service-box ug"><span class="fa fa-4x fa-line-chart text-primary sr-icons"
Mar 18, 2024 17:21:50.953114033 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 3d 22 73 65 63 74 69 6f 6e 2d 68 65 61 64 69 6e 67 22 3e 4f 75 72 20 41 77 61 72 64 2d 57 69 6e 6e 69 6e 67 20 54 65 61 6d 3c 2f 68 32 3e 0a 3c 68 72 2f 3e 0a 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 6d 75 74 65 64 22 3e Data Ascii: 4bd="section-heading">Our Award-Winning Team</h2><hr/><p class="text-muted">Recognized for excellence in higher education marketing by the AIVA Communicator Awards, Collegiate Advertising Awards, Higher Education Marketing Advertising Aw
Mar 18, 2024 17:21:50.953187943 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 61 73 73 3d 22 74 65 78 74 2d 6d 75 74 65 64 22 3e 77 65 73 2e 61 64 6b 69 6e 73 40 69 6e 64 77 65 73 2e 65 64 75 3c 2f 68 36 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 Data Ascii: 4bdass="text-muted">wes.adkins@indwes.edu</h6></div></div></div><div class="col-lg-3 col-sm-12"><div class="team-member"><div class="text-center"><h3 class="text-primary">Aaron Cawthorn</h3><p class="title"><em>Director of Marketin
Mar 18, 2024 17:21:50.953248978 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 73 73 3d 22 74 65 78 74 2d 63 65 6e 74 65 72 22 3e 0a 3c 68 33 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 70 72 69 6d 61 72 79 22 3e 52 61 63 68 61 65 6c 20 47 6f 75 76 61 6e 3c 2f 68 33 3e 0a 3c 70 20 63 6c 61 73 73 3d 22 74 69 Data Ascii: 4bdss="text-center"><h3 class="text-primary">Rachael Gouvan</h3><p class="title"><em>Senior Graphic Designer</em></p><h6 class="title text-muted">rachel.gouvan@indwes.edu</h6></div></div></div><div class="col-lg-3 col-sm-12"><div c
Mar 18, 2024 17:21:50.953316927 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 6e 75 74 74 65 72 40 69 6e 64 77 65 73 2e 65 64 75 3c 2f 68 36 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6c 67 2d 33 20 63 6f 6c 2d 73 6d 2d 31 32 22 Data Ascii: 4bdnutter@indwes.edu</h6></div></div></div><div class="col-lg-3 col-sm-12"><div class="team-member"><div class="text-center"><h3 class="text-primary">Lana Shoaf</h3><p class="title"><em>Copywriter & Communications Manager</em><
Mar 18, 2024 17:21:50.953376055 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 61 73 73 3d 22 74 69 74 6c 65 22 3e 3c 65 6d 3e 42 72 61 6e 64 20 26 61 6d 70 3b 20 4d 61 72 6b 65 74 69 6e 67 20 4f 70 65 72 61 74 69 6f 6e 73 20 41 73 73 69 73 74 61 6e 74 3c 2f 65 6d 3e 3c 2f 70 3e 0a 3c 68 36 20 63 6c 61 Data Ascii: 4bdass="title"><em>Brand & Marketing Operations Assistant</em></p><h6 class="title text-muted">derek.ancil@indwes.edu</h6></div></div></div><div class="col-lg-4 col-sm-12"><div class="team-member"><div class="text-center"><h3 c
Mar 18, 2024 17:21:51.103393078 CET	359	OUT	GET /js/jquery.js HTTP/1.1 Host: iwu.marketing Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012
Mar 18, 2024 17:21:51.266624928 CET	263	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Mon, 18 Mar 2024 05:00:06 GMT Accept-Ranges: bytes ETag: "883ddc24f178da1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Mon, 18 Mar 2024 16:21:50 GMT Content-Length: 95785
Mar 18, 2024 17:21:55.811544895 CET	484	OUT	GET /favicon.ico HTTP/1.1 Host: iwu.marketing Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; browserupdateorg=pause
Mar 18, 2024 17:21:55.965334892 CET	252	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Last-Modified: Mon, 18 Mar 2024 05:00:20 GMT Accept-Ranges: bytes ETag: "c39d1d2df178da1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Mon, 18 Mar 2024 16:21:55 GMT Content-Length: 7406
Mar 18, 2024 17:22:22.884015083 CET	580	OUT	GET / HTTP/1.1 Host: iwu.marketing Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; browserupdateorg=pause If-None-Match: "9b43d5-45df5b9d871f"
Mar 18, 2024 17:22:23.037132978 CET	287	IN	HTTP/1.1 200 OK Content-Type: text/html Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Mon, 18 Mar 2024 16:22:22 GMT X-Cache-Control-Orig: Cache-Control: max-age=0, must-revalidate, private X-Expires-Orig: None ETag: "d99b26-1553f71b97d1" Transfer-Encoding: chunked
Mar 18, 2024 17:22:23.180275917 CET	531	OUT	GET /font-awesome/fonts/fontawesome-webfont.woff2?v=4.3.0 HTTP/1.1 Host: iwu.marketing Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/font-awesome/css/font-awesome.min.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; browserupdateorg=pause
Mar 18, 2024 17:22:23.307277918 CET	243	IN	HTTP/1.0 302 Object Moved Pragma: no-cache Location: http://blocked.by.waap.network Connection: close Set-Cookie: TUT-WAF = jXhkDEX1jE3eGMl7+LuJhpruWRs0012; Comment = ; Domain = ; Max-Age = ; Expires = ; Path = /; Version = 0; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49734	216.21.12.179	80	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 18, 2024 17:21:50.846122026 CET	383	OUT	GET /css/bootstrap.min.css HTTP/1.1 Host: iwu.marketing Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012
Mar 18, 2024 17:21:51.027841091 CET	254	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Mon, 18 Mar 2024 05:00:17 GMT Accept-Ranges: bytes ETag: "49b6562bf178da1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Mon, 18 Mar 2024 16:21:50 GMT Transfer-Encoding: chunked
Mar 18, 2024 17:21:51.027894974 CET	1220	IN	Data Raw: 34 62 66 0d 0a 2f 2a 21 0d 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 36 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 35 20 54 77 Data Ascii: 4bf/! Bootstrap v3.3.6 (http://getbootstrap.com) * Copyright 2011-2015 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normal
Mar 18, 2024 17:21:51.028011084 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b Data Ascii: 4bd{margin:0;font:inherit;color:inherit}button{overflow:visible}button,select{text-transform:none}button,html input[type=button],input[type=reset],input[type=submit]{-webkit-appearance:button;cursor:pointer}button[disabled],html input[disa
Mar 18, 2024 17:21:51.028039932 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 6e 64 3a 30 20 30 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e Data Ascii: 4bdnd:0 0!important;-webkit-box-shadow:none!important;box-shadow:none!important}a,a:visited{text-decoration:underline}a[href]:after{content:" (" attr(href) ")"}abbr[title]:after{content:" (" attr(title) ")"}a[href^="javascript:"]:after,a[h
Mar 18, 2024 17:21:51.158293009 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 76 67 27 29 7d 2e 67 6c 79 70 68 69 63 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 31 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a Data Ascii: 4bdvg')}.glyphicon{position:relative;top:1px;display:inline-block;font-family:'Glyphicons Halflings';font-style:normal;font-weight:400;line-height:1;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.glyphicon-asterisk:b
Mar 18, 2024 17:21:51.158318043 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 70 68 69 63 6f 6e 2d 63 6f 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 72 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 32 30 22 7d 2e Data Ascii: 4bdphicon-cog:before{content:"\e019"}.glyphicon-trash:before{content:"\e020"}.glyphicon-home:before{content:"\e021"}.glyphicon-file:before{content:"\e022"}.glyphicon-time:before{content:"\e023"}.glyphicon-road:before{content:"\e024"}.glyph
Mar 18, 2024 17:21:51.158390999 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 69 74 61 6c 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 65 78 74 Data Ascii: 4bdre{content:"\e048"}.glyphicon-italic:before{content:"\e049"}.glyphicon-text-height:before{content:"\e050"}.glyphicon-text-width:before{content:"\e051"}.glyphicon-align-left:before{content:"\e052"}.glyphicon-align-center:before{content:"
Mar 18, 2024 17:21:51.158468962 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 65 6a 65 63 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 Data Ascii: 4bdbefore{content:"\e077"}.glyphicon-eject:before{content:"\e078"}.glyphicon-chevron-left:before{content:"\e079"}.glyphicon-chevron-right:before{content:"\e080"}.glyphicon-plus-sign:before{content:"\e081"}.glyphicon-minus-sign:before{conte
Mar 18, 2024 17:21:51.158544064 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 6e 74 65 6e 74 3a 22 5c 65 31 30 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 6c 61 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 30 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 61 6c 65 6e 64 61 72 3a 62 Data Ascii: 4bdntent:"\e107"}.glyphicon-plane:before{content:"\e108"}.glyphicon-calendar:before{content:"\e109"}.glyphicon-random:before{content:"\e110"}.glyphicon-comment:before{content:"\e111"}.glyphicon-magnet:before{content:"\e112"}.glyphicon-chev
Mar 18, 2024 17:21:51.158638000 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 33 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 67 6c 6f 62 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 33 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 77 Data Ascii: 4bdbefore{content:"\e134"}.glyphicon-globe:before{content:"\e135"}.glyphicon-wrench:before{content:"\e136"}.glyphicon-tasks:before{content:"\e137"}.glyphicon-filter:before{content:"\e138"}.glyphicon-briefcase:before{content:"\e139"}.glyphi
Mar 18, 2024 17:21:51.158685923 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 5c 65 31 36 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6c 6f 67 2d 6f 75 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 36 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6e 65 77 2d 77 69 6e 64 6f 77 3a 62 65 66 6f Data Ascii: 4bd\e162"}.glyphicon-log-out:before{content:"\e163"}.glyphicon-new-window:before{content:"\e164"}.glyphicon-record:before{content:"\e165"}.glyphicon-save:before{content:"\e166"}.glyphicon-open:before{content:"\e167"}.glyphicon-saved:before
Mar 18, 2024 17:21:52.047305107 CET	438	OUT	GET /img/campus.jpg HTTP/1.1 Host: iwu.marketing Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://iwu.marketing/css/creative.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012
Mar 18, 2024 17:21:52.204907894 CET	251	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Mon, 18 Mar 2024 05:01:24 GMT Accept-Ranges: bytes ETag: "55298c53f178da1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Mon, 18 Mar 2024 16:21:51 GMT Content-Length: 89996
Mar 18, 2024 17:21:53.365566969 CET	506	OUT	GET /font-awesome/fonts/fontawesome-webfont.woff?v=4.3.0 HTTP/1.1 Host: iwu.marketing Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/font-awesome/css/font-awesome.min.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012
Mar 18, 2024 17:21:53.496579885 CET	243	IN	HTTP/1.0 302 Object Moved Pragma: no-cache Location: http://blocked.by.waap.network Connection: close Set-Cookie: TUT-WAF = jXhkDEX1jE3eGMl7+LuJhpruWRs0012; Comment = ; Domain = ; Max-Age = ; Expires = ; Path = /; Version = 0; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49740	216.21.12.179	80	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 18, 2024 17:21:50.974894047 CET	399	OUT	GET /font-awesome/css/font-awesome.min.css HTTP/1.1 Host: iwu.marketing Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012
Mar 18, 2024 17:21:51.153034925 CET	254	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Mon, 18 Mar 2024 05:00:07 GMT Accept-Ranges: bytes ETag: "ec496b25f178da1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Mon, 18 Mar 2024 16:21:50 GMT Transfer-Encoding: chunked
Mar 18, 2024 17:21:51.153130054 CET	1220	IN	Data Raw: 34 62 66 0d 0a 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 33 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f Data Ascii: 4bf/! Font Awesome 4.3.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfon
Mar 18, 2024 17:21:51.153244019 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 6f 70 3a 2e 31 34 32 38 35 37 31 34 65 6d 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 61 2d 6c 69 2e 66 61 2d 6c 67 7b 6c 65 66 74 3a 2d 31 2e 38 35 37 31 34 32 38 36 65 6d 7d 2e 66 61 2d 62 6f 72 64 65 72 Data Ascii: 4bdop:.14285714em;text-align:center}.fa-li.fa-lg{left:-1.85714286em}.fa-border{padding:.2em .25em .15em;border:solid .08em #eee;border-radius:.1em}.pull-right{float:right}.pull-left{float:left}.fa.pull-left{margin-right:.3em}.fa.pull-right
Mar 18, 2024 17:21:51.153280020 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 65 28 32 37 30 64 65 67 29 7d 2e 66 61 2d 66 6c 69 70 2d 68 6f 72 69 7a 6f 6e 74 61 6c 7b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 42 61 73 69 Data Ascii: 4bde(270deg)}.fa-flip-horizontal{filter:progid:DXImageTransform.Microsoft.BasicImage(rotation=0, mirror=1);-webkit-transform:scale(-1, 1);-ms-transform:scale(-1, 1);transform:scale(-1, 1)}.fa-flip-vertical{filter:progid:DXImageTransform.Mi
Mar 18, 2024 17:21:51.280195951 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 73 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 74 69 6d 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 64 22 7d 2e 66 61 2d 73 65 61 72 63 68 2d 70 6c 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 Data Ascii: 4bdse:before,.fa-times:before{content:"\f00d"}.fa-search-plus:before{content:"\f00e"}.fa-search-minus:before{content:"\f010"}.fa-power-off:before{content:"\f011"}.fa-signal:before{content:"\f012"}.fa-gear:before,.fa-cog:before{content:"\f0
Mar 18, 2024 17:21:51.280232906 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 3a 22 5c 66 30 33 30 22 7d 2e 66 61 2d 66 6f 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 31 22 7d 2e 66 61 2d 62 6f 6c 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 32 22 7d 2e 66 Data Ascii: 4bd:"\f030"}.fa-font:before{content:"\f031"}.fa-bold:before{content:"\f032"}.fa-italic:before{content:"\f033"}.fa-text-height:before{content:"\f034"}.fa-text-width:before{content:"\f035"}.fa-align-left:before{content:"\f036"}.fa-align-cent
Mar 18, 2024 17:21:51.280329943 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 35 31 22 7d 2e 66 61 2d 65 6a 65 63 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 32 22 7d 2e 66 61 2d 63 68 65 76 72 6f 6e 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 33 Data Ascii: 4bd51"}.fa-eject:before{content:"\f052"}.fa-chevron-left:before{content:"\f053"}.fa-chevron-right:before{content:"\f054"}.fa-plus-circle:before{content:"\f055"}.fa-minus-circle:before{content:"\f056"}.fa-times-circle:before{content:"\f057"
Mar 18, 2024 17:21:51.280422926 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 33 22 7d 2e 66 61 2d 72 61 6e 64 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 34 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 Data Ascii: 4bd:before{content:"\f073"}.fa-random:before{content:"\f074"}.fa-comment:before{content:"\f075"}.fa-magnet:before{content:"\f076"}.fa-chevron-up:before{content:"\f077"}.fa-chevron-down:before{content:"\f078"}.fa-retweet:before{content:"\f0
Mar 18, 2024 17:21:51.280493975 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 34 22 7d 2e 66 61 2d 70 68 6f 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 35 22 7d 2e 66 61 2d 73 71 75 61 72 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 36 22 7d 2e 66 61 Data Ascii: 4bd4"}.fa-phone:before{content:"\f095"}.fa-square-o:before{content:"\f096"}.fa-bookmark-o:before{content:"\f097"}.fa-phone-square:before{content:"\f098"}.fa-twitter:before{content:"\f099"}.fa-facebook-f:before,.fa-facebook:before{content:"
Mar 18, 2024 17:21:51.280561924 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 33 22 7d 2e 66 61 2d 63 75 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 63 69 73 73 6f 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 34 22 7d 2e 66 61 2d 63 6f 70 79 Data Ascii: 4bdcontent:"\f0c3"}.fa-cut:before,.fa-scissors:before{content:"\f0c4"}.fa-copy:before,.fa-files-o:before{content:"\f0c5"}.fa-paperclip:before{content:"\f0c6"}.fa-save:before,.fa-floppy-o:before{content:"\f0c7"}.fa-square:before{content:"\f
Mar 18, 2024 17:21:51.280623913 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 32 22 7d 2e 66 61 2d 6c 65 67 61 6c 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 67 61 76 65 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 33 22 7d 2e 66 61 Data Ascii: 4bdefore{content:"\f0e2"}.fa-legal:before,.fa-gavel:before{content:"\f0e3"}.fa-dashboard:before,.fa-tachometer:before{content:"\f0e4"}.fa-comment-o:before{content:"\f0e5"}.fa-comments-o:before{content:"\f0e6"}.fa-flash:before,.fa-bolt:befo
Mar 18, 2024 17:21:51.412667036 CET	369	OUT	GET /js/scrollreveal.min.js HTTP/1.1 Host: iwu.marketing Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012
Mar 18, 2024 17:21:51.565418005 CET	262	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Mon, 18 Mar 2024 05:00:04 GMT Accept-Ranges: bytes ETag: "ab22fc23f178da1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Mon, 18 Mar 2024 16:21:50 GMT Content-Length: 8487
Mar 18, 2024 17:22:23.716816902 CET	529	OUT	GET /font-awesome/fonts/fontawesome-webfont.ttf?v=4.3.0 HTTP/1.1 Host: iwu.marketing Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/font-awesome/css/font-awesome.min.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; browserupdateorg=pause
Mar 18, 2024 17:22:23.843888044 CET	243	IN	HTTP/1.0 302 Object Moved Pragma: no-cache Location: http://blocked.by.waap.network Connection: close Set-Cookie: TUT-WAF = jXhkDEX1jE3eGMl7+LuJhpruWRs0012; Comment = ; Domain = ; Max-Age = ; Expires = ; Path = /; Version = 0; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49738	216.21.12.179	80	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 18, 2024 17:21:50.975087881 CET	384	OUT	GET /css/magnific-popup.css HTTP/1.1 Host: iwu.marketing Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012
Mar 18, 2024 17:21:51.154393911 CET	254	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Mon, 18 Mar 2024 05:00:16 GMT Accept-Ranges: bytes ETag: "616c332bf178da1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Mon, 18 Mar 2024 16:21:50 GMT Transfer-Encoding: chunked
Mar 18, 2024 17:21:51.154479027 CET	1220	IN	Data Raw: 34 62 66 0d 0a 2f 2a 20 4d 61 67 6e 69 66 69 63 20 50 6f 70 75 70 20 43 53 53 20 2a 2f 0a 2e 6d 66 70 2d 62 67 20 7b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 Data Ascii: 4bf/* Magnific Popup CSS */.mfp-bg { top: 0; left: 0; width: 100%; height: 100%; z-index: 1042; overflow: hidden; position: fixed; background: #0b0b0b; opacity: 0.8; }.mfp-wrap { top: 0; left: 0; width: 100%; hei
Mar 18, 2024 17:21:51.154633999 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 2e 6d 66 70 2d 61 75 74 6f 2d 63 75 72 73 6f 72 20 2e 6d 66 70 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 63 75 72 73 6f 72 3a 20 61 75 74 6f 3b 20 7d 0a 0a 2e 6d 66 70 2d 63 6c 6f 73 65 2c 0a 2e 6d 66 70 2d 61 72 72 6f 77 2c 0a Data Ascii: 4bd.mfp-auto-cursor .mfp-content { cursor: auto; }.mfp-close,.mfp-arrow,.mfp-preloader,.mfp-counter { -webkit-user-select: none; -moz-user-select: none; user-select: none; }.mfp-loading.mfp-figure { display: none; }.mfp-
Mar 18, 2024 17:21:51.154675007 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 42 61 73 6b 65 72 76 69 6c 6c 65 2c 20 6d 6f 6e 6f 73 70 61 63 65 3b 20 7d 0a 20 20 2e 6d 66 70 2d 63 6c 6f 73 65 3a 68 6f 76 65 72 2c 0a 20 20 2e 6d 66 70 2d 63 6c 6f Data Ascii: 4bdont-family: Arial, Baskerville, monospace; } .mfp-close:hover, .mfp-close:focus { opacity: 1; } .mfp-close:active { top: 1px; }.mfp-close-btn-in .mfp-close { color: #333; }.mfp-image-holder .mfp-close,.mfp-iframe-ho
Mar 18, 2024 17:21:51.282636881 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 30 2e 37 3b 20 7d 0a 0a 2e 6d 66 70 2d 61 72 72 6f 77 2d 6c 65 66 74 20 7b 0a 20 20 6c 65 66 74 3a 20 30 3b 20 7d 0a 20 20 2e 6d 66 70 2d 61 72 72 6f 77 2d 6c 65 66 74 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 Data Ascii: 4bd0.7; }.mfp-arrow-left { left: 0; } .mfp-arrow-left:after { border-right: 17px solid #FFF; margin-left: 31px; } .mfp-arrow-left:before { margin-left: 25px; border-right: 27px solid #3F3F3F; }.mfp-arrow-right {
Mar 18, 2024 17:21:51.282730103 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 65 6e 74 3a 20 27 27 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 74 6f 70 3a 20 34 30 70 78 3b 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 34 30 Data Ascii: 4bdent: ''; position: absolute; left: 0; top: 40px; bottom: 40px; display: block; right: 0; width: auto; height: auto; z-index: -1; box-shadow: 0 0 8px rgba(0, 0, 0, 0.6); background: #444; } .
Mar 18, 2024 17:21:51.282792091 CET	898	IN	Data Raw: 0d 0a 33 37 34 0d 0a 2d 69 6d 67 2d 6d 6f 62 69 6c 65 20 2e 6d 66 70 2d 62 6f 74 74 6f 6d 2d 62 61 72 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 36 29 3b 0a 20 20 20 20 62 6f 74 74 6f Data Ascii: 374-img-mobile .mfp-bottom-bar { background: rgba(0, 0, 0, 0.6); bottom: 0; margin: 0; top: auto; padding: 3px 5px; position: fixed; box-sizing: border-box; } .mfp-img-mobile .mfp-bottom-bar:empty { pa
Mar 18, 2024 17:21:51.286561012 CET	366	OUT	GET /js/bootstrap.min.js HTTP/1.1 Host: iwu.marketing Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012
Mar 18, 2024 17:21:51.440751076 CET	263	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Mon, 18 Mar 2024 05:00:05 GMT Accept-Ranges: bytes ETag: "ce944f24f178da1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Mon, 18 Mar 2024 16:21:50 GMT Content-Length: 36868
Mar 18, 2024 17:21:51.440795898 CET	957	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 36 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 35 20 54 77 69 74 74 65 72 2c 20 Data Ascii: /! Bootstrap v3.3.6 (http://getbootstrap.com) * Copyright 2011-2015 Twitter, Inc. * Licensed under the MIT license */if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){"use strict";var
Mar 18, 2024 17:21:51.440915108 CET	1220	IN	Data Raw: 6e 73 69 74 69 6f 6e 3d 62 28 29 2c 61 2e 73 75 70 70 6f 72 74 2e 74 72 61 6e 73 69 74 69 6f 6e 26 26 28 61 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3d 7b 62 69 6e 64 54 79 70 65 3a 61 2e 73 75 70 Data Ascii: nsition=b(),a.support.transition&&(a.event.special.bsTransitionEnd={bindType:a.support.transition.end,delegateType:a.support.transition.end,handle:function(b){return a(b.target).is(this)?b.handleObj.handler.apply(this,arguments):void 0}})})}(j
Mar 18, 2024 17:21:51.441009045 CET	1220	IN	Data Raw: 28 62 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 3d 61 28 74 68 69 73 29 2c 65 3d 64 2e 64 61 74 61 28 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 66 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 Data Ascii: (b){return this.each(function(){var d=a(this),e=d.data("bs.button"),f="object"==typeof b&&b;e\|\|d.data("bs.button",e=new c(this,f)),"toggle"==b?e.toggle():b&&e.setState(b)})}var c=function(b,d){this.$element=a(b),this.options=a.extend({},c.DEFA
Mar 18, 2024 17:21:51.441102982 CET	1220	IN	Data Raw: 28 22 61 63 74 69 76 65 22 29 29 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 7d 3b 76 61 72 20 64 3d 61 2e 66 6e 2e 62 75 74 74 6f 6e 3b 61 2e 66 6e 2e 62 75 74 74 6f 6e 3d 62 2c 61 Data Ascii: ("active")),this.$element.toggleClass("active")};var d=a.fn.button;a.fn.button=b,a.fn.button.Constructor=c,a.fn.button.noConflict=function(){return a.fn.button=d,this},a(document).on("click.bs.button.data-api",'[data-toggle^="button"]',functio
Mar 18, 2024 17:22:23.477586985 CET	530	OUT	GET /font-awesome/fonts/fontawesome-webfont.woff?v=4.3.0 HTTP/1.1 Host: iwu.marketing Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/font-awesome/css/font-awesome.min.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; browserupdateorg=pause
Mar 18, 2024 17:22:23.606333971 CET	243	IN	HTTP/1.0 302 Object Moved Pragma: no-cache Location: http://blocked.by.waap.network Connection: close Set-Cookie: TUT-WAF = jXhkDEX1jE3eGMl7+LuJhpruWRs0012; Comment = ; Domain = ; Max-Age = ; Expires = ; Path = /; Version = 0; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49741	216.21.12.179	80	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 18, 2024 17:21:50.975558043 CET	378	OUT	GET /css/creative.css HTTP/1.1 Host: iwu.marketing Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012
Mar 18, 2024 17:21:51.153525114 CET	254	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Mon, 18 Mar 2024 05:00:17 GMT Accept-Ranges: bytes ETag: "9e43d92bf178da1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Mon, 18 Mar 2024 16:21:50 GMT Transfer-Encoding: chunked
Mar 18, 2024 17:21:51.153630018 CET	1220	IN	Data Raw: 34 62 66 0d 0a 2f 2a 21 0d 0a 20 2a 20 43 72 65 61 74 69 76 65 20 76 31 2e 30 2e 34 20 28 68 74 74 70 3a 2f 2f 73 74 61 72 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 74 65 6d 70 6c 61 74 65 2d 6f 76 65 72 76 69 65 77 73 2f 63 72 65 61 74 69 76 Data Ascii: 4bf/! Creative v1.0.4 (http://startbootstrap.com/template-overviews/creative) * Copyright 2013-2016 Start Bootstrap * Licensed under MIT (https://github.com/BlackrockDigital/startbootstrap/blob/gh-pages/LICENSE) */html,body
Mar 18, 2024 17:21:51.153718948 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 61 75 6c 74 20 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 33 34 2c 20 33 34 2c 20 33 34 2c 20 30 2e 30 35 29 3b Data Ascii: 4bdault { background-color: white; border-color: rgba(34, 34, 34, 0.05); font-family: 'Open Sans', 'Helvetica Neue', Arial, sans-serif; -webkit-transition: all 0.35s; -moz-transition: all 0.35s; transition: all 0.35s;}
Mar 18, 2024 17:21:51.153759956 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 33 29 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 20 2e 6e 61 76 62 61 72 2d 68 65 61 64 65 72 20 2e 6e 61 76 62 61 72 2d 62 72 61 Data Ascii: 4bdgba(255, 255, 255, 0.3); } .navbar-default .navbar-header .navbar-brand { color: rgba(255, 255, 255, 0.7); } .navbar-default .navbar-header .navbar-brand:hover, .navbar-default .navbar-header .navbar-brand:focus {
Mar 18, 2024 17:21:51.280728102 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 65 3a 20 63 6f 76 65 72 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0d 0a 20 20 2d 6f 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0d 0a 20 20 62 61 63 6b 67 Data Ascii: 4bde: cover; background-size: cover; -o-background-size: cover; background-position: center; background-image: url('../img/campus.jpg'); text-align: center; color: white;}header.non-res { -webkit-background-size:
Mar 18, 2024 17:21:51.280771971 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 61 64 65 72 2d 63 6f 6e 74 65 6e 74 20 2e 68 65 61 64 65 72 2d 63 6f 6e 74 65 6e 74 2d 69 6e 6e 65 72 20 70 20 7b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 Data Ascii: 4bdader-content .header-content-inner p { font-weight: 300; color: rgba(255, 255, 255, 0.7); font-size: 16px; margin-bottom: 50px;}@media (min-width: 992px) { header { min-height: 100%; } header .header-conten
Mar 18, 2024 17:21:51.280846119 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 72 74 66 6f 6c 69 6f 2d 62 6f 78 20 7b 0d 0a 09 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 09 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 09 20 6d 61 78 2d 77 69 64 74 68 3a 20 36 35 30 70 78 Data Ascii: 4bdrtfolio-box { position: relative; display: block; max-width: 650px; margin: 0 auto;} .portfolio-box .portfolio-box-caption { color: white; opacity: 0; display: block; background: rgba(171, 25, 42, 0.9); po
Mar 18, 2024 17:21:51.280900002 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 66 6f 6c 69 6f 2d 62 6f 78 3a 66 6f 63 75 73 20 7b 0d 0a 09 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 20 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0d 0a 09 20 2e 70 6f Data Ascii: 4bdfolio-box:focus { outline: none;} @media (min-width: 768px) { .portfolio-box .portfolio-box-caption .portfolio-box-caption-content .project-category { font-size: 16px;} .portfolio-box .portfolio-box-caption .portfoli
Mar 18, 2024 17:21:51.281023026 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 74 6f 67 67 6c 65 2e 62 74 6e 2d 64 65 66 61 75 6c 74 20 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 2e 62 74 6e 2d 64 65 66 61 75 6c 74 2e 64 69 73 61 62 6c 65 64 2c 0d Data Ascii: 4bdtoggle.btn-default { background-image: none;}.btn-default.disabled,.btn-default[disabled],fieldset[disabled] .btn-default,.btn-default.disabled:hover,.btn-default[disabled]:hover,fieldset[disabled] .btn-default:hover,
Mar 18, 2024 17:21:51.281114101 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 61 63 74 69 76 65 2c 0d 0a 2e 6f 70 65 6e 20 3e 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 62 74 6e 2d 70 72 69 6d 61 72 79 20 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: 4bd.btn-primary.active,.open > .dropdown-toggle.btn-primary { background-image: none;}.btn-primary.disabled,.btn-primary[disabled],fieldset[disabled] .btn-primary,.btn-primary.disabled:hover,.btn-primary[disabled]:hover,
Mar 18, 2024 17:21:51.281138897 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 3a 3a 2d 6d 6f 7a 2d 73 65 6c 65 63 74 69 6f 6e 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0d 0a 20 20 74 65 78 74 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 Data Ascii: 4bd::-moz-selection { color: white; text-shadow: none; background: #222222;}::selection { color: white; text-shadow: none; background: #222222;}img::selection { color: white; background: transparent;}img
Mar 18, 2024 17:21:51.414238930 CET	370	OUT	GET /js/jquery.easing.min.js HTTP/1.1 Host: iwu.marketing Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012
Mar 18, 2024 17:21:51.567226887 CET	262	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Mon, 18 Mar 2024 05:00:05 GMT Accept-Ranges: bytes ETag: "98b6b324f178da1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Mon, 18 Mar 2024 16:21:50 GMT Content-Length: 5564
Mar 18, 2024 17:21:51.578912973 CET	378	OUT	GET /js/jquery.magnific-popup.min.js HTTP/1.1 Host: iwu.marketing Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012
Mar 18, 2024 17:21:51.731873035 CET	263	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Mon, 18 Mar 2024 05:00:03 GMT Accept-Ranges: bytes ETag: "8c395523f178da1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Mon, 18 Mar 2024 16:21:51 GMT Content-Length: 20216
Mar 18, 2024 17:21:53.725218058 CET	529	OUT	GET /font-awesome/fonts/fontawesome-webfont.ttf?v=4.3.0 HTTP/1.1 Host: iwu.marketing Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/font-awesome/css/font-awesome.min.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; browserupdateorg=pause
Mar 18, 2024 17:21:53.853807926 CET	243	IN	HTTP/1.0 302 Object Moved Pragma: no-cache Location: http://blocked.by.waap.network Connection: close Set-Cookie: TUT-WAF = jXhkDEX1jE3eGMl7+LuJhpruWRs0012; Comment = ; Domain = ; Max-Age = ; Expires = ; Path = /; Version = 0; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49739	216.21.12.179	80	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 18, 2024 17:21:50.977484941 CET	434	OUT	GET /img/iwu.marketing-logo.png HTTP/1.1 Host: iwu.marketing Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012
Mar 18, 2024 17:21:51.159553051 CET	250	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Mon, 18 Mar 2024 05:01:24 GMT Accept-Ranges: bytes ETag: "fa77b953f178da1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Mon, 18 Mar 2024 16:21:50 GMT Content-Length: 30334
Mar 18, 2024 17:21:51.159605980 CET	970	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 00 3c 08 06 00 00 00 90 1a 48 e7 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c Data Ascii: PNGIHDR<HpHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0
Mar 18, 2024 17:21:51.159733057 CET	1220	IN	Data Raw: 49 b1 a4 54 d2 12 d2 46 d2 6e 52 23 e9 2c a9 9b 34 48 1a 23 93 c9 da 64 6b b2 07 39 94 2c 20 2b c8 85 e4 9d e4 c3 e4 33 e4 1b e4 21 f2 5b 0a 9d 62 40 71 a4 f8 53 e2 28 52 ca 6a 4a 19 e5 10 e5 34 e5 06 65 98 32 41 55 a3 9a 52 dd a8 a1 54 11 35 8f Data Ascii: ITFnR#,4H#dk9, +3![b@qS(RjJ4e2AURT5ZBRQ4u9IKhhitNWGwg(gwLT071oUX*\|J&/TUUT^S}FU3SUPSSg;goT?~Y
Mar 18, 2024 17:21:51.159822941 CET	1220	IN	Data Raw: dc 78 e5 1b 87 6f ca bf 99 dc 94 b4 a9 ab c4 b9 64 cf 66 d2 66 e9 e6 de 2d 9e 5b 0e 96 aa 97 e6 97 0e 6e 0d d9 da b4 0d df 56 b4 ed f5 f6 45 db 2f 97 cd 28 db bb 83 b6 43 b9 a3 bf 3c b8 bc 65 a7 c9 ce cd 3b 3f 54 a4 54 f4 54 fa 54 36 ee d2 dd b5 Data Ascii: xodff-[nVE/(C<e;?TTTT6an{4[>UUMfeI?m]Nmq#=TR+Gw-6U#pDy:v{vg/jBFS[b[O>zG4<YyJTig
Mar 18, 2024 17:21:51.159899950 CET	1220	IN	Data Raw: 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 74 69 66 66 2f 31 2e 30 2f 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 78 6d 6c 6e 73 3a 65 78 69 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 65 78 69 66 2f 31 2e 30 2f Data Ascii: tp://ns.adobe.com/tiff/1.0/" xmlns:exif="http://ns.adobe.com/exif/1.0/"> <xmp:CreatorTool>Adobe Photoshop CC 2015 (Macintosh)</xmp:CreatorTool> <xmp:CreateDate>2016-06-22T15:49:34-04:00</xmp:CreateDate> <
Mar 18, 2024 17:21:51.289602041 CET	1220	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c 69 20 72 64 66 3a 70 61 72 73 65 54 79 70 65 3d 22 52 65 73 6f 75 72 63 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 61 63 74 69 6f 6e 3e 63 72 65 61 Data Ascii: <rdf:li rdf:parseType="Resource"> <stEvt:action>created</stEvt:action> <stEvt:instanceID>xmp.iid:5b145303-ae8b-4061-9bed-0944d1c4b0a1</stEvt:instanceID> <stEvt:when>2016-06-22T1
Mar 18, 2024 17:21:51.289638042 CET	1220	IN	Data Raw: 20 20 3c 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3e 2f 3c 2f 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c 69 Data Ascii: <stEvt:changed>/</stEvt:changed> </rdf:li> <rdf:li rdf:parseType="Resource"> <stEvt:action>converted</stEvt:action> <stEvt:parameters>from application/vnd.adobe.photoshop to i
Mar 18, 2024 17:21:51.289942980 CET	1220	IN	Data Raw: 62 31 34 35 33 30 33 2d 61 65 38 62 2d 34 30 36 31 2d 39 62 65 64 2d 30 39 34 34 64 31 63 34 62 30 61 31 3c 2f 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 52 65 66 3a 6f 72 69 67 69 6e 61 6c Data Ascii: b145303-ae8b-4061-9bed-0944d1c4b0a1</stRef:documentID> <stRef:originalDocumentID>xmp.did:5b145303-ae8b-4061-9bed-0944d1c4b0a1</stRef:originalDocumentID> </xmpMM:DerivedFrom> <tiff:Orientation>1</tiff:Orientation>
Mar 18, 2024 17:21:51.290020943 CET	1220	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Mar 18, 2024 17:21:51.290155888 CET	1220	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Mar 18, 2024 17:21:51.290196896 CET	1220	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Mar 18, 2024 17:21:51.466048002 CET	367	OUT	GET /js/jquery.fittext.js HTTP/1.1 Host: iwu.marketing Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012
Mar 18, 2024 17:21:51.622234106 CET	262	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Mon, 18 Mar 2024 05:00:03 GMT Accept-Ranges: bytes ETag: "6d651e23f178da1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Mon, 18 Mar 2024 16:21:51 GMT Content-Length: 1074
Mar 18, 2024 17:21:51.632376909 CET	361	OUT	GET /js/creative.js HTTP/1.1 Host: iwu.marketing Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012
Mar 18, 2024 17:21:51.789084911 CET	262	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Mon, 18 Mar 2024 05:00:04 GMT Accept-Ranges: bytes ETag: "3c34d123f178da1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Mon, 18 Mar 2024 16:21:51 GMT Content-Length: 1774
Mar 18, 2024 17:21:52.309876919 CET	466	OUT	GET /font-awesome/fonts/fontawesome-webfont.woff2?v=4.3.0 HTTP/1.1 Host: iwu.marketing Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/font-awesome/css/font-awesome.min.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012
Mar 18, 2024 17:21:52.439866066 CET	243	IN	HTTP/1.0 302 Object Moved Pragma: no-cache Location: http://blocked.by.waap.network Connection: close Set-Cookie: TUT-WAF = jXhkDEX1jE3eGMl7+LuJhpruWRs0012; Comment = ; Domain = ; Max-Age = ; Expires = ; Path = /; Version = 0; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49746	216.21.12.179	80	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 18, 2024 17:21:51.696397066 CET	341	OUT	GET /img/iwu.marketing-logo.png HTTP/1.1 Host: iwu.marketing Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012
Mar 18, 2024 17:21:51.850589991 CET	250	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Mon, 18 Mar 2024 05:01:24 GMT Accept-Ranges: bytes ETag: "fa77b953f178da1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Mon, 18 Mar 2024 16:21:51 GMT Content-Length: 30334
Mar 18, 2024 17:21:51.850683928 CET	970	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 00 3c 08 06 00 00 00 90 1a 48 e7 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c Data Ascii: PNGIHDR<HpHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0
Mar 18, 2024 17:21:51.850850105 CET	1220	IN	Data Raw: 49 b1 a4 54 d2 12 d2 46 d2 6e 52 23 e9 2c a9 9b 34 48 1a 23 93 c9 da 64 6b b2 07 39 94 2c 20 2b c8 85 e4 9d e4 c3 e4 33 e4 1b e4 21 f2 5b 0a 9d 62 40 71 a4 f8 53 e2 28 52 ca 6a 4a 19 e5 10 e5 34 e5 06 65 98 32 41 55 a3 9a 52 dd a8 a1 54 11 35 8f Data Ascii: ITFnR#,4H#dk9, +3![b@qS(RjJ4e2AURT5ZBRQ4u9IKhhitNWGwg(gwLT071oUX*\|J&/TUUT^S}FU3SUPSSg;goT?~Y
Mar 18, 2024 17:21:51.850904942 CET	1220	IN	Data Raw: dc 78 e5 1b 87 6f ca bf 99 dc 94 b4 a9 ab c4 b9 64 cf 66 d2 66 e9 e6 de 2d 9e 5b 0e 96 aa 97 e6 97 0e 6e 0d d9 da b4 0d df 56 b4 ed f5 f6 45 db 2f 97 cd 28 db bb 83 b6 43 b9 a3 bf 3c b8 bc 65 a7 c9 ce cd 3b 3f 54 a4 54 f4 54 fa 54 36 ee d2 dd b5 Data Ascii: xodff-[nVE/(C<e;?TTTT6an{4[>UUMfeI?m]Nmq#=TR+Gw-6U#pDy:v{vg/jBFS[b[O>zG4<YyJTig
Mar 18, 2024 17:21:51.850950956 CET	1220	IN	Data Raw: 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 74 69 66 66 2f 31 2e 30 2f 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 78 6d 6c 6e 73 3a 65 78 69 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 65 78 69 66 2f 31 2e 30 2f Data Ascii: tp://ns.adobe.com/tiff/1.0/" xmlns:exif="http://ns.adobe.com/exif/1.0/"> <xmp:CreatorTool>Adobe Photoshop CC 2015 (Macintosh)</xmp:CreatorTool> <xmp:CreateDate>2016-06-22T15:49:34-04:00</xmp:CreateDate> <
Mar 18, 2024 17:21:51.977895021 CET	1220	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c 69 20 72 64 66 3a 70 61 72 73 65 54 79 70 65 3d 22 52 65 73 6f 75 72 63 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 61 63 74 69 6f 6e 3e 63 72 65 61 Data Ascii: <rdf:li rdf:parseType="Resource"> <stEvt:action>created</stEvt:action> <stEvt:instanceID>xmp.iid:5b145303-ae8b-4061-9bed-0944d1c4b0a1</stEvt:instanceID> <stEvt:when>2016-06-22T1
Mar 18, 2024 17:21:51.977955103 CET	1220	IN	Data Raw: 20 20 3c 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3e 2f 3c 2f 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c 69 Data Ascii: <stEvt:changed>/</stEvt:changed> </rdf:li> <rdf:li rdf:parseType="Resource"> <stEvt:action>converted</stEvt:action> <stEvt:parameters>from application/vnd.adobe.photoshop to i
Mar 18, 2024 17:21:51.977993965 CET	1220	IN	Data Raw: 62 31 34 35 33 30 33 2d 61 65 38 62 2d 34 30 36 31 2d 39 62 65 64 2d 30 39 34 34 64 31 63 34 62 30 61 31 3c 2f 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 52 65 66 3a 6f 72 69 67 69 6e 61 6c Data Ascii: b145303-ae8b-4061-9bed-0944d1c4b0a1</stRef:documentID> <stRef:originalDocumentID>xmp.did:5b145303-ae8b-4061-9bed-0944d1c4b0a1</stRef:originalDocumentID> </xmpMM:DerivedFrom> <tiff:Orientation>1</tiff:Orientation>
Mar 18, 2024 17:21:51.978008032 CET	1220	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Mar 18, 2024 17:21:51.978081942 CET	1220	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Mar 18, 2024 17:21:51.978140116 CET	1220	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Mar 18, 2024 17:21:53.361623049 CET	370	OUT	GET /img/campus.jpg HTTP/1.1 Host: iwu.marketing Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012
Mar 18, 2024 17:21:53.515249968 CET	251	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Mon, 18 Mar 2024 05:01:24 GMT Accept-Ranges: bytes ETag: "55298c53f178da1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Mon, 18 Mar 2024 16:21:52 GMT Content-Length: 89996
Mar 18, 2024 17:21:56.120469093 CET	391	OUT	GET /favicon.ico HTTP/1.1 Host: iwu.marketing Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; browserupdateorg=pause
Mar 18, 2024 17:21:56.277550936 CET	252	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Last-Modified: Mon, 18 Mar 2024 05:00:20 GMT Accept-Ranges: bytes ETag: "c39d1d2df178da1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Mon, 18 Mar 2024 16:21:55 GMT Content-Length: 7406

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49755	199.38.148.58	80	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 18, 2024 17:21:52.846916914 CET	338	OUT	GET / HTTP/1.1 Host: blocked.by.waap.network Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 18, 2024 17:21:52.940223932 CET	813	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html Content-Encoding: gzip Last-Modified: Mon, 01 Feb 2021 16:10:15 GMT Accept-Ranges: bytes ETag: "216245bab4f8d61:0" Vary: Accept-Encoding Server: Microsoft-IIS/8.5 Date: Mon, 18 Mar 2024 16:21:50 GMT Content-Length: 518 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=
Mar 18, 2024 17:21:53.526549101 CET	338	OUT	GET / HTTP/1.1 Host: blocked.by.waap.network Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 18, 2024 17:21:53.620055914 CET	813	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html Content-Encoding: gzip Last-Modified: Mon, 01 Feb 2021 16:10:15 GMT Accept-Ranges: bytes ETag: "216245bab4f8d61:0" Vary: Accept-Encoding Server: Microsoft-IIS/8.5 Date: Mon, 18 Mar 2024 16:21:50 GMT Content-Length: 518 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=
Mar 18, 2024 17:21:53.862365961 CET	338	OUT	GET / HTTP/1.1 Host: blocked.by.waap.network Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 18, 2024 17:21:53.955621958 CET	813	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html Content-Encoding: gzip Last-Modified: Mon, 01 Feb 2021 16:10:15 GMT Accept-Ranges: bytes ETag: "216245bab4f8d61:0" Vary: Accept-Encoding Server: Microsoft-IIS/8.5 Date: Mon, 18 Mar 2024 16:21:51 GMT Content-Length: 518 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=
Mar 18, 2024 17:22:23.323669910 CET	338	OUT	GET / HTTP/1.1 Host: blocked.by.waap.network Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 18, 2024 17:22:23.417079926 CET	813	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html Content-Encoding: gzip Last-Modified: Mon, 01 Feb 2021 16:10:15 GMT Accept-Ranges: bytes ETag: "216245bab4f8d61:0" Vary: Accept-Encoding Server: Microsoft-IIS/8.5 Date: Mon, 18 Mar 2024 16:22:20 GMT Content-Length: 518 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=
Mar 18, 2024 17:22:23.608414888 CET	338	OUT	GET / HTTP/1.1 Host: blocked.by.waap.network Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 18, 2024 17:22:23.702428102 CET	813	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html Content-Encoding: gzip Last-Modified: Mon, 01 Feb 2021 16:10:15 GMT Accept-Ranges: bytes ETag: "216245bab4f8d61:0" Vary: Accept-Encoding Server: Microsoft-IIS/8.5 Date: Mon, 18 Mar 2024 16:22:20 GMT Content-Length: 518 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=
Mar 18, 2024 17:22:23.848033905 CET	338	OUT	GET / HTTP/1.1 Host: blocked.by.waap.network Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 18, 2024 17:22:23.941350937 CET	813	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html Content-Encoding: gzip Last-Modified: Mon, 01 Feb 2021 16:10:15 GMT Accept-Ranges: bytes ETag: "216245bab4f8d61:0" Vary: Accept-Encoding Server: Microsoft-IIS/8.5 Date: Mon, 18 Mar 2024 16:22:20 GMT Content-Length: 518 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=
Mar 18, 2024 17:22:28.371476889 CET	338	OUT	GET / HTTP/1.1 Host: blocked.by.waap.network Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 18, 2024 17:22:28.469182014 CET	813	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html Content-Encoding: gzip Last-Modified: Mon, 01 Feb 2021 16:10:15 GMT Accept-Ranges: bytes ETag: "216245bab4f8d61:0" Vary: Accept-Encoding Server: Microsoft-IIS/8.5 Date: Mon, 18 Mar 2024 16:22:25 GMT Content-Length: 518 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=
Mar 18, 2024 17:22:28.644110918 CET	338	OUT	GET / HTTP/1.1 Host: blocked.by.waap.network Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 18, 2024 17:22:28.737353086 CET	813	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html Content-Encoding: gzip Last-Modified: Mon, 01 Feb 2021 16:10:15 GMT Accept-Ranges: bytes ETag: "216245bab4f8d61:0" Vary: Accept-Encoding Server: Microsoft-IIS/8.5 Date: Mon, 18 Mar 2024 16:22:25 GMT Content-Length: 518 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=
Mar 18, 2024 17:22:29.331660032 CET	338	OUT	GET / HTTP/1.1 Host: blocked.by.waap.network Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 18, 2024 17:22:29.426506996 CET	813	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html Content-Encoding: gzip Last-Modified: Mon, 01 Feb 2021 16:10:15 GMT Accept-Ranges: bytes ETag: "216245bab4f8d61:0" Vary: Accept-Encoding Server: Microsoft-IIS/8.5 Date: Mon, 18 Mar 2024 16:22:25 GMT Content-Length: 518 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=
Mar 18, 2024 17:22:33.291659117 CET	338	OUT	GET / HTTP/1.1 Host: blocked.by.waap.network Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 18, 2024 17:22:33.385243893 CET	813	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html Content-Encoding: gzip Last-Modified: Mon, 01 Feb 2021 16:10:15 GMT Accept-Ranges: bytes ETag: "216245bab4f8d61:0" Vary: Accept-Encoding Server: Microsoft-IIS/8.5 Date: Mon, 18 Mar 2024 16:22:30 GMT Content-Length: 518 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=
Mar 18, 2024 17:22:33.818934917 CET	338	OUT	GET / HTTP/1.1 Host: blocked.by.waap.network Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 18, 2024 17:22:33.912065983 CET	813	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html Content-Encoding: gzip Last-Modified: Mon, 01 Feb 2021 16:10:15 GMT Accept-Ranges: bytes ETag: "216245bab4f8d61:0" Vary: Accept-Encoding Server: Microsoft-IIS/8.5 Date: Mon, 18 Mar 2024 16:22:30 GMT Content-Length: 518 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=
Mar 18, 2024 17:22:34.217541933 CET	338	OUT	GET / HTTP/1.1 Host: blocked.by.waap.network Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 18, 2024 17:22:34.310920954 CET	813	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html Content-Encoding: gzip Last-Modified: Mon, 01 Feb 2021 16:10:15 GMT Accept-Ranges: bytes ETag: "216245bab4f8d61:0" Vary: Accept-Encoding Server: Microsoft-IIS/8.5 Date: Mon, 18 Mar 2024 16:22:30 GMT Content-Length: 518 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=
Mar 18, 2024 17:22:35.537481070 CET	338	OUT	GET / HTTP/1.1 Host: blocked.by.waap.network Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 18, 2024 17:22:35.630965948 CET	813	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html Content-Encoding: gzip Last-Modified: Mon, 01 Feb 2021 16:10:15 GMT Accept-Ranges: bytes ETag: "216245bab4f8d61:0" Vary: Accept-Encoding Server: Microsoft-IIS/8.5 Date: Mon, 18 Mar 2024 16:22:32 GMT Content-Length: 518 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=
Mar 18, 2024 17:22:35.771145105 CET	338	OUT	GET / HTTP/1.1 Host: blocked.by.waap.network Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 18, 2024 17:22:35.864846945 CET	813	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html Content-Encoding: gzip Last-Modified: Mon, 01 Feb 2021 16:10:15 GMT Accept-Ranges: bytes ETag: "216245bab4f8d61:0" Vary: Accept-Encoding Server: Microsoft-IIS/8.5 Date: Mon, 18 Mar 2024 16:22:33 GMT Content-Length: 518 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=
Mar 18, 2024 17:22:36.143953085 CET	338	OUT	GET / HTTP/1.1 Host: blocked.by.waap.network Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 18, 2024 17:22:36.237224102 CET	813	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html Content-Encoding: gzip Last-Modified: Mon, 01 Feb 2021 16:10:15 GMT Accept-Ranges: bytes ETag: "216245bab4f8d61:0" Vary: Accept-Encoding Server: Microsoft-IIS/8.5 Date: Mon, 18 Mar 2024 16:22:33 GMT Content-Length: 518 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=
Mar 18, 2024 17:22:37.477511883 CET	338	OUT	GET / HTTP/1.1 Host: blocked.by.waap.network Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 18, 2024 17:22:37.570770025 CET	813	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html Content-Encoding: gzip Last-Modified: Mon, 01 Feb 2021 16:10:15 GMT Accept-Ranges: bytes ETag: "216245bab4f8d61:0" Vary: Accept-Encoding Server: Microsoft-IIS/8.5 Date: Mon, 18 Mar 2024 16:22:35 GMT Content-Length: 518 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=
Mar 18, 2024 17:22:37.731398106 CET	338	OUT	GET / HTTP/1.1 Host: blocked.by.waap.network Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 18, 2024 17:22:37.825050116 CET	813	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html Content-Encoding: gzip Last-Modified: Mon, 01 Feb 2021 16:10:15 GMT Accept-Ranges: bytes ETag: "216245bab4f8d61:0" Vary: Accept-Encoding Server: Microsoft-IIS/8.5 Date: Mon, 18 Mar 2024 16:22:35 GMT Content-Length: 518 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=
Mar 18, 2024 17:22:38.099214077 CET	338	OUT	GET / HTTP/1.1 Host: blocked.by.waap.network Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 18, 2024 17:22:38.192871094 CET	813	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html Content-Encoding: gzip Last-Modified: Mon, 01 Feb 2021 16:10:15 GMT Accept-Ranges: bytes ETag: "216245bab4f8d61:0" Vary: Accept-Encoding Server: Microsoft-IIS/8.5 Date: Mon, 18 Mar 2024 16:22:35 GMT Content-Length: 518 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 37 75 b6 6c 8a b6 a8 96 59 79 f7 ee e9 8b 8f d2 8f e6 6d bb 7a 74 f7 ee d5 d5 d5 f8 ea de b8 aa 2f ee be 79 75 f7 1d 60 ed e2 65 fd 75 bb f5 de 1c cf da d9 47 47 bf 71 f2 18 5f a5 ef 16 e5 b2 f9 2c 02 67 f7 e1 c3 87 f2 ba 34 ce b3 19 7e 2e f2 36 23 5c db d5 76 fe 8b d6 c5 e5 67 1f 9d 54 cb 36 5f b6 db 6f ae 57 f9 47 e9 54 fe fa ec a3 36 7f d7 de c5 db 87 e9 74 9e d5 4d de 7e b6 6e cf b7 0f 3e 4a ef 02 4c 5b b4 65 7e f4 a4 ac a6 6f f3 59 fa e4 3a fd ee f1 f1 cb c7 77 e5 63 fa be 69 af cb 3c 6d 09 a6 82 9a 36 0d f0 98 54 b3 eb 74 95 fe e2 df 38 f9 b1 73 ea 6a bb 29 7e 90 3f 4a 17 f9 ac 58 2f 0e 7f e3 e4 97 fc c6 c9 78 4a fd e7 35 41 45 23 bc bb 9d 95 c5 c5 f2 51 2a 5f 48 ab c7 77 b9 07 82 f8 f8 ae 0e 8d 7e 65 e8 d3 32 6b 88 22 d2 3a 17 52 4d ea 23 fc 9f 7e 9b ef 1d d1 1b f4 0f fd 89 ff cb 47 6f e6 45 93 ce b3 26 9d e4 f9 32 9d e8 b0 26 d7 69 3b cf 79 68 e9 d6 77 f3 49 7a bc 5a 95 c5 34 c3 3c a4 d9 72 96 1e bf 3c 4b 5f d6 55 9b 4f f1 d1 9d f4 75 5e 5f 16 d3 9c 3b 20 c0 ab a3 5f b8 9c 34 ab c3 c7 77 5f e2 cf bb 40 8f 7f 01 5d 8f 7e e3 e4 ff 01 15 ae 6e c3 3d 02 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"O<y<ML_~Iwr7Ooxw7ulYymzt/yu`euGGq_,g4~.6#\vgT6_oWGT6tM~n>JL[e~oY:wci<m6Tt8sj)~?JX/xJ5AE#Q_Hw~e2k":RM#~GoE&2&i;yhwIzZ4<r<K_UOu^_; _4w_@]~n=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	50169	216.21.12.179	80	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 18, 2024 17:22:26.926866055 CET	580	OUT	GET / HTTP/1.1 Host: iwu.marketing Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; browserupdateorg=pause If-None-Match: "d99b26-1553f71b97d1"
Mar 18, 2024 17:22:27.113928080 CET	287	IN	HTTP/1.1 200 OK Content-Type: text/html Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Mon, 18 Mar 2024 16:22:26 GMT X-Cache-Control-Orig: Cache-Control: max-age=0, must-revalidate, private X-Expires-Orig: None ETag: "06ae4a-f3362d74af75" Transfer-Encoding: chunked
Mar 18, 2024 17:22:27.113953114 CET	1220	IN	Data Raw: 34 62 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c Data Ascii: 4bf<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" lang="en"><head><meta charset="utf-8"/><title>IWU Marketing</title><meta content="width=device-width, initial-scale=1.0" name="viewport"/><meta content="noindex, nofollow"
Mar 18, 2024 17:22:27.113970995 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 3a 20 77 68 69 74 65 3b 20 6f 70 61 63 69 74 79 3a 20 39 35 25 3b 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 22 3e 3c 21 2d 2d 20 42 72 61 6e 64 20 61 6e 64 20 74 6f 67 67 6c 65 Data Ascii: 4bd: white; opacity: 95%;"><div class="container-fluid">... Brand and toggle get grouped for better mobile display --><div class="navbar-header"><button class="navbar-toggle collapsed" data-target="#bs-example-navbar-collapse-1" data-to
Mar 18, 2024 17:22:27.113984108 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 75 69 64 20 2d 2d 3e 3c 2f 6e 61 76 3e 0a 3c 68 65 61 64 65 72 20 63 6c 61 73 73 3d 22 6e 6f 6e 72 65 73 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 2d 63 6f 6e 74 65 6e 74 22 3e 0a 3c 64 69 76 20 63 6c 61 Data Ascii: 4bduid --></nav><header class="nonres"><div class="header-content"><div class="header-content-inner text-center" style="max-width: 100%;"><h1 style="color: #f5f5f5; text-shadow: 5px 3px 5px #464646;"><span class="large" style="font-siz
Mar 18, 2024 17:22:27.265141964 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 65 72 76 69 63 65 20 61 6e 64 20 65 78 63 65 6c 6c 65 6e 63 65 20 69 6e 20 61 6c 6c 20 74 68 61 74 20 77 65 20 64 6f 2e 3c 2f 70 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 70 61 67 65 2d 73 63 72 6f 6c 6c 20 62 74 6e 20 62 74 6e 2d Data Ascii: 4bdervice and excellence in all that we do.</p><a class="page-scroll btn btn-default btn-xl sr-button" href="#services">Get Started!</a></div></div></div></section><section class="bg-dark" id="services" style="padding-bottom: 2rem;">
Mar 18, 2024 17:22:27.265208960 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 64 20 73 6f 63 69 61 6c 20 6d 65 64 69 61 20 70 72 6f 70 65 72 74 69 65 73 2c 20 61 73 20 77 65 6c 6c 20 61 73 20 64 69 67 69 74 61 6c 20 61 64 76 65 72 74 69 73 69 6e 67 20 61 6e 64 20 65 6d 61 69 6c 20 6d 61 72 6b 65 74 69 Data Ascii: 4bdd social media properties, as well as digital advertising and email marketing strategies.</span></p></div></div><div class="col-md-4 text-center"><div class="service-box ug"><span class="fa fa-4x fa-line-chart text-primary sr-icons"
Mar 18, 2024 17:22:27.265306950 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 3d 22 73 65 63 74 69 6f 6e 2d 68 65 61 64 69 6e 67 22 3e 4f 75 72 20 41 77 61 72 64 2d 57 69 6e 6e 69 6e 67 20 54 65 61 6d 3c 2f 68 32 3e 0a 3c 68 72 2f 3e 0a 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 6d 75 74 65 64 22 3e Data Ascii: 4bd="section-heading">Our Award-Winning Team</h2><hr/><p class="text-muted">Recognized for excellence in higher education marketing by the AIVA Communicator Awards, Collegiate Advertising Awards, Higher Education Marketing Advertising Aw
Mar 18, 2024 17:22:27.265352964 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 61 73 73 3d 22 74 65 78 74 2d 6d 75 74 65 64 22 3e 77 65 73 2e 61 64 6b 69 6e 73 40 69 6e 64 77 65 73 2e 65 64 75 3c 2f 68 36 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 Data Ascii: 4bdass="text-muted">wes.adkins@indwes.edu</h6></div></div></div><div class="col-lg-3 col-sm-12"><div class="team-member"><div class="text-center"><h3 class="text-primary">Aaron Cawthorn</h3><p class="title"><em>Director of Marketin
Mar 18, 2024 17:22:27.265427113 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 73 73 3d 22 74 65 78 74 2d 63 65 6e 74 65 72 22 3e 0a 3c 68 33 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 70 72 69 6d 61 72 79 22 3e 52 61 63 68 61 65 6c 20 47 6f 75 76 61 6e 3c 2f 68 33 3e 0a 3c 70 20 63 6c 61 73 73 3d 22 74 69 Data Ascii: 4bdss="text-center"><h3 class="text-primary">Rachael Gouvan</h3><p class="title"><em>Senior Graphic Designer</em></p><h6 class="title text-muted">rachel.gouvan@indwes.edu</h6></div></div></div><div class="col-lg-3 col-sm-12"><div c
Mar 18, 2024 17:22:27.265492916 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 6e 75 74 74 65 72 40 69 6e 64 77 65 73 2e 65 64 75 3c 2f 68 36 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6c 67 2d 33 20 63 6f 6c 2d 73 6d 2d 31 32 22 Data Ascii: 4bdnutter@indwes.edu</h6></div></div></div><div class="col-lg-3 col-sm-12"><div class="team-member"><div class="text-center"><h3 class="text-primary">Lana Shoaf</h3><p class="title"><em>Copywriter & Communications Manager</em><
Mar 18, 2024 17:22:27.265619993 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 61 73 73 3d 22 74 69 74 6c 65 22 3e 3c 65 6d 3e 42 72 61 6e 64 20 26 61 6d 70 3b 20 4d 61 72 6b 65 74 69 6e 67 20 4f 70 65 72 61 74 69 6f 6e 73 20 41 73 73 69 73 74 61 6e 74 3c 2f 65 6d 3e 3c 2f 70 3e 0a 3c 68 36 20 63 6c 61 Data Ascii: 4bdass="title"><em>Brand & Marketing Operations Assistant</em></p><h6 class="title text-muted">derek.ancil@indwes.edu</h6></div></div></div><div class="col-lg-4 col-sm-12"><div class="team-member"><div class="text-center"><h3 c
Mar 18, 2024 17:22:28.101447105 CET	531	OUT	GET /font-awesome/fonts/fontawesome-webfont.woff2?v=4.3.0 HTTP/1.1 Host: iwu.marketing Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/font-awesome/css/font-awesome.min.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; browserupdateorg=pause
Mar 18, 2024 17:22:28.228812933 CET	243	IN	HTTP/1.0 302 Object Moved Pragma: no-cache Location: http://blocked.by.waap.network Connection: close Set-Cookie: TUT-WAF = jXhkDEX1jE3eGMl7+LuJhpruWRs0012; Comment = ; Domain = ; Max-Age = ; Expires = ; Path = /; Version = 0; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	50170	216.21.12.179	80	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 18, 2024 17:22:28.476715088 CET	530	OUT	GET /font-awesome/fonts/fontawesome-webfont.woff?v=4.3.0 HTTP/1.1 Host: iwu.marketing Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/font-awesome/css/font-awesome.min.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; browserupdateorg=pause
Mar 18, 2024 17:22:28.604171991 CET	243	IN	HTTP/1.0 302 Object Moved Pragma: no-cache Location: http://blocked.by.waap.network Connection: close Set-Cookie: TUT-WAF = jXhkDEX1jE3eGMl7+LuJhpruWRs0012; Comment = ; Domain = ; Max-Age = ; Expires = ; Path = /; Version = 0; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	50178	216.21.12.179	80	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 18, 2024 17:22:28.876893044 CET	529	OUT	GET /font-awesome/fonts/fontawesome-webfont.ttf?v=4.3.0 HTTP/1.1 Host: iwu.marketing Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/font-awesome/css/font-awesome.min.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; browserupdateorg=pause
Mar 18, 2024 17:22:29.007077932 CET	243	IN	HTTP/1.0 302 Object Moved Pragma: no-cache Location: http://blocked.by.waap.network Connection: close Set-Cookie: TUT-WAF = jXhkDEX1jE3eGMl7+LuJhpruWRs0012; Comment = ; Domain = ; Max-Age = ; Expires = ; Path = /; Version = 0; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	50185	216.21.12.179	80	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 18, 2024 17:22:31.190166950 CET	580	OUT	GET / HTTP/1.1 Host: iwu.marketing Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; browserupdateorg=pause If-None-Match: "06ae4a-f3362d74af75"
Mar 18, 2024 17:22:31.343614101 CET	287	IN	HTTP/1.1 200 OK Content-Type: text/html Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Mon, 18 Mar 2024 16:22:31 GMT X-Cache-Control-Orig: Cache-Control: max-age=0, must-revalidate, private X-Expires-Orig: None ETag: "f0d272-339833765526" Transfer-Encoding: chunked
Mar 18, 2024 17:22:31.344235897 CET	1220	IN	Data Raw: 34 62 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c Data Ascii: 4bf<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" lang="en"><head><meta charset="utf-8"/><title>IWU Marketing</title><meta content="width=device-width, initial-scale=1.0" name="viewport"/><meta content="noindex, nofollow"
Mar 18, 2024 17:22:31.344293118 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 3a 20 77 68 69 74 65 3b 20 6f 70 61 63 69 74 79 3a 20 39 35 25 3b 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 22 3e 3c 21 2d 2d 20 42 72 61 6e 64 20 61 6e 64 20 74 6f 67 67 6c 65 Data Ascii: 4bd: white; opacity: 95%;"><div class="container-fluid">... Brand and toggle get grouped for better mobile display --><div class="navbar-header"><button class="navbar-toggle collapsed" data-target="#bs-example-navbar-collapse-1" data-to
Mar 18, 2024 17:22:31.344372034 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 75 69 64 20 2d 2d 3e 3c 2f 6e 61 76 3e 0a 3c 68 65 61 64 65 72 20 63 6c 61 73 73 3d 22 6e 6f 6e 72 65 73 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 2d 63 6f 6e 74 65 6e 74 22 3e 0a 3c 64 69 76 20 63 6c 61 Data Ascii: 4bduid --></nav><header class="nonres"><div class="header-content"><div class="header-content-inner text-center" style="max-width: 100%;"><h1 style="color: #f5f5f5; text-shadow: 5px 3px 5px #464646;"><span class="large" style="font-siz
Mar 18, 2024 17:22:31.471637011 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 65 72 76 69 63 65 20 61 6e 64 20 65 78 63 65 6c 6c 65 6e 63 65 20 69 6e 20 61 6c 6c 20 74 68 61 74 20 77 65 20 64 6f 2e 3c 2f 70 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 70 61 67 65 2d 73 63 72 6f 6c 6c 20 62 74 6e 20 62 74 6e 2d Data Ascii: 4bdervice and excellence in all that we do.</p><a class="page-scroll btn btn-default btn-xl sr-button" href="#services">Get Started!</a></div></div></div></section><section class="bg-dark" id="services" style="padding-bottom: 2rem;">
Mar 18, 2024 17:22:31.471704960 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 64 20 73 6f 63 69 61 6c 20 6d 65 64 69 61 20 70 72 6f 70 65 72 74 69 65 73 2c 20 61 73 20 77 65 6c 6c 20 61 73 20 64 69 67 69 74 61 6c 20 61 64 76 65 72 74 69 73 69 6e 67 20 61 6e 64 20 65 6d 61 69 6c 20 6d 61 72 6b 65 74 69 Data Ascii: 4bdd social media properties, as well as digital advertising and email marketing strategies.</span></p></div></div><div class="col-md-4 text-center"><div class="service-box ug"><span class="fa fa-4x fa-line-chart text-primary sr-icons"
Mar 18, 2024 17:22:31.471776962 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 3d 22 73 65 63 74 69 6f 6e 2d 68 65 61 64 69 6e 67 22 3e 4f 75 72 20 41 77 61 72 64 2d 57 69 6e 6e 69 6e 67 20 54 65 61 6d 3c 2f 68 32 3e 0a 3c 68 72 2f 3e 0a 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 6d 75 74 65 64 22 3e Data Ascii: 4bd="section-heading">Our Award-Winning Team</h2><hr/><p class="text-muted">Recognized for excellence in higher education marketing by the AIVA Communicator Awards, Collegiate Advertising Awards, Higher Education Marketing Advertising Aw
Mar 18, 2024 17:22:31.471873045 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 61 73 73 3d 22 74 65 78 74 2d 6d 75 74 65 64 22 3e 77 65 73 2e 61 64 6b 69 6e 73 40 69 6e 64 77 65 73 2e 65 64 75 3c 2f 68 36 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 Data Ascii: 4bdass="text-muted">wes.adkins@indwes.edu</h6></div></div></div><div class="col-lg-3 col-sm-12"><div class="team-member"><div class="text-center"><h3 class="text-primary">Aaron Cawthorn</h3><p class="title"><em>Director of Marketin
Mar 18, 2024 17:22:31.471971989 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 73 73 3d 22 74 65 78 74 2d 63 65 6e 74 65 72 22 3e 0a 3c 68 33 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 70 72 69 6d 61 72 79 22 3e 52 61 63 68 61 65 6c 20 47 6f 75 76 61 6e 3c 2f 68 33 3e 0a 3c 70 20 63 6c 61 73 73 3d 22 74 69 Data Ascii: 4bdss="text-center"><h3 class="text-primary">Rachael Gouvan</h3><p class="title"><em>Senior Graphic Designer</em></p><h6 class="title text-muted">rachel.gouvan@indwes.edu</h6></div></div></div><div class="col-lg-3 col-sm-12"><div c
Mar 18, 2024 17:22:31.472054005 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 6e 75 74 74 65 72 40 69 6e 64 77 65 73 2e 65 64 75 3c 2f 68 36 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6c 67 2d 33 20 63 6f 6c 2d 73 6d 2d 31 32 22 Data Ascii: 4bdnutter@indwes.edu</h6></div></div></div><div class="col-lg-3 col-sm-12"><div class="team-member"><div class="text-center"><h3 class="text-primary">Lana Shoaf</h3><p class="title"><em>Copywriter & Communications Manager</em><
Mar 18, 2024 17:22:31.472173929 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 61 73 73 3d 22 74 69 74 6c 65 22 3e 3c 65 6d 3e 42 72 61 6e 64 20 26 61 6d 70 3b 20 4d 61 72 6b 65 74 69 6e 67 20 4f 70 65 72 61 74 69 6f 6e 73 20 41 73 73 69 73 74 61 6e 74 3c 2f 65 6d 3e 3c 2f 70 3e 0a 3c 68 36 20 63 6c 61 Data Ascii: 4bdass="title"><em>Brand & Marketing Operations Assistant</em></p><h6 class="title text-muted">derek.ancil@indwes.edu</h6></div></div></div><div class="col-lg-4 col-sm-12"><div class="team-member"><div class="text-center"><h3 c
Mar 18, 2024 17:22:32.067478895 CET	531	OUT	GET /font-awesome/fonts/fontawesome-webfont.woff2?v=4.3.0 HTTP/1.1 Host: iwu.marketing Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/font-awesome/css/font-awesome.min.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; browserupdateorg=pause
Mar 18, 2024 17:22:32.194938898 CET	243	IN	HTTP/1.0 302 Object Moved Pragma: no-cache Location: http://blocked.by.waap.network Connection: close Set-Cookie: TUT-WAF = jXhkDEX1jE3eGMl7+LuJhpruWRs0012; Comment = ; Domain = ; Max-Age = ; Expires = ; Path = /; Version = 0; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	50186	216.21.12.179	80	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 18, 2024 17:22:33.629919052 CET	530	OUT	GET /font-awesome/fonts/fontawesome-webfont.woff?v=4.3.0 HTTP/1.1 Host: iwu.marketing Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/font-awesome/css/font-awesome.min.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; browserupdateorg=pause
Mar 18, 2024 17:22:33.758208036 CET	243	IN	HTTP/1.0 302 Object Moved Pragma: no-cache Location: http://blocked.by.waap.network Connection: close Set-Cookie: TUT-WAF = jXhkDEX1jE3eGMl7+LuJhpruWRs0012; Comment = ; Domain = ; Max-Age = ; Expires = ; Path = /; Version = 0; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	50190	216.21.12.179	80	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 18, 2024 17:22:34.078675985 CET	529	OUT	GET /font-awesome/fonts/fontawesome-webfont.ttf?v=4.3.0 HTTP/1.1 Host: iwu.marketing Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/font-awesome/css/font-awesome.min.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; browserupdateorg=pause
Mar 18, 2024 17:22:34.206084967 CET	243	IN	HTTP/1.0 302 Object Moved Pragma: no-cache Location: http://blocked.by.waap.network Connection: close Set-Cookie: TUT-WAF = jXhkDEX1jE3eGMl7+LuJhpruWRs0012; Comment = ; Domain = ; Max-Age = ; Expires = ; Path = /; Version = 0; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	50193	216.21.12.179	80	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 18, 2024 17:22:34.916070938 CET	580	OUT	GET / HTTP/1.1 Host: iwu.marketing Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; browserupdateorg=pause If-None-Match: "f0d272-339833765526"
Mar 18, 2024 17:22:35.069261074 CET	287	IN	HTTP/1.1 200 OK Content-Type: text/html Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Mon, 18 Mar 2024 16:22:34 GMT X-Cache-Control-Orig: Cache-Control: max-age=0, must-revalidate, private X-Expires-Orig: None ETag: "c66ddd-495400ad8b95" Transfer-Encoding: chunked
Mar 18, 2024 17:22:35.069772005 CET	1220	IN	Data Raw: 34 62 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c Data Ascii: 4bf<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" lang="en"><head><meta charset="utf-8"/><title>IWU Marketing</title><meta content="width=device-width, initial-scale=1.0" name="viewport"/><meta content="noindex, nofollow"
Mar 18, 2024 17:22:35.069829941 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 3a 20 77 68 69 74 65 3b 20 6f 70 61 63 69 74 79 3a 20 39 35 25 3b 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 22 3e 3c 21 2d 2d 20 42 72 61 6e 64 20 61 6e 64 20 74 6f 67 67 6c 65 Data Ascii: 4bd: white; opacity: 95%;"><div class="container-fluid">... Brand and toggle get grouped for better mobile display --><div class="navbar-header"><button class="navbar-toggle collapsed" data-target="#bs-example-navbar-collapse-1" data-to
Mar 18, 2024 17:22:35.069844007 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 75 69 64 20 2d 2d 3e 3c 2f 6e 61 76 3e 0a 3c 68 65 61 64 65 72 20 63 6c 61 73 73 3d 22 6e 6f 6e 72 65 73 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 2d 63 6f 6e 74 65 6e 74 22 3e 0a 3c 64 69 76 20 63 6c 61 Data Ascii: 4bduid --></nav><header class="nonres"><div class="header-content"><div class="header-content-inner text-center" style="max-width: 100%;"><h1 style="color: #f5f5f5; text-shadow: 5px 3px 5px #464646;"><span class="large" style="font-siz
Mar 18, 2024 17:22:35.197109938 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 65 72 76 69 63 65 20 61 6e 64 20 65 78 63 65 6c 6c 65 6e 63 65 20 69 6e 20 61 6c 6c 20 74 68 61 74 20 77 65 20 64 6f 2e 3c 2f 70 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 70 61 67 65 2d 73 63 72 6f 6c 6c 20 62 74 6e 20 62 74 6e 2d Data Ascii: 4bdervice and excellence in all that we do.</p><a class="page-scroll btn btn-default btn-xl sr-button" href="#services">Get Started!</a></div></div></div></section><section class="bg-dark" id="services" style="padding-bottom: 2rem;">
Mar 18, 2024 17:22:35.197127104 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 64 20 73 6f 63 69 61 6c 20 6d 65 64 69 61 20 70 72 6f 70 65 72 74 69 65 73 2c 20 61 73 20 77 65 6c 6c 20 61 73 20 64 69 67 69 74 61 6c 20 61 64 76 65 72 74 69 73 69 6e 67 20 61 6e 64 20 65 6d 61 69 6c 20 6d 61 72 6b 65 74 69 Data Ascii: 4bdd social media properties, as well as digital advertising and email marketing strategies.</span></p></div></div><div class="col-md-4 text-center"><div class="service-box ug"><span class="fa fa-4x fa-line-chart text-primary sr-icons"
Mar 18, 2024 17:22:35.197161913 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 3d 22 73 65 63 74 69 6f 6e 2d 68 65 61 64 69 6e 67 22 3e 4f 75 72 20 41 77 61 72 64 2d 57 69 6e 6e 69 6e 67 20 54 65 61 6d 3c 2f 68 32 3e 0a 3c 68 72 2f 3e 0a 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 6d 75 74 65 64 22 3e Data Ascii: 4bd="section-heading">Our Award-Winning Team</h2><hr/><p class="text-muted">Recognized for excellence in higher education marketing by the AIVA Communicator Awards, Collegiate Advertising Awards, Higher Education Marketing Advertising Aw
Mar 18, 2024 17:22:35.197207928 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 61 73 73 3d 22 74 65 78 74 2d 6d 75 74 65 64 22 3e 77 65 73 2e 61 64 6b 69 6e 73 40 69 6e 64 77 65 73 2e 65 64 75 3c 2f 68 36 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 Data Ascii: 4bdass="text-muted">wes.adkins@indwes.edu</h6></div></div></div><div class="col-lg-3 col-sm-12"><div class="team-member"><div class="text-center"><h3 class="text-primary">Aaron Cawthorn</h3><p class="title"><em>Director of Marketin
Mar 18, 2024 17:22:35.197247028 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 73 73 3d 22 74 65 78 74 2d 63 65 6e 74 65 72 22 3e 0a 3c 68 33 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 70 72 69 6d 61 72 79 22 3e 52 61 63 68 61 65 6c 20 47 6f 75 76 61 6e 3c 2f 68 33 3e 0a 3c 70 20 63 6c 61 73 73 3d 22 74 69 Data Ascii: 4bdss="text-center"><h3 class="text-primary">Rachael Gouvan</h3><p class="title"><em>Senior Graphic Designer</em></p><h6 class="title text-muted">rachel.gouvan@indwes.edu</h6></div></div></div><div class="col-lg-3 col-sm-12"><div c
Mar 18, 2024 17:22:35.197271109 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 6e 75 74 74 65 72 40 69 6e 64 77 65 73 2e 65 64 75 3c 2f 68 36 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6c 67 2d 33 20 63 6f 6c 2d 73 6d 2d 31 32 22 Data Ascii: 4bdnutter@indwes.edu</h6></div></div></div><div class="col-lg-3 col-sm-12"><div class="team-member"><div class="text-center"><h3 class="text-primary">Lana Shoaf</h3><p class="title"><em>Copywriter & Communications Manager</em><
Mar 18, 2024 17:22:35.197294950 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 61 73 73 3d 22 74 69 74 6c 65 22 3e 3c 65 6d 3e 42 72 61 6e 64 20 26 61 6d 70 3b 20 4d 61 72 6b 65 74 69 6e 67 20 4f 70 65 72 61 74 69 6f 6e 73 20 41 73 73 69 73 74 61 6e 74 3c 2f 65 6d 3e 3c 2f 70 3e 0a 3c 68 36 20 63 6c 61 Data Ascii: 4bdass="title"><em>Brand & Marketing Operations Assistant</em></p><h6 class="title text-muted">derek.ancil@indwes.edu</h6></div></div></div><div class="col-lg-4 col-sm-12"><div class="team-member"><div class="text-center"><h3 c
Mar 18, 2024 17:22:35.639698982 CET	530	OUT	GET /font-awesome/fonts/fontawesome-webfont.woff?v=4.3.0 HTTP/1.1 Host: iwu.marketing Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/font-awesome/css/font-awesome.min.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; browserupdateorg=pause
Mar 18, 2024 17:22:35.767467976 CET	243	IN	HTTP/1.0 302 Object Moved Pragma: no-cache Location: http://blocked.by.waap.network Connection: close Set-Cookie: TUT-WAF = jXhkDEX1jE3eGMl7+LuJhpruWRs0012; Comment = ; Domain = ; Max-Age = ; Expires = ; Path = /; Version = 0; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	50194	216.21.12.179	80	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 18, 2024 17:22:35.264306068 CET	531	OUT	GET /font-awesome/fonts/fontawesome-webfont.woff2?v=4.3.0 HTTP/1.1 Host: iwu.marketing Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/font-awesome/css/font-awesome.min.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; browserupdateorg=pause
Mar 18, 2024 17:22:35.394319057 CET	243	IN	HTTP/1.0 302 Object Moved Pragma: no-cache Location: http://blocked.by.waap.network Connection: close Set-Cookie: TUT-WAF = jXhkDEX1jE3eGMl7+LuJhpruWRs0012; Comment = ; Domain = ; Max-Age = ; Expires = ; Path = /; Version = 0; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	50198	216.21.12.179	80	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 18, 2024 17:22:36.007380009 CET	529	OUT	GET /font-awesome/fonts/fontawesome-webfont.ttf?v=4.3.0 HTTP/1.1 Host: iwu.marketing Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/font-awesome/css/font-awesome.min.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; browserupdateorg=pause
Mar 18, 2024 17:22:36.134496927 CET	243	IN	HTTP/1.0 302 Object Moved Pragma: no-cache Location: http://blocked.by.waap.network Connection: close Set-Cookie: TUT-WAF = jXhkDEX1jE3eGMl7+LuJhpruWRs0012; Comment = ; Domain = ; Max-Age = ; Expires = ; Path = /; Version = 0; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	50203	216.21.12.179	80	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 18, 2024 17:22:36.913636923 CET	580	OUT	GET / HTTP/1.1 Host: iwu.marketing Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; browserupdateorg=pause If-None-Match: "c66ddd-495400ad8b95"
Mar 18, 2024 17:22:37.096558094 CET	287	IN	HTTP/1.1 200 OK Content-Type: text/html Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Mon, 18 Mar 2024 16:22:36 GMT X-Cache-Control-Orig: Cache-Control: max-age=0, must-revalidate, private X-Expires-Orig: None ETag: "f6b3b9-c308e30ccd11" Transfer-Encoding: chunked
Mar 18, 2024 17:22:37.097287893 CET	1220	IN	Data Raw: 34 62 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c Data Ascii: 4bf<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" lang="en"><head><meta charset="utf-8"/><title>IWU Marketing</title><meta content="width=device-width, initial-scale=1.0" name="viewport"/><meta content="noindex, nofollow"
Mar 18, 2024 17:22:37.097343922 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 3a 20 77 68 69 74 65 3b 20 6f 70 61 63 69 74 79 3a 20 39 35 25 3b 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 22 3e 3c 21 2d 2d 20 42 72 61 6e 64 20 61 6e 64 20 74 6f 67 67 6c 65 Data Ascii: 4bd: white; opacity: 95%;"><div class="container-fluid">... Brand and toggle get grouped for better mobile display --><div class="navbar-header"><button class="navbar-toggle collapsed" data-target="#bs-example-navbar-collapse-1" data-to
Mar 18, 2024 17:22:37.097356081 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 75 69 64 20 2d 2d 3e 3c 2f 6e 61 76 3e 0a 3c 68 65 61 64 65 72 20 63 6c 61 73 73 3d 22 6e 6f 6e 72 65 73 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 2d 63 6f 6e 74 65 6e 74 22 3e 0a 3c 64 69 76 20 63 6c 61 Data Ascii: 4bduid --></nav><header class="nonres"><div class="header-content"><div class="header-content-inner text-center" style="max-width: 100%;"><h1 style="color: #f5f5f5; text-shadow: 5px 3px 5px #464646;"><span class="large" style="font-siz
Mar 18, 2024 17:22:37.224054098 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 65 72 76 69 63 65 20 61 6e 64 20 65 78 63 65 6c 6c 65 6e 63 65 20 69 6e 20 61 6c 6c 20 74 68 61 74 20 77 65 20 64 6f 2e 3c 2f 70 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 70 61 67 65 2d 73 63 72 6f 6c 6c 20 62 74 6e 20 62 74 6e 2d Data Ascii: 4bdervice and excellence in all that we do.</p><a class="page-scroll btn btn-default btn-xl sr-button" href="#services">Get Started!</a></div></div></div></section><section class="bg-dark" id="services" style="padding-bottom: 2rem;">
Mar 18, 2024 17:22:37.224071026 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 64 20 73 6f 63 69 61 6c 20 6d 65 64 69 61 20 70 72 6f 70 65 72 74 69 65 73 2c 20 61 73 20 77 65 6c 6c 20 61 73 20 64 69 67 69 74 61 6c 20 61 64 76 65 72 74 69 73 69 6e 67 20 61 6e 64 20 65 6d 61 69 6c 20 6d 61 72 6b 65 74 69 Data Ascii: 4bdd social media properties, as well as digital advertising and email marketing strategies.</span></p></div></div><div class="col-md-4 text-center"><div class="service-box ug"><span class="fa fa-4x fa-line-chart text-primary sr-icons"
Mar 18, 2024 17:22:37.224085093 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 3d 22 73 65 63 74 69 6f 6e 2d 68 65 61 64 69 6e 67 22 3e 4f 75 72 20 41 77 61 72 64 2d 57 69 6e 6e 69 6e 67 20 54 65 61 6d 3c 2f 68 32 3e 0a 3c 68 72 2f 3e 0a 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 6d 75 74 65 64 22 3e Data Ascii: 4bd="section-heading">Our Award-Winning Team</h2><hr/><p class="text-muted">Recognized for excellence in higher education marketing by the AIVA Communicator Awards, Collegiate Advertising Awards, Higher Education Marketing Advertising Aw
Mar 18, 2024 17:22:37.224150896 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 61 73 73 3d 22 74 65 78 74 2d 6d 75 74 65 64 22 3e 77 65 73 2e 61 64 6b 69 6e 73 40 69 6e 64 77 65 73 2e 65 64 75 3c 2f 68 36 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 Data Ascii: 4bdass="text-muted">wes.adkins@indwes.edu</h6></div></div></div><div class="col-lg-3 col-sm-12"><div class="team-member"><div class="text-center"><h3 class="text-primary">Aaron Cawthorn</h3><p class="title"><em>Director of Marketin
Mar 18, 2024 17:22:37.224164963 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 73 73 3d 22 74 65 78 74 2d 63 65 6e 74 65 72 22 3e 0a 3c 68 33 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 70 72 69 6d 61 72 79 22 3e 52 61 63 68 61 65 6c 20 47 6f 75 76 61 6e 3c 2f 68 33 3e 0a 3c 70 20 63 6c 61 73 73 3d 22 74 69 Data Ascii: 4bdss="text-center"><h3 class="text-primary">Rachael Gouvan</h3><p class="title"><em>Senior Graphic Designer</em></p><h6 class="title text-muted">rachel.gouvan@indwes.edu</h6></div></div></div><div class="col-lg-3 col-sm-12"><div c
Mar 18, 2024 17:22:37.224178076 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 6e 75 74 74 65 72 40 69 6e 64 77 65 73 2e 65 64 75 3c 2f 68 36 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6c 67 2d 33 20 63 6f 6c 2d 73 6d 2d 31 32 22 Data Ascii: 4bdnutter@indwes.edu</h6></div></div></div><div class="col-lg-3 col-sm-12"><div class="team-member"><div class="text-center"><h3 class="text-primary">Lana Shoaf</h3><p class="title"><em>Copywriter & Communications Manager</em><
Mar 18, 2024 17:22:37.224190950 CET	1220	IN	Data Raw: 0d 0a 34 62 64 0d 0a 61 73 73 3d 22 74 69 74 6c 65 22 3e 3c 65 6d 3e 42 72 61 6e 64 20 26 61 6d 70 3b 20 4d 61 72 6b 65 74 69 6e 67 20 4f 70 65 72 61 74 69 6f 6e 73 20 41 73 73 69 73 74 61 6e 74 3c 2f 65 6d 3e 3c 2f 70 3e 0a 3c 68 36 20 63 6c 61 Data Ascii: 4bdass="title"><em>Brand & Marketing Operations Assistant</em></p><h6 class="title text-muted">derek.ancil@indwes.edu</h6></div></div></div><div class="col-lg-4 col-sm-12"><div class="team-member"><div class="text-center"><h3 c
Mar 18, 2024 17:22:37.602783918 CET	530	OUT	GET /font-awesome/fonts/fontawesome-webfont.woff?v=4.3.0 HTTP/1.1 Host: iwu.marketing Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/font-awesome/css/font-awesome.min.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; browserupdateorg=pause
Mar 18, 2024 17:22:37.729882002 CET	243	IN	HTTP/1.0 302 Object Moved Pragma: no-cache Location: http://blocked.by.waap.network Connection: close Set-Cookie: TUT-WAF = jXhkDEX1jE3eGMl7+LuJhpruWRs0012; Comment = ; Domain = ; Max-Age = ; Expires = ; Path = /; Version = 0; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	50202	216.21.12.179	80	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 18, 2024 17:22:37.337644100 CET	531	OUT	GET /font-awesome/fonts/fontawesome-webfont.woff2?v=4.3.0 HTTP/1.1 Host: iwu.marketing Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/font-awesome/css/font-awesome.min.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; browserupdateorg=pause
Mar 18, 2024 17:22:37.467915058 CET	243	IN	HTTP/1.0 302 Object Moved Pragma: no-cache Location: http://blocked.by.waap.network Connection: close Set-Cookie: TUT-WAF = jXhkDEX1jE3eGMl7+LuJhpruWRs0012; Comment = ; Domain = ; Max-Age = ; Expires = ; Path = /; Version = 0; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	50207	216.21.12.179	80	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 18, 2024 17:22:37.969558954 CET	529	OUT	GET /font-awesome/fonts/fontawesome-webfont.ttf?v=4.3.0 HTTP/1.1 Host: iwu.marketing Connection: keep-alive Origin: http://iwu.marketing User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://iwu.marketing/font-awesome/css/font-awesome.min.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; TUT-WAF=jXhkDEX1jE3eGMl7+LuJhpruWRs0012; browserupdateorg=pause
Mar 18, 2024 17:22:38.096786976 CET	243	IN	HTTP/1.0 302 Object Moved Pragma: no-cache Location: http://blocked.by.waap.network Connection: close Set-Cookie: TUT-WAF = jXhkDEX1jE3eGMl7+LuJhpruWRs0012; Comment = ; Domain = ; Max-Age = ; Expires = ; Path = /; Version = 0; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	50171	199.38.148.58	80	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 18, 2024 17:23:11.906224966 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49744	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:21:51 UTC	703	OUT	GET /Marketing/Project-Request/ HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:21:51 UTC	353	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 X-StackifyID: V2\|8000030b-1001-f800-b63f-84710c7967bb\|C82847\|CD6 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Date: Mon, 18 Mar 2024 16:21:50 GMT Connection: close Content-Length: 38100
2024-03-18 16:21:51 UTC	16031	IN	Data Raw: 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 20 69 64 3d 22 63 74 6c 30 30 5f 48 65 61 64 31 22 3e 3c 74 69 74 6c 65 3e 0d 0a 09 4d 61 72 6b 65 74 69 6e 67 20 2d 20 50 72 6f 6a 65 63 74 20 52 65 71 75 65 73 74 20 46 6f 72 6d 20 7c 20 49 6e 64 69 61 6e 61 20 57 65 73 6c 65 79 61 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head id="ctl00_Head1"><title>Marketing - Project Request Form \| Indiana Wesleya
2024-03-18 16:21:51 UTC	16384	IN	Data Raw: 70 6c 65 74 69 6f 6e 27 2c 27 38 38 34 31 27 29 22 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 42 6c 61 63 6b 22 3e 31 36 3c 2f 61 3e 3c 2f 74 64 3e 3c 2f 74 72 3e 3c 74 72 3e 3c 74 64 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 31 34 25 3b 22 3e 3c 61 20 68 72 65 66 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 5f 5f 64 6f 50 6f 73 74 42 61 63 6b 28 27 63 74 6c 30 30 24 43 6f 6e 74 65 6e 74 50 6c 61 63 65 48 6f 6c 64 65 72 31 24 43 6f 6d 70 6c 65 74 69 6f 6e 27 2c 27 38 38 34 32 27 29 22 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 42 6c 61 63 6b 22 3e 31 37 3c 2f 61 3e 3c 2f 74 64 3e 3c 74 64 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 43 43 43 Data Ascii: pletion','8841')" style="color:Black">16</a></td></tr><tr><td align="center" style="width:14%;"><a href="javascript:__doPostBack('ctl00$ContentPlaceHolder1$Completion','8842')" style="color:Black">17</a></td><td align="center" style="background-color:#CCC
2024-03-18 16:21:51 UTC	5685	IN	Data Raw: 65 6e 74 2e 63 6f 6e 74 72 6f 6c 74 6f 76 61 6c 69 64 61 74 65 20 3d 20 22 63 74 6c 30 30 5f 43 6f 6e 74 65 6e 74 50 6c 61 63 65 48 6f 6c 64 65 72 31 5f 74 78 74 42 6f 78 44 65 70 61 72 74 6d 65 6e 74 22 3b 0d 0a 63 74 6c 30 30 5f 43 6f 6e 74 65 6e 74 50 6c 61 63 65 48 6f 6c 64 65 72 31 5f 72 6c 76 64 44 65 70 61 72 74 6d 65 6e 74 2e 65 72 72 6f 72 6d 65 73 73 61 67 65 20 3d 20 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 74 68 65 20 64 65 70 61 72 74 6d 65 6e 74 20 72 65 71 75 65 73 74 69 6e 67 20 74 68 65 20 6d 61 74 65 72 69 61 6c 73 22 3b 0d 0a 63 74 6c 30 30 5f 43 6f 6e 74 65 6e 74 50 6c 61 63 65 48 6f 6c 64 65 72 31 5f 72 6c 76 64 44 65 70 61 72 74 6d 65 6e 74 2e 64 69 73 70 6c 61 79 20 3d 20 22 44 79 6e 61 6d 69 63 22 3b 0d 0a 63 74 6c 30 30 5f 43 6f Data Ascii: ent.controltovalidate = "ctl00_ContentPlaceHolder1_txtBoxDepartment";ctl00_ContentPlaceHolder1_rlvdDepartment.errormessage = "Please enter the department requesting the materials";ctl00_ContentPlaceHolder1_rlvdDepartment.display = "Dynamic";ctl00_Co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49748	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:21:52 UTC	588	OUT	GET /_css/indwesFormsColumns.css HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secure2.indwes.edu/Marketing/Project-Request/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:21:52 UTC	312	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Fri, 13 Feb 2015 20:06:32 GMT Accept-Ranges: bytes ETag: "b5a89b8fc847d01:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Date: Mon, 18 Mar 2024 16:21:52 GMT Connection: close Content-Length: 5239
2024-03-18 16:21:52 UTC	5239	IN	Data Raw: 68 74 6d 6c 2c 20 2e 69 6e 64 77 65 73 42 6f 64 79 20 7b 0d 0a 09 68 65 69 67 68 74 3a 31 30 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 6d 61 72 67 69 6e 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 0d 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 20 68 65 6c 76 65 74 69 63 61 2c 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 66 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 70 74 3b 09 0d 0a 7d 0d 0a 0d 0a 23 63 6f 6e 74 65 6e 74 5f 74 65 78 74 20 74 61 62 6c 65 20 7b 0d 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 20 68 65 6c 76 65 74 69 63 61 2c 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 Data Ascii: html, .indwesBody {height:100% !important;margin:0 !important;padding:0 !important;border:none;font-family:arial, helvetica, verdana, sans-serf;font-size: 10pt;}#content_text table {font-family:arial, helvetica, verdana, sans-s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49747	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:21:52 UTC	584	OUT	GET /_scripts/GoogleAnalytics/ga-secure.js HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure2.indwes.edu/Marketing/Project-Request/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:21:52 UTC	325	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Thu, 12 Feb 2015 18:55:37 GMT Accept-Ranges: bytes ETag: "a23d277df546d01:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Date: Mon, 18 Mar 2024 16:21:52 GMT Connection: close Content-Length: 401
2024-03-18 16:21:52 UTC	401	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 69 2c 73 2c 6f 2c 67 2c 72 2c 61 2c 6d 29 7b 69 5b 27 47 6f 6f 67 6c 65 41 6e 61 6c 79 74 69 63 73 4f 62 6a 65 63 74 27 5d 3d 72 3b 69 5b 72 5d 3d 69 5b 72 5d 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 28 69 5b 72 5d 2e 71 3d 69 5b 72 5d 2e 71 7c 7c 5b 5d 29 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 2c 69 5b 72 5d 2e 6c 3d 31 2a 6e 65 77 20 44 61 74 65 28 29 3b 61 3d 73 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6f 29 2c 0d 0a 6d 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 6f 29 5b 30 5d 3b 61 2e 61 73 79 6e 63 3d 31 3b 61 2e 73 72 63 3d 67 3b 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2c 6d 29 0d 0a 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 Data Ascii: (function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]\|\|function(){(i[r].q=i[r].q\|\|[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)})(window,docume

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49749	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:21:52 UTC	632	OUT	GET /_img/hdr_form_iwuLogo.gif HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure2.indwes.edu/Marketing/Project-Request/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:21:53 UTC	313	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Thu, 18 Mar 2010 15:01:38 GMT Accept-Ranges: bytes ETag: "7e743e9abc6ca1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Date: Mon, 18 Mar 2024 16:21:52 GMT Connection: close Content-Length: 12764
2024-03-18 16:21:53 UTC	12764	IN	Data Raw: 47 49 46 38 39 61 eb 01 51 00 f7 00 00 98 08 26 89 07 26 7f 05 1b 96 08 26 ff ff ff 96 08 25 92 08 25 93 08 25 89 07 22 8b 07 23 91 08 24 94 08 25 97 08 26 8c 07 26 8a 07 26 8b 07 26 8d 07 26 82 07 20 e4 c3 ca bc 75 85 90 08 24 84 06 1d 84 06 1f e0 bb c3 a5 29 43 8e 07 26 8f 08 24 8c 07 23 9b 11 2e 8d 07 23 87 07 22 86 07 21 8a 07 23 8e 07 23 8a 06 20 81 07 20 91 24 39 bb 0c 2c 8e 07 24 85 06 1e dc b2 bb 90 07 22 88 06 1f 94 08 26 95 08 26 81 05 1c a9 31 4a 90 07 26 91 08 26 9b 29 43 ca 83 92 8f 07 26 86 06 1e 93 08 26 c4 73 84 b1 43 5a a8 0a 29 92 08 26 c0 6a 7c 8c 07 21 99 0d 2a 82 05 1c 88 12 29 f6 ea ec cd 8b 99 8a 07 24 e9 cc d2 c5 7a 8a 83 05 1d d6 a1 ac 9d 15 31 ac 55 67 95 08 25 a0 1c 38 db ab b5 9e 18 34 80 05 1b cc 99 a3 88 06 20 80 05 1c ec d5 Data Ascii: GIF89aQ&&&%%%"#$%&&&&& u$)C&$#.#"!## $9,$"&&1J&&)C&&sCZ)&j\|!*)$z1Ug%84

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49750	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:21:52 UTC	635	OUT	GET /_img/formHeadings/hdr_MD.gif HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure2.indwes.edu/Marketing/Project-Request/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:21:52 UTC	313	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Thu, 22 Jul 2010 15:38:01 GMT Accept-Ranges: bytes ETag: "f4d127deb329cb1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Date: Mon, 18 Mar 2024 16:21:52 GMT Connection: close Content-Length: 2090
2024-03-18 16:21:52 UTC	2090	IN	Data Raw: 47 49 46 38 39 61 07 01 51 00 d5 00 00 98 08 26 ff ff ff 8b 07 23 89 07 22 96 08 25 94 08 25 93 08 25 91 08 24 92 08 25 96 08 26 84 07 21 81 07 20 8c 07 23 8f 08 24 8a 07 23 8e 07 23 8e 07 24 bb 0c 2c 83 07 21 8d 07 23 90 08 24 87 07 22 86 07 21 97 08 26 e4 bd c5 f1 de e2 d6 9c a8 f8 ef f1 c8 7b 8b b3 4a 60 ad 39 51 a6 29 43 ea ce d4 cf 8c 9a 9f 18 34 dd ad b7 c1 6b 7d ba 5a 6e e3 bd c5 a5 29 43 9e 18 34 dc ad b7 d5 9c a8 ac 39 51 ce 8c 9a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 07 01 51 00 40 06 ff 40 80 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 Data Ascii: GIF89aQ&#"%%%$%&! #$##$,!#$"!&{J`9Q)C4k}Zn)C49Q!,Q@@pH,rl:tJZvz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49754	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:21:53 UTC	397	OUT	GET /update.min.js HTTP/1.1 Host: browser-update.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:21:53 UTC	759	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:21:53 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 9348 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=update.min.js expires: Thu, 14 Mar 2024 18:00:01 GMT last-modified: Sat, 02 Mar 2024 10:00:09 GMT CF-Cache-Status: HIT Age: 426112 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1pDz5PUxS1rdSr4jTzIt3%2B4kNGOu86nXBhMRCA%2BiszyT%2FhBgwayqHA2no1a5Fzb%2FknOZMMp52OUKm00psu38l9608zaCtBGy5xPS6tUC4mRY4fv5O5hDxAh92XGJml2nnmaw3g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668ef09e4f43a6-EWR
2024-03-18 16:21:53 UTC	610	IN	Data Raw: 2f 2f 28 63 29 32 30 32 31 2c 20 4d 49 54 20 53 74 79 6c 65 20 4c 69 63 65 6e 73 65 20 3c 62 72 6f 77 73 65 72 2d 75 70 64 61 74 65 2e 6f 72 67 2f 4c 49 43 45 4e 53 45 2e 74 78 74 3e 0d 0a 2f 2f 69 74 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 64 69 72 65 63 74 6c 79 20 6c 69 6e 6b 20 74 6f 20 74 68 69 73 20 66 69 6c 65 20 62 65 63 61 75 73 65 20 77 65 20 75 70 64 61 74 65 20 74 68 65 20 64 65 74 65 63 74 69 6f 6e 20 63 6f 64 65 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 24 62 75 5f 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 3d 74 68 69 73 3b 74 68 69 73 2e 76 65 72 73 69 6f 6e 3d 22 33 2e 33 2e 35 31 22 3b 74 68 69 73 2e 76 73 61 6b 74 3d 7b 63 3a 22 31 32 32 22 2c 66 3a 22 31 32 33 22 2c 73 3a 22 31 37 2e Data Ascii: //(c)2021, MIT Style License <browser-update.org/LICENSE.txt>//it is recommended to directly link to this file because we update the detection code"use strict";var $bu_=new function(){var s=this;this.version="3.3.51";this.vsakt={c:"122",f:"123",s:"17.
2024-03-18 16:21:53 UTC	1369	IN	Data Raw: 46 69 72 65 66 6f 78 27 2c 73 3a 27 53 61 66 61 72 69 27 2c 65 3a 22 45 64 67 65 22 2c 69 3a 27 49 6e 74 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 27 2c 69 6f 73 3a 22 69 4f 53 22 2c 73 61 6d 73 75 6e 67 3a 22 53 61 6d 73 75 6e 67 20 49 6e 74 65 72 6e 65 74 22 2c 6f 3a 27 4f 70 65 72 61 27 2c 6f 5f 61 3a 27 4f 70 65 72 61 27 2c 65 5f 61 3a 22 45 64 67 65 22 2c 79 3a 22 59 61 6e 64 65 78 20 42 72 6f 77 73 65 72 22 2c 76 3a 22 56 69 76 61 6c 64 69 22 2c 75 63 3a 22 55 43 20 42 72 6f 77 73 65 72 22 2c 61 3a 22 41 6e 64 72 6f 69 64 20 42 72 6f 77 73 65 72 22 2c 78 3a 22 4f 74 68 65 72 22 2c 73 69 6c 6b 3a 22 53 69 6c 6b 22 7d 3b 74 68 69 73 2e 67 65 74 5f 62 72 6f 77 73 65 72 3d 66 75 6e 63 74 69 6f 6e 28 75 61 29 7b 76 61 72 20 6e 2c 75 61 3d 28 75 61 7c 7c Data Ascii: Firefox',s:'Safari',e:"Edge",i:'Internet Explorer',ios:"iOS",samsung:"Samsung Internet",o:'Opera',o_a:'Opera',e_a:"Edge",y:"Yandex Browser",v:"Vivaldi",uc:"UC Browser",a:"Android Browser",x:"Other",silk:"Silk"};this.get_browser=function(ua){var n,ua=(ua\|\|
2024-03-18 16:21:53 UTC	1369	IN	Data Raw: 63 72 6f 73 7c 6b 69 6e 64 6c 65 7c 74 69 7a 65 6e 7c 73 69 6c 6b 7c 62 6c 61 63 6b 62 65 72 72 79 7c 62 62 31 30 7c 52 49 4d 7c 50 6c 61 79 42 6f 6f 6b 7c 6d 65 65 67 6f 7c 6e 6f 6b 69 61 7c 75 63 77 65 62 7c 5a 75 6e 65 57 50 37 7c 35 33 37 2e 38 35 2e 31 30 22 29 3b 72 2e 65 6d 62 65 64 64 65 64 3d 2f 22 51 74 57 65 62 45 6e 67 69 6e 65 7c 54 65 61 6d 73 7c 45 6c 65 63 74 72 6f 6e 2f 69 2e 74 65 73 74 28 75 61 29 3b 72 2e 6d 6f 62 69 6c 65 3d 28 2f 69 70 68 6f 6e 65 7c 69 70 6f 64 7c 69 70 61 64 7c 61 6e 64 72 6f 69 64 7c 6d 6f 62 69 6c 65 7c 70 68 6f 6e 65 7c 69 6f 73 7c 69 65 6d 6f 62 69 6c 65 2f 69 2e 74 65 73 74 28 75 61 29 29 3b 72 2e 64 69 73 63 6f 6e 74 69 6e 75 65 64 3d 28 2f 6e 65 74 73 63 61 70 65 7c 67 72 65 65 6e 62 72 6f 77 73 65 72 7c 63 Data Ascii: cros\|kindle\|tizen\|silk\|blackberry\|bb10\|RIM\|PlayBook\|meego\|nokia\|ucweb\|ZuneWP7\|537.85.10");r.embedded=/"QtWebEngine\|Teams\|Electron/i.test(ua);r.mobile=(/iphone\|ipod\|ipad\|android\|mobile\|phone\|ios\|iemobile/i.test(ua));r.discontinued=(/netscape\|greenbrowser\|c
2024-03-18 16:21:53 UTC	1369	IN	Data Raw: 2e 74 65 73 74 28 75 61 29 29 7b 75 61 2e 6d 61 74 63 68 28 6e 65 77 20 52 65 67 45 78 70 28 22 4f 53 2e 22 2b 56 56 2c 22 69 22 29 29 3b 72 2e 6e 3d 22 69 6f 73 22 3b 72 2e 66 75 6c 6c 76 3d 52 65 67 45 78 70 2e 24 31 3b 72 2e 76 3d 70 61 72 73 65 46 6c 6f 61 74 28 72 2e 66 75 6c 6c 76 29 3b 72 2e 65 6e 67 69 6e 65 3d 27 69 6f 73 27 3b 76 61 72 20 61 76 3d 73 2e 61 76 61 69 6c 61 62 6c 65 5f 69 6f 73 28 75 61 2c 72 2e 76 29 3b 69 66 28 61 76 3c 31 32 26 26 4d 61 74 68 2e 72 6f 75 6e 64 28 72 2e 76 29 3d 3d 3d 31 31 29 61 76 3d 31 32 3b 72 2e 61 76 61 69 6c 61 62 6c 65 3d 7b 22 69 6f 73 22 3a 61 76 7d 3b 69 66 28 70 61 72 73 65 46 6c 6f 61 74 28 72 2e 61 76 61 69 6c 61 62 6c 65 2e 69 6f 73 29 3c 31 31 29 72 2e 6e 6f 5f 64 65 76 69 63 65 5f 75 70 64 61 74 Data Ascii: .test(ua)){ua.match(new RegExp("OS."+VV,"i"));r.n="ios";r.fullv=RegExp.$1;r.v=parseFloat(r.fullv);r.engine='ios';var av=s.available_ios(ua,r.v);if(av<12&&Math.round(r.v)===11)av=12;r.available={"ios":av};if(parseFloat(r.available.ios)<11)r.no_device_updat
2024-03-18 16:21:53 UTC	1369	IN	Data Raw: 69 66 28 72 2e 6e 20 69 6e 20 5b 22 63 22 2c 22 66 22 2c 22 6f 22 2c 22 65 22 5d 26 26 73 2e 6c 65 73 73 28 72 2e 66 75 6c 6c 76 2c 70 61 72 73 65 46 6c 6f 61 74 28 73 2e 76 73 61 6b 74 5b 72 2e 6e 5d 29 2d 31 29 3c 3d 30 29 72 2e 69 73 5f 73 75 70 70 6f 72 74 65 64 3d 74 72 75 65 3b 76 61 72 20 72 65 6c 65 61 73 65 73 5f 70 65 72 5f 79 65 61 72 3d 7b 27 66 27 3a 37 2c 27 63 27 3a 38 2c 27 6f 27 3a 38 2c 27 69 27 3a 31 2c 27 65 27 3a 31 2c 27 73 27 3a 31 7d 3b 69 66 28 72 65 6c 65 61 73 65 73 5f 70 65 72 5f 79 65 61 72 5b 72 2e 6e 5d 29 72 2e 61 67 65 5f 79 65 61 72 73 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 28 28 73 2e 76 73 61 6b 74 5b 72 2e 6e 5d 2d 72 2e 76 29 2f 72 65 6c 65 61 73 65 73 5f 70 65 72 5f 79 65 61 72 5b 72 2e 6e 5d 29 2a 31 30 29 2f 31 30 7c Data Ascii: if(r.n in ["c","f","o","e"]&&s.less(r.fullv,parseFloat(s.vsakt[r.n])-1)<=0)r.is_supported=true;var releases_per_year={'f':7,'c':8,'o':8,'i':1,'e':1,'s':1};if(releases_per_year[r.n])r.age_years=Math.round(((s.vsakt[r.n]-r.v)/releases_per_year[r.n])*10)/10\|
2024-03-18 16:21:53 UTC	1369	IN	Data Raw: 28 6e 2e 6c 61 6e 67 75 61 67 65 73 3f 6e 2e 6c 61 6e 67 75 61 67 65 73 5b 30 5d 3a 6e 75 6c 6c 29 7c 7c 6e 2e 6c 61 6e 67 75 61 67 65 7c 7c 6e 2e 62 72 6f 77 73 65 72 4c 61 6e 67 75 61 67 65 7c 7c 6e 2e 75 73 65 72 4c 61 6e 67 75 61 67 65 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6c 61 6e 67 22 29 7c 7c 22 65 6e 22 3b 6f 70 2e 6c 6c 66 75 6c 6c 3d 6c 6c 2e 72 65 70 6c 61 63 65 28 22 5f 22 2c 22 2d 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 73 75 62 73 74 72 28 30 2c 35 29 3b 6f 70 2e 6c 6c 3d 6f 70 2e 6c 6c 66 75 6c 6c 2e 73 75 62 73 74 72 28 30 2c 32 29 3b 6f 70 2e 64 6f 6d 61 69 6e 3d 6f 70 2e 64 6f 6d 61 69 6e 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 6f 70 2e 64 6f Data Ascii: (n.languages?n.languages[0]:null)\|\|n.language\|\|n.browserLanguage\|\|n.userLanguage\|\|document.documentElement.getAttribute("lang")\|\|"en";op.llfull=ll.replace("_","-").toLowerCase().substr(0,5);op.ll=op.llfull.substr(0,2);op.domain=op.domain!==undefined?op.do
2024-03-18 16:21:53 UTC	1369	IN	Data Raw: 70 2e 6f 6e 73 68 6f 77 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 7d 3b 6f 70 2e 6f 6e 63 6c 69 63 6b 3d 6f 70 2e 6f 6e 63 6c 69 63 6b 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 7d 3b 6f 70 2e 6f 6e 63 6c 6f 73 65 3d 6f 70 2e 6f 6e 63 6c 6f 73 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 7d 3b 6f 70 2e 70 61 67 65 75 72 6c 3d 6f 70 2e 70 61 67 65 75 72 6c 7c 7c 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 7c 7c 22 78 22 3b 6f 70 2e 6e 65 77 77 69 6e 64 6f 77 3d 28 6f 70 2e 6e 65 77 77 69 6e 64 6f 77 21 3d 3d 66 61 6c 73 65 29 3b 6f 70 2e 74 65 73 74 3d 74 65 73 74 7c 7c 6f 70 2e 74 65 73 74 7c 7c 28 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 3d 3d 3d 22 23 74 65 73 74 2d 62 75 22 29 7c 7c 66 61 6c 73 65 3b 6f 70 2e 69 67 6e 6f 72 65 63 6f 6f 6b 69 65 3d Data Ascii: p.onshow\|\|function(o){};op.onclick=op.onclick\|\|function(o){};op.onclose=op.onclose\|\|function(o){};op.pageurl=op.pageurl\|\|location.hostname\|\|"x";op.newwindow=(op.newwindow!==false);op.test=test\|\|op.test\|\|(location.hash==="#test-bu")\|\|false;op.ignorecookie=
2024-03-18 16:21:53 UTC	524	IN	Data Raw: 2e 61 6c 72 65 61 64 79 5f 73 68 6f 77 6e 29 29 72 65 74 75 72 6e 3b 6f 70 2e 73 65 74 43 6f 6f 6b 69 65 3d 66 75 6e 63 74 69 6f 6e 28 68 6f 75 72 73 29 7b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 27 62 72 6f 77 73 65 72 75 70 64 61 74 65 6f 72 67 3d 70 61 75 73 65 3b 20 65 78 70 69 72 65 73 3d 27 2b 6e 65 77 20 44 61 74 65 28 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2b 33 36 30 30 30 30 30 2a 68 6f 75 72 73 29 2e 74 6f 47 4d 54 53 74 72 69 6e 67 28 29 2b 27 3b 20 70 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 27 2b 28 2f 68 74 74 70 73 3a 2f 2e 74 65 73 74 28 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3f 27 3b 20 53 65 63 75 72 65 27 3a 27 27 29 3b 7d 3b 69 66 28 6f 70 2e 61 6c 72 65 61 64 79 5f 73 68 6f 77 6e 26 26 Data Ascii: .already_shown))return;op.setCookie=function(hours){document.cookie='browserupdateorg=pause; expires='+new Date(new Date().getTime()+3600000*hours).toGMTString()+'; path=/; SameSite=Lax'+(/https:/.test(location.href)?'; Secure':'');};if(op.already_shown&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49756	23.51.58.94	443

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:21:53 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-18 16:21:53 UTC	468	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/079C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=183782 Date: Mon, 18 Mar 2024 16:21:53 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49758	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:21:53 UTC	720	OUT	GET /Marketing/Project-Request/WebResource.axd?d=PRiIs6mOtMtRlOJgHrMPuowRdjdCZFYN0fVvfLDr-wofI5YK65nPuyqX9Pggn5E6Ee4oLQKxW1oFtXVElWxfouPM8goxbIB2hLry3iCpcpg1&t=638393069798026697 HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure2.indwes.edu/Marketing/Project-Request/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:21:54 UTC	438	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: application/x-javascript Expires: Tue, 18 Mar 2025 15:27:04 GMT Last-Modified: Thu, 28 Dec 2023 01:49:39 GMT Server: Microsoft-IIS/10.0 X-StackifyID: V2\|80000d52-1001-f700-b63f-84710c7967bb\|C82847\|CD6 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Date: Mon, 18 Mar 2024 16:21:53 GMT Connection: close Content-Length: 23063
2024-03-18 16:21:54 UTC	15946	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 50 6f 73 74 42 61 63 6b 4f 70 74 69 6f 6e 73 28 65 76 65 6e 74 54 61 72 67 65 74 2c 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 2c 20 76 61 6c 69 64 61 74 69 6f 6e 2c 20 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 2c 20 61 63 74 69 6f 6e 55 72 6c 2c 20 74 72 61 63 6b 46 6f 63 75 73 2c 20 63 6c 69 65 6e 74 53 75 62 6d 69 74 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 54 61 72 67 65 74 20 3d 20 65 76 65 6e 74 54 61 72 67 65 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 20 3d 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 20 3d 20 76 61 6c 69 64 61 74 69 6f 6e 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c Data Ascii: function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) { this.eventTarget = eventTarget; this.eventArgument = eventArgument; this.validation = validation; this.val
2024-03-18 16:21:54 UTC	7117	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 47 65 74 53 63 72 6f 6c 6c 58 28 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 5f 5f 6e 6f 6e 4d 53 44 4f 4d 42 72 6f 77 73 65 72 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 61 67 65 58 4f 66 66 73 65 74 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 20 26 26 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 4c 65 66 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 4c 65 66 74 3b 0d 0a Data Ascii: function WebForm_GetScrollX() { if (__nonMSDOMBrowser) { return window.pageXOffset; } else { if (document.documentElement && document.documentElement.scrollLeft) { return document.documentElement.scrollLeft;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49763	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:21:53 UTC	402	OUT	GET /update.show.min.js HTTP/1.1 Host: browser-update.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:21:53 UTC	765	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:21:53 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 21886 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=update.show.min.js expires: Thu, 14 Mar 2024 15:33:09 GMT last-modified: Sat, 02 Mar 2024 10:00:11 GMT CF-Cache-Status: HIT Age: 434924 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SspKqvSVDVllLYhVU804eLy5nNDWa6Da4LBSFZ0zMfuzAZZYocK4XZL5mZCH2x0Y%2BAhCb05yBF31fzJ7HbYhDeZrsbVf%2Ftidjyy3ujWKjVRa%2B25%2FGFZSQsfai3yAaSiYAFdzxw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668ef34a97c477-EWR
2024-03-18 16:21:53 UTC	604	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 24 62 75 6f 5f 73 68 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 70 3d 77 69 6e 64 6f 77 2e 5f 62 75 6f 72 67 72 65 73 3b 76 61 72 20 62 62 3d 24 62 75 5f 67 65 74 42 72 6f 77 73 65 72 28 29 3b 76 61 72 20 62 75 72 6c 3d 6f 70 2e 62 75 72 6c 7c 7c 28 22 68 74 74 70 22 2b 28 2f 4d 53 49 45 2f 69 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 3f 22 22 3a 22 73 22 29 2b 22 3a 2f 2f 62 72 6f 77 73 65 72 2d 75 70 64 61 74 65 2e 6f 72 67 2f 22 29 3b 69 66 28 21 6f 70 2e 75 72 6c 29 6f 70 2e 75 72 6c 3d 62 75 72 6c 2b 28 28 6f 70 2e 6c 26 26 28 6f 70 2e 6c 2b 22 2f 22 29 29 7c 7c 22 22 29 2b 22 75 70 64 61 74 65 2d 62 72 6f 77 73 65 72 2e 68 74 6d 6c 22 2b 28 6f 70 2e Data Ascii: "use strict";var $buo_show=function(){var op=window._buorgres;var bb=$bu_getBrowser();var burl=op.burl\|\|("http"+(/MSIE/i.test(navigator.userAgent)?"":"s")+"://browser-update.org/");if(!op.url)op.url=burl+((op.l&&(op.l+"/"))\|\|"")+"update-browser.html"+(op.
2024-03-18 16:21:53 UTC	1369	IN	Data Raw: 66 20 64 61 74 65 2e 27 2c 27 6d 73 67 6d 6f 72 65 27 3a 27 55 70 64 61 74 65 20 79 6f 75 72 20 62 72 6f 77 73 65 72 20 66 6f 72 20 6d 6f 72 65 20 73 65 63 75 72 69 74 79 2c 20 73 70 65 65 64 20 61 6e 64 20 74 68 65 20 62 65 73 74 20 65 78 70 65 72 69 65 6e 63 65 20 6f 6e 20 74 68 69 73 20 73 69 74 65 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 55 70 64 61 74 65 20 62 72 6f 77 73 65 72 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 49 67 6e 6f 72 65 27 2c 27 72 65 6d 69 6e 64 27 3a 27 59 6f 75 20 77 69 6c 6c 20 62 65 20 72 65 6d 69 6e 64 65 64 20 69 6e 20 7b 64 61 79 73 7d 20 64 61 79 73 2e 27 2c 27 62 6e 65 76 65 72 27 3a 27 4e 65 76 65 72 20 73 68 6f 77 20 61 67 61 69 6e 27 2c 27 69 6e 73 65 63 75 72 65 27 3a 27 59 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 Data Ascii: f date.','msgmore':'Update your browser for more security, speed and the best experience on this site.','bupdate':'Update browser','bignore':'Ignore','remind':'You will be reminded in {days} days.','bnever':'Never show again','insecure':'Your web browser
2024-03-18 16:21:53 UTC	1369	IN	Data Raw: 63 69 74 61 74 20 69 20 75 6e 61 20 6d 69 6c 6c 6f 72 20 65 78 70 65 72 69 c3 a8 6e 63 69 61 20 65 6e 20 61 71 75 65 73 74 20 6c 6c 6f 63 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 41 63 74 75 61 6c 69 74 7a 61 20 65 6c 20 6e 61 76 65 67 61 64 6f 72 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 49 67 6e 6f 72 61 72 27 2c 27 72 65 6d 69 6e 64 27 3a 27 54 5c 27 68 6f 20 72 65 63 6f 72 64 61 72 65 6d 20 64 5c 27 61 71 75 c3 ad 20 61 20 7b 64 61 79 73 7d 20 64 69 65 73 2e 27 2c 27 62 6e 65 76 65 72 27 3a 27 4e 6f 20 68 6f 20 74 6f 72 6e 69 73 20 61 20 6d 6f 73 74 72 61 72 27 7d 3b 74 2e 63 73 3d 7b 27 6d 73 67 27 3a 27 56 c3 a1 c5 a1 20 70 72 6f 68 6c c3 ad c5 be 65 c4 8d 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 6a 65 20 7a 61 73 74 61 72 61 6c c3 bd 2e 27 2c 27 Data Ascii: citat i una millor experincia en aquest lloc.','bupdate':'Actualitza el navegador','bignore':'Ignorar','remind':'T\'ho recordarem d\'aqu a {days} dies.','bnever':'No ho tornis a mostrar'};t.cs={'msg':'V prohle ({brow_name}) je zastaral.','
2024-03-18 16:21:53 UTC	1369	IN	Data Raw: 61 79 73 7d 20 54 61 67 65 6e 20 77 69 65 64 65 72 20 65 72 69 6e 6e 65 72 74 2e 27 2c 27 62 6e 65 76 65 72 27 3a 27 4e 69 65 20 77 69 65 64 65 72 20 61 6e 7a 65 69 67 65 6e 27 2c 27 69 6e 73 65 63 75 72 65 27 3a 27 49 68 72 20 57 65 62 62 72 6f 77 73 65 72 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 68 61 74 20 65 69 6e 65 20 65 72 6e 73 74 68 61 66 74 65 20 53 69 63 68 65 72 68 65 69 74 73 6c c3 bc 63 6b 65 21 27 7d 3b 74 2e 65 6c 3d 7b 27 6d 73 67 27 3a 27 ce a4 ce bf 20 cf 80 cf 81 cf 8c ce b3 cf 81 ce b1 ce bc ce bc ce b1 20 cf 80 ce b5 cf 81 ce b9 ce ae ce b3 ce b7 cf 83 ce ae cf 82 20 cf 83 ce b1 cf 82 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 ce b5 ce af ce bd ce b1 ce b9 20 ce b1 cf 80 ce b1 cf 81 cf 87 ce b1 ce b9 cf 89 ce bc ce ad ce bd ce Data Ascii: ays} Tagen wieder erinnert.','bnever':'Nie wieder anzeigen','insecure':'Ihr Webbrowser ({brow_name}) hat eine ernsthafte Sicherheitslcke!'};t.el={'msg':' ({brow_name})
2024-03-18 16:21:53 UTC	1369	IN	Data Raw: 74 2e 66 61 3d 7b 27 6d 73 67 27 3a 27 d9 85 d8 b1 d9 88 d8 b1 da af d8 b1 20 d8 b4 d9 85 d8 a7 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 d9 82 d8 af db 8c d9 85 db 8c 20 d8 a7 d8 b3 d8 aa 2e 27 2c 27 6d 73 67 6d 6f 72 65 27 3a 27 d8 a8 d8 b1 d8 a7 db 8c 20 d8 a7 db 8c d9 85 d9 86 db 8c d8 8c 20 d8 b3 d8 b1 d8 b9 d8 aa 20 d9 88 20 d8 aa d8 ac d8 b1 d8 a8 d9 87 20 d8 a8 d9 87 d8 aa d8 b1 20 d9 85 d8 b1 d9 88 d8 b1 da af d8 b1 20 d8 ae d9 88 d8 af 20 d8 b1 d8 a7 20 d8 a8 d9 87 e2 80 8c d8 b1 d9 88 d8 b2 20 da a9 d9 86 db 8c d8 af 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 d8 a8 d9 87 e2 80 8c d8 b1 d9 88 d8 b2 d8 b1 d8 b3 d8 a7 d9 86 db 8c 20 d9 85 d8 b1 d9 88 d8 b1 da af d8 b1 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 d9 86 d8 a7 d8 af db 8c d8 af d9 87 20 Data Ascii: t.fa={'msg':' ({brow_name}) .','msgmore':' .','bupdate':' ','bignore':'
2024-03-18 16:21:53 UTC	1369	IN	Data Raw: 3b 74 2e 68 65 3d 7b 27 6d 73 67 27 3a 27 d7 93 d7 a4 d7 93 d7 a4 d7 9f 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 d7 a9 d7 9c d7 9a 20 d7 90 d7 99 d7 a0 d7 95 20 d7 9e d7 a2 d7 95 d7 93 d7 9b d7 9f 2e 27 2c 27 6d 73 67 6d 6f 72 65 27 3a 27 d7 a2 d7 93 d7 9b d7 9f 2f d7 99 20 d7 90 d7 aa 20 d7 94 d7 93 d7 a4 d7 93 d7 a4 d7 9f 20 d7 a9 d7 9c d7 9a 20 d7 9c d7 a9 d7 99 d7 a4 d7 95 d7 a8 20 d7 94 d7 90 d7 91 d7 98 d7 97 d7 94 20 d7 95 d7 94 d7 9e d7 94 d7 99 d7 a8 d7 95 d7 aa 20 d7 95 d7 9b d7 93 d7 99 20 d7 9c d7 99 d7 94 d7 a0 d7 95 d7 aa 20 d7 9e d7 94 d7 97 d7 95 d7 95 d7 99 d7 94 20 d7 94 d7 98 d7 95 d7 91 d7 94 20 d7 91 d7 99 d7 95 d7 aa d7 a8 20 d7 91 d7 90 d7 aa d7 a8 20 d7 96 d7 94 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 d7 a2 d7 93 d7 9b d7 9f Data Ascii: ;t.he={'msg':' ({brow_name}) .','msgmore':'/ .','bupdate':'
2024-03-18 16:21:53 UTC	1369	IN	Data Raw: 6e 67 2e 27 2c 27 6d 73 67 6d 6f 72 65 27 3a 27 50 65 72 62 61 72 75 69 20 70 65 72 61 6d 62 61 6e 20 41 6e 64 61 20 75 6e 74 75 6b 20 70 65 6e 67 61 6c 61 6d 61 6e 20 74 65 72 62 61 69 6b 2c 20 6c 65 62 69 68 20 61 6d 61 6e 2c 20 64 61 6e 20 63 65 70 61 74 20 64 69 20 73 69 74 75 73 20 69 6e 69 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 50 65 72 62 61 72 75 69 20 70 65 72 61 6d 62 61 6e 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 41 62 61 69 6b 61 6e 27 2c 27 72 65 6d 69 6e 64 27 3a 27 41 6e 64 61 20 61 6b 61 6e 20 64 69 69 6e 67 61 74 6b 61 6e 20 6b 65 6d 62 61 6c 69 20 64 61 6c 61 6d 20 7b 64 61 79 73 7d 20 68 61 72 69 2e 27 2c 27 62 6e 65 76 65 72 27 3a 27 4a 61 6e 67 61 6e 20 70 65 72 6e 61 68 20 74 61 6d 70 69 6c 6b 61 6e 20 6c 61 67 69 27 7d 3b 74 2e 69 Data Ascii: ng.','msgmore':'Perbarui peramban Anda untuk pengalaman terbaik, lebih aman, dan cepat di situs ini.','bupdate':'Perbarui peramban','bignore':'Abaikan','remind':'Anda akan diingatkan kembali dalam {days} hari.','bnever':'Jangan pernah tampilkan lagi'};t.i
2024-03-18 16:21:53 UTC	1369	IN	Data Raw: 79 6b 6c c4 97 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 79 72 61 20 70 61 73 65 6e 75 73 69 2e 27 2c 27 6d 73 67 6d 6f 72 65 27 3a 27 41 74 73 69 6e 61 75 6a 69 6e 6b 69 74 65 20 73 61 76 6f 20 6e 61 72 c5 a1 79 6b 6c c4 99 20 6e 6f 72 c4 97 64 61 6d 69 20 67 61 75 74 69 20 64 61 75 67 69 61 75 20 73 61 75 67 75 6d 6f 2c 20 67 72 65 69 c4 8d 69 6f 20 69 72 20 70 61 c4 8d 69 c5 b3 20 67 65 72 69 61 75 73 69 c5 b3 20 70 61 74 69 72 c4 8d 69 c5 b3 20 c5 a1 69 6f 6a 65 20 73 76 65 74 61 69 6e c4 97 6a 65 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 41 74 6e 61 75 6a 69 6e 74 69 20 6e 61 72 c5 a1 79 6b 6c c4 99 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 4e 65 70 61 69 73 79 74 69 27 2c 27 72 65 6d 69 6e 64 27 3a 27 4a 75 6d 73 20 62 75 73 20 70 72 69 6d 69 6e 74 Data Ascii: ykl ({brow_name}) yra pasenusi.','msgmore':'Atsinaujinkite savo narykl nordami gauti daugiau saugumo, greiio ir pai geriausi patiri ioje svetainje.','bupdate':'Atnaujinti narykl','bignore':'Nepaisyti','remind':'Jums bus primint
2024-03-18 16:21:53 UTC	1369	IN	Data Raw: 73 69 6b 6b 65 72 68 65 74 2c 20 68 61 73 74 69 67 68 65 74 20 6f 67 20 64 65 6e 20 62 65 73 74 65 20 6f 70 70 6c 65 76 65 6c 73 65 6e 20 70 c3 a5 20 64 65 74 74 65 20 6e 65 74 74 73 74 65 64 65 74 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 4f 70 70 64 61 74 65 72 20 6e 65 74 74 6c 65 73 65 72 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 49 67 6e 6f 72 65 72 27 2c 27 72 65 6d 69 6e 64 27 3a 27 44 75 20 76 69 6c 20 66 c3 a5 20 65 6e 20 70 c3 a5 6d 69 6e 6e 65 6c 73 65 20 6f 6d 20 7b 64 61 79 73 7d 20 64 61 67 65 72 2e 27 2c 27 62 6e 65 76 65 72 27 3a 27 41 6c 64 72 69 20 76 69 73 20 69 67 6a 65 6e 27 7d 3b 74 2e 70 6c 3d 7b 27 6d 73 67 27 3a 27 54 77 6f 6a 61 20 70 72 7a 65 67 6c c4 85 64 61 72 6b 61 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 6a 65 73 74 20 6e Data Ascii: sikkerhet, hastighet og den beste opplevelsen p dette nettstedet.','bupdate':'Oppdater nettleser','bignore':'Ignorer','remind':'Du vil f en pminnelse om {days} dager.','bnever':'Aldri vis igjen'};t.pl={'msg':'Twoja przegldarka ({brow_name}) jest n
2024-03-18 16:21:53 UTC	1369	IN	Data Raw: b8 d1 81 d0 bf d0 be d0 bb d1 8c d0 b7 d0 be d0 b2 d0 b0 d0 bd d0 b8 d1 8f 20 d1 8d d1 82 d0 be d0 b3 d0 be 20 d1 81 d0 b0 d0 b9 d1 82 d0 b0 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 d0 9e d0 b1 d0 bd d0 be d0 b2 d0 b8 d1 82 d1 8c 20 d0 b1 d1 80 d0 b0 d1 83 d0 b7 d0 b5 d1 80 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 d0 98 d0 b3 d0 bd d0 be d1 80 d0 b8 d1 80 d0 be d0 b2 d0 b0 d1 82 d1 8c 27 2c 27 72 65 6d 69 6e 64 27 3a 27 d0 92 d1 8b 20 d0 bf d0 be d0 bb d1 83 d1 87 d0 b8 d1 82 d0 b5 20 d0 bd d0 b0 d0 bf d0 be d0 bc d0 b8 d0 bd d0 b0 d0 bd d0 b8 d0 b5 20 d1 87 d0 b5 d1 80 d0 b5 d0 b7 20 7b 64 61 79 73 7d 20 d0 b4 d0 bd d0 b5 d0 b9 2e 27 2c 27 62 6e 65 76 65 72 27 3a 27 d0 91 d0 be d0 bb d1 8c d1 88 d0 b5 20 d0 bd d0 b5 20 d0 bf d0 be d0 ba d0 b0 d0 b7 d1 8b Data Ascii: .','bupdate':' ','bignore':'','remind':' {days} .','bnever':'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49760	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:21:53 UTC	777	OUT	GET /Marketing/Project-Request/ScriptResource.axd?d=N1YvUyNqW0L73jWWkHG8Q2j76Mx82NFmzNRQMnxnODvY7K-ZSKORZ0MB81NHSzxF-dDgdPZD9LXX-szea8XzdOrZowxhpSsfSBZZjAdUZBQdqkbUeTOS5Kz7quSZZPJJKyWeybnwswsSc1oepVOO2VDOZ4HqQIPC2btXaVzQuXs1&t=3e1b2a62 HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure2.indwes.edu/Marketing/Project-Request/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:21:54 UTC	453	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: application/x-javascript; charset=utf-8 Expires: Tue, 18 Mar 2025 16:21:53 GMT Last-Modified: Mon, 18 Mar 2024 16:21:53 GMT Server: Microsoft-IIS/10.0 X-StackifyID: V2\|80000b81-1001-1d00-b63f-84710c7967bb\|C82847\|CD6 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Date: Mon, 18 Mar 2024 16:21:53 GMT Connection: close Content-Length: 26951
2024-03-18 16:21:54 UTC	15931	IN	Data Raw: 76 61 72 20 50 61 67 65 5f 56 61 6c 69 64 61 74 69 6f 6e 56 65 72 20 3d 20 22 31 32 35 22 3b 0d 0a 76 61 72 20 50 61 67 65 5f 49 73 56 61 6c 69 64 20 3d 20 74 72 75 65 3b 0d 0a 76 61 72 20 50 61 67 65 5f 42 6c 6f 63 6b 53 75 62 6d 69 74 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 50 61 67 65 5f 49 6e 76 61 6c 69 64 43 6f 6e 74 72 6f 6c 54 6f 42 65 46 6f 63 75 73 65 64 20 3d 20 6e 75 6c 6c 3b 0d 0a 76 61 72 20 50 61 67 65 5f 54 65 78 74 54 79 70 65 73 20 3d 20 2f 5e 28 74 65 78 74 7c 70 61 73 73 77 6f 72 64 7c 66 69 6c 65 7c 73 65 61 72 63 68 7c 74 65 6c 7c 75 72 6c 7c 65 6d 61 69 6c 7c 6e 75 6d 62 65 72 7c 72 61 6e 67 65 7c 63 6f 6c 6f 72 7c 64 61 74 65 74 69 6d 65 7c 64 61 74 65 7c 6d 6f 6e 74 68 7c 77 65 65 6b 7c 74 69 6d 65 7c 64 61 74 65 74 69 6d 65 Data Ascii: var Page_ValidationVer = "125";var Page_IsValid = true;var Page_BlockSubmit = false;var Page_InvalidControlToBeFocused = null;var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime
2024-03-18 16:21:54 UTC	11020	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 63 6f 6d 70 61 72 65 29 29 20 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7c 7c 0d 0a 20 20 20 20 20 20 20 20 28 6e 75 6c 6c 20 3d 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 63 6f 6d 70 61 72 65 29 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 28 76 61 6c 2e 76 61 6c 75 65 74 6f 63 6f 6d 70 61 72 65 29 20 3d 3d 20 22 73 74 72 69 6e 67 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6d 70 61 72 65 54 6f 20 3d 20 76 61 6c 2e 76 61 6c 75 65 74 6f 63 6f 6d 70 61 72 65 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 65 6c 73 65 20 7b 0d Data Ascii: getElementById(val.controltocompare)) == "undefined") \|\| (null == document.getElementById(val.controltocompare))) { if (typeof(val.valuetocompare) == "string") { compareTo = val.valuetocompare; } } else {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49757	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:21:53 UTC	777	OUT	GET /Marketing/Project-Request/ScriptResource.axd?d=T0VaWC5aFwLzNsW4kfM0Y5VkzcH6rIPd0pv-1CL4Dy_XiN6x5sx3PkYf3sexq64YkJRoDlgIkEiUN4AwioDB-vRUrNL4GfY6aTnep5OSyf88dGSi9Atycswoaue9vayAL20ek3B9p0Pmz1puwpE_SEhbflnicYNonlmniaV6trc1&t=511fa37d HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure2.indwes.edu/Marketing/Project-Request/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:21:54 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: application/x-javascript; charset=utf-8 Expires: Tue, 18 Mar 2025 16:21:53 GMT Last-Modified: Mon, 18 Mar 2024 16:21:53 GMT Server: Microsoft-IIS/10.0 X-StackifyID: V2\|800004d0-0001-0300-b63f-84710c7967bb\|C82847\|CD6 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Date: Mon, 18 Mar 2024 16:21:53 GMT Connection: close Content-Length: 102801
2024-03-18 16:21:54 UTC	15930	IN	Data Raw: 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 2e 6a 73 0d 0a 46 75 6e 63 74 69 6f 6e 2e 5f 5f 74 79 70 65 4e 61 6d 65 3d 22 46 75 6e 63 74 69 6f 6e 22 3b 46 75 6e 63 74 69 6f 6e 2e 5f 5f 63 6c 61 73 73 3d Data Ascii: //----------------------------------------------------------// Copyright (C) Microsoft Corporation. All rights reserved.//----------------------------------------------------------// MicrosoftAjax.jsFunction.__typeName="Function";Function.__class=
2024-03-18 16:21:54 UTC	16384	IN	Data Raw: 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 29 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 61 29 3b 69 66 28 77 69 6e 64 6f 77 2e 6f 70 65 72 61 29 77 69 6e 64 6f 77 2e 6f 70 65 72 61 2e 70 6f 73 74 45 72 72 6f 72 28 61 29 3b 69 66 28 77 69 6e 64 6f 77 2e 64 65 62 75 67 53 65 72 76 69 63 65 29 77 69 6e 64 6f 77 2e 64 65 62 75 67 53 65 72 76 69 63 65 2e 74 72 61 63 65 28 61 29 7d 2c 5f 61 70 70 65 6e 64 54 72 61 63 65 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 54 72 61 63 65 43 6f 6e 73 6f 6c 65 22 29 3b 69 66 28 61 26 26 61 2e 74 61 67 4e 61 6d 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3d 3d 3d 22 54 45 58 54 41 52 45 41 22 29 61 2e 76 Data Ascii: &&window.console.log)window.console.log(a);if(window.opera)window.opera.postError(a);if(window.debugService)window.debugService.trace(a)},_appendTrace:function(b){var a=document.getElementById("TraceConsole");if(a&&a.tagName.toUpperCase()==="TEXTAREA")a.v
2024-03-18 16:21:54 UTC	16384	IN	Data Raw: 28 65 29 3b 70 3d 74 72 75 65 3b 72 65 74 75 72 6e 20 68 7d 76 61 72 20 71 3d 30 2c 6f 3d 44 61 74 65 2e 5f 67 65 74 54 6f 6b 65 6e 52 65 67 45 78 70 28 29 2c 66 3b 69 66 28 21 6b 26 26 6e 29 66 3d 6e 2e 66 72 6f 6d 47 72 65 67 6f 72 69 61 6e 28 74 68 69 73 29 3b 66 6f 72 28 3b 74 72 75 65 3b 29 7b 76 61 72 20 77 3d 6f 2e 6c 61 73 74 49 6e 64 65 78 2c 69 3d 6f 2e 65 78 65 63 28 65 29 2c 75 3d 65 2e 73 6c 69 63 65 28 77 2c 69 3f 69 2e 69 6e 64 65 78 3a 65 2e 6c 65 6e 67 74 68 29 3b 71 2b 3d 44 61 74 65 2e 5f 61 70 70 65 6e 64 50 72 65 4f 72 50 6f 73 74 4d 61 74 63 68 28 75 2c 61 29 3b 69 66 28 21 69 29 62 72 65 61 6b 3b 69 66 28 71 25 32 3d 3d 3d 31 29 7b 61 2e 61 70 70 65 6e 64 28 69 5b 30 5d 29 3b 63 6f 6e 74 69 6e 75 65 7d 66 75 6e 63 74 69 6f 6e 20 67 Data Ascii: (e);p=true;return h}var q=0,o=Date._getTokenRegExp(),f;if(!k&&n)f=n.fromGregorian(this);for(;true;){var w=o.lastIndex,i=o.exec(e),u=e.slice(w,i?i.index:e.length);q+=Date._appendPreOrPostMatch(u,a);if(!i)break;if(q%2===1){a.append(i[0]);continue}function g
2024-03-18 16:21:54 UTC	16384	IN	Data Raw: 4a 61 76 61 53 63 72 69 70 74 53 65 72 69 61 6c 69 7a 65 72 2e 5f 63 68 61 72 73 54 6f 45 73 63 61 70 65 52 65 67 45 78 73 5b 62 5d 2c 53 79 73 2e 53 65 72 69 61 6c 69 7a 61 74 69 6f 6e 2e 4a 61 76 61 53 63 72 69 70 74 53 65 72 69 61 6c 69 7a 65 72 2e 5f 65 73 63 61 70 65 43 68 61 72 73 5b 62 5d 29 7d 7d 63 2e 61 70 70 65 6e 64 28 61 29 3b 63 2e 61 70 70 65 6e 64 28 27 22 27 29 7d 3b 53 79 73 2e 53 65 72 69 61 6c 69 7a 61 74 69 6f 6e 2e 4a 61 76 61 53 63 72 69 70 74 53 65 72 69 61 6c 69 7a 65 72 2e 5f 73 65 72 69 61 6c 69 7a 65 57 69 74 68 42 75 69 6c 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 2c 69 2c 67 29 7b 76 61 72 20 63 3b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 62 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 69 66 28 62 29 69 66 28 4e 75 Data Ascii: JavaScriptSerializer._charsToEscapeRegExs[b],Sys.Serialization.JavaScriptSerializer._escapeChars[b])}}c.append(a);c.append('"')};Sys.Serialization.JavaScriptSerializer._serializeWithBuilder=function(b,a,i,g){var c;switch(typeof b){case "object":if(b)if(Nu
2024-03-18 16:21:54 UTC	16384	IN	Data Raw: 70 65 72 43 61 73 65 28 29 29 7b 63 61 73 65 20 22 44 49 56 22 3a 63 61 73 65 20 22 50 22 3a 63 61 73 65 20 22 41 44 44 52 45 53 53 22 3a 63 61 73 65 20 22 42 4c 4f 43 4b 51 55 4f 54 45 22 3a 63 61 73 65 20 22 42 4f 44 59 22 3a 63 61 73 65 20 22 43 4f 4c 22 3a 63 61 73 65 20 22 43 4f 4c 47 52 4f 55 50 22 3a 63 61 73 65 20 22 44 44 22 3a 63 61 73 65 20 22 44 4c 22 3a 63 61 73 65 20 22 44 54 22 3a 63 61 73 65 20 22 46 49 45 4c 44 53 45 54 22 3a 63 61 73 65 20 22 46 4f 52 4d 22 3a 63 61 73 65 20 22 48 31 22 3a 63 61 73 65 20 22 48 32 22 3a 63 61 73 65 20 22 48 33 22 3a 63 61 73 65 20 22 48 34 22 3a 63 61 73 65 20 22 48 35 22 3a 63 61 73 65 20 22 48 36 22 3a 63 61 73 65 20 22 48 52 22 3a 63 61 73 65 20 22 49 46 52 41 4d 45 22 3a 63 61 73 65 20 22 4c 45 47 45 Data Ascii: perCase()){case "DIV":case "P":case "ADDRESS":case "BLOCKQUOTE":case "BODY":case "COL":case "COLGROUP":case "DD":case "DL":case "DT":case "FIELDSET":case "FORM":case "H1":case "H2":case "H3":case "H4":case "H5":case "H6":case "HR":case "IFRAME":case "LEGE
2024-03-18 16:21:54 UTC	16384	IN	Data Raw: 79 46 72 61 6d 65 26 26 74 68 69 73 2e 5f 68 69 73 74 6f 72 79 50 6f 69 6e 74 49 73 4e 65 77 29 7b 76 61 72 20 66 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 66 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 62 7c 7c 64 6f 63 75 6d 65 6e 74 2e 74 69 74 6c 65 29 29 3b 76 61 72 20 67 3d 66 2e 69 6e 6e 65 72 48 54 4d 4c 3b 74 68 69 73 2e 5f 69 67 6e 6f 72 65 49 46 72 61 6d 65 3d 74 72 75 65 3b 76 61 72 20 63 3d 74 68 69 73 2e 5f 68 69 73 74 6f 72 79 46 72 61 6d 65 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 63 2e 6f 70 65 6e 28 22 6a 61 76 61 73 63 72 69 70 74 3a 27 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 27 22 29 3b 63 Data Ascii: yFrame&&this._historyPointIsNew){var f=document.createElement("div");f.appendChild(document.createTextNode(b\|\|document.title));var g=f.innerHTML;this._ignoreIFrame=true;var c=this._historyFrame.contentWindow.document;c.open("javascript:'<html></html>'");c
2024-03-18 16:21:54 UTC	4951	IN	Data Raw: 6c 28 29 3b 65 6c 73 65 20 63 3d 64 2e 67 65 74 5f 72 65 73 70 6f 6e 73 65 44 61 74 61 28 29 7d 63 61 74 63 68 28 6d 29 7b 7d 76 61 72 20 6b 3d 64 2e 67 65 74 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 28 22 6a 73 6f 6e 65 72 72 6f 72 22 29 2c 68 3d 6b 3d 3d 3d 22 74 72 75 65 22 3b 69 66 28 68 29 7b 69 66 28 63 29 63 3d 6e 65 77 20 53 79 73 2e 4e 65 74 2e 57 65 62 53 65 72 76 69 63 65 45 72 72 6f 72 28 66 61 6c 73 65 2c 63 2e 4d 65 73 73 61 67 65 2c 63 2e 53 74 61 63 6b 54 72 61 63 65 2c 63 2e 45 78 63 65 70 74 69 6f 6e 54 79 70 65 2c 63 29 7d 65 6c 73 65 20 69 66 28 65 2e 73 74 61 72 74 73 57 69 74 68 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 29 29 63 3d 21 63 7c 7c 74 79 70 65 6f 66 20 63 2e 64 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f Data Ascii: l();else c=d.get_responseData()}catch(m){}var k=d.getResponseHeader("jsonerror"),h=k==="true";if(h){if(c)c=new Sys.Net.WebServiceError(false,c.Message,c.StackTrace,c.ExceptionType,c)}else if(e.startsWith("application/json"))c=!c\|\|typeof c.d==="undefined"?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49761	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:21:53 UTC	798	OUT	GET /Marketing/Project-Request/ScriptResource.axd?d=E2lUT6wbt033uxREsuESVxB4DxgbJUlw5yEW8lQCs7oU1kEiezMUR7cfsCpSVfodXXGFcTAdhcgDzYQaN9YMr4UnCsyYbJ9Use1HrwHt8lk0xPMIsl_44PxA3JefaxK4ykHf1Ar06AAkNMn1Kja71QhuaEa2Rp180_J0Cl4qz8xa4VhiR1jlvmVzmHqDaH6F0&t=511fa37d HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure2.indwes.edu/Marketing/Project-Request/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:21:54 UTC	453	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: application/x-javascript; charset=utf-8 Expires: Tue, 18 Mar 2025 16:21:53 GMT Last-Modified: Mon, 18 Mar 2024 16:21:53 GMT Server: Microsoft-IIS/10.0 X-StackifyID: V2\|80001186-0001-a300-b63f-84710c7967bb\|C82847\|CD6 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Date: Mon, 18 Mar 2024 16:21:53 GMT Connection: close Content-Length: 40326
2024-03-18 16:21:54 UTC	15931	IN	Data Raw: 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 57 65 62 46 6f 72 6d 73 2e 6a 73 0d 0a 54 79 70 65 2e 5f 72 65 67 69 73 74 65 72 53 63 72 69 70 74 28 22 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 57 65 62 46 6f Data Ascii: //----------------------------------------------------------// Copyright (C) Microsoft Corporation. All rights reserved.//----------------------------------------------------------// MicrosoftAjaxWebForms.jsType._registerScript("MicrosoftAjaxWebFo
2024-03-18 16:21:54 UTC	16384	IN	Data Raw: 79 70 65 6f 66 20 63 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 63 21 3d 6e 75 6c 6c 29 69 66 28 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 63 2e 76 61 6c 75 65 3d 61 2e 65 76 65 6e 74 54 61 72 67 65 74 3b 65 6c 73 65 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3b 69 66 28 74 79 70 65 6f 66 20 62 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 62 21 3d 6e 75 6c 6c 29 69 66 28 74 79 70 65 6f 66 20 62 2e 69 64 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 62 2e 69 64 21 3d 6e 75 6c 6c 26 26 62 2e 69 64 2e 6c 65 6e 67 74 68 3e 30 29 63 2e 76 61 6c 75 65 3d 62 2e 69 64 3b 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 62 2e 6e 61 6d 65 Data Ascii: ypeof c!="undefined"&&c!=null)if(typeof document.activeElement=="undefined")c.value=a.eventTarget;else{var b=document.activeElement;if(typeof b!="undefined"&&b!=null)if(typeof b.id!="undefined"&&b.id!=null&&b.id.length>0)c.value=b.id;else if(typeof b.name
2024-03-18 16:21:54 UTC	8011	IN	Data Raw: 6f 75 74 4e 6f 64 65 2e 63 6f 6e 74 65 6e 74 3a 6e 75 6c 6c 29 3b 69 66 28 62 2e 66 6f 72 6d 41 63 74 69 6f 6e 4e 6f 64 65 29 74 68 69 73 2e 5f 66 6f 72 6d 2e 61 63 74 69 6f 6e 3d 62 2e 66 6f 72 6d 41 63 74 69 6f 6e 4e 6f 64 65 2e 63 6f 6e 74 65 6e 74 3b 76 61 72 20 61 2c 64 2c 63 3b 66 6f 72 28 61 3d 30 2c 64 3d 62 2e 75 70 64 61 74 65 50 61 6e 65 6c 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 3b 61 3c 64 3b 61 2b 2b 29 7b 63 3d 62 2e 75 70 64 61 74 65 50 61 6e 65 6c 4e 6f 64 65 73 5b 61 5d 3b 76 61 72 20 6a 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 63 2e 69 64 29 3b 69 66 28 21 6a 29 7b 74 68 69 73 2e 5f 65 6e 64 50 6f 73 74 42 61 63 6b 28 45 72 72 6f 72 2e 69 6e 76 61 6c 69 64 4f 70 65 72 61 74 69 6f 6e 28 53 74 72 69 6e 67 2e Data Ascii: outNode.content:null);if(b.formActionNode)this._form.action=b.formActionNode.content;var a,d,c;for(a=0,d=b.updatePanelNodes.length;a<d;a++){c=b.updatePanelNodes[a];var j=document.getElementById(c.id);if(!j){this._endPostBack(Error.invalidOperation(String.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49759	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:21:53 UTC	575	OUT	GET /_scripts/jquery-1.6.2.min.js HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure2.indwes.edu/Marketing/Project-Request/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:21:54 UTC	326	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Thu, 11 Aug 2011 17:37:28 GMT Accept-Ranges: bytes ETag: "35c4a574d58cc1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Date: Mon, 18 Mar 2024 16:21:53 GMT Connection: close Content-Length: 91556
2024-03-18 16:21:54 UTC	16058	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 36 2e 32 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2c 20 4a 6f 68 6e 20 52 65 73 69 67 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6f 72 20 47 50 4c 20 56 65 72 73 69 6f 6e 20 32 20 6c 69 63 65 6e 73 65 73 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2c 20 54 68 65 20 44 Data Ascii: /! jQuery JavaScript Library v1.6.2 * http://jquery.com/ * * Copyright 2011, John Resig * Dual licensed under the MIT or GPL Version 2 licenses. * http://jquery.org/license * * Includes Sizzle.js * http://sizzlejs.com/ * Copyright 2011, The D
2024-03-18 16:21:54 UTC	16384	IN	Data Raw: 66 65 72 72 65 64 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 2e 5f 44 65 66 65 72 72 65 64 28 29 2c 63 3d 66 2e 5f 44 65 66 65 72 72 65 64 28 29 2c 64 3b 66 2e 65 78 74 65 6e 64 28 62 2c 7b 74 68 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 62 2e 64 6f 6e 65 28 61 29 2e 66 61 69 6c 28 63 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 61 6c 77 61 79 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 2e 64 6f 6e 65 2e 61 70 70 6c 79 28 62 2c 61 72 67 75 6d 65 6e 74 73 29 2e 66 61 69 6c 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 66 61 69 6c 3a 63 2e 64 6f 6e 65 2c 72 65 6a 65 63 74 57 69 74 68 3a 63 2e 72 65 73 6f 6c 76 65 57 69 74 68 2c 72 65 6a 65 63 74 3a 63 2e 72 65 73 6f 6c 76 65 2c 69 73 52 Data Ascii: ferred:function(a){var b=f._Deferred(),c=f._Deferred(),d;f.extend(b,{then:function(a,c){b.done(a).fail(c);return this},always:function(){return b.done.apply(b,arguments).fail.apply(this,arguments)},fail:c.done,rejectWith:c.resolveWith,reject:c.resolve,isR
2024-03-18 16:21:54 UTC	16384	IN	Data Raw: 3d 6e 75 6c 6c 2c 64 65 6c 65 74 65 20 74 5b 68 5d 7d 69 66 28 66 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 74 29 29 7b 76 61 72 20 75 3d 73 2e 68 61 6e 64 6c 65 3b 75 26 26 28 75 2e 65 6c 65 6d 3d 6e 75 6c 6c 29 2c 64 65 6c 65 74 65 20 73 2e 65 76 65 6e 74 73 2c 64 65 6c 65 74 65 20 73 2e 68 61 6e 64 6c 65 2c 66 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 73 29 26 26 66 2e 72 65 6d 6f 76 65 44 61 74 61 28 61 2c 62 2c 21 30 29 7d 7d 7d 2c 63 75 73 74 6f 6d 45 76 65 6e 74 3a 7b 67 65 74 44 61 74 61 3a 21 30 2c 73 65 74 44 61 74 61 3a 21 30 2c 63 68 61 6e 67 65 44 61 74 61 3a 21 30 7d 2c 74 72 69 67 67 65 72 3a 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 65 2c 67 29 7b 76 61 72 20 68 3d 63 2e 74 79 70 65 7c 7c 63 2c 69 3d 5b 5d 2c 6a 3b 68 2e 69 6e 64 65 78 Data Ascii: =null,delete t[h]}if(f.isEmptyObject(t)){var u=s.handle;u&&(u.elem=null),delete s.events,delete s.handle,f.isEmptyObject(s)&&f.removeData(a,b,!0)}}},customEvent:{getData:!0,setData:!0,changeData:!0},trigger:function(c,d,e,g){var h=c.type\|\|c,i=[],j;h.index
2024-03-18 16:21:54 UTC	16384	IN	Data Raw: 3d 3d 6e 75 6c 6c 29 7d 2c 72 61 64 69 6f 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 22 69 6e 70 75 74 22 26 26 22 72 61 64 69 6f 22 3d 3d 3d 61 2e 74 79 70 65 7d 2c 63 68 65 63 6b 62 6f 78 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 22 69 6e 70 75 74 22 26 26 22 63 68 65 63 6b 62 6f 78 22 3d 3d 3d 61 2e 74 79 70 65 7d 2c 66 69 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 22 69 6e 70 75 74 22 26 26 22 66 69 6c 65 22 3d 3d 3d 61 2e 74 79 70 65 7d 2c 70 61 73 73 77 Data Ascii: ==null)},radio:function(a){return a.nodeName.toLowerCase()==="input"&&"radio"===a.type},checkbox:function(a){return a.nodeName.toLowerCase()==="input"&&"checkbox"===a.type},file:function(a){return a.nodeName.toLowerCase()==="input"&&"file"===a.type},passw
2024-03-18 16:21:54 UTC	16384	IN	Data Raw: 6f 72 65 3a 22 62 65 66 6f 72 65 22 2c 69 6e 73 65 72 74 41 66 74 65 72 3a 22 61 66 74 65 72 22 2c 72 65 70 6c 61 63 65 41 6c 6c 3a 22 72 65 70 6c 61 63 65 57 69 74 68 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 2e 66 6e 5b 61 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 64 3d 5b 5d 2c 65 3d 66 28 63 29 2c 67 3d 74 68 69 73 2e 6c 65 6e 67 74 68 3d 3d 3d 31 26 26 74 68 69 73 5b 30 5d 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 69 66 28 67 26 26 67 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 31 26 26 67 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 3d 3d 3d 31 26 26 65 2e 6c 65 6e 67 74 68 3d 3d 3d 31 29 7b 65 5b 62 5d 28 74 68 69 73 5b 30 5d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 66 6f 72 28 76 61 72 20 68 3d 30 2c 69 3d 65 2e 6c 65 6e 67 Data Ascii: ore:"before",insertAfter:"after",replaceAll:"replaceWith"},function(a,b){f.fn[a]=function(c){var d=[],e=f(c),g=this.length===1&&this[0].parentNode;if(g&&g.nodeType===11&&g.childNodes.length===1&&e.length===1){e[b](this[0]);return this}for(var h=0,i=e.leng
2024-03-18 16:21:54 UTC	9962	IN	Data Raw: 6b 28 74 68 69 73 29 3b 76 61 72 20 62 3d 66 2e 65 78 74 65 6e 64 28 7b 7d 2c 65 29 2c 63 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 2c 64 3d 63 26 26 66 28 74 68 69 73 29 2e 69 73 28 22 3a 68 69 64 64 65 6e 22 29 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 3b 62 2e 61 6e 69 6d 61 74 65 64 50 72 6f 70 65 72 74 69 65 73 3d 7b 7d 3b 66 6f 72 28 69 20 69 6e 20 61 29 7b 67 3d 66 2e 63 61 6d 65 6c 43 61 73 65 28 69 29 2c 69 21 3d 3d 67 26 26 28 61 5b 67 5d 3d 61 5b 69 5d 2c 64 65 6c 65 74 65 20 61 5b 69 5d 29 2c 68 3d 61 5b 67 5d 2c 66 2e 69 73 41 72 72 61 79 28 68 29 3f 28 62 2e 61 6e 69 6d 61 74 65 64 50 72 6f 70 65 72 74 69 65 73 5b 67 5d 3d 68 5b 31 5d 2c 68 3d 61 5b 67 5d 3d 68 5b 30 5d 29 3a 62 2e 61 6e 69 6d 61 74 65 64 50 72 6f 70 Data Ascii: k(this);var b=f.extend({},e),c=this.nodeType===1,d=c&&f(this).is(":hidden"),g,h,i,j,k,l,m,n,o;b.animatedProperties={};for(i in a){g=f.camelCase(i),i!==g&&(a[g]=a[i],delete a[i]),h=a[g],f.isArray(h)?(b.animatedProperties[g]=h[1],h=a[g]=h[0]):b.animatedProp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49762	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:21:53 UTC	585	OUT	GET /_scripts/jquery-ui-1.8.9.custom.min.js HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure2.indwes.edu/Marketing/Project-Request/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:21:54 UTC	327	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Thu, 03 Feb 2011 13:20:32 GMT Accept-Ranges: bytes ETag: "78c8522a5c3cb1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Date: Mon, 18 Mar 2024 16:21:53 GMT Connection: close Content-Length: 207146
2024-03-18 16:21:54 UTC	16057	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 31 2e 38 2e 39 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2c 20 41 55 54 48 4f 52 53 2e 74 78 74 20 28 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 2f 61 62 6f 75 74 29 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6f 72 20 47 50 4c 20 56 65 72 73 69 6f 6e 20 32 20 6c 69 63 65 6e 73 65 73 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6a 71 75 65 72 79 2e 63 6f 6d 2f 55 49 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 63 2c 6a 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 72 65 74 75 72 6e 21 63 28 61 29 2e 70 61 72 65 6e 74 Data Ascii: /! jQuery UI 1.8.9 * * Copyright 2011, AUTHORS.txt (http://jqueryui.com/about) * Dual licensed under the MIT or GPL Version 2 licenses. * http://jquery.org/license * * http://docs.jquery.com/UI */(function(c,j){function k(a){return!c(a).parent
2024-03-18 16:21:54 UTC	16384	IN	Data Raw: 28 61 29 3b 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 50 61 67 65 58 3d 61 2e 70 61 67 65 58 3b 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 50 61 67 65 59 3d 61 2e 70 61 67 65 59 3b 62 2e 63 75 72 73 6f 72 41 74 26 26 74 68 69 73 2e 5f 61 64 6a 75 73 74 4f 66 66 73 65 74 46 72 6f 6d 48 65 6c 70 65 72 28 62 2e 63 75 72 73 6f 72 41 74 29 3b 62 2e 63 6f 6e 74 61 69 6e 6d 65 6e 74 26 26 74 68 69 73 2e 5f 73 65 74 43 6f 6e 74 61 69 6e 6d 65 6e 74 28 29 3b 69 66 28 74 68 69 73 2e 5f 74 72 69 67 67 65 72 28 22 73 74 61 72 74 22 2c 61 29 3d 3d 3d 66 61 6c 73 65 29 7b 74 68 69 73 2e 5f 63 6c 65 61 72 28 29 3b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 74 68 69 73 2e 5f 63 61 63 68 65 48 65 6c 70 65 72 50 72 6f 70 6f 72 74 69 6f 6e 73 28 29 3b 0a 64 2e 75 69 2e 64 64 6d 61 6e Data Ascii: (a);this.originalPageX=a.pageX;this.originalPageY=a.pageY;b.cursorAt&&this._adjustOffsetFromHelper(b.cursorAt);b.containment&&this._setContainment();if(this._trigger("start",a)===false){this._clear();return false}this._cacheHelperProportions();d.ui.ddman
2024-03-18 16:21:54 UTC	16384	IN	Data Raw: 28 74 68 69 73 29 2e 64 61 74 61 28 22 64 72 61 67 67 61 62 6c 65 22 29 2e 6f 70 74 69 6f 6e 73 3b 61 2e 5f 7a 49 6e 64 65 78 26 26 64 28 62 2e 68 65 6c 70 65 72 29 2e 63 73 73 28 22 7a 49 6e 64 65 78 22 2c 61 2e 5f 7a 49 6e 64 65 78 29 7d 7d 29 7d 29 28 6a 51 75 65 72 79 29 3b 0a 3b 2f 2a 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 44 72 6f 70 70 61 62 6c 65 20 31 2e 38 2e 39 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2c 20 41 55 54 48 4f 52 53 2e 74 78 74 20 28 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 2f 61 62 6f 75 74 29 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6f 72 20 47 50 4c 20 56 65 72 73 69 6f 6e 20 32 20 6c 69 63 65 6e 73 65 73 2e 0a 20 2a 20 68 74 74 70 3a Data Ascii: (this).data("draggable").options;a._zIndex&&d(b.helper).css("zIndex",a._zIndex)}})})(jQuery);;/* * jQuery UI Droppable 1.8.9 * * Copyright 2011, AUTHORS.txt (http://jqueryui.com/about) * Dual licensed under the MIT or GPL Version 2 licenses. * http:
2024-03-18 16:21:54 UTC	16384	IN	Data Raw: 2c 74 68 69 73 2e 75 69 28 29 29 7d 2c 70 6c 75 67 69 6e 73 3a 7b 7d 2c 75 69 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 6f 72 69 67 69 6e 61 6c 45 6c 65 6d 65 6e 74 3a 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 45 6c 65 6d 65 6e 74 2c 65 6c 65 6d 65 6e 74 3a 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2c 68 65 6c 70 65 72 3a 74 68 69 73 2e 68 65 6c 70 65 72 2c 70 6f 73 69 74 69 6f 6e 3a 74 68 69 73 2e 70 6f 73 69 74 69 6f 6e 2c 73 69 7a 65 3a 74 68 69 73 2e 73 69 7a 65 2c 6f 72 69 67 69 6e 61 6c 53 69 7a 65 3a 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 53 69 7a 65 2c 6f 72 69 67 69 6e 61 6c 50 6f 73 69 74 69 6f 6e 3a 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 50 6f 73 69 74 69 6f 6e 7d 7d 7d 29 3b 65 2e 65 78 74 65 6e 64 28 65 2e 75 69 2e 72 65 73 69 7a 61 62 Data Ascii: ,this.ui())},plugins:{},ui:function(){return{originalElement:this.originalElement,element:this.element,helper:this.helper,position:this.position,size:this.size,originalSize:this.originalSize,originalPosition:this.originalPosition}}});e.extend(e.ui.resizab
2024-03-18 16:21:54 UTC	16384	IN	Data Raw: 29 63 3d 64 28 64 6f 63 75 6d 65 6e 74 29 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 64 28 64 6f 63 75 6d 65 6e 74 29 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 2b 62 2e 73 63 72 6f 6c 6c 53 70 65 65 64 29 7d 63 21 3d 3d 66 61 6c 73 65 26 26 64 2e 75 69 2e 64 64 6d 61 6e 61 67 65 72 26 26 21 62 2e 64 72 6f 70 42 65 68 61 76 69 6f 75 72 26 26 64 2e 75 69 2e 64 64 6d 61 6e 61 67 65 72 2e 70 72 65 70 61 72 65 4f 66 66 73 65 74 73 28 74 68 69 73 2c 61 29 7d 74 68 69 73 2e 70 6f 73 69 74 69 6f 6e 41 62 73 3d 74 68 69 73 2e 5f 63 6f 6e 76 65 72 74 50 6f 73 69 74 69 6f 6e 54 6f 28 22 61 62 73 6f 6c 75 74 65 22 29 3b 69 66 28 21 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 61 78 69 73 7c 7c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 61 78 69 73 21 3d 22 79 22 29 74 68 69 73 2e 68 65 Data Ascii: )c=d(document).scrollLeft(d(document).scrollLeft()+b.scrollSpeed)}c!==false&&d.ui.ddmanager&&!b.dropBehaviour&&d.ui.ddmanager.prepareOffsets(this,a)}this.positionAbs=this._convertPositionTo("absolute");if(!this.options.axis\|\|this.options.axis!="y")this.he
2024-03-18 16:21:54 UTC	16384	IN	Data Raw: 6d 50 6f 73 69 74 69 6f 6e 2e 70 72 65 76 21 3d 74 68 69 73 2e 63 75 72 72 65 6e 74 49 74 65 6d 2e 70 72 65 76 28 29 2e 6e 6f 74 28 22 2e 75 69 2d 73 6f 72 74 61 62 6c 65 2d 68 65 6c 70 65 72 22 29 5b 30 5d 7c 7c 74 68 69 73 2e 64 6f 6d 50 6f 73 69 74 69 6f 6e 2e 70 61 72 65 6e 74 21 3d 74 68 69 73 2e 63 75 72 72 65 6e 74 49 74 65 6d 2e 70 61 72 65 6e 74 28 29 5b 30 5d 29 26 26 21 62 29 63 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 66 29 7b 74 68 69 73 2e 5f 74 72 69 67 67 65 72 28 22 75 70 64 61 74 65 22 2c 66 2c 74 68 69 73 2e 5f 75 69 48 61 73 68 28 29 29 7d 29 3b 69 66 28 21 64 2e 75 69 2e 63 6f 6e 74 61 69 6e 73 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 49 74 65 6d 5b 30 5d 29 29 7b 62 7c 7c 63 2e 70 75 Data Ascii: mPosition.prev!=this.currentItem.prev().not(".ui-sortable-helper")[0]\|\|this.domPosition.parent!=this.currentItem.parent()[0])&&!b)c.push(function(f){this._trigger("update",f,this._uiHash())});if(!d.ui.contains(this.element[0],this.currentItem[0])){b\|\|c.pu
2024-03-18 16:21:54 UTC	16384	IN	Data Raw: 2e 65 6c 65 6d 65 6e 74 3b 61 2e 6f 75 74 65 72 57 69 64 74 68 28 4d 61 74 68 2e 6d 61 78 28 61 2e 77 69 64 74 68 28 22 22 29 2e 6f 75 74 65 72 57 69 64 74 68 28 29 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 6f 75 74 65 72 57 69 64 74 68 28 29 29 29 7d 2c 5f 72 65 6e 64 65 72 4d 65 6e 75 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 66 3d 74 68 69 73 3b 64 2e 65 61 63 68 28 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 65 29 7b 66 2e 5f 72 65 6e 64 65 72 49 74 65 6d 28 61 2c 65 29 7d 29 7d 2c 5f 72 65 6e 64 65 72 49 74 65 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 64 28 22 3c 6c 69 3e 3c 2f 6c 69 3e 22 29 2e 64 61 74 61 28 22 69 74 65 6d 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 2c 62 29 2e 61 70 70 65 6e 64 28 64 28 22 3c 61 Data Ascii: .element;a.outerWidth(Math.max(a.width("").outerWidth(),this.element.outerWidth()))},_renderMenu:function(a,b){var f=this;d.each(b,function(c,e){f._renderItem(a,e)})},_renderItem:function(a,b){return d("<li></li>").data("item.autocomplete",b).append(d("<a
2024-03-18 16:21:54 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 72 65 74 75 72 6e 7b 6f 72 69 67 69 6e 61 6c 50 6f 73 69 74 69 6f 6e 3a 66 2e 6f 72 69 67 69 6e 61 6c 50 6f 73 69 74 69 6f 6e 2c 6f 72 69 67 69 6e 61 6c 53 69 7a 65 3a 66 2e 6f 72 69 67 69 6e 61 6c 53 69 7a 65 2c 0a 70 6f 73 69 74 69 6f 6e 3a 66 2e 70 6f 73 69 74 69 6f 6e 2c 73 69 7a 65 3a 66 2e 73 69 7a 65 7d 7d 61 3d 61 3d 3d 3d 6a 3f 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 73 69 7a 61 62 6c 65 3a 61 3b 76 61 72 20 64 3d 74 68 69 73 2c 65 3d 64 2e 6f 70 74 69 6f 6e 73 2c 67 3d 64 2e 75 69 44 69 61 6c 6f 67 2e 63 73 73 28 22 70 6f 73 69 74 69 6f 6e 22 29 3b 61 3d 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 61 3a 22 6e 2c 65 2c 73 2c 77 2c 73 65 2c 73 77 2c 6e 65 2c 6e 77 22 3b 64 2e 75 69 44 69 Data Ascii: unction b(f){return{originalPosition:f.originalPosition,originalSize:f.originalSize,position:f.position,size:f.size}}a=a===j?this.options.resizable:a;var d=this,e=d.options,g=d.uiDialog.css("position");a=typeof a==="string"?a:"n,e,s,w,se,sw,ne,nw";d.uiDi
2024-03-18 16:21:54 UTC	16384	IN	Data Raw: 76 3e 22 2c 72 65 6d 6f 76 65 3a 6e 75 6c 6c 2c 73 65 6c 65 63 74 3a 6e 75 6c 6c 2c 73 68 6f 77 3a 6e 75 6c 6c 2c 73 70 69 6e 6e 65 72 3a 22 3c 65 6d 3e 4c 6f 61 64 69 6e 67 26 23 38 32 33 30 3b 3c 2f 65 6d 3e 22 2c 74 61 62 54 65 6d 70 6c 61 74 65 3a 22 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 27 23 7b 68 72 65 66 7d 27 3e 3c 73 70 61 6e 3e 23 7b 6c 61 62 65 6c 7d 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 2f 6c 69 3e 22 7d 2c 5f 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 74 61 62 69 66 79 28 74 72 75 65 29 7d 2c 5f 73 65 74 4f 70 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 65 29 7b 69 66 28 62 3d 3d 22 73 65 6c 65 63 74 65 64 22 29 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6c 6c 61 70 73 69 62 6c 65 26 26 0a 65 3d 3d 74 68 69 73 Data Ascii: v>",remove:null,select:null,show:null,spinner:"<em>Loading…</em>",tabTemplate:"<li><a href='#{href}'><span>#{label}</span></a></li>"},_create:function(){this._tabify(true)},_setOption:function(b,e){if(b=="selected")this.options.collapsible&&e==this
2024-03-18 16:21:54 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 2c 66 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 67 65 74 28 62 2c 66 29 7d 29 3b 64 2e 64 61 74 61 28 61 2c 22 64 61 74 65 70 69 63 6b 65 72 22 2c 62 29 3b 74 68 69 73 2e 5f 73 65 74 44 61 74 65 28 62 2c 74 68 69 73 2e 5f 67 65 74 44 65 66 61 75 6c 74 44 61 74 65 28 62 29 2c 0a 74 72 75 65 29 3b 74 68 69 73 2e 5f 75 70 64 61 74 65 44 61 74 65 70 69 63 6b 65 72 28 62 29 3b 74 68 69 73 2e 5f 75 70 64 61 74 65 41 6c 74 65 72 6e 61 74 65 28 62 29 3b 62 2e 64 70 44 69 76 2e 73 68 6f 77 28 29 7d 7d 2c 5f 64 69 61 6c 6f 67 44 61 74 65 70 69 63 6b 65 72 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 65 2c 66 29 7b 61 3d 74 68 69 73 2e 5f 64 69 61 6c 6f 67 49 6e 73 74 3b 69 66 28 21 61 29 7b 74 68 69 73 2e 75 75 69 64 2b 3d 31 3b Data Ascii: function(e,f){return this._get(b,f)});d.data(a,"datepicker",b);this._setDate(b,this._getDefaultDate(b),true);this._updateDatepicker(b);this._updateAlternate(b);b.dpDiv.show()}},_dialogDatepicker:function(a,b,c,e,f){a=this._dialogInst;if(!a){this.uuid+=1;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49766	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:21:53 UTC	370	OUT	GET /_img/formHeadings/hdr_MD.gif HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:21:54 UTC	313	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Thu, 22 Jul 2010 15:38:01 GMT Accept-Ranges: bytes ETag: "f4d127deb329cb1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Date: Mon, 18 Mar 2024 16:21:53 GMT Connection: close Content-Length: 2090
2024-03-18 16:21:54 UTC	2090	IN	Data Raw: 47 49 46 38 39 61 07 01 51 00 d5 00 00 98 08 26 ff ff ff 8b 07 23 89 07 22 96 08 25 94 08 25 93 08 25 91 08 24 92 08 25 96 08 26 84 07 21 81 07 20 8c 07 23 8f 08 24 8a 07 23 8e 07 23 8e 07 24 bb 0c 2c 83 07 21 8d 07 23 90 08 24 87 07 22 86 07 21 97 08 26 e4 bd c5 f1 de e2 d6 9c a8 f8 ef f1 c8 7b 8b b3 4a 60 ad 39 51 a6 29 43 ea ce d4 cf 8c 9a 9f 18 34 dd ad b7 c1 6b 7d ba 5a 6e e3 bd c5 a5 29 43 9e 18 34 dc ad b7 d5 9c a8 ac 39 51 ce 8c 9a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 07 01 51 00 40 06 ff 40 80 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 Data Ascii: GIF89aQ&#"%%%$%&! #$##$,!#$"!&{J`9Q)C4k}Zn)C49Q!,Q@@pH,rl:tJZvz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49765	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:21:53 UTC	367	OUT	GET /_img/hdr_form_iwuLogo.gif HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:21:54 UTC	313	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Thu, 18 Mar 2010 15:01:38 GMT Accept-Ranges: bytes ETag: "7e743e9abc6ca1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Date: Mon, 18 Mar 2024 16:21:53 GMT Connection: close Content-Length: 12764
2024-03-18 16:21:54 UTC	12764	IN	Data Raw: 47 49 46 38 39 61 eb 01 51 00 f7 00 00 98 08 26 89 07 26 7f 05 1b 96 08 26 ff ff ff 96 08 25 92 08 25 93 08 25 89 07 22 8b 07 23 91 08 24 94 08 25 97 08 26 8c 07 26 8a 07 26 8b 07 26 8d 07 26 82 07 20 e4 c3 ca bc 75 85 90 08 24 84 06 1d 84 06 1f e0 bb c3 a5 29 43 8e 07 26 8f 08 24 8c 07 23 9b 11 2e 8d 07 23 87 07 22 86 07 21 8a 07 23 8e 07 23 8a 06 20 81 07 20 91 24 39 bb 0c 2c 8e 07 24 85 06 1e dc b2 bb 90 07 22 88 06 1f 94 08 26 95 08 26 81 05 1c a9 31 4a 90 07 26 91 08 26 9b 29 43 ca 83 92 8f 07 26 86 06 1e 93 08 26 c4 73 84 b1 43 5a a8 0a 29 92 08 26 c0 6a 7c 8c 07 21 99 0d 2a 82 05 1c 88 12 29 f6 ea ec cd 8b 99 8a 07 24 e9 cc d2 c5 7a 8a 83 05 1d d6 a1 ac 9d 15 31 ac 55 67 95 08 25 a0 1c 38 db ab b5 9e 18 34 80 05 1b cc 99 a3 88 06 20 80 05 1c ec d5 Data Ascii: GIF89aQ&&&%%%"#$%&&&&& u$)C&$#.#"!## $9,$"&&1J&&)C&&sCZ)&j\|!*)$z1Ug%84

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49767	23.51.58.94	443

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:21:54 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-18 16:21:54 UTC	456	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 Cache-Control: public, max-age=183814 Date: Mon, 18 Mar 2024 16:21:54 GMT Content-Length: 55 Connection: close X-CID: 2
2024-03-18 16:21:54 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49768	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:21:54 UTC	596	OUT	GET /static/img/small/c.png HTTP/1.1 Host: browser-update.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:21:54 UTC	677	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:21:54 GMT Content-Type: image/png Content-Length: 787 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=c.png last-modified: Sun, 21 Mar 2021 12:19:17 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LcNDC%2BBhVeVP8Vp6QcIWvtC%2BCGhKV7kVC72cjpzR%2Fluvx5kU1P0AR3SNtFp%2FISZCPUyJ4g7fOJfrZDpTdPdpDPRXDgCrQvzWI7Zc4lTCBomUyanDNRGe4b2a1tLnWVE2WiXWXg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668ef609ff8ce8-EWR
2024-03-18 16:21:54 UTC	692	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 01 ad 50 4c 54 45 00 00 00 45 bc 4a fd d2 08 ef 68 57 ef 67 57 37 8b 40 ee 61 51 eb b8 1b 37 a9 46 39 8d 41 ec 5e 50 ec 5e 50 fc d2 09 fc d2 09 ff bd 15 7a a0 34 42 a3 45 46 aa 46 e8 b1 20 1c 88 47 40 9d 44 49 af 47 e7 b3 1e fa cf 0a ea 52 47 ff ef 01 e2 ae 23 e2 ae 22 ec bc 19 ea 51 47 ef 67 56 3d 97 42 e2 27 46 38 89 41 4c b6 48 39 90 41 ec 5b 4e c5 55 3e 37 89 41 f0 b8 15 ed 64 54 ee 63 53 e9 51 47 fd d3 09 ff d2 01 ec 5c 4f e4 2a 47 40 9d 44 3c 96 42 3e 81 b6 42 a2 44 3f 9a 44 3a 91 41 e7 47 40 f7 c7 0f 54 91 c2 44 71 be 00 4e a1 0b 5d 9a f1 8f 8b 85 c9 73 ec 5d 4f 33 ce 4e 47 ab 46 2d a4 2d 2c 9e 2b ea 77 24 ea 76 23 e9 b8 1c ea 25 1c fd d4 07 fe Data Ascii: PNGIHDR(-SPLTEEJhWgW7@aQ7F9A^P^Pz4BEFF G@DIGRG#"QGgV=B'F8ALH9A[NU>7AdTcSQG\O*G@D<B>BD?D:AG@TDqN]s]O3NGF--,+w$v#%
2024-03-18 16:21:54 UTC	95	IN	Data Raw: dc b4 c5 19 38 0c 8c f5 8b 1c 6d 12 e3 6d fa 74 b4 bb cd d8 19 18 94 4d 80 42 35 0e 65 3d 9e 9d 66 ed 32 20 a7 b2 9a 18 18 e8 67 97 ea 98 b5 b9 88 41 3c a3 c8 69 52 90 d3 d4 e5 d2 28 0d f3 ae 1a ab 30 3f 9f 90 14 3b 88 0d 00 48 2f 34 ff 10 a6 ea 05 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 8mmtMB5e=f2 gA<iR(0?;H/4IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49770	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:21:54 UTC	596	OUT	GET /_scripts/jQueryPlugins/jquery.iwu.randomHeader.js HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure2.indwes.edu/Marketing/Project-Request/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:21:54 UTC	326	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Fri, 23 Jan 2015 18:28:53 GMT Accept-Ranges: bytes ETag: "b6c1f5703a37d01:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Date: Mon, 18 Mar 2024 16:21:53 GMT Connection: close Content-Length: 1300
2024-03-18 16:21:54 UTC	1300	IN	Data Raw: 2f 2a 2a 0d 0a 2a 20 6a 51 75 65 72 79 2e 69 77 75 2e 72 61 6e 64 6f 6d 48 65 61 64 65 72 20 2d 20 52 61 6e 64 6f 6d 6c 79 20 73 65 6c 65 63 74 20 68 65 61 64 65 72 20 69 6d 61 67 65 20 62 61 73 65 64 20 6f 66 66 20 66 6f 6c 64 65 72 20 6e 61 6d 65 20 61 6e 64 20 61 70 70 65 6e 64 73 20 69 74 20 0d 0a 2a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 20 74 68 65 20 65 6c 65 6d 65 6e 74 20 74 68 61 74 20 74 68 65 20 70 6c 75 67 69 6e 20 69 73 20 72 75 6e 20 61 67 61 69 6e 73 74 2e 0d 0a 2a 20 44 61 74 65 3a 20 30 35 2f 33 31 2f 32 30 31 31 0d 0a 2a 20 40 61 75 74 68 6f 72 20 4a 6f 73 68 75 61 20 46 6c 69 63 6b 0d 0a 2a 20 40 76 65 72 73 69 6f 6e 20 31 2e 30 0d 0a 2a 0d 0a 2a 2f 0d 0a 0d 0a 28 66 75 6e 63 74 69 6f 6e Data Ascii: /*** jQuery.iwu.randomHeader - Randomly select header image based off folder name and appends it * to the element that the plugin is run against.* Date: 05/31/2011* @author Joshua Flick* @version 1.0**/(function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49769	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:21:54 UTC	626	OUT	GET /_img/footer_IWU.gif HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure2.indwes.edu/Marketing/Project-Request/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:21:54 UTC	313	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Thu, 18 Mar 2010 17:59:07 GMT Accept-Ranges: bytes ETag: "4ea03cb4c4c6ca1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Date: Mon, 18 Mar 2024 16:21:53 GMT Connection: close Content-Length: 3731
2024-03-18 16:21:54 UTC	3731	IN	Data Raw: 47 49 46 38 39 61 33 01 20 00 f7 00 00 62 64 66 e9 e9 ea e7 e8 e9 eb eb ec ed ed ee ea ea eb ec ed ed eb ec ec e3 e3 e4 e8 e9 e9 e5 e6 e6 ee ee ef e4 e4 e5 e4 e5 e6 ee ef ef e6 e6 e7 e7 e7 e8 e9 ea ea f3 f3 f3 f4 f5 f5 f2 f2 f3 f5 f5 f6 f1 f1 f2 f6 f6 f6 f7 f8 f8 f6 f7 f7 f4 f4 f5 f0 f1 f1 ef f0 f0 f7 f7 f8 f3 f4 f4 f0 f0 f0 af b0 b1 ae af b0 6c 6e 70 b0 b1 b2 7f 81 82 75 77 79 89 8a 8c 7e 80 82 89 8b 8d c3 c3 c4 76 78 79 b1 b2 b3 75 77 78 ae af b1 c3 c4 c5 6c 6d 6f cc cc cc e0 e0 e0 6b 6d 6f c5 c6 c7 6c 6e 6f c1 c2 c3 89 8b 8c de de df b1 b2 b4 a4 a5 a6 b0 b1 b3 cf d1 d1 b1 b3 b4 91 93 94 ec ec ec af b1 b2 e1 e1 e2 b9 ba bb 94 95 97 c4 c5 c6 92 94 95 cf d0 d1 dd de de 88 8a 8b 93 94 96 8a 8b 8d c2 c3 c4 9e 9f a0 ad af b0 cf d0 d0 a6 a7 a8 dc dd de 9c 9e Data Ascii: GIF89a3 bdflnpuwy~vxyuwxlmokmolno

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49771	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:21:54 UTC	364	OUT	GET /static/img/small/c.png HTTP/1.1 Host: browser-update.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:21:55 UTC	683	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:21:55 GMT Content-Type: image/png Content-Length: 787 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=c.png last-modified: Sun, 21 Mar 2021 12:19:17 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NYvCZVBTHBL2N64a1KiMkQiPLNwLa8qhdvbdz4b%2FxMEVUKgHfeAWuwFO%2Bg0KwfMLWoJ0Or%2Bj%2F0aeVznXJ4LB%2Fo5UCHLosCa1ulgZGYzAM6mnEvADIELCp5YTvrI3%2Fux5v%2BMhQg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668efa188a439d-EWR
2024-03-18 16:21:55 UTC	686	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 01 ad 50 4c 54 45 00 00 00 45 bc 4a fd d2 08 ef 68 57 ef 67 57 37 8b 40 ee 61 51 eb b8 1b 37 a9 46 39 8d 41 ec 5e 50 ec 5e 50 fc d2 09 fc d2 09 ff bd 15 7a a0 34 42 a3 45 46 aa 46 e8 b1 20 1c 88 47 40 9d 44 49 af 47 e7 b3 1e fa cf 0a ea 52 47 ff ef 01 e2 ae 23 e2 ae 22 ec bc 19 ea 51 47 ef 67 56 3d 97 42 e2 27 46 38 89 41 4c b6 48 39 90 41 ec 5b 4e c5 55 3e 37 89 41 f0 b8 15 ed 64 54 ee 63 53 e9 51 47 fd d3 09 ff d2 01 ec 5c 4f e4 2a 47 40 9d 44 3c 96 42 3e 81 b6 42 a2 44 3f 9a 44 3a 91 41 e7 47 40 f7 c7 0f 54 91 c2 44 71 be 00 4e a1 0b 5d 9a f1 8f 8b 85 c9 73 ec 5d 4f 33 ce 4e 47 ab 46 2d a4 2d 2c 9e 2b ea 77 24 ea 76 23 e9 b8 1c ea 25 1c fd d4 07 fe Data Ascii: PNGIHDR(-SPLTEEJhWgW7@aQ7F9A^P^Pz4BEFF G@DIGRG#"QGgV=B'F8ALH9A[NU>7AdTcSQG\O*G@D<B>BD?D:AG@TDqN]s]O3NGF--,+w$v#%
2024-03-18 16:21:55 UTC	101	IN	Data Raw: 2d 2c 22 d2 3c dd dc b4 c5 19 38 0c 8c f5 8b 1c 6d 12 e3 6d fa 74 b4 bb cd d8 19 18 94 4d 80 42 35 0e 65 3d 9e 9d 66 ed 32 20 a7 b2 9a 18 18 e8 67 97 ea 98 b5 b9 88 41 3c a3 c8 69 52 90 d3 d4 e5 d2 28 0d f3 ae 1a ab 30 3f 9f 90 14 3b 88 0d 00 48 2f 34 ff 10 a6 ea 05 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: -,"<8mmtMB5e=f2 gA<iR(0?;H/4IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49772	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:21:55 UTC	361	OUT	GET /_img/footer_IWU.gif HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:21:56 UTC	313	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Thu, 18 Mar 2010 17:59:07 GMT Accept-Ranges: bytes ETag: "4ea03cb4c4c6ca1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Date: Mon, 18 Mar 2024 16:21:55 GMT Connection: close Content-Length: 3731
2024-03-18 16:21:56 UTC	3731	IN	Data Raw: 47 49 46 38 39 61 33 01 20 00 f7 00 00 62 64 66 e9 e9 ea e7 e8 e9 eb eb ec ed ed ee ea ea eb ec ed ed eb ec ec e3 e3 e4 e8 e9 e9 e5 e6 e6 ee ee ef e4 e4 e5 e4 e5 e6 ee ef ef e6 e6 e7 e7 e7 e8 e9 ea ea f3 f3 f3 f4 f5 f5 f2 f2 f3 f5 f5 f6 f1 f1 f2 f6 f6 f6 f7 f8 f8 f6 f7 f7 f4 f4 f5 f0 f1 f1 ef f0 f0 f7 f7 f8 f3 f4 f4 f0 f0 f0 af b0 b1 ae af b0 6c 6e 70 b0 b1 b2 7f 81 82 75 77 79 89 8a 8c 7e 80 82 89 8b 8d c3 c3 c4 76 78 79 b1 b2 b3 75 77 78 ae af b1 c3 c4 c5 6c 6d 6f cc cc cc e0 e0 e0 6b 6d 6f c5 c6 c7 6c 6e 6f c1 c2 c3 89 8b 8c de de df b1 b2 b4 a4 a5 a6 b0 b1 b3 cf d1 d1 b1 b3 b4 91 93 94 ec ec ec af b1 b2 e1 e1 e2 b9 ba bb 94 95 97 c4 c5 c6 92 94 95 cf d0 d1 dd de de 88 8a 8b 93 94 96 8a 8b 8d c2 c3 c4 9e 9f a0 ad af b0 cf d0 d0 a6 a7 a8 dc dd de 9c 9e Data Ascii: GIF89a3 bdflnpuwy~vxyuwxlmokmolno

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49773	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:21:55 UTC	780	OUT	POST /_services/Randomizer/Randomizer.asmx/RetrieveHeaderImage HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive Content-Length: 25 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://secure2.indwes.edu Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure2.indwes.edu/Marketing/Project-Request/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:21:55 UTC	25	OUT	Data Raw: 7b 20 66 6f 6c 64 65 72 3a 20 27 67 65 6e 65 72 69 63 5f 69 77 75 27 20 7d Data Ascii: { folder: 'generic_iwu' }
2024-03-18 16:21:56 UTC	462	IN	HTTP/1.1 200 OK Cache-Control: private, max-age=0 Content-Type: application/json; charset=utf-8 Server: Microsoft-IIS/10.0 X-StackifyID: V2\|80000ca4-0801-4400-b63f-84710c7967bb\|C82847\|CD6 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, X-Requested-With Date: Mon, 18 Mar 2024 16:21:55 GMT Connection: close Content-Length: 74
2024-03-18 16:21:56 UTC	74	IN	Data Raw: 7b 22 64 22 3a 22 2f 2f 73 65 63 75 72 65 32 2e 69 6e 64 77 65 73 2e 65 64 75 2f 5f 69 6d 67 2f 68 65 61 64 65 72 49 6d 61 67 65 73 2f 67 65 6e 65 72 69 63 5f 69 77 75 2f 67 65 6e 65 72 69 63 5f 69 77 75 2e 6a 70 67 22 7d Data Ascii: {"d":"//secure2.indwes.edu/_img/headerImages/generic_iwu/generic_iwu.jpg"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49777	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:21:56 UTC	652	OUT	GET /_img/headerImages/generic_iwu/generic_iwu.jpg HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure2.indwes.edu/Marketing/Project-Request/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:21:56 UTC	315	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 02 Dec 2010 18:23:53 GMT Accept-Ranges: bytes ETag: "802c2124e92cb1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Date: Mon, 18 Mar 2024 16:21:55 GMT Connection: close Content-Length: 160795
2024-03-18 16:21:56 UTC	16069	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff e1 0c 12 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 34 20 4d 61 63 69 6e 74 6f 73 68 00 32 30 31 30 3a 31 32 3a 30 32 20 31 33 3a 32 33 3a 35 31 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 03 c0 a0 03 00 04 00 00 00 01 00 00 00 7b 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 Data Ascii: JFIFHHExifMM*bj(1r2i''Adobe Photoshop CS4 Macintosh2010:12:02 13:23:51{
2024-03-18 16:21:56 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 77 22 3f 3e ff ee 00 0e 41 64 6f 62 65 00 64 40 00 00 00 01 ff db 00 84 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 02 02 02 02 02 02 02 02 02 02 02 03 03 03 03 03 03 03 03 03 03 01 01 Data Ascii: <?xpacket end="w"?>Adobed@
2024-03-18 16:21:57 UTC	16384	IN	Data Raw: 12 b7 2d bf 6a 69 72 50 e2 36 cd 06 2e 6a 7c 74 79 1f b4 78 27 fe 29 36 8a 4a 6a aa 84 8c 16 70 cf ec 47 1c 16 db dc 57 cd cc f7 1b 55 9f 34 46 61 bc 16 96 f5 73 3c 8d 53 40 ca a5 62 48 e3 91 92 64 76 52 81 08 a5 71 d2 7b ab 9b b6 b6 b1 8f 6b 82 f2 ea cc 83 0a c9 2b e9 58 63 8e 9a cb 2b 55 fb d9 41 46 0a 4b d6 a6 9d 10 fc be 2f 6d ee 8c 2e d8 c9 36 3a 5a 8e c3 68 ab e7 dc b8 4c da 65 29 31 b9 0c 3a d7 0a e7 7a 5c 86 2a 4c 85 65 2e 73 2d 33 9a 1f bb aa 92 0a 05 2e a6 1d 66 61 a0 f6 d2 cf 74 da 5e ff 00 c7 4a 72 f4 69 16 87 8f b9 d1 8d 54 12 18 69 f0 c9 21 97 1a ab c7 e1 ea d2 b6 d1 3c 71 3a c2 4e ea 54 f8 8a d8 52 14 6a 6d 39 c3 fa 93 82 38 67 a5 77 5c fc 89 ec 4d 8b 5d 4b 88 9a bf 1f 36 d5 c3 ec ad e1 b3 28 b0 c6 4f b7 8f 10 9b 8a 82 a2 a6 97 21 91 6a 2c Data Ascii: -jirP6.j\|tyx')6JjpGWU4Fas<S@bHdvRq{k+Xc+UAFK/m.6:ZhLe)1:z\*Le.s-3.fat^JriTi!<q:NTRjm98gw\M]K6(O!j,
2024-03-18 16:21:57 UTC	16384	IN	Data Raw: 23 e7 d0 0d f0 9b 67 fc 74 ff 00 64 6f 6c 77 6d 47 74 6e 0d 8f de b8 6f 82 9f 26 76 16 7b a9 a6 ad 83 1d b1 fb 43 01 ba e8 7b 26 a3 6d ee 0c 94 f9 3a 59 29 ab b3 fb 76 1a 31 4d 4b 05 15 4c 0c 6f 69 12 46 20 91 5d e6 e1 b6 c7 76 b6 12 dc 95 bf 55 1d 9e b5 cd 75 74 10 b1 da a6 8f 69 8e 78 8f 89 4d 5f 2c d4 fa 7c ba 3a 1d 4b ba a9 7b 2f 6e 7c 13 da 5f 25 3a c5 ba fb 62 d4 fc 68 f9 05 d2 fb 32 bf 74 d5 53 41 84 ed fd 99 b9 3a 57 a2 a9 f6 4e e7 c5 49 41 91 9e b2 92 9f 71 e6 32 2d 44 9e 6f b4 98 d4 c5 c2 28 f7 5b b8 83 b5 b0 bd 5a 52 36 d3 a7 34 c1 a6 7e df 3e ad 05 c1 f0 e2 59 63 01 b1 5f db 9e 3f 2e aa 0b e4 af c5 ac 97 50 6d fe 98 df 9b 5f 05 80 c3 f5 fd 0f 42 74 3d 4c b5 3b 6b 19 35 1a c7 1e f3 c5 67 77 ce e8 cb 76 1e 5b 2d 9c 96 4a 8d df 90 ae d9 d5 42 92 Data Ascii: #gtdolwmGtno&v{C{&m:Y)v1MKLoiF ]vUutixM_,\|:K{/n\|_%:bh2tSA:WNIAq2-Do([ZR64~>Yc_?.Pm_Bt=L;k5gwv[-JB
2024-03-18 16:21:57 UTC	16384	IN	Data Raw: 21 43 d2 4e 62 dc ee b7 2d aa f2 2b 9d af 53 ac 25 51 46 40 27 e5 e6 73 c7 ad 91 70 9b af 62 ee a5 12 6c ed df b4 37 3c 2e 49 83 fb bb b9 30 f9 42 23 bd e3 d3 0d 15 64 b3 2d d2 df 55 bf b9 ae 2b 93 28 d5 1d 0a 7c a9 d6 3f cb 6f 71 6a 44 77 10 34 6d 4e 04 53 ac b9 ec 54 bf 66 63 96 19 94 54 cb 4b 4a 9a 91 91 59 aa eb 21 8b 96 20 7d 11 c9 e7 f1 ed 42 dd 28 6a 29 f2 e9 3b 20 93 06 30 7f 65 3a 99 92 c6 d3 57 2b d3 d6 c1 05 6d 20 d6 cb 4f 90 a5 a7 af 84 c4 4d 81 78 aa e2 96 22 3f d8 0f 6e 09 16 9c 71 d6 fc 37 c9 50 c1 47 98 34 e8 ab 7c 91 d8 1b 0f 03 d3 1d 97 b8 e8 76 9e 1a 83 2f 16 da 96 8f 1d 59 89 81 f0 b3 8c 9e 62 ba 8b 19 47 ad 71 72 d2 45 32 34 d5 63 52 32 32 48 38 20 8f 69 af e7 8e 2b 0b c9 88 c8 8c d3 a3 be 5e 86 5b 9d df 6b b6 2e 42 19 d4 9a e4 d0 1c Data Ascii: !CNb-+S%QF@'spbl7<.I0B#d-U+(\|?oqjDw4mNSTfcTKJY! }B(j); 0e:W+m OMx"?nq7PG4\|v/YbGqrE24cR22H8 i+^[k.B
2024-03-18 16:21:57 UTC	16384	IN	Data Raw: a9 66 99 f8 04 14 2d ea 41 cb 90 33 53 ab ed c5 7a 22 3f 33 bf 9b bf 7a f5 86 fa eb ce ad ea bf 8c f9 ea ac 8f 73 d4 6d 68 7a 33 b0 7b f7 2b 94 eb fe b3 ec b8 37 88 d9 70 61 b3 3b 73 69 ed e8 71 f9 fa 6c 45 1d 66 fe a2 8a ba 2c ad 4c 13 d2 54 83 0c b1 87 0c 05 26 8e 64 12 4a e8 cd 12 95 14 a1 04 86 c0 2a 4e 08 ff 00 00 f9 f5 b1 10 59 61 b6 47 89 03 96 ee 14 62 34 f1 0c 07 70 3f 9e 4f 4d 09 b8 7f 9a cf c7 ff 00 e6 0f f0 67 64 7c ab ed de a2 ad ea 6f 90 9b df 23 8b 93 65 74 4e d8 c7 62 36 43 cf 8a c4 d4 47 9d d9 7b 8e a3 3b 81 3b a3 2d 5d 8a 82 ba 92 b2 9e a5 ea 64 59 81 70 ae 19 48 f6 ae 48 9e d9 ac 62 31 20 77 9c 21 d2 da b1 5c d7 18 3e a3 aa 09 22 99 2e da 0b 86 68 44 2c 6a 54 a1 0c 01 22 94 2c 28 7e 64 13 c3 a0 e7 1b bd 3a 13 7f 7f c2 86 fb ea 8b e7 3d Data Ascii: f-A3Sz"?3zsmhz3{+7pa;siqlEf,LT&dJ*NYaGb4p?OMgd\|o#etNb6CG{;;-]dYpHHb1 w!\>".hD,jT",(~d:=
2024-03-18 16:21:57 UTC	16384	IN	Data Raw: 4e 7d a9 78 75 20 ef 53 e9 4e 9a 1a c1 a6 83 4f 99 eb bc b7 66 47 80 85 21 c6 20 96 b6 fe 3a 48 20 67 56 0d 61 6b 04 1a 55 45 b9 fa 7b f4 50 dc a6 2a 16 be bf ec 75 e0 b1 ff 00 a2 ad 49 ea 1e df 9a ae ab 2f 4b bc 77 96 45 f2 b9 8a 42 65 c4 d3 55 13 53 4b 87 56 0a c0 51 d2 ca 1e 24 94 10 2e ff 00 52 df 9f 74 54 70 e5 e6 21 88 e1 e9 d5 25 45 2a 56 11 a6 bc 7e 63 fe 2b a2 57 fc e0 bb 6b 29 37 f2 e1 f9 4f 4d 4a f1 24 32 ec 5c 7d 3d 45 41 8b 4c 86 2a 9d d1 81 85 d3 fa 25 c3 5a e3 93 ef d3 4f 34 a8 63 63 86 3d 5e c8 47 6c f3 5c 14 3d b1 b8 ff 00 7a 52 bf e5 eb e5 fb 59 91 89 b0 5b 00 6a 91 c4 78 7d cf 1f 22 dc ff 00 7a 6b 9b 8e 01 b5 9b d9 f2 46 1e 28 fc 2c 00 00 35 f5 ea 1c 7a c5 e1 c4 45 4c 40 a1 f9 9d 47 ad af ff 00 97 4e 7b 0d 45 ff 00 09 ed fe 60 2a d2 9f Data Ascii: N}xu SNOfG! :H gVakUE{PuI/KwEBeUSKVQ$.RtTp!%EV~c+Wk)7OMJ$2\}=EAL%ZO4cc=^Gl\=zRY[jx}"zkF(,5zEL@GN{E`
2024-03-18 16:21:57 UTC	16384	IN	Data Raw: e8 18 79 aa 29 e4 1f 72 f6 62 18 6a b3 7f af ef 69 5b bb 64 66 8d 5a 12 3b 6b eb 5e 20 f1 e3 ea 7a 6e 48 56 d2 e9 d4 3b 2b 03 fe 9a 9e be a3 a3 2b 2f 64 ec 0d cd d1 9b 87 6a e5 71 bb 65 33 b8 8d b9 86 83 6c 65 4e 21 f0 fb 8a 6d c3 26 6a 94 56 ac d9 55 33 ae 4e 8e 9f 1e d2 37 8c f8 d4 82 5b 92 3d 98 6d ff 00 bb 6d 52 e6 d9 ed 90 5d 32 55 58 82 cd aa b9 ee f2 14 a8 cf 97 cf a2 39 13 72 fa e5 98 4a ed 67 fa 85 c0 20 2d 3f 05 57 cc 9f 21 eb f6 74 7e bf 95 ae d4 ca 53 7c bf eb a6 ab a7 86 4a 2c 76 c4 df 35 70 e5 68 6a a9 ab 71 13 4a 36 f2 d3 40 90 57 c3 2b 2f 9a 51 51 65 89 82 bb 10 78 e2 de c7 9c ae 8f 0e f1 6c ce 41 40 9c 47 d9 d0 13 dc ab 88 25 e5 db 18 a1 2d ac 5e 44 59 68 43 01 46 ce 7c ab eb e7 d7 d0 87 b7 42 af 70 76 bb 5c 0b 76 4e fa 2a 6c 79 d5 ba 72 Data Ascii: y)rbji[dfZ;k^ znHV;++/djqe3leN!m&jVU3N7[=mmR]2UX9rJg -?W!t~S\|J,v5phjqJ6@W+/QQexlA@G%-^DYhCF\|Bpv\vN*lyr
2024-03-18 16:21:57 UTC	315	IN	Data Raw: 8b 0f 79 01 71 77 14 08 fa 0f 01 d4 3d 65 b5 3c cf 0b cb 88 cd 0d 09 14 e0 3c fa 36 f8 3e 92 dd 49 b5 3f 8f 3e 1a 1c 2e 2f c4 1c 66 b3 d3 47 8b c7 e8 28 5b f6 da a3 fc a2 43 65 24 68 43 7f c7 b0 24 db 87 d4 5f 04 79 09 a9 e1 d4 83 1c db 75 8d a8 8e 01 e2 4e 07 04 04 e4 7a 9e 03 a2 fb 98 7d b9 02 2d 0d 4e 4a 5c e3 51 d5 d5 cd 1b 63 22 7a 7a 67 f3 e8 12 45 f7 35 2d a8 c4 1d 6e 0a 8d 46 df 8b fb 1c db d1 11 2a b8 a0 ea 37 ba 6b a9 ee a7 74 55 4d 4d 9a e4 f5 ff d3 1d f0 54 d4 73 31 13 c9 10 6a 52 24 50 a3 4c 29 1b dc 88 8a 90 c1 a4 6f cd bf af b8 ee d1 03 67 45 7f 2e 86 77 24 01 40 3b ba 01 3e 6b ee 8a 0c 27 c5 9e c5 46 dd 55 1b 1e a3 75 d4 61 76 5e 37 76 50 43 95 9a af 13 51 91 ca 41 59 23 40 f8 4c 76 4f 21 4a 92 51 50 ba 49 38 81 92 24 24 b1 03 da dd f2 e4 Data Ascii: yqw=e<<6>I?>./fG([Ce$hC$_yuNz}-NJ\Qc"zzgE5-nF*7ktUMMTs1jR$PL)ogE.w$@;>k'FUuav^7vPCQAY#@LvO!JQPI8$$
2024-03-18 16:21:57 UTC	16384	IN	Data Raw: fa bf 26 d3 dc 78 3d c3 3e 2b 19 54 23 49 e0 a7 34 78 ac 7e 42 1a f2 ec 56 4a 7a ca 66 46 a5 46 d7 a5 b4 fb c7 7d 92 3d aa 3b f9 95 ed 3f 71 5c c1 20 15 95 5e 38 a5 60 2b 5e f6 20 a7 9e a5 22 ad 5a 54 67 af 5d 5b bc b6 8d a5 d6 e6 d5 0d 41 56 0c c4 56 80 0a 64 d7 8f 40 86 f6 ea 7e c6 11 4d 9d 93 67 e2 3a ff 00 05 4b 57 8f 79 71 f9 da 68 f0 59 3c 0e 16 9a 48 25 83 17 9b cc ff 00 14 97 10 b9 65 92 73 34 54 b5 54 49 1c b1 10 34 9d 3e c4 db 77 30 ec 85 cd ac 1b ac 9b 85 c1 56 25 d0 ea 57 7c ea f0 e1 d0 1b 48 18 d4 ae 0f 98 27 a2 7b cd a6 f4 2a ba ed c2 04 55 0c 6a 4a 9a 7f 4a ad e7 f6 74 1a 6e ec 9c 98 0a ba 9d bb 9a 8b 0d 9b 8f 24 67 fe 11 9f c6 64 27 cf 22 53 d7 c7 1b 36 3e ac 9a 1c 6e 27 1b 2c 72 46 3c 52 2c 32 23 92 44 6b fd 0e 76 e8 ed b7 6b 78 ee 6d 62 Data Ascii: &x=>+T#I4x~BVJzfFF}=;?q\ ^8`+^ "ZTg][AVVd@~Mg:KWyqhY<H%es4TTI4>w0V%W\|H'{*UjJJtn$gd'"S6>n',rF<R,2#Dkvkxmb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49778	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:21:56 UTC	398	OUT	GET /_services/Randomizer/Randomizer.asmx/RetrieveHeaderImage HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:21:56 UTC	319	IN	HTTP/1.1 400 Bad Request Content-Type: text/html Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, X-Requested-With Date: Mon, 18 Mar 2024 16:21:55 GMT Connection: close Content-Length: 11
2024-03-18 16:21:56 UTC	11	IN	Data Raw: 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49779	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:21:57 UTC	387	OUT	GET /_img/headerImages/generic_iwu/generic_iwu.jpg HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:21:57 UTC	315	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 02 Dec 2010 18:23:53 GMT Accept-Ranges: bytes ETag: "802c2124e92cb1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Date: Mon, 18 Mar 2024 16:21:57 GMT Connection: close Content-Length: 160795
2024-03-18 16:21:57 UTC	16069	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff e1 0c 12 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 34 20 4d 61 63 69 6e 74 6f 73 68 00 32 30 31 30 3a 31 32 3a 30 32 20 31 33 3a 32 33 3a 35 31 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 03 c0 a0 03 00 04 00 00 00 01 00 00 00 7b 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 Data Ascii: JFIFHHExifMM*bj(1r2i''Adobe Photoshop CS4 Macintosh2010:12:02 13:23:51{
2024-03-18 16:21:57 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 77 22 3f 3e ff ee 00 0e 41 64 6f 62 65 00 64 40 00 00 00 01 ff db 00 84 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 02 02 02 02 02 02 02 02 02 02 02 03 03 03 03 03 03 03 03 03 03 01 01 Data Ascii: <?xpacket end="w"?>Adobed@
2024-03-18 16:21:57 UTC	16384	IN	Data Raw: 12 b7 2d bf 6a 69 72 50 e2 36 cd 06 2e 6a 7c 74 79 1f b4 78 27 fe 29 36 8a 4a 6a aa 84 8c 16 70 cf ec 47 1c 16 db dc 57 cd cc f7 1b 55 9f 34 46 61 bc 16 96 f5 73 3c 8d 53 40 ca a5 62 48 e3 91 92 64 76 52 81 08 a5 71 d2 7b ab 9b b6 b6 b1 8f 6b 82 f2 ea cc 83 0a c9 2b e9 58 63 8e 9a cb 2b 55 fb d9 41 46 0a 4b d6 a6 9d 10 fc be 2f 6d ee 8c 2e d8 c9 36 3a 5a 8e c3 68 ab e7 dc b8 4c da 65 29 31 b9 0c 3a d7 0a e7 7a 5c 86 2a 4c 85 65 2e 73 2d 33 9a 1f bb aa 92 0a 05 2e a6 1d 66 61 a0 f6 d2 cf 74 da 5e ff 00 c7 4a 72 f4 69 16 87 8f b9 d1 8d 54 12 18 69 f0 c9 21 97 1a ab c7 e1 ea d2 b6 d1 3c 71 3a c2 4e ea 54 f8 8a d8 52 14 6a 6d 39 c3 fa 93 82 38 67 a5 77 5c fc 89 ec 4d 8b 5d 4b 88 9a bf 1f 36 d5 c3 ec ad e1 b3 28 b0 c6 4f b7 8f 10 9b 8a 82 a2 a6 97 21 91 6a 2c Data Ascii: -jirP6.j\|tyx')6JjpGWU4Fas<S@bHdvRq{k+Xc+UAFK/m.6:ZhLe)1:z\*Le.s-3.fat^JriTi!<q:NTRjm98gw\M]K6(O!j,
2024-03-18 16:21:57 UTC	16384	IN	Data Raw: 23 e7 d0 0d f0 9b 67 fc 74 ff 00 64 6f 6c 77 6d 47 74 6e 0d 8f de b8 6f 82 9f 26 76 16 7b a9 a6 ad 83 1d b1 fb 43 01 ba e8 7b 26 a3 6d ee 0c 94 f9 3a 59 29 ab b3 fb 76 1a 31 4d 4b 05 15 4c 0c 6f 69 12 46 20 91 5d e6 e1 b6 c7 76 b6 12 dc 95 bf 55 1d 9e b5 cd 75 74 10 b1 da a6 8f 69 8e 78 8f 89 4d 5f 2c d4 fa 7c ba 3a 1d 4b ba a9 7b 2f 6e 7c 13 da 5f 25 3a c5 ba fb 62 d4 fc 68 f9 05 d2 fb 32 bf 74 d5 53 41 84 ed fd 99 b9 3a 57 a2 a9 f6 4e e7 c5 49 41 91 9e b2 92 9f 71 e6 32 2d 44 9e 6f b4 98 d4 c5 c2 28 f7 5b b8 83 b5 b0 bd 5a 52 36 d3 a7 34 c1 a6 7e df 3e ad 05 c1 f0 e2 59 63 01 b1 5f db 9e 3f 2e aa 0b e4 af c5 ac 97 50 6d fe 98 df 9b 5f 05 80 c3 f5 fd 0f 42 74 3d 4c b5 3b 6b 19 35 1a c7 1e f3 c5 67 77 ce e8 cb 76 1e 5b 2d 9c 96 4a 8d df 90 ae d9 d5 42 92 Data Ascii: #gtdolwmGtno&v{C{&m:Y)v1MKLoiF ]vUutixM_,\|:K{/n\|_%:bh2tSA:WNIAq2-Do([ZR64~>Yc_?.Pm_Bt=L;k5gwv[-JB
2024-03-18 16:21:57 UTC	16384	IN	Data Raw: 21 43 d2 4e 62 dc ee b7 2d aa f2 2b 9d af 53 ac 25 51 46 40 27 e5 e6 73 c7 ad 91 70 9b af 62 ee a5 12 6c ed df b4 37 3c 2e 49 83 fb bb b9 30 f9 42 23 bd e3 d3 0d 15 64 b3 2d d2 df 55 bf b9 ae 2b 93 28 d5 1d 0a 7c a9 d6 3f cb 6f 71 6a 44 77 10 34 6d 4e 04 53 ac b9 ec 54 bf 66 63 96 19 94 54 cb 4b 4a 9a 91 91 59 aa eb 21 8b 96 20 7d 11 c9 e7 f1 ed 42 dd 28 6a 29 f2 e9 3b 20 93 06 30 7f 65 3a 99 92 c6 d3 57 2b d3 d6 c1 05 6d 20 d6 cb 4f 90 a5 a7 af 84 c4 4d 81 78 aa e2 96 22 3f d8 0f 6e 09 16 9c 71 d6 fc 37 c9 50 c1 47 98 34 e8 ab 7c 91 d8 1b 0f 03 d3 1d 97 b8 e8 76 9e 1a 83 2f 16 da 96 8f 1d 59 89 81 f0 b3 8c 9e 62 ba 8b 19 47 ad 71 72 d2 45 32 34 d5 63 52 32 32 48 38 20 8f 69 af e7 8e 2b 0b c9 88 c8 8c d3 a3 be 5e 86 5b 9d df 6b b6 2e 42 19 d4 9a e4 d0 1c Data Ascii: !CNb-+S%QF@'spbl7<.I0B#d-U+(\|?oqjDw4mNSTfcTKJY! }B(j); 0e:W+m OMx"?nq7PG4\|v/YbGqrE24cR22H8 i+^[k.B
2024-03-18 16:21:58 UTC	16384	IN	Data Raw: a9 66 99 f8 04 14 2d ea 41 cb 90 33 53 ab ed c5 7a 22 3f 33 bf 9b bf 7a f5 86 fa eb ce ad ea bf 8c f9 ea ac 8f 73 d4 6d 68 7a 33 b0 7b f7 2b 94 eb fe b3 ec b8 37 88 d9 70 61 b3 3b 73 69 ed e8 71 f9 fa 6c 45 1d 66 fe a2 8a ba 2c ad 4c 13 d2 54 83 0c b1 87 0c 05 26 8e 64 12 4a e8 cd 12 95 14 a1 04 86 c0 2a 4e 08 ff 00 00 f9 f5 b1 10 59 61 b6 47 89 03 96 ee 14 62 34 f1 0c 07 70 3f 9e 4f 4d 09 b8 7f 9a cf c7 ff 00 e6 0f f0 67 64 7c ab ed de a2 ad ea 6f 90 9b df 23 8b 93 65 74 4e d8 c7 62 36 43 cf 8a c4 d4 47 9d d9 7b 8e a3 3b 81 3b a3 2d 5d 8a 82 ba 92 b2 9e a5 ea 64 59 81 70 ae 19 48 f6 ae 48 9e d9 ac 62 31 20 77 9c 21 d2 da b1 5c d7 18 3e a3 aa 09 22 99 2e da 0b 86 68 44 2c 6a 54 a1 0c 01 22 94 2c 28 7e 64 13 c3 a0 e7 1b bd 3a 13 7f 7f c2 86 fb ea 8b e7 3d Data Ascii: f-A3Sz"?3zsmhz3{+7pa;siqlEf,LT&dJ*NYaGb4p?OMgd\|o#etNb6CG{;;-]dYpHHb1 w!\>".hD,jT",(~d:=
2024-03-18 16:21:58 UTC	16384	IN	Data Raw: 4e 7d a9 78 75 20 ef 53 e9 4e 9a 1a c1 a6 83 4f 99 eb bc b7 66 47 80 85 21 c6 20 96 b6 fe 3a 48 20 67 56 0d 61 6b 04 1a 55 45 b9 fa 7b f4 50 dc a6 2a 16 be bf ec 75 e0 b1 ff 00 a2 ad 49 ea 1e df 9a ae ab 2f 4b bc 77 96 45 f2 b9 8a 42 65 c4 d3 55 13 53 4b 87 56 0a c0 51 d2 ca 1e 24 94 10 2e ff 00 52 df 9f 74 54 70 e5 e6 21 88 e1 e9 d5 25 45 2a 56 11 a6 bc 7e 63 fe 2b a2 57 fc e0 bb 6b 29 37 f2 e1 f9 4f 4d 4a f1 24 32 ec 5c 7d 3d 45 41 8b 4c 86 2a 9d d1 81 85 d3 fa 25 c3 5a e3 93 ef d3 4f 34 a8 63 63 86 3d 5e c8 47 6c f3 5c 14 3d b1 b8 ff 00 7a 52 bf e5 eb e5 fb 59 91 89 b0 5b 00 6a 91 c4 78 7d cf 1f 22 dc ff 00 7a 6b 9b 8e 01 b5 9b d9 f2 46 1e 28 fc 2c 00 00 35 f5 ea 1c 7a c5 e1 c4 45 4c 40 a1 f9 9d 47 ad af ff 00 97 4e 7b 0d 45 ff 00 09 ed fe 60 2a d2 9f Data Ascii: N}xu SNOfG! :H gVakUE{PuI/KwEBeUSKVQ$.RtTp!%EV~c+Wk)7OMJ$2\}=EAL%ZO4cc=^Gl\=zRY[jx}"zkF(,5zEL@GN{E`
2024-03-18 16:21:58 UTC	16384	IN	Data Raw: e8 18 79 aa 29 e4 1f 72 f6 62 18 6a b3 7f af ef 69 5b bb 64 66 8d 5a 12 3b 6b eb 5e 20 f1 e3 ea 7a 6e 48 56 d2 e9 d4 3b 2b 03 fe 9a 9e be a3 a3 2b 2f 64 ec 0d cd d1 9b 87 6a e5 71 bb 65 33 b8 8d b9 86 83 6c 65 4e 21 f0 fb 8a 6d c3 26 6a 94 56 ac d9 55 33 ae 4e 8e 9f 1e d2 37 8c f8 d4 82 5b 92 3d 98 6d ff 00 bb 6d 52 e6 d9 ed 90 5d 32 55 58 82 cd aa b9 ee f2 14 a8 cf 97 cf a2 39 13 72 fa e5 98 4a ed 67 fa 85 c0 20 2d 3f 05 57 cc 9f 21 eb f6 74 7e bf 95 ae d4 ca 53 7c bf eb a6 ab a7 86 4a 2c 76 c4 df 35 70 e5 68 6a a9 ab 71 13 4a 36 f2 d3 40 90 57 c3 2b 2f 9a 51 51 65 89 82 bb 10 78 e2 de c7 9c ae 8f 0e f1 6c ce 41 40 9c 47 d9 d0 13 dc ab 88 25 e5 db 18 a1 2d ac 5e 44 59 68 43 01 46 ce 7c ab eb e7 d7 d0 87 b7 42 af 70 76 bb 5c 0b 76 4e fa 2a 6c 79 d5 ba 72 Data Ascii: y)rbji[dfZ;k^ znHV;++/djqe3leN!m&jVU3N7[=mmR]2UX9rJg -?W!t~S\|J,v5phjqJ6@W+/QQexlA@G%-^DYhCF\|Bpv\vN*lyr
2024-03-18 16:21:58 UTC	16384	IN	Data Raw: 8b 0f 79 01 71 77 14 08 fa 0f 01 d4 3d 65 b5 3c cf 0b cb 88 cd 0d 09 14 e0 3c fa 36 f8 3e 92 dd 49 b5 3f 8f 3e 1a 1c 2e 2f c4 1c 66 b3 d3 47 8b c7 e8 28 5b f6 da a3 fc a2 43 65 24 68 43 7f c7 b0 24 db 87 d4 5f 04 79 09 a9 e1 d4 83 1c db 75 8d a8 8e 01 e2 4e 07 04 04 e4 7a 9e 03 a2 fb 98 7d b9 02 2d 0d 4e 4a 5c e3 51 d5 d5 cd 1b 63 22 7a 7a 67 f3 e8 12 45 f7 35 2d a8 c4 1d 6e 0a 8d 46 df 8b fb 1c db d1 11 2a b8 a0 ea 37 ba 6b a9 ee a7 74 55 4d 4d 9a e4 f5 ff d3 1d f0 54 d4 73 31 13 c9 10 6a 52 24 50 a3 4c 29 1b dc 88 8a 90 c1 a4 6f cd bf af b8 ee d1 03 67 45 7f 2e 86 77 24 01 40 3b ba 01 3e 6b ee 8a 0c 27 c5 9e c5 46 dd 55 1b 1e a3 75 d4 61 76 5e 37 76 50 43 95 9a af 13 51 91 ca 41 59 23 40 f8 4c 76 4f 21 4a 92 51 50 ba 49 38 81 92 24 24 b1 03 da dd f2 e4 Data Ascii: yqw=e<<6>I?>./fG([Ce$hC$_yuNz}-NJ\Qc"zzgE5-nF*7ktUMMTs1jR$PL)ogE.w$@;>k'FUuav^7vPCQAY#@LvO!JQPI8$$
2024-03-18 16:21:58 UTC	13654	IN	Data Raw: 18 a7 12 50 e4 37 96 f5 c9 e3 e4 92 91 9e 59 e2 99 28 a8 54 91 a8 aa f9 2d 73 c1 f7 93 5b 4c 32 c7 3c c6 45 a1 16 88 a4 0f 52 c0 fe cc 1f ce 9d 61 7f 31 ca cd cb f1 bc d8 9a 4d c6 46 23 fd 2c 74 ff 00 9f 80 eb 77 ab ff 00 5b 8f f5 fd 9d 7e 7d 47 a2 a7 82 9e b1 35 4c 11 fe a9 50 58 0b 8d 40 9f a0 fa 00 49 f7 a7 74 04 1d 58 e9 d5 86 56 38 8c d3 ac 32 e4 69 94 5b 51 6b 9b 70 b6 17 bd 80 bb 15 00 df fa f1 ef c6 e6 31 4e 3d 3c b6 b3 37 e1 a7 50 db 2a 9c 08 e3 d5 7f a1 2d 60 78 27 e8 a1 cd fd b4 d7 42 bd a9 d3 a2 c4 8c c9 20 1f 60 ff 00 2e 3a c4 72 15 2e c0 47 0d 89 b9 1a 63 67 6b df 8b 92 dc 5e ff 00 5b 7b 6c dc cb c0 00 09 e9 d1 69 00 a9 67 a8 fb 69 d2 5f 73 6f bd b3 b3 68 67 c9 ef 6d e1 b6 36 7e 3e 9e 16 a9 9e b3 74 ee 4c 36 db a4 82 9e 32 04 95 13 cf 97 ab Data Ascii: P7Y(T-s[L2<ERa1MF#,tw[~}G5LPX@ItXV82i[Qkp1N=<7P*-`x'B `.:r.Gcgk^[{ligi_sohgm6~>tL62

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49780	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:03 UTC	660	OUT	GET /update-browser.html HTTP/1.1 Host: browser-update.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:03 UTC	725	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:03 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close set-cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; HttpOnly; Path=/ vary: Cookie CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KBXZ0zs0QNJU8eJRzWeTc25tBmQnY%2FV%2FqC%2Bm98ZV2bXRsdjOZIg3hB5ta%2FGO1s0X44fYCLIJe3VpLeEg%2FhgZ65%2FurS0MRIxfS5zoHybS%2BGt1386nghUL1wvP9Mh0%2FUakErLXKg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f303efd42f8-EWR
2024-03-18 16:22:03 UTC	644	IN	Data Raw: 39 35 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 55 70 64 61 74 65 20 79 6f 75 72 20 42 72 6f 77 73 65 72 20 2d 20 42 72 6f 77 73 65 72 2d 55 70 64 61 74 65 2e 6f 72 67 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 62 72 6f 77 73 65 72 2c 20 77 65 62 62 72 6f 77 Data Ascii: 95e<!DOCTYPE html ><html lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><title>Update your Browser - Browser-Update.org</title><meta name="description" content /><meta name="keywords" content="browser, webbrow
2024-03-18 16:22:03 UTC	1369	IN	Data Raw: 74 61 74 69 63 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 70 6e 67 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 73 74 61 74 69 63 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 70 6e 67 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 64 65 78 2c 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 66 75 73 65 70 6c 61 74 66 6f 72 6d 2e 6e 65 74 2f 70 75 62 6c 69 66 74 2f 74 61 67 73 2f 32 2f 32 37 38 39 2f 66 75 73 65 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 Data Ascii: tatic/img/favicon.png" type="image/png" /><link rel="icon" href="/static/img/favicon.png" type="image/png" /><meta name="robots" content="index,follow" /><script async src="https://cdn.fuseplatform.net/publift/tags/2/2789/fuse.js"></script><link rel="
2024-03-18 16:22:03 UTC	392	IN	Data Raw: 97 d0 bd d1 81 d1 8c d0 ba d0 b0 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 72 6d 2f 22 3e 72 75 6d 61 6e 74 73 63 68 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 64 61 2f 22 3e 64 61 6e 73 6b 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 73 71 2f 22 3e 73 68 71 69 70 65 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 63 61 2f 22 3e 63 61 74 61 6c c3 a0 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 73 76 2f 22 3e 73 76 65 6e 73 6b 61 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 68 75 2f 22 3e 6d 61 67 79 61 72 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 66 61 2f 22 3e d9 81 d8 a7 d8 b1 d8 b3 db 8c 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 67 6c 2f 22 3e 67 61 6c 65 67 6f 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 68 65 2f 22 3e d7 a2 d7 91 d7 a8 d7 99 Data Ascii: </a><a href="/rm/">rumantsch</a><a href="/da/">dansk</a><a href="/sq/">shqipe</a><a href="/ca/">catal</a><a href="/sv/">svenska</a><a href="/hu/">magyar</a><a href="/fa/"></a><a href="/gl/">galego</a><a href="/he/">
2024-03-18 16:22:03 UTC	1369	IN	Data Raw: 36 39 61 0d 0a 0a 3c 61 20 68 72 65 66 3d 22 2f 66 69 2f 22 3e 73 75 6f 6d 69 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 74 72 2f 22 3e 54 c3 bc 72 6b c3 a7 65 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 72 6f 2f 22 3e 52 6f 6d c3 a2 6e c4 83 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 68 72 2f 22 3e 68 72 76 61 74 73 6b 69 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 62 67 2f 22 3e d0 b1 d1 8a d0 bb d0 b3 d0 b0 d1 80 d1 81 d0 ba d0 b8 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 65 6c 2f 22 3e ce 95 ce bb ce bb ce b7 ce bd ce b9 ce ba ce ac 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 61 72 2f 22 3e d8 a7 d9 84 d8 b9 d8 b1 d8 a8 d9 8a d8 a9 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 73 72 2f 22 3e 53 72 70 73 6b 69 3c 2f 61 3e 0a 3c 61 20 68 72 65 Data Ascii: 69a<a href="/fi/">suomi</a><a href="/tr/">Trke</a><a href="/ro/">Romn</a><a href="/hr/">hrvatski</a><a href="/bg/"></a><a href="/el/"></a><a href="/ar/"></a><a href="/sr/">Srpski</a><a hre
2024-03-18 16:22:03 UTC	328	IN	Data Raw: 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 66 69 72 65 66 6f 78 2f 6e 65 77 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 2f 73 74 61 74 69 63 2f 69 6d 67 2f 62 69 67 2f 66 2e 70 6e 67 29 22 20 74 69 74 6c 65 3d 22 44 6f 77 6e 6c 6f 61 64 20 75 70 64 61 74 65 64 20 46 69 72 65 66 6f 78 20 77 65 62 20 62 72 6f 77 73 65 72 20 66 72 6f 6d 20 6f 66 66 69 63 69 61 6c 20 4d 6f 7a 69 6c 6c 61 20 46 6f 75 6e 64 61 74 69 6f 6e 20 77 65 62 73 69 74 65 21 22 20 6f 6e 6d 6f 75 73 65 64 6f 77 6e 3d 22 63 6f 75 6e 74 42 72 6f 77 73 65 72 28 27 66 27 29 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 62 Data Ascii: https://www.mozilla.org/firefox/new" target="_blank" rel="noopener" style="background-image: url(/static/img/big/f.png)" title="Download updated Firefox web browser from official Mozilla Foundation website!" onmousedown="countBrowser('f')"><span class="b
2024-03-18 16:22:03 UTC	1369	IN	Data Raw: 31 61 37 37 0d 0a 0a 3c 2f 74 64 3e 0a 3c 74 64 20 63 6c 61 73 73 3d 22 62 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6f 70 65 72 61 2e 63 6f 6d 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 2f 73 74 61 74 69 63 2f 69 6d 67 2f 62 69 67 2f 6f 2e 70 6e 67 29 22 20 74 69 74 6c 65 3d 22 44 6f 77 6e 6c 6f 61 64 20 75 70 64 61 74 65 64 20 4f 70 65 72 61 20 77 65 62 20 62 72 6f 77 73 65 72 20 66 72 6f 6d 20 6f 66 66 69 63 69 61 6c 20 4f 70 65 72 61 20 53 6f 66 74 77 61 72 65 20 77 65 62 73 69 74 65 21 22 20 6f 6e 6d 6f 75 73 65 64 6f 77 6e 3d 22 63 6f 75 6e 74 42 72 6f 77 73 65 Data Ascii: 1a77</td><td class="b"><a class="l" href="https://opera.com" target="_blank" rel="noopener" style="background-image: url(/static/img/big/o.png)" title="Download updated Opera web browser from official Opera Software website!" onmousedown="countBrowse
2024-03-18 16:22:03 UTC	1369	IN	Data Raw: 69 63 6b 3d 22 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 6f 6f 6b 69 65 62 61 72 27 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 27 6e 6f 6e 65 27 22 3e 43 6c 6f 73 65 3c 2f 61 3e 0a 3c 2f 64 69 76 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 2f 2a 0a 20 20 20 20 20 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 76 61 72 20 65 6c 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 61 64 63 22 29 3b 0a 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 65 6c 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 69 66 20 28 65 6c 73 5b 69 5d 2e 6f 66 66 73 65 74 Data Ascii: ick="document.getElementById('cookiebar').style.display='none'">Close</a></div><script> /* window.setTimeout(function () { var els = document.getElementsByClassName("adc"); for (var i = 0; i < els.length; i++) { if (els[i].offset
2024-03-18 16:22:03 UTC	1369	IN	Data Raw: 41 62 6f 75 74 20 74 68 65 20 50 72 6f 6a 65 63 74 3c 2f 61 3e 0a 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 0a 3c 68 32 3e 49 20 63 61 6e 27 74 20 75 70 64 61 74 65 20 6d 79 20 62 72 6f 77 73 65 72 3c 2f 68 32 3e 0a 3c 75 6c 3e 0a 3c 6c 69 3e 49 66 20 79 6f 75 20 63 61 6e 27 74 20 63 68 61 6e 67 65 20 79 6f 75 72 20 62 72 6f 77 73 65 72 20 62 65 63 61 75 73 65 20 6f 66 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 20 69 73 73 75 65 73 2c 20 74 68 69 6e 6b 20 61 62 6f 75 74 20 69 6e 73 74 61 6c 6c 69 6e 67 20 61 20 73 65 63 6f 6e 64 20 62 72 6f 77 73 65 72 20 66 6f 72 20 62 72 6f 77 73 69 6e 67 20 61 6e 64 20 6b 65 65 70 20 74 68 65 20 6f 6c 64 20 6f 6e 65 20 66 6f 72 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 2e 3c 2f 6c 69 3e 0a 3c 6c 69 3e 41 73 6b 20 79 6f 75 72 20 Data Ascii: About the Project</a></p></div><h2>I can't update my browser</h2><ul><li>If you can't change your browser because of compatibility issues, think about installing a second browser for browsing and keep the old one for compatibility.</li><li>Ask your
2024-03-18 16:22:03 UTC	1369	IN	Data Raw: 62 72 6f 77 73 65 72 69 6e 66 6f 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 2f 73 74 61 74 69 63 2f 69 6d 67 2f 62 69 67 2f 63 2e 70 6e 67 29 22 3e 0a 3c 2f 64 69 76 3e 0a 3c 68 33 20 63 6c 61 73 73 3d 22 6c 61 72 67 65 22 3e 20 43 68 72 6f 6d 65 20 31 31 37 20 3c 2f 68 33 3e 0a 3c 70 3e 28 56 65 72 73 69 6f 6e 20 31 31 37 2e 30 2e 30 2e 30 29 3c 2f 70 3e 0a 3c 70 3e 6f 6e 20 57 69 6e 64 6f 77 73 20 31 30 2e 3c 2f 70 3e 0a 3c 70 3e 49 74 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 65 20 76 65 6e 64 6f 72 20 61 6e 79 6d 6f 72 65 2e 3c 2f 70 3e 0a 3c 70 3e 49 74 20 69 73 20 6e 6f 74 20 74 68 65 20 6c 61 74 65 73 74 20 76 65 72 73 69 6f 6e 2e 3c 2f 70 3e 0a 3c 70 3e 59 6f 75 20 63 61 Data Ascii: browserinfo" style="background-image: url(/static/img/big/c.png)"></div><h3 class="large"> Chrome 117 </h3><p>(Version 117.0.0.0)</p><p>on Windows 10.</p><p>It is not supported by the vendor anymore.</p><p>It is not the latest version.</p><p>You ca
2024-03-18 16:22:03 UTC	1307	IN	Data Raw: 5d 3e 0a 3c 73 74 79 6c 65 3e 0a 62 6f 64 79 20 2e 62 63 20 61 20 7b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 27 2f 69 6d 67 2f 62 69 67 2f 63 68 2d 73 6d 61 6c 6c 2e 70 6e 67 27 29 3b 0a 7d 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 69 63 65 20 3d 20 4d 61 74 68 2e 72 6f 75 6e 64 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 20 2a 20 31 30 30 29 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 5f 5f 66 20 3d 20 24 62 75 5f 67 65 74 42 72 6f 77 73 65 72 28 29 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 72 65 66 20 3d 20 28 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 20 7c 7c 20 22 22 29 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 20 35 30 29 3b 0a Data Ascii: ]><style>body .bc a {background-image: url('/img/big/ch-small.png');}</style><![endif]--><script> var dice = Math.round(Math.random() * 100); var __f = $bu_getBrowser(); var ref = (document.referrer \|\| "").substring(0, 50);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49781	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:04 UTC	717	OUT	GET /cdn-cgi/apps/head/dSTaMRtp7Uh77lw_sJp5-4w_sZY.js HTTP/1.1 Host: browser-update.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://browser-update.org/update-browser.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0
2024-03-18 16:22:04 UTC	881	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:04 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-id-2: ShfF2x5fezKzRl0PZ9Nv2zrj+Wp8XYnMioTm5DoJ8sXlAIc7kTSg/oFHlAREWkGYIdzc9QssvNM= x-amz-request-id: DQ96ZTHJAAEGHJK1 Cache-Control: public, max-age=31536000 Last-Modified: Sat, 09 Nov 2019 08:04:21 GMT x-amz-version-id: hRrHrP1AZntd4gCBO4EMUaCLdXTNRu.3 ETag: W/"2d6fb226716310803156384475c34aa3" CF-Cache-Status: HIT Age: 421225 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YLU2YikYMI%2BETbVT3lf7M7jYWOgJNF5Ii0iTQoB2At6iVAN7fTuXUfpuCDp9y5wuxluO%2Bh0jx5G9FqqFxFlwE%2FuX7ohbecfwmDJisnwOzlW1Mt6i9Z5LaVgrHN62U9rcZza32w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f343c1f0cd5-EWR
2024-03-18 16:22:04 UTC	488	IN	Data Raw: 31 30 37 32 0d 0a 3b 77 69 6e 64 6f 77 2e 43 6c 6f 75 64 66 6c 61 72 65 41 70 70 73 3d 77 69 6e 64 6f 77 2e 43 6c 6f 75 64 66 6c 61 72 65 41 70 70 73 7c 7c 7b 7d 3b 43 6c 6f 75 64 66 6c 61 72 65 41 70 70 73 2e 73 69 74 65 49 64 3d 22 63 33 39 63 66 62 61 62 36 30 37 38 37 32 62 31 32 64 31 32 64 62 32 64 63 34 36 62 30 38 65 66 22 3b 43 6c 6f 75 64 66 6c 61 72 65 41 70 70 73 2e 69 6e 73 74 61 6c 6c 73 3d 43 6c 6f 75 64 66 6c 61 72 65 41 70 70 73 2e 69 6e 73 74 61 6c 6c 73 7c 7c 7b 7d 3b 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 0a 43 6c 6f 75 64 66 6c 61 72 65 41 70 70 73 2e 69 6e 74 65 72 6e 61 6c 3d 43 6c 6f 75 64 66 6c 61 72 65 41 70 70 73 2e 69 6e 74 65 72 6e 61 6c 7c 7c 7b 7d 0a 76 61 72 20 65 72 72 6f 72 73 3d 5b 5d Data Ascii: 1072;window.CloudflareApps=window.CloudflareApps\|\|{};CloudflareApps.siteId="c39cfbab607872b12d12db2dc46b08ef";CloudflareApps.installs=CloudflareApps.installs\|\|{};;(function(){'use strict'CloudflareApps.internal=CloudflareApps.internal\|\|{}var errors=[]
2024-03-18 16:22:04 UTC	1369	IN	Data Raw: 6f 70 74 69 6f 6e 73 29 7d 0a 76 61 72 20 69 6e 69 74 69 61 6c 69 7a 65 64 53 65 6c 65 63 74 6f 72 73 3d 7b 7d 0a 76 61 72 20 63 75 72 72 65 6e 74 49 6e 69 74 3d 66 61 6c 73 65 0a 43 6c 6f 75 64 66 6c 61 72 65 41 70 70 73 2e 69 6e 74 65 72 6e 61 6c 2e 6d 61 72 6b 53 65 6c 65 63 74 6f 72 73 3d 66 75 6e 63 74 69 6f 6e 20 6d 61 72 6b 53 65 6c 65 63 74 6f 72 73 28 29 7b 69 66 28 21 63 75 72 72 65 6e 74 49 6e 69 74 29 7b 63 68 65 63 6b 28 29 0a 63 75 72 72 65 6e 74 49 6e 69 74 3d 74 72 75 65 0a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 75 72 72 65 6e 74 49 6e 69 74 3d 66 61 6c 73 65 7d 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 28 29 7b 76 61 72 20 69 6e 73 74 61 6c 6c 73 3d 77 69 6e 64 6f 77 2e 43 6c 6f 75 64 66 6c 61 72 Data Ascii: options)}var initializedSelectors={}var currentInit=falseCloudflareApps.internal.markSelectors=function markSelectors(){if(!currentInit){check()currentInit=truesetTimeout(function(){currentInit=false})}}function check(){var installs=window.Cloudflar
2024-03-18 16:22:04 UTC	1369	IN	Data Raw: 65 6e 67 74 68 3e 31 29 7b 6e 6f 74 65 45 72 72 6f 72 28 7b 74 79 70 65 3a 27 73 65 6c 65 63 74 3a 74 6f 6f 2d 6d 61 6e 79 3a 62 79 2d 71 75 65 72 79 27 2c 73 65 6c 65 63 74 6f 72 3a 73 65 6c 65 63 74 6f 72 7d 29 7d 0a 72 65 74 75 72 6e 20 65 6c 73 5b 30 5d 7d 0a 69 66 28 65 6c 73 2e 6c 65 6e 67 74 68 3e 31 29 7b 6e 6f 74 65 45 72 72 6f 72 28 7b 74 79 70 65 3a 27 73 65 6c 65 63 74 3a 74 6f 6f 2d 6d 61 6e 79 3a 62 79 2d 61 74 74 72 69 62 75 74 65 27 2c 73 65 6c 65 63 74 6f 72 3a 73 65 6c 65 63 74 6f 72 7d 29 7d 0a 72 65 74 75 72 6e 20 65 6c 73 5b 30 5d 7d 7d 28 29 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 0a 76 61 72 20 70 72 65 76 45 6c 73 3d 7b 7d 0a 43 6c 6f 75 64 66 6c 61 72 65 41 70 70 73 2e 63 72 65 61 74 65 45 6c Data Ascii: ength>1){noteError({type:'select:too-many:by-query',selector:selector})}return els[0]}if(els.length>1){noteError({type:'select:too-many:by-attribute',selector:selector})}return els[0]}}());(function(){'use strict'var prevEls={}CloudflareApps.createEl
2024-03-18 16:22:04 UTC	992	IN	Data Raw: 66 28 63 6f 6e 74 61 69 6e 65 72 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 7b 63 6f 6e 74 61 69 6e 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 6c 65 6d 65 6e 74 2c 63 6f 6e 74 61 69 6e 65 72 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 7d 65 6c 73 65 7b 63 6f 6e 74 61 69 6e 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 6c 65 6d 65 6e 74 29 7d 0a 62 72 65 61 6b 0a 63 61 73 65 27 62 65 66 6f 72 65 27 3a 63 6f 6e 74 61 69 6e 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 6c 65 6d 65 6e 74 2c 63 6f 6e 74 61 69 6e 65 72 29 0a 62 72 65 61 6b 0a 63 61 73 65 27 72 65 70 6c 61 63 65 27 3a 74 72 79 7b 76 61 72 20 69 64 3d 65 6c 65 6d 65 6e 74 2e 63 66 41 70 70 73 Data Ascii: f(container.nextSibling){container.parentNode.insertBefore(element,container.nextSibling)}else{container.parentNode.appendChild(element)}breakcase'before':container.parentNode.insertBefore(element,container)breakcase'replace':try{var id=element.cfApps
2024-03-18 16:22:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49782	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:04 UTC	699	OUT	GET /static/base2.css HTTP/1.1 Host: browser-update.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://browser-update.org/update-browser.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0
2024-03-18 16:22:04 UTC	750	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:04 GMT Content-Type: text/css; charset=utf-8 Content-Length: 10268 Connection: close Cache-Control: max-age=86400 Cf-Bgj: minify Cf-Polished: origSize=16018 content-disposition: inline; filename=base2.css last-modified: Sun, 23 Oct 2022 08:42:25 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=83UZfUDd6t%2FC%2BewlUiOWlOcjA2zQRKx9YjYm4B31T%2FkLcgjAFA%2BUDsfPhCycq75DdJpQFooQEAPVfvePzAY5XdxNuQqU7KJ8%2B%2BsJ8Vjvb5NERGdj2UM7eUYr%2F93mq9%2FUOM8HWA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f363c4a80da-EWR
2024-03-18 16:22:04 UTC	619	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6f 70 65 6e 20 73 61 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 27 4f 70 65 6e 20 53 61 6e 73 20 4c 69 67 68 74 27 29 2c 6c 6f 63 61 6c 28 27 4f 70 65 6e 53 61 6e 73 2d 4c 69 67 68 74 27 29 2c 75 72 6c 28 66 6f 6e 74 73 2f 6f 70 65 6e 2d 73 61 6e 73 2d 76 31 37 2d 6c 61 74 69 6e 5f 6c 61 74 69 6e 2d 65 78 74 5f 76 69 65 74 6e 61 6d 65 73 65 5f 63 79 72 69 6c 6c 69 63 5f 67 72 65 65 6b 5f 63 79 72 69 6c 6c 69 63 2d 65 78 74 2d 33 30 30 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 75 72 6c 28 66 6f 6e 74 73 2f 6f 70 65 6e 2d 73 61 6e 73 2d 76 31 37 2d 6c 61 74 69 6e Data Ascii: @font-face{font-family:open sans;font-style:normal;font-weight:300;src:local('Open Sans Light'),local('OpenSans-Light'),url(fonts/open-sans-v17-latin_latin-ext_vietnamese_cyrillic_greek_cyrillic-ext-300.woff2) format('woff2'),url(fonts/open-sans-v17-latin
2024-03-18 16:22:04 UTC	1369	IN	Data Raw: 6c 6c 69 63 5f 67 72 65 65 6b 5f 63 79 72 69 6c 6c 69 63 2d 65 78 74 2d 72 65 67 75 6c 61 72 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 7d 62 6f 64 79 2c 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 63 6f 6c 6f 72 3a 23 33 33 33 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 23 63 6f 7b 77 69 64 74 68 3a 37 35 30 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 35 70 Data Ascii: llic_greek_cyrillic-ext-regular.woff) format('woff')}body,html{font-family:sans-serif;font-size:13px;color:#333;text-align:center;line-height:1.5;margin:0;padding:0}#co{width:750px;margin:auto;text-align:left;position:relative;clear:both;margin-bottom:25p
2024-03-18 16:22:04 UTC	1369	IN	Data Raw: 6c 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 30 70 78 7d 75 6c 20 68 33 7b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 33 33 33 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 37 70 78 7d 2e 6d 65 73 73 61 67 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 2e 35 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 33 65 6d 3b 70 61 64 64 69 6e 67 3a 31 65 6d 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 2e 31 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 2e 33 65 6d 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 37 37 30 30 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 36 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 34 29 3b Data Ascii: l{padding-left:20px}ul h3{margin:0;color:#333;margin-bottom:7px}.message{font-size:1.2em;margin:.5em;margin-bottom:1.3em;padding:1em;padding-top:.1em;padding-bottom:.3em;overflow:hidden;font-weight:400;background:#f77000;box-shadow:0 0 6px rgba(0,0,0,.4);
2024-03-18 16:22:04 UTC	1369	IN	Data Raw: 73 69 7a 65 3a 31 31 70 74 3b 63 6f 75 6e 74 65 72 2d 72 65 73 65 74 3a 6c 69 73 74 4e 75 6d 62 65 72 69 6e 67 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 35 70 78 7d 2e 73 74 65 70 73 20 6c 69 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 63 6f 75 6e 74 65 72 2d 69 6e 63 72 65 6d 65 6e 74 3a 6c 69 73 74 4e 75 6d 62 65 72 69 6e 67 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 73 74 65 70 73 20 6c 69 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 63 6f 75 6e 74 65 72 28 6c 69 73 74 4e 75 6d 62 65 72 69 6e 67 2c 64 65 63 69 6d 61 6c 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 33 35 70 78 3b 63 6f 6c 6f 72 3a 23 35 35 35 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a Data Ascii: size:11pt;counter-reset:listNumbering;padding-left:25px}.steps li{margin-bottom:20px;counter-increment:listNumbering;display:block;position:relative}.steps li::before{content:counter(listNumbering,decimal);font-size:35px;color:#555;position:absolute;left:
2024-03-18 16:22:04 UTC	1369	IN	Data Raw: 70 65 61 74 20 30 25 20 30 25 20 23 65 65 65 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 64 61 73 68 65 64 20 23 61 61 61 7d 2e 68 65 61 64 65 72 20 61 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 63 6f 6c 6f 72 3a 23 30 30 30 7d 2e 68 65 61 64 65 72 20 68 31 7b 6d 61 72 67 69 6e 3a 30 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 7d 2e 74 61 67 6c 69 6e 65 7b 63 6f 6c 6f 72 3a 23 38 38 38 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 70 78 7d 2e 69 6e 6e 65 72 68 65 61 64 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 31 32 38 30 70 78 7d 61 2e 6c 7b 64 69 73 70 6c Data Ascii: peat 0% 0% #eee;height:auto;text-align:left;border-bottom:1px dashed #aaa}.header a{text-decoration:none;color:#000}.header h1{margin:0;display:inline}.tagline{color:#888;padding-left:2px}.innerhead{position:relative;margin:auto;max-width:1280px}a.l{displ
2024-03-18 16:22:04 UTC	1369	IN	Data Raw: 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 61 61 61 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 65 65 3b 70 61 64 64 69 6e 67 3a 32 70 78 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 61 61 61 7d 23 63 6f 6f 6b 69 65 62 61 72 20 61 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 70 61 64 64 69 6e 67 3a 31 70 78 20 33 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 74 65 73 74 77 61 72 6e 69 6e 67 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 65 70 65 61 74 69 6e 67 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 34 35 64 65 67 2c 23 66 66 64 35 34 35 2c 23 66 66 64 35 34 35 20 31 30 70 78 2c 23 46 46 46 37 35 34 20 31 30 70 78 2c Data Ascii: order-top:1px solid #aaa;background:#eee;padding:2px;border-left:1px solid #aaa}#cookiebar a{cursor:pointer;padding:1px 3px;border-radius:4px;background:transparent}.testwarning{background:repeating-linear-gradient(45deg,#ffd545,#ffd545 10px,#FFF754 10px,
2024-03-18 16:22:04 UTC	1369	IN	Data Raw: 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 37 2c 2e 32 2c 2e 30 35 2c 31 29 2c 62 61 63 6b 67 72 6f 75 6e 64 20 2e 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 37 2c 2e 32 2c 2e 30 35 2c 31 29 2c 6f 70 61 63 69 74 79 20 2e 35 35 73 20 65 61 73 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 7d 23 6d 65 6e 75 20 73 70 61 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 30 25 20 30 25 7d 23 6d 65 6e 75 20 73 70 61 6e 3a 6e 74 68 2d 6c 61 73 74 2d 63 68 69 6c 64 28 32 29 7b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 30 25 20 31 30 30 25 7d 23 6d 65 6e 75 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 7e 73 70 61 6e 7b 6f 70 61 Data Ascii: ;transition:transform .5s cubic-bezier(.77,.2,.05,1),background .5s cubic-bezier(.77,.2,.05,1),opacity .55s ease;right:0;top:0}#menu span:first-child{transform-origin:0% 0%}#menu span:nth-last-child(2){transform-origin:0% 100%}#menu input:checked~span{opa
2024-03-18 16:22:04 UTC	1369	IN	Data Raw: 61 64 63 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 23 63 6f 7b 6c 65 66 74 3a 2d 31 35 35 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 30 70 78 7d 7d 2e 61 64 74 7b 63 6f 6c 6f 72 3a 23 36 36 36 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 61 64 2d 73 68 6f 77 6e 20 2e 61 64 74 7b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 61 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 62 6f 72 64 65 72 3a 32 70 78 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 61 64 2d 73 68 6f 77 6e 20 2e 61 64 7b 62 6f 72 64 65 72 3a 32 70 78 20 73 6f Data Ascii: adc{text-align:center}@media only screen and (min-width:1200px){#co{left:-155px;margin-bottom:120px}}.adt{color:#666;visibility:hidden}.ad-shown .adt{visibility:visible}.ad{display:block;border:2px transparent;text-align:center}.ad-shown .ad{border:2px so
2024-03-18 16:22:04 UTC	66	IN	Data Raw: 6c 65 66 74 3a 32 32 70 78 3b 77 69 64 74 68 3a 61 75 74 6f 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 7d 66 6f 6f 74 65 72 20 61 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d Data Ascii: left:22px;width:auto;display:block}}footer a{text-decoration:none}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49783	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:04 UTC	682	OUT	GET /update.min.js HTTP/1.1 Host: browser-update.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://browser-update.org/update-browser.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0
2024-03-18 16:22:04 UTC	757	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:04 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 9348 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=update.min.js expires: Thu, 14 Mar 2024 18:00:01 GMT last-modified: Sat, 02 Mar 2024 10:00:09 GMT CF-Cache-Status: HIT Age: 426123 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h1FDn1sx7TTSboTsuRxxUqhCKl6eC5deOAvgeKhRSoYh8jFcTYIZK3EyAAzX%2BL625Q6gH7khRUmcC5h0Y2%2Btuqp0tiO0WDMTjI0JffjmrOcSHiTDCbNZaWnBsR%2BmNWsUwQ0AWA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f37edf44337-EWR
2024-03-18 16:22:04 UTC	612	IN	Data Raw: 2f 2f 28 63 29 32 30 32 31 2c 20 4d 49 54 20 53 74 79 6c 65 20 4c 69 63 65 6e 73 65 20 3c 62 72 6f 77 73 65 72 2d 75 70 64 61 74 65 2e 6f 72 67 2f 4c 49 43 45 4e 53 45 2e 74 78 74 3e 0d 0a 2f 2f 69 74 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 64 69 72 65 63 74 6c 79 20 6c 69 6e 6b 20 74 6f 20 74 68 69 73 20 66 69 6c 65 20 62 65 63 61 75 73 65 20 77 65 20 75 70 64 61 74 65 20 74 68 65 20 64 65 74 65 63 74 69 6f 6e 20 63 6f 64 65 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 24 62 75 5f 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 3d 74 68 69 73 3b 74 68 69 73 2e 76 65 72 73 69 6f 6e 3d 22 33 2e 33 2e 35 31 22 3b 74 68 69 73 2e 76 73 61 6b 74 3d 7b 63 3a 22 31 32 32 22 2c 66 3a 22 31 32 33 22 2c 73 3a 22 31 37 2e Data Ascii: //(c)2021, MIT Style License <browser-update.org/LICENSE.txt>//it is recommended to directly link to this file because we update the detection code"use strict";var $bu_=new function(){var s=this;this.version="3.3.51";this.vsakt={c:"122",f:"123",s:"17.
2024-03-18 16:22:04 UTC	1369	IN	Data Raw: 72 65 66 6f 78 27 2c 73 3a 27 53 61 66 61 72 69 27 2c 65 3a 22 45 64 67 65 22 2c 69 3a 27 49 6e 74 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 27 2c 69 6f 73 3a 22 69 4f 53 22 2c 73 61 6d 73 75 6e 67 3a 22 53 61 6d 73 75 6e 67 20 49 6e 74 65 72 6e 65 74 22 2c 6f 3a 27 4f 70 65 72 61 27 2c 6f 5f 61 3a 27 4f 70 65 72 61 27 2c 65 5f 61 3a 22 45 64 67 65 22 2c 79 3a 22 59 61 6e 64 65 78 20 42 72 6f 77 73 65 72 22 2c 76 3a 22 56 69 76 61 6c 64 69 22 2c 75 63 3a 22 55 43 20 42 72 6f 77 73 65 72 22 2c 61 3a 22 41 6e 64 72 6f 69 64 20 42 72 6f 77 73 65 72 22 2c 78 3a 22 4f 74 68 65 72 22 2c 73 69 6c 6b 3a 22 53 69 6c 6b 22 7d 3b 74 68 69 73 2e 67 65 74 5f 62 72 6f 77 73 65 72 3d 66 75 6e 63 74 69 6f 6e 28 75 61 29 7b 76 61 72 20 6e 2c 75 61 3d 28 75 61 7c 7c 6e 61 Data Ascii: refox',s:'Safari',e:"Edge",i:'Internet Explorer',ios:"iOS",samsung:"Samsung Internet",o:'Opera',o_a:'Opera',e_a:"Edge",y:"Yandex Browser",v:"Vivaldi",uc:"UC Browser",a:"Android Browser",x:"Other",silk:"Silk"};this.get_browser=function(ua){var n,ua=(ua\|\|na
2024-03-18 16:22:04 UTC	1369	IN	Data Raw: 6f 73 7c 6b 69 6e 64 6c 65 7c 74 69 7a 65 6e 7c 73 69 6c 6b 7c 62 6c 61 63 6b 62 65 72 72 79 7c 62 62 31 30 7c 52 49 4d 7c 50 6c 61 79 42 6f 6f 6b 7c 6d 65 65 67 6f 7c 6e 6f 6b 69 61 7c 75 63 77 65 62 7c 5a 75 6e 65 57 50 37 7c 35 33 37 2e 38 35 2e 31 30 22 29 3b 72 2e 65 6d 62 65 64 64 65 64 3d 2f 22 51 74 57 65 62 45 6e 67 69 6e 65 7c 54 65 61 6d 73 7c 45 6c 65 63 74 72 6f 6e 2f 69 2e 74 65 73 74 28 75 61 29 3b 72 2e 6d 6f 62 69 6c 65 3d 28 2f 69 70 68 6f 6e 65 7c 69 70 6f 64 7c 69 70 61 64 7c 61 6e 64 72 6f 69 64 7c 6d 6f 62 69 6c 65 7c 70 68 6f 6e 65 7c 69 6f 73 7c 69 65 6d 6f 62 69 6c 65 2f 69 2e 74 65 73 74 28 75 61 29 29 3b 72 2e 64 69 73 63 6f 6e 74 69 6e 75 65 64 3d 28 2f 6e 65 74 73 63 61 70 65 7c 67 72 65 65 6e 62 72 6f 77 73 65 72 7c 63 61 6d Data Ascii: os\|kindle\|tizen\|silk\|blackberry\|bb10\|RIM\|PlayBook\|meego\|nokia\|ucweb\|ZuneWP7\|537.85.10");r.embedded=/"QtWebEngine\|Teams\|Electron/i.test(ua);r.mobile=(/iphone\|ipod\|ipad\|android\|mobile\|phone\|ios\|iemobile/i.test(ua));r.discontinued=(/netscape\|greenbrowser\|cam
2024-03-18 16:22:04 UTC	1369	IN	Data Raw: 65 73 74 28 75 61 29 29 7b 75 61 2e 6d 61 74 63 68 28 6e 65 77 20 52 65 67 45 78 70 28 22 4f 53 2e 22 2b 56 56 2c 22 69 22 29 29 3b 72 2e 6e 3d 22 69 6f 73 22 3b 72 2e 66 75 6c 6c 76 3d 52 65 67 45 78 70 2e 24 31 3b 72 2e 76 3d 70 61 72 73 65 46 6c 6f 61 74 28 72 2e 66 75 6c 6c 76 29 3b 72 2e 65 6e 67 69 6e 65 3d 27 69 6f 73 27 3b 76 61 72 20 61 76 3d 73 2e 61 76 61 69 6c 61 62 6c 65 5f 69 6f 73 28 75 61 2c 72 2e 76 29 3b 69 66 28 61 76 3c 31 32 26 26 4d 61 74 68 2e 72 6f 75 6e 64 28 72 2e 76 29 3d 3d 3d 31 31 29 61 76 3d 31 32 3b 72 2e 61 76 61 69 6c 61 62 6c 65 3d 7b 22 69 6f 73 22 3a 61 76 7d 3b 69 66 28 70 61 72 73 65 46 6c 6f 61 74 28 72 2e 61 76 61 69 6c 61 62 6c 65 2e 69 6f 73 29 3c 31 31 29 72 2e 6e 6f 5f 64 65 76 69 63 65 5f 75 70 64 61 74 65 3d Data Ascii: est(ua)){ua.match(new RegExp("OS."+VV,"i"));r.n="ios";r.fullv=RegExp.$1;r.v=parseFloat(r.fullv);r.engine='ios';var av=s.available_ios(ua,r.v);if(av<12&&Math.round(r.v)===11)av=12;r.available={"ios":av};if(parseFloat(r.available.ios)<11)r.no_device_update=
2024-03-18 16:22:04 UTC	1369	IN	Data Raw: 28 72 2e 6e 20 69 6e 20 5b 22 63 22 2c 22 66 22 2c 22 6f 22 2c 22 65 22 5d 26 26 73 2e 6c 65 73 73 28 72 2e 66 75 6c 6c 76 2c 70 61 72 73 65 46 6c 6f 61 74 28 73 2e 76 73 61 6b 74 5b 72 2e 6e 5d 29 2d 31 29 3c 3d 30 29 72 2e 69 73 5f 73 75 70 70 6f 72 74 65 64 3d 74 72 75 65 3b 76 61 72 20 72 65 6c 65 61 73 65 73 5f 70 65 72 5f 79 65 61 72 3d 7b 27 66 27 3a 37 2c 27 63 27 3a 38 2c 27 6f 27 3a 38 2c 27 69 27 3a 31 2c 27 65 27 3a 31 2c 27 73 27 3a 31 7d 3b 69 66 28 72 65 6c 65 61 73 65 73 5f 70 65 72 5f 79 65 61 72 5b 72 2e 6e 5d 29 72 2e 61 67 65 5f 79 65 61 72 73 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 28 28 73 2e 76 73 61 6b 74 5b 72 2e 6e 5d 2d 72 2e 76 29 2f 72 65 6c 65 61 73 65 73 5f 70 65 72 5f 79 65 61 72 5b 72 2e 6e 5d 29 2a 31 30 29 2f 31 30 7c 7c 30 Data Ascii: (r.n in ["c","f","o","e"]&&s.less(r.fullv,parseFloat(s.vsakt[r.n])-1)<=0)r.is_supported=true;var releases_per_year={'f':7,'c':8,'o':8,'i':1,'e':1,'s':1};if(releases_per_year[r.n])r.age_years=Math.round(((s.vsakt[r.n]-r.v)/releases_per_year[r.n])*10)/10\|\|0
2024-03-18 16:22:04 UTC	1369	IN	Data Raw: 2e 6c 61 6e 67 75 61 67 65 73 3f 6e 2e 6c 61 6e 67 75 61 67 65 73 5b 30 5d 3a 6e 75 6c 6c 29 7c 7c 6e 2e 6c 61 6e 67 75 61 67 65 7c 7c 6e 2e 62 72 6f 77 73 65 72 4c 61 6e 67 75 61 67 65 7c 7c 6e 2e 75 73 65 72 4c 61 6e 67 75 61 67 65 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6c 61 6e 67 22 29 7c 7c 22 65 6e 22 3b 6f 70 2e 6c 6c 66 75 6c 6c 3d 6c 6c 2e 72 65 70 6c 61 63 65 28 22 5f 22 2c 22 2d 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 73 75 62 73 74 72 28 30 2c 35 29 3b 6f 70 2e 6c 6c 3d 6f 70 2e 6c 6c 66 75 6c 6c 2e 73 75 62 73 74 72 28 30 2c 32 29 3b 6f 70 2e 64 6f 6d 61 69 6e 3d 6f 70 2e 64 6f 6d 61 69 6e 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 6f 70 2e 64 6f 6d 61 Data Ascii: .languages?n.languages[0]:null)\|\|n.language\|\|n.browserLanguage\|\|n.userLanguage\|\|document.documentElement.getAttribute("lang")\|\|"en";op.llfull=ll.replace("_","-").toLowerCase().substr(0,5);op.ll=op.llfull.substr(0,2);op.domain=op.domain!==undefined?op.doma
2024-03-18 16:22:04 UTC	1369	IN	Data Raw: 6f 6e 73 68 6f 77 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 7d 3b 6f 70 2e 6f 6e 63 6c 69 63 6b 3d 6f 70 2e 6f 6e 63 6c 69 63 6b 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 7d 3b 6f 70 2e 6f 6e 63 6c 6f 73 65 3d 6f 70 2e 6f 6e 63 6c 6f 73 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 7d 3b 6f 70 2e 70 61 67 65 75 72 6c 3d 6f 70 2e 70 61 67 65 75 72 6c 7c 7c 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 7c 7c 22 78 22 3b 6f 70 2e 6e 65 77 77 69 6e 64 6f 77 3d 28 6f 70 2e 6e 65 77 77 69 6e 64 6f 77 21 3d 3d 66 61 6c 73 65 29 3b 6f 70 2e 74 65 73 74 3d 74 65 73 74 7c 7c 6f 70 2e 74 65 73 74 7c 7c 28 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 3d 3d 3d 22 23 74 65 73 74 2d 62 75 22 29 7c 7c 66 61 6c 73 65 3b 6f 70 2e 69 67 6e 6f 72 65 63 6f 6f 6b 69 65 3d 6f 70 Data Ascii: onshow\|\|function(o){};op.onclick=op.onclick\|\|function(o){};op.onclose=op.onclose\|\|function(o){};op.pageurl=op.pageurl\|\|location.hostname\|\|"x";op.newwindow=(op.newwindow!==false);op.test=test\|\|op.test\|\|(location.hash==="#test-bu")\|\|false;op.ignorecookie=op
2024-03-18 16:22:04 UTC	522	IN	Data Raw: 6c 72 65 61 64 79 5f 73 68 6f 77 6e 29 29 72 65 74 75 72 6e 3b 6f 70 2e 73 65 74 43 6f 6f 6b 69 65 3d 66 75 6e 63 74 69 6f 6e 28 68 6f 75 72 73 29 7b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 27 62 72 6f 77 73 65 72 75 70 64 61 74 65 6f 72 67 3d 70 61 75 73 65 3b 20 65 78 70 69 72 65 73 3d 27 2b 6e 65 77 20 44 61 74 65 28 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2b 33 36 30 30 30 30 30 2a 68 6f 75 72 73 29 2e 74 6f 47 4d 54 53 74 72 69 6e 67 28 29 2b 27 3b 20 70 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 27 2b 28 2f 68 74 74 70 73 3a 2f 2e 74 65 73 74 28 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3f 27 3b 20 53 65 63 75 72 65 27 3a 27 27 29 3b 7d 3b 69 66 28 6f 70 2e 61 6c 72 65 61 64 79 5f 73 68 6f 77 6e 26 26 28 6f Data Ascii: lready_shown))return;op.setCookie=function(hours){document.cookie='browserupdateorg=pause; expires='+new Date(new Date().getTime()+3600000*hours).toGMTString()+'; path=/; SameSite=Lax'+(/https:/.test(location.href)?'; Secure':'');};if(op.already_shown&&(o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49786	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:04 UTC	788	OUT	GET /static/fonts/open-sans-v17-latin_latin-ext_vietnamese_cyrillic_greek_cyrillic-ext-300.woff2 HTTP/1.1 Host: browser-update.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://browser-update.org sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://browser-update.org/static/base2.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0
2024-03-18 16:22:05 UTC	755	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:05 GMT Content-Type: font/woff2 Content-Length: 44352 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=open-sans-v17-latin_latin-ext_vietnamese_cyrillic_greek_cyrillic-ext-300.woff2 last-modified: Sun, 21 Mar 2021 12:19:10 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kI1CwiVRFIXYp0LylzaX3D42YDL5VIHod0JxPzHi%2FdzpZe%2B%2Fgz7yFkuQ1sUP5htujFbnw%2FvbRsXeppFPnJT5fa%2F7SD2lRKMuFDe8fzpQRO16YDygHDZYuGmY2Qx5C5cfadeXxA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f39c9ab423f-EWR
2024-03-18 16:22:05 UTC	614	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 ad 40 00 11 00 00 00 01 81 08 00 00 ac dc 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 2e 1b 10 1c 81 56 06 60 00 87 08 08 81 2a 09 8f 34 11 10 0a 84 f9 68 84 ac 28 0b 8e 0a 00 01 36 02 24 03 9c 02 04 20 05 83 3c 07 ba 0d 0c 82 3a 5b 10 52 91 40 e4 c6 ee e7 54 c1 a0 d2 4d 06 c4 7b 4f e7 77 5d 12 cb 02 e5 f6 11 6e 07 b9 6c f6 bd a8 80 1d 7b 04 74 07 38 97 5a 75 40 e5 ff ff ff ff dc a4 31 c6 da 0e db 1d 42 88 9a d6 47 d9 43 96 04 87 d8 21 96 04 45 f6 a0 d9 4b b8 58 15 b3 87 24 43 4a b8 b7 06 d1 12 bd af dd 37 cc be 5b ee a6 cc d0 64 8f fd 68 86 c3 29 48 bc ef c5 cf 8a 19 e2 a7 53 65 c5 0b 0d 2b e5 94 9d 3b ad 29 c7 d3 14 64 c5 66 86 f0 a7 96 37 a1 bc db 7d 7c 0a 8a 95 f9 4b b3 d3 a0 0a 9f b7 94 3c Data Ascii: wOF2@.V`*4h(6$ <:[R@TM{Ow]nl{t8Zu@1BGC!EKX$CJ7[dh)HSe+;)df7}\|K<
2024-03-18 16:22:05 UTC	1369	IN	Data Raw: 08 77 97 60 39 d1 ef 06 63 6b 6e 2b 50 a2 a5 b1 bd 04 e0 b5 b3 2a 0b e7 0f e7 c8 c2 c3 56 18 c8 59 96 44 1a c8 06 1e 41 0d b8 bf 48 b3 b1 07 74 04 77 c1 41 21 4d 8d d8 5f 66 69 fd cb 7a 59 a9 ab 52 55 56 96 ea ae ee 1e a1 40 0c 88 26 b8 9c 53 dd a7 1a 8d 99 c1 61 8f 3e 02 6b 78 d8 33 2c d0 f0 78 86 b7 6b 78 42 9a c4 49 8b 38 f5 bf 7d 3c c3 5b 04 9d 8a 30 63 a7 c7 5f 8d e6 14 d6 4c 08 53 20 ce 3d 15 70 28 79 ad ee 8b 08 78 f0 6d 96 07 64 f3 00 b0 f1 9b f0 28 c8 2f d2 ec 16 75 9a 32 6d bf ba 89 6b a2 cd 7c f7 c2 ab f8 aa 5c 26 d0 04 c7 e0 60 c1 b8 ce 77 8c f1 f8 9f aa 0a a4 55 29 93 2e 48 f9 b8 3f 32 bd 52 04 5d e8 4e e5 0e 70 05 e5 46 65 f2 94 f4 b1 c2 de 86 07 bb 6f 59 b3 6c 75 b5 1f b6 bd ad 4c 19 c9 4b 7e 20 02 01 6f 7d cd 2e 87 1d 54 57 25 4b b6 b1 31 Data Ascii: w`9ckn+P*VYDAHtwA!M_fizYRUV@&Sa>kx3,xkxBI8}<[0c_LS =p(yxmd(/u2mk\|\&`wU).H?2R]NpFeoYluLK~ o}.TW%K1
2024-03-18 16:22:05 UTC	1369	IN	Data Raw: cc da 37 ff 29 1d da 46 5f 3c 06 72 0d f4 f0 c2 99 5b b2 70 f9 f6 2e 00 ae 7d 1a 4d 69 e2 ab a5 fe ae 23 0d 69 fc 34 f4 70 4f 30 3a d3 68 af 51 a1 51 87 51 b7 d1 7b a3 7f 36 2f 0a 9c ed 38 fa 1c ce 13 ad 38 0e 74 0b 2d 79 75 97 91 62 d4 bc db 58 e2 2d 20 fc 18 83 7a 20 2c ba bf 1b bd ec bd 03 f4 35 a7 db 7f c5 ba 8c ab 14 13 dc ce 00 3d db fb e6 ce b9 63 6e ee f0 de d8 a2 f6 67 63 db 4c bf b0 d4 7f 34 ab 9a d4 1c 8d aa 06 75 81 7b f3 d2 b4 80 ca 44 90 50 5d f5 5d 15 be de 9a 6f 50 7d 99 af 5d ff 67 50 38 a8 c9 ef 1b dc 0c 06 65 ff fc 60 52 bf aa df 8a 7e 50 be 55 be 51 be 54 f6 2a 1f 2a bb 95 5d ca 66 e5 2d fa 40 cf 68 5f 19 0f 94 26 56 8a af fd fe 8a 69 c5 84 62 50 71 1d 76 04 28 6c 02 5f 7a 11 f9 73 79 83 fc ce b8 62 0a 20 5c 1c 0f 02 67 57 f6 fd 5c dd Data Ascii: 7)F_<r[p.}Mi#i4pO0:hQQQ{6/88t-yubX- z ,5=cngcL4u{DP]]oP}]gP8e`R~PUQT**]f-@h_&VibPqv(l_zsyb \gW\
2024-03-18 16:22:05 UTC	1369	IN	Data Raw: b4 fb 14 f1 27 6f a5 9f 49 07 af 5e 31 ad 9a 8b 77 97 c4 d0 02 61 06 3e b9 3a 88 ae e9 b6 90 a3 8e 99 fb 90 ac 86 c8 33 01 94 3f 42 04 ac d0 d5 35 91 c5 14 da 48 3a 3a f3 dc 7a 3e a3 20 4a 86 15 87 fc c4 93 30 9d 1b 03 cc 84 b3 a7 ac e6 06 e8 f3 bf 62 da 2f 59 79 25 79 74 82 a9 5e 1c 5a f5 59 5f f9 e1 35 81 06 4b d0 50 ab 61 2b 00 88 3f 9e a4 a1 39 b0 53 e0 b0 b7 03 9c 77 32 c0 0e 89 b4 a5 cd 49 8f 3f fa 0a fd 4a 06 77 8d 18 10 6c 8e 80 5a 94 23 94 8e a9 21 df 8a 8a 18 f3 4e 44 17 16 a9 45 ed 89 08 c2 e4 cc d4 00 4b 07 44 e8 90 5a 0d 82 b2 47 00 23 45 06 10 6e 35 8e e2 f3 45 b6 31 c0 60 4f 40 20 6a 44 62 26 62 24 93 3e e9 97 78 c0 f7 05 84 77 88 4f ae 06 40 20 c6 e4 ad 45 e3 31 09 36 bc 0e c0 81 a0 7e 04 4c 36 03 d3 af 87 a0 48 10 fc ac 52 d1 9f 53 c0 b4 Data Ascii: 'oI^1wa>:3?B5H::z> J0b/Yy%yt^ZY_5KPa+?9Sw2I?JwlZ#!NDEKDZG#En5E1`O@ jDb&b$>xwO@ E16~L6HRS
2024-03-18 16:22:05 UTC	1369	IN	Data Raw: f4 5c d4 8a 5c 64 fd de 6a de fd 65 79 aa cd 16 6e 3f 0d f5 cc 50 27 3a 6c 72 73 63 0f f7 d7 b5 ee 6d 45 8d 8b 89 45 e2 d7 4b 52 26 26 09 c3 4e 9f 53 15 12 2b d1 05 3a fb 85 57 08 a2 93 5f a2 a1 ce 34 c6 9c b2 32 bb 26 8c f9 22 e3 42 fd 89 f5 ce 43 9a 69 16 f9 b0 8a a9 8b fb bb 38 dc a7 bd 21 ed 8e ce a9 8b 5e be aa c4 e2 3d 29 ba a8 58 83 ca 34 67 af bc 7c ac 59 09 9d a9 81 1b 57 c6 59 f1 83 31 d6 f2 05 82 be 82 71 b4 48 7e 4e 67 ed 7a dc 9d eb 73 25 a2 59 15 d7 78 6e 9c 49 aa 8f 67 90 c9 29 88 a1 46 c5 33 80 6e 62 97 67 53 35 1a af a1 f9 c0 8e df 27 c6 54 c7 99 32 4c b0 dc 14 70 69 8c 99 4b a0 f8 2e d1 84 e8 ac 58 f7 b0 0c 79 b6 6c c2 ca 5d ac 7c 5c 40 61 77 33 69 fd 5a 68 06 b3 26 ab 7b 3f eb 8c 11 6f 15 62 85 d2 3f 8a 75 5a 27 bf c0 49 b9 d3 ba d4 ae Data Ascii: \\djeyn?P':lrscmEEKR&&NS+:W_42&"BCi8!^=)X4g\|YWY1qH~Ngzs%YxnIg)F3nbgS5'T2LpiK.Xyl]\|\@aw3iZh&{?ob?uZ'I
2024-03-18 16:22:05 UTC	1369	IN	Data Raw: 37 25 52 1c 89 2d dc 19 77 99 d0 cb a0 6c d9 8a 15 5e e0 8c 2d 9c 38 9b d3 de 12 61 91 2b a5 56 1d e5 57 c1 8b b0 4e b7 05 ff 62 90 26 6d f7 83 6a 04 36 aa e0 3a af 70 51 95 e0 db e5 a7 08 2b b1 3f 72 d1 10 30 9f ad 58 7f da 53 d2 fc 01 b6 2c de 03 3d 35 6d 20 eb 6b dc f0 a3 ec ea 70 be 7d b3 98 e9 34 3c b1 0c ee 9b e7 e0 d3 4d f7 3a 72 52 f7 f8 59 a7 c5 9f 72 4f e3 ec 23 af 24 42 4a d9 39 ea 9d 48 e5 8c dd 9c fe 57 21 dd 3b ca 11 f8 01 86 0b 59 91 62 2b ee ee 2c 33 12 21 e0 ac 1e c6 1a f3 7c df 8a 8c 7b 1b 43 df 16 01 cd 2f 04 84 df 8e 63 07 03 d8 ad d7 cf 45 3c 45 71 d0 94 81 41 2b c8 28 41 3d 23 7f 45 93 30 2e d7 f5 00 ac a0 eb ac b1 35 06 e5 9a 8a 99 df 6f 56 25 ec 59 df 94 95 9e 1b 07 dd 1c aa de 9b f5 45 59 07 69 3c 2e 67 2b f2 0e 4c 14 33 dd d2 38 Data Ascii: 7%R-wl^-8a+VWNb&mj6:pQ+?r0XS,=5m kp}4<M:rRYrO#$BJ9HW!;Yb+,3!\|{C/cE<EqA+(A=#E0.5oV%YEYi<.g+L38
2024-03-18 16:22:05 UTC	1369	IN	Data Raw: f7 32 f5 d3 bb de 20 fa 9c 46 00 8f fa b2 c7 d9 5e fb 0e 71 8c f4 67 00 67 e3 3c 63 0a 8c 49 06 98 1f 1a cb 77 14 32 01 54 b7 8a ec 03 3f 66 6f 79 8f 38 9f fc c9 99 01 86 ee da a3 ba f3 e7 6d 8f 6e 35 4b 04 49 6d 23 8a 64 64 4f 15 b9 b1 87 72 d5 2c 8f 4c c2 fa 40 b6 3b 71 b2 55 c2 32 a8 ca 80 a0 cf ad a4 7d 84 dd 92 48 f0 e0 de ae 07 74 32 8c 8a d6 27 d8 7e 3b d2 83 1b 97 c8 86 69 19 33 61 76 2a fc 80 f2 81 2a 78 ca 24 63 dd a2 6d 33 cd 14 a1 8a c3 5d a2 5e c5 c3 6e 95 0b 2e ad f8 38 b0 cd 9a 17 c4 c4 52 ae f5 23 f6 3b bc 82 67 02 ca e8 ea dc fb 0a 94 6c 6c 93 ce b3 12 b0 1e 5c 34 de 90 48 8e ab f8 e6 ee 23 b0 19 99 f2 b1 a5 5d c9 64 5d f5 7b e4 fa d8 c9 70 a1 a6 65 e0 1e cf 1b a4 32 ad b0 14 5e 4a ef cc dd 60 d1 ff 39 0e f2 66 11 14 8c e3 fa c6 cc f6 1c Data Ascii: 2 F^qgg<cIw2T?foy8mn5KIm#ddOr,L@;qU2}Ht2'~;i3av**x$cm3]^n.8R#;gll\4H#]d]{pe2^J`9f
2024-03-18 16:22:05 UTC	1369	IN	Data Raw: 3d 6a 2d 80 08 d3 00 85 5a f3 78 3d 2e 52 df d5 98 56 a1 2a bb 7f 36 f3 d0 e1 37 73 6a b7 e5 58 5c 55 03 d2 7f f4 93 b1 3c b8 62 ca 81 2b 30 a2 3e 93 fb 88 92 6d de 9f e9 9c 8e cf 7e 17 ab b4 d4 74 3a 17 8e b5 8a 16 39 6d 4b f1 29 8b ed ad b4 ae 7e c6 27 26 f9 67 0f 77 3a ca 3a 11 7f d7 87 00 68 01 29 a9 b0 4b 05 51 61 27 65 a4 67 93 3a 82 e6 47 bd 34 a1 9d 0a 5b 5f 13 bf d3 40 67 a5 25 b5 a9 98 60 21 01 4d ce b3 b7 64 48 2e 2d 2b 56 bb 73 c3 d1 6f 93 4c 91 4c 78 c8 26 7e a9 a6 1c ff 19 55 2c c7 c7 af 3e 3a e1 f9 79 46 b3 4d 34 3c fe 55 86 91 7e 5e 6f f0 13 77 fe 25 29 19 a2 4a 97 97 8a ae 5a 8e a4 c1 7f b5 96 b5 fe c1 e3 15 d4 0c a6 ab 11 81 4f 57 29 6b cc 92 d6 27 9e c9 d0 46 7d d6 2b d3 3b fd 87 94 46 e6 8e 1b 25 d9 95 56 ec ac 61 40 db d5 78 ba 94 b1 Data Ascii: =j-Zx=.RV*67sjX\U<b+0>m~t:9mK)~'&gw::h)KQa'eg:G4[_@g%`!MdH.-+VsoLLx&~U,>:yFM4<U~^ow%)JZOW)k'F}+;F%Va@x
2024-03-18 16:22:05 UTC	1369	IN	Data Raw: 45 25 f0 fc d2 4e c3 9b fd 44 57 a9 b7 d3 1a bb f5 01 df 3d 85 1d de 7e ee 33 3d f3 33 6a 59 d0 25 ef 52 fd d6 59 32 86 51 6c f2 07 0e 36 a8 04 7d d2 12 5d d3 cc 44 5c 3c 29 89 d0 3e 59 f0 2d 5d eb 92 76 1e 4c 6e 93 ee 90 10 66 f0 85 ea 39 f1 df b5 e3 1e c3 bb 83 cf 01 a7 ac 77 ec 0e ab 3b d2 37 d7 40 c6 79 44 dd 38 8e 22 93 5b 7d 5a ee b5 a9 d8 83 44 af fd 34 bf 2f 79 8b 43 d3 7d 83 dd 52 cc 8f 0e 3d e5 74 fb 3e f0 17 74 64 3c d9 ad 1c 76 f4 56 67 02 d8 35 75 0b d5 99 4e 5f 57 d4 96 14 f3 00 49 b5 c1 72 e4 b9 c2 90 88 30 8c 21 00 a1 9f f2 5d 3f 38 00 08 ca 81 77 cc ad 97 d7 5b 70 2c 1a 23 01 24 e5 c4 3b 91 d3 9f de 1f 86 7a b6 7a 69 e4 b6 86 2e 47 d1 24 79 a2 56 67 9c 58 59 28 56 73 4d 3d 95 7c dd 89 2e f6 21 46 92 83 ae b6 bf df 70 38 e4 93 54 c6 5a 32 Data Ascii: E%NDW=~3=3jY%RY2Ql6}]D\<)>Y-]vLnf9w;7@yD8"[}ZD4/yC}R=t>td<vVg5uN_WIr0!]?8w[p,#$;zzi.G$yVgXY(VsM=\|.!Fp8TZ2
2024-03-18 16:22:05 UTC	1369	IN	Data Raw: 24 83 cc fe 78 7b c9 c0 ec ad e7 e3 77 b6 07 80 26 9b 19 80 b2 14 8e 97 69 57 02 8b 4e 7d 0f 6b db dd 23 4c ff 72 e9 41 41 46 ce c6 ec 50 ed d4 57 67 04 23 9a 62 68 ca c3 83 e3 db a6 67 b2 02 7d b9 d0 3d af c1 57 6d e2 7b 62 6a 6d 7b 57 a2 1a 7a 3d a2 b2 b7 d3 d4 5b e3 8c 53 e8 0d 79 9b 30 db 42 ea 19 51 59 09 65 d7 3b f2 32 a8 92 88 94 2d 91 1b 1b 29 6a 14 66 49 c6 c1 88 5e ff 46 46 54 b6 ff 1d 3c 2f da 38 31 d6 92 d7 dd 12 c1 2c a1 7f 9c f0 44 7f f1 d3 c0 b2 b0 87 2a 93 55 a1 e0 0b d8 b3 99 b1 57 e4 70 04 61 89 c9 c0 78 0b 3a 2e 3d df 61 43 c0 4a ac 9e 05 76 d8 ca 80 ae cd ee 4a ab a7 92 c9 cf 71 57 db f7 7f 9c 8d 87 77 02 21 f1 9e dd 7f 3f 89 35 2b c4 66 1d 28 0a 5b 37 95 03 43 d6 6d c8 4f 06 35 ef f4 83 de 18 fb 02 75 70 b1 36 3b f3 c4 a6 85 58 f2 59 Data Ascii: $x{w&iWN}k#LrAAFPWg#bhg}=Wm{bjm{Wz=[Sy0BQYe;2-)jfI^FFT</81,D*UWpax:.=aCJvJqWw!?5+f([7CmO5up6;XY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49788	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:04 UTC	792	OUT	GET /static/fonts/open-sans-v17-latin_latin-ext_vietnamese_cyrillic_greek_cyrillic-ext-regular.woff2 HTTP/1.1 Host: browser-update.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://browser-update.org sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://browser-update.org/static/base2.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0
2024-03-18 16:22:05 UTC	761	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:05 GMT Content-Type: font/woff2 Content-Length: 43236 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=open-sans-v17-latin_latin-ext_vietnamese_cyrillic_greek_cyrillic-ext-regular.woff2 last-modified: Sun, 21 Mar 2021 12:19:11 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EvDDALm%2BqPpSXAa%2FMWGP4Op4AWEQ9wLoh0SGLfmsEcfZH0B9ais%2FT8g7%2BKz6V2GeSeMVgmXLgp01LePkAw0RawyCscSAKbd7kcT%2BZol4NqL%2FkfSO58rh5XMudHQzGNoXeX6yPQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f3a3b1a422f-EWR
2024-03-18 16:22:05 UTC	608	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 a8 e4 00 11 00 00 00 01 6e d4 00 00 a8 81 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 2e 1b 10 1c 81 56 06 60 00 87 08 08 81 22 09 8f 34 11 10 0a 84 d5 18 84 88 5f 0b 8e 0e 00 01 36 02 24 03 9c 0a 04 20 05 83 5a 07 ba 35 0c 82 09 5b 5c 40 71 06 6b b7 5d ca 25 8f ce db 46 e3 53 53 4f d8 bb 80 dd ca e3 6e a5 43 41 38 d5 8a 8e e0 b0 71 80 19 e8 de 54 f8 ff ff ff 37 24 8b 31 e6 dd 6b f7 20 8a 69 a6 22 d6 6a b5 41 96 0b 41 1c 23 ba 80 94 3c 22 39 fa 01 51 c1 91 02 b2 12 c6 98 92 a4 08 b1 58 c6 d5 8d 69 be 2d f7 bc 6e 48 a6 64 ce 32 25 53 6a 31 72 dc 51 2e ef 98 67 24 ea e3 34 75 e9 3e 21 b5 36 a9 bd a3 52 a1 35 64 ac 71 43 aa 67 42 2c 74 3e 4c 8d d6 2e db 73 e3 da 42 6e b0 cf bc b5 3f f3 99 c9 8d f4 Data Ascii: wOF2n.V`"4_6$ Z5[\@qk]%FSSOnCA8qT7$1k i"jAA#<"9QXi-nHd2%Sj1rQ.g$4u>!6R5dqCgB,t>L.sBn?
2024-03-18 16:22:05 UTC	1369	IN	Data Raw: 37 77 7e 64 5d 90 28 56 a8 77 f7 dc 3b c3 06 48 59 c0 09 a7 31 45 73 fc 31 d6 dd 9f ab e7 fd af db bf e1 51 07 aa a3 f9 2e a2 63 23 15 75 c6 a5 62 f3 77 a7 ff 26 37 d2 73 0a 4e 64 0e da 5e db a4 83 75 38 8d 31 58 89 17 cc 37 5a 9c 98 fb 4f d2 c7 9e b7 04 43 18 ec 26 92 7b 19 00 ce ac 57 4b b7 bb 29 ad 1d f3 dc d3 9a 43 6d 7a a3 a9 ff 50 34 42 9e 83 ae f4 c7 65 50 08 83 92 48 b0 19 80 6d 8a 7e 5e cc fc 66 f4 b6 6f c6 0a a3 16 0c 51 6f c6 ac 58 b8 cd 8c a9 80 8d 05 88 58 48 89 c5 94 32 0a 45 ac 42 dd d0 b5 f3 9b 2e 0b 61 1b 08 eb 7c 8d 82 8b b5 03 f7 b9 92 46 e7 cc 84 ec 4a 34 40 52 f6 4e 7e 98 9b f7 b9 c4 88 c6 c6 00 8b 45 1f f7 06 ce f9 14 7b 5b 8b 8e f0 29 b2 a8 78 45 fa 89 fe 6b 87 e7 81 87 96 18 fc 9a 05 40 2a 6e b0 87 00 02 6e 8c 71 cc 42 07 9e a7 b5 Data Ascii: 7w~d](Vw;HY1Es1Q.c#ubw&7sNd^u81X7ZOC&{WK)CmzP4BePHm~^foQoXXH2EB.a\|FJ4@RN~E{[)xEk@*nnqB
2024-03-18 16:22:05 UTC	1369	IN	Data Raw: 87 ef 61 a8 c6 d3 31 e0 27 e6 04 8c 2f 56 80 fa 4f 6c c6 7c 46 17 99 c3 01 18 bf fa d6 bc bc 97 fb 92 26 70 98 e3 33 1e b2 06 61 ea 82 ef 8f a9 73 53 67 7d 8f 67 03 53 df fa ae cf be 79 e9 2f 15 66 1b 1e 68 ea 5a 98 bd 98 7a 3e 95 ff f9 39 7d 76 6a 72 ba f7 f3 fd 91 b9 04 3e fc 29 93 08 be f9 e4 ff 1e 55 e5 7f 1f 44 e0 23 f4 d1 43 1b 25 14 91 41 1a 5f 78 c2 15 be e0 43 16 4d f0 e5 dc ff bf ff f4 c1 8a f4 23 54 10 c3 1e 12 a0 04 a0 fb 5f f7 97 77 bc 7f 7b 6f 06 f7 e0 e2 5e 13 84 ce 49 10 d8 78 b4 8f f3 78 7b 9a bc db 69 f2 9d 88 86 83 c7 c3 59 e4 ee 46 82 d1 c4 e3 7e 8b 27 dd cc 78 bf cd 77 dd c2 44 bf 73 09 00 97 82 fd d9 03 6d 4b 3a f3 41 b6 e6 c3 fd ee 6e cb b6 6c cf 8e ec cc ae 55 e0 45 f6 24 e3 fb fd 1d 19 95 bb d4 b9 ac 7a 5f e4 48 f7 f0 f4 12 30 97 Data Ascii: a1'/VOl\|F&p3asSg}gSy/fhZz>9}vjr>)UD#C%A_xCM#T_w{o^Ixx{iYF~'xwDsmK:AnlUE$z_H0
2024-03-18 16:22:05 UTC	1369	IN	Data Raw: 7c ff e3 17 80 58 a3 b7 1b f7 cf ec a7 61 e3 ff 01 db 2f 06 2c 3f 01 b0 78 39 38 76 11 90 af 64 5c d7 62 81 1d 8f 27 40 8d 34 4a 21 62 f9 0b d8 20 2d 16 e9 a9 3a 81 9c 58 a2 8c 24 15 08 2c 36 0c 8f 47 30 82 99 86 bc bd ef 7f 64 22 35 2b be c5 a7 31 0a 04 cc b4 05 3c 89 dd d6 20 54 0c fc 23 13 c6 00 6c 4d c3 51 6c 7e 08 a2 aa d8 e6 71 00 01 9a c9 8c d9 30 ec 86 63 3c 0b 28 9c 84 7c 44 87 b0 9e cd 47 99 b1 3c 18 43 18 30 b3 0b b4 4f b9 19 31 90 1e d9 63 40 e2 21 34 26 c5 2e 3a 21 c0 e4 2c fe ca 6c ad 9b b2 f8 fb 09 0a 19 86 30 6d 93 26 60 3f 5c 30 51 5d 66 17 24 14 6e 00 c9 24 f0 db 47 03 3a 27 f9 4a 63 4f 50 13 22 6e 50 50 3b 4b 5e 3a fc d4 94 b6 ce 43 34 a5 8d 44 7c c6 14 c4 b4 c8 48 ea 38 8c e7 a0 c2 84 f0 81 0b e3 fa 62 fa 88 b1 15 40 78 0d ba 96 31 2a Data Ascii: \|Xa/,?x98vd\b'@4J!b -:X$,6G0d"5+1< T#lMQl~q0c<(\|DG<C0O1c@!4&.:!,l0m&`?\0Q]f$n$G:'JcOP"nPP;K^:C4D\|H8b@x1*
2024-03-18 16:22:05 UTC	1369	IN	Data Raw: 59 07 03 a1 5a bd 10 b9 92 2f 08 a2 a5 1d 2f 62 84 c9 03 76 0f 70 7d 8e 48 26 39 d6 64 6e ac 3f 35 62 eb 07 18 12 b6 0a ca 0b 16 e2 90 93 b3 33 47 39 ef de 67 98 bf 2a aa 96 85 b0 58 16 2a a9 e0 1e c6 51 64 73 46 5a a2 89 5d 5c 25 bb 06 d0 ae 14 d4 cb bc fa cb 8c 3f 51 a2 1a d4 24 8c 71 3f b2 e3 0d d0 02 e6 1b b1 1e ec 82 c2 48 12 05 8e 47 f0 d3 f7 ee de 7b c7 55 d1 25 4e a9 55 cf b3 c0 85 12 70 53 64 9d d8 fa 2f d7 e4 71 7f 32 cb 48 20 33 94 7f 97 23 8e 2d 9d 6d 4d 3f df 3e c2 e8 77 62 c8 9b bb b4 67 2c 12 6e 14 54 0f 17 44 8b f7 9c 7b 1c ea 5a 6c b6 e4 78 30 d4 eb d7 94 69 89 b9 3a 46 87 4c 56 29 c1 eb b3 7b 9f 54 44 a7 18 0f 7f 60 af 3c 0f f8 e7 e5 42 ec d4 85 d0 ea 2a 66 ce 86 8c 4f 9e 34 06 68 b1 a3 17 a3 90 47 48 95 5e ff bc f9 27 7c 18 8c 02 95 cf Data Ascii: YZ//bvp}H&9dn?5b3G9gXQdsFZ]\%?Q$q?HG{U%NUpSd/q2H 3#-mM?>wbg,nTD{Zlx0i:FLV){TD`<B*fO4hGH^'\|
2024-03-18 16:22:05 UTC	1369	IN	Data Raw: a0 0f 47 c2 97 b9 cc f7 6b 68 78 cc 99 6f ec 02 c8 29 12 a1 46 f5 19 0c 3c c3 f5 ba a0 91 0e 3f 65 54 e8 0b a6 00 70 44 0a 21 d1 3a 3e 50 e3 6f c9 06 55 71 d3 24 f8 40 d4 84 7c cb c6 c2 26 2b 8c cf ea 6b 36 b3 d3 12 3f 16 57 12 b6 bc 68 df 5e db 21 c2 12 60 6f b9 41 80 28 58 2f 8d 25 36 ce 17 28 0e da 5c 1e 71 ba ac e1 24 63 ad d8 21 e9 5b f1 86 4d f8 b7 38 5b 2c a1 8e 30 5f b5 e8 96 2f bd 19 ca da cc 46 5c 56 60 5f 24 7a e5 8a a8 85 6e 58 44 12 ac 44 6c a2 4e d3 45 82 d8 d2 9e e2 e6 59 6a 7c 68 1f b5 ad 22 05 f9 43 b5 48 73 75 f8 cf 32 62 41 d6 fb f6 93 c4 77 b8 31 c4 8c d4 6d b7 9f 9f e9 bb 3c 14 fa 3e 83 64 43 08 44 08 a2 43 65 4a fc 0e 8c 8e 38 f1 0a f5 93 67 64 77 2c 72 f9 e4 7f e2 67 ac 3c 55 fe 33 e3 6b 7c d5 ed 6e bf cb 55 ba e6 90 7b 85 ce 45 20 Data Ascii: Gkhxo)F<?eTpD!:>PoUq$@\|&+k6?Wh^!`oA(X/%6(\q$c![M8[,0_/F\V`_$znXDDlNEYj\|h"CHsu2bAw1m<>dCDCeJ8gdw,rg<U3k\|nU{E
2024-03-18 16:22:05 UTC	1369	IN	Data Raw: eb 1e 6b 27 4c 65 16 94 60 d6 52 83 d2 87 2f 40 b5 53 9d 29 1c ef 81 9f 35 68 32 d6 80 41 57 f3 82 9a 5c 72 f7 a6 4d f8 a3 a0 9f 3a 97 12 92 d3 4f e7 22 d4 9c 70 87 64 a8 05 f2 49 ff 14 b2 d1 56 cf f9 56 2d d8 df 95 0f ff e9 91 15 f4 61 df c3 a4 cf ff af 1a 47 61 ad 5f c7 7a 53 78 86 74 4b a3 bc ea 29 db 8e c7 e3 a4 e2 0d 9a 9b 61 d4 d8 8e 47 19 bc 25 1d 4a 6f 48 c9 6b 2a 9b d5 db ef f1 85 b2 d4 88 5f 47 0e b9 b4 e3 45 cb 73 1d d9 a4 a9 64 b0 df 5d 36 f5 48 7a ba fe 50 b7 5e 34 ea 2e 18 d5 ff e0 63 75 df 12 a2 a4 e3 4b 92 90 3e 0e 46 0b 6c 5a 3f f9 32 f5 2d 27 50 84 08 54 e6 08 16 d9 ee 36 66 ed ad 06 ef a3 aa fc fb b8 ef e1 07 d3 0d 2f 0c ee 63 f1 19 67 8b c3 3d 15 cd 82 10 48 85 28 d5 20 b8 e5 12 c5 4f 34 32 fa b8 25 6a fe 46 fc bf 83 b7 0e 64 b0 50 ea Data Ascii: k'Le`R/@S)5h2AW\rM:O"pdIVV-aGa_zSxtK)aG%JoHk*_GEsd]6HzP^4.cuK>FlZ?2-'PT6f/cg=H( O42%jFdP
2024-03-18 16:22:05 UTC	1369	IN	Data Raw: 8e 71 c8 05 24 a8 03 df ad 94 66 8c 92 24 13 bb fe 78 6e 5f c7 1a de bc 58 c8 7a 56 74 a2 22 ab 8e 69 30 ff 6c 53 54 9b 9a 85 57 77 52 70 77 22 ff dd 08 1e c1 f9 59 52 95 87 82 f2 9c fe 99 f1 e4 7f e7 bb b0 5a 11 e6 31 c3 18 df c4 2c 57 91 54 f0 1c f1 5a 76 8e 34 f2 11 48 90 b8 81 b6 ff d9 5e 98 ad 5c ea 3d 28 53 97 57 7b 73 a3 a8 9d 8e 10 5a bc a3 7e 4c a2 f4 2e 3b 41 f5 c1 46 07 d5 8d d2 af 8e fa be c4 1e 54 db e0 57 08 47 d8 6f 73 53 d4 f9 78 57 48 86 33 bd f2 fc 65 9c 6f 33 f5 8b ba b6 c2 85 cb 66 03 b7 dc 4a 44 ec 59 60 7e 72 45 9b 87 17 b2 d5 b2 0f b1 82 46 7a ba 80 80 f0 90 55 11 ba 00 d8 6a a0 e2 e2 72 5f a6 29 51 f6 27 88 11 f4 b6 e4 54 dc ab 73 6c 1c 28 44 27 47 aa 35 81 e4 80 56 de 13 1a c8 27 18 ca a3 91 8b 0f 09 b3 67 96 3b 33 b5 4a f1 cc 43 Data Ascii: q$f$xn_XzVt"i0lSTWwRpw"YRZ1,WTZv4H^\=(SW{sZ~L.;AFTWGosSxWH3eo3fJDY`~rEFzUjr_)Q'Tsl(D'G5V'g;3JC
2024-03-18 16:22:05 UTC	1369	IN	Data Raw: 27 54 e5 1f 49 3e fd 3d 55 0f 3b 3b 07 43 c2 e8 39 c7 5d f0 8b f8 cf aa 4e 6a 30 59 ab 9f dd ab e7 6b 3b 41 8f 48 c1 fc 84 a7 24 0f 87 a5 db 2f 3a 3c 68 2d 63 ce fa 7e 65 6f e2 60 45 69 ed 00 09 4f 7b a5 e5 ce 07 42 a1 3a 5a df 9b b7 4c 4c 51 86 3f cc 6a ab 35 eb ac e4 07 d7 85 6a 56 da 64 4c 8e 1e 40 2a a1 9d a1 38 c2 d9 7f 9f 2f 64 e8 7d 42 e2 dc d3 6a a3 9f d3 bd 03 16 5e fd cf f3 b2 6f 3f e7 c1 90 41 db 6b 1a c2 b1 ea 5d cd 3a 67 69 16 8c 1d c0 e4 8c f0 4c b0 04 26 6f 8a 72 26 f1 32 25 a1 c1 2d 54 65 8f a8 d8 ec 34 ab 1e 00 1a 3f 39 b2 74 6c ff a2 22 a7 ab d8 da 6f 1b eb 75 6b 3c c7 74 d4 ba 73 37 da 95 3d 9a de 30 09 05 e0 be ee 1b ad 8d f4 a0 80 6b 57 08 84 10 84 ff 12 eb 6a 95 3a 01 84 51 e4 70 cc 1d c0 59 ec c7 0d a0 fc ad 05 5b d4 01 78 da 74 ed Data Ascii: 'TI>=U;;C9]Nj0Yk;AH$/:<h-c~eo`EiO{B:ZLLQ?j5jVdL@*8/d}Bj^o?Ak]:giL&or&2%-Te4?9tl"ouk<ts7=0kWj:QpY[xt
2024-03-18 16:22:05 UTC	1369	IN	Data Raw: 4a 7c 1d 92 dc aa ee 60 86 7b 49 57 6d aa 46 2f 55 65 65 bb 38 1b 5f 8e ba d0 40 38 4b 85 35 9d 57 e4 19 33 64 b3 8a a7 e3 15 50 0e 5e f5 fd ae 7d 64 ca 9b 90 df 0e a5 0e 95 51 21 09 04 f0 1a 9d 5b 2e 3d 6e 60 dd 4e 5f a3 b6 5f 7a 43 16 fc 78 17 a7 86 96 e7 cf 36 6b 8a d3 e7 de c1 5d 9e 49 91 80 a3 3c f7 0d 63 da cc 2f 5d 75 b3 8b 65 27 f0 57 80 06 87 21 a1 9b b9 a3 f2 7d f4 c3 09 7d 9c 23 52 ae c0 71 cc 02 f8 22 af 6f 35 f1 c2 94 32 0f 88 d7 6d 3f f9 80 2a bf 4b 37 5e c2 14 a8 9e 80 8f c0 46 8e 67 aa 36 63 56 70 c7 cd 8f af e8 00 10 f4 b9 4f 09 ff 6d cb 07 03 cf fa 7c 7e 91 4f 83 f0 1e 5f 61 1e c3 c0 9c 5c 14 2a 93 c8 53 f4 53 76 bd 88 14 ad 34 64 94 3f b6 f4 55 9e de 33 6a 10 fa ae 4c 2c 8f c5 15 a9 3f 21 b4 35 81 31 8e 2f 0c cc 69 28 15 ca 60 85 e3 7a Data Ascii: J\|`{IWmF/Uee8_@8K5W3dP^}dQ![.=n`N__zCx6k]I<c/]ue'W!}}#Rq"o52m?K7^Fg6cVpOm\|~O_a\SSv4d?U3jL,?!51/i(`z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49787	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:05 UTC	749	OUT	GET /static/img/big/f.png HTTP/1.1 Host: browser-update.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://browser-update.org/update-browser.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0
2024-03-18 16:22:05 UTC	677	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:05 GMT Content-Type: image/png Content-Length: 11583 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=f.png last-modified: Sun, 01 Aug 2021 16:06:48 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N1BfwPkDKDHJU9AooyJuBs9YVzu93pJAcVCzodXu%2FIgP8i9su8%2FcESDHw8tT9s7ylje2%2Fe15M1Izw6e0bG0syE8uy93Ik4VCn9exlP6FQ4m90IVZxkOQawmNLjqhLZun4KgM5A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f3a3b9ec32c-EWR
2024-03-18 16:22:05 UTC	692	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6e 00 00 00 72 08 06 00 00 00 b2 4f e4 1b 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 01 b4 00 00 01 b4 01 4c 22 4d f8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ed 9d 77 bc 1d 47 7d e8 bf bf d9 dd 73 8f 6e 51 2f b6 25 cb 92 65 e4 86 3b 18 db d8 60 1b 9b d0 8c 29 36 21 e0 18 1e 18 87 50 f2 28 01 f2 80 24 32 38 81 cf 07 12 1e 84 98 f0 52 70 30 2d 06 d3 f3 02 a6 b8 53 25 e3 26 77 c9 b6 dc d4 ae ae a4 ab db ce d9 99 df fb 63 db ec 9e 3d b7 48 2e e4 7d 3c 9f cf dc 99 9d 9d dd 3b 3b df fd 95 99 9d dd 03 cf 84 29 83 6e e6 45 ba 85 63 9e ee 76 f8 c1 3c dd 0d f8 7d 0f 3a c4 41 Data Ascii: PNGIHDRnrOsBIT\|dpHYsL"MtEXtSoftwarewww.inkscape.org< IDATxwG}snQ/%e;`)6!P($28Rp0-S%&wc=H.}<;;)nEcv<}:A
2024-03-18 16:22:05 UTC	1369	IN	Data Raw: f2 cd a1 5d 4f 64 d7 ec b3 8d 1b 3a e8 05 af 79 22 1a 52 0a 6f 1b 3c 92 77 ee f8 24 3d bb 1f 41 b9 16 31 7f 85 f0 7c 20 4a 2a f8 f7 5b 66 7f 34 29 ce d3 9a 32 e3 e7 b5 14 9f 1d dd c9 bc d9 bb 82 e4 64 73 a7 d7 4e 59 00 d1 0b c1 cc 5d 85 f2 5b 1d 64 59 69 ff ba 65 af 26 d4 17 11 36 ce df bb 8e e8 1e f6 09 dc 8e e5 a7 5f 60 44 bf a5 27 9c 10 ed 73 4b ce df 30 87 ff b1 e5 cf b9 68 eb ed 18 ee 40 e5 43 08 8b 73 46 39 2b 1f 9a 78 90 bc 08 40 15 a4 d6 80 4c cb 8c f2 d1 85 9f 2d 8e 35 73 a6 d7 66 55 d0 26 84 a7 40 b0 6c 19 6d 6e d5 2d ac ca f7 47 fa 3e 02 07 a1 be 57 cf 27 98 69 97 4c 16 c2 bd 3d f0 f1 fd 4e 5b a4 46 2f 43 90 91 c1 81 05 50 56 13 d3 0d 03 af be 6b c1 c4 ac e6 bb e3 20 fa 33 07 f3 f2 de ab f0 99 12 92 9f 76 48 9f 16 75 6b f7 29 2f 9a 77 83 f7 ff Data Ascii: ]Od:y"Ro<w$=A1\| J*[f4)2dsNY][dYie&6_`D'sK0h@CsF9+x@L-5sfU&@lmn-G>W'iL=N[F/CPVk 3vHuk)/w
2024-03-18 16:22:05 UTC	1369	IN	Data Raw: 8f fe 94 fb ed 21 10 36 20 8a 8a 49 66 1f de 54 93 cb d9 c4 32 6d 98 18 67 f8 8c 67 d3 df 33 52 5c ac 39 10 82 63 a7 00 30 45 a8 03 e6 17 d9 ad f0 db 75 a0 fa 25 39 87 b7 cc ec e4 d3 54 95 ca f9 41 8c 79 76 0c c4 aa 58 94 76 aa 26 fb cc 38 07 87 3b 38 20 da c5 ac a0 95 4e da 92 ab b5 6c 2e 30 8f d5 6d a3 ac 68 3c c2 cb 7a af 2d 1f eb c7 54 55 be 7d eb 67 b8 bf 75 30 88 49 54 64 de 40 4f 35 56 55 a2 93 ce bc 4b b7 6d 32 9e 19 9c a8 4c 2a bb 6d de b9 67 32 96 ab 51 9f b9 4a ad d4 31 8b e0 84 c3 a1 87 37 eb 35 75 43 a4 c9 c3 b4 c0 dd 77 50 bc 7a 42 a5 61 45 89 45 89 15 02 62 96 07 3b 59 1a 0c 13 19 5b 06 23 3e 20 4a 9d 3f 15 c4 f2 7e 72 db 76 c5 ee d7 71 d5 ee 73 92 0b 0f a2 14 8e d7 29 2a 93 40 93 32 34 3f aa b0 71 a4 3a 63 37 0e 6e d7 cc ec 57 1d 9c d2 f1 Data Ascii: !6 IfT2mgg3R\9c0Eu%9TAyvXv&8;8 Nl.0mh<z-TU}gu0ITd@O5VUKm2Lmg2QJ175uCwPzBaEEb;Y[#> J?~rvqs)@24?q:c7nW
2024-03-18 16:22:05 UTC	1369	IN	Data Raw: 50 ba c9 13 58 7b 5c 93 9d ed 39 14 0e 8b e7 49 66 d0 72 89 4b 63 63 36 68 c4 d6 e1 45 bc e9 da cf d4 83 73 0a f6 56 70 db bb 03 ab f5 18 bb 49 d8 24 d1 2d 3a 5a 1f a3 b7 ee 92 3b c0 89 e3 cf 13 68 5e 59 d6 d1 1d 95 99 44 ca ba 95 4f a3 6e 7e 7e af 43 fc a0 50 7e 22 e0 ed 4b c7 62 57 6d 7d 09 a8 2b 3c d0 12 3c 29 03 cb 00 aa 40 73 0e a8 e1 eb f7 bc 8a cf de f1 d6 4e 75 a9 80 5a 88 7f 07 ee 11 af 3d dd 80 31 39 9c aa a4 95 f6 35 a1 75 c0 67 3b 3b be 02 6e fd fc 0b 5e 82 70 ac a4 ad 91 0c a0 64 9c a6 2b 51 dd ca bb 95 75 39 47 a8 d4 c2 a9 9e 2e eb dc 34 6e b5 f3 79 fb 1d 9f 28 43 53 2d 40 56 ed 5b 9e 1a 20 4a e0 59 78 cf 75 97 f0 c3 4d 67 d5 4b 9e 2a c4 77 82 7d b0 dc b8 3a 60 93 c1 99 0a a6 9b f3 c7 75 5d 53 02 a7 2a 6f 2f dd fd 90 df f5 55 ad d5 d5 ee 65 Data Ascii: PX{\9IfrKcc6hEsVpI$-:Z;h^YDOn~~CP~"KbWm}+<<)@sNuZ=195ug;;n^pd+Qu9G.4ny(CS-@V[ JYxuMgKw}:`u]So/Ue
2024-03-18 16:22:05 UTC	1369	IN	Data Raw: 8d 90 7f 18 20 6f a6 4c 2d fc 9a fe 09 9b 30 36 ce 6d 9b 0e e6 de c1 e5 ac 3e 6e 13 fc 8a c2 59 39 ac ee b8 34 6d 3d 04 44 60 52 7f 23 57 75 7e 5e 8b ff 95 0d 09 d4 2c a3 6d 3e 4f 33 fc 59 c2 4b e4 f0 3a fb e6 03 eb 50 95 7e 43 4a 52 d3 4d fa 92 f2 a1 dd b3 d8 b6 63 00 1b 07 44 a1 25 0c 1c 51 60 21 b0 fc 78 f8 28 fe 72 d3 f9 10 08 96 90 2f dc 7e 0e 1f 39 f9 eb fc 6e c7 2a 6e de bc 8a 20 b0 88 8d d3 d7 b2 12 60 e0 03 d3 1c 96 a8 43 25 40 45 d2 7d 09 40 15 41 25 fd 2a 11 3e 40 3f 9d 0c 5a 9a 91 46 22 a1 38 7e 72 e7 73 59 7d fa a6 c4 ce ed 04 76 00 0f 02 07 d5 f4 55 16 26 1e 80 c6 6a 92 f7 cd 2b 90 ba e5 9d 99 47 db 04 04 c1 f2 e0 1a de 33 37 0c dd a5 81 58 8c 58 02 71 18 71 04 69 34 a6 d8 36 92 ac 35 c9 17 0f 09 de 5b 32 7e a4 63 9d 87 13 78 78 fb 5c 06 07 Data Ascii: oL-06m>nY94m=D`R#Wu~^,m>O3YK:P~CJRMcD%Q`!x(r/~9nn `C%@E}@A%>@?ZF"8~rsY}vU&j+G37XXqqi465[2~cxx\
2024-03-18 16:22:05 UTC	1369	IN	Data Raw: 2b d5 cd 67 6e 33 70 a0 1b 43 f5 51 13 c4 66 3d 98 71 55 53 48 18 82 2b 81 34 e5 7c 9d 9d 73 54 d4 a6 60 ac d0 83 d2 40 09 4a ef c5 39 ef fb 23 94 06 ef 03 e1 04 9f 7d e9 97 38 6e f1 3d a9 6d 8b 09 52 5b 57 97 d6 d9 b5 4e fb 57 b5 5f 75 b1 9b ad ab ab 93 a4 12 8f e5 b6 78 f1 c0 ae f2 03 d5 ca 97 13 73 d5 39 5e dc d8 b5 f6 2e 1e 2b 3f 07 f4 e3 50 08 03 71 13 67 37 98 b3 f8 c4 20 ce 0c 3a 5f c2 34 b1 71 ae 0a b2 34 2d e6 dd 91 15 60 d9 6b bc 46 95 08 87 54 df 90 c9 de 48 cd 25 0f 6f b6 05 1a c6 f2 b9 57 fc 33 ef 7d fe 55 cc 0e 47 52 48 b6 16 5e 69 92 79 4a 68 9d 4f 16 3a 21 75 07 1c c6 c5 fe 30 6e 23 ed 09 8c b5 cc 6e 8c b0 df dc 1a 70 e2 c5 ec 4d dc b8 06 56 c9 49 a9 82 b3 45 6c 3a 50 6b 70 76 43 62 2a 8d d9 ae 54 d4 63 4d de 97 bc 5a 3b 57 7a 94 21 98 7c Data Ascii: +gn3pCQf=qUSH+4\|sT`@J9#}8n=mR[WNW_uxs9^.+?Pqg7 :_4q4-`kFTH%oW3}UGRH^iyJhO:!u0n#npMVIEl:PkpvCb*TcMZ;Wz!\|
2024-03-18 16:22:05 UTC	1369	IN	Data Raw: 77 2d 23 34 11 b3 23 43 40 bb c3 ab ec 26 71 23 f1 2e c4 b6 39 fb c4 7b 39 f5 a8 07 48 9f 41 97 83 23 91 b8 4c 0b 54 46 45 b5 20 fd d4 40 b1 10 36 8f a3 b4 f5 db 1d e0 00 9c 9a 9f 64 e0 ea a0 25 db 01 4e 5d 5e 66 b4 50 95 a5 31 9d 93 64 2d a1 49 9d 0b 53 e3 7c 18 a1 bf b9 9d 46 63 94 ed 3b 0f a6 35 da 8f 04 16 09 62 24 8c 31 19 b0 d0 26 f9 28 2e c1 4d 60 a7 69 fa a3 0c 79 59 e8 f8 d5 c3 4b f8 cc b5 c7 f3 d0 e0 1c 10 a1 d7 84 84 d2 c0 89 c3 29 34 4d 2f a6 4e 4d 42 ad c4 59 67 99 68 ef a6 af 67 82 8f fe f1 cf bb 4b 5b f6 49 67 7f bf af 16 a5 a6 cc 4f 5d 3a ce 2d 81 e3 6b f2 c6 e2 6d aa 32 38 c7 77 9d 98 4f 97 54 a3 4b 66 26 32 88 56 0d a6 a2 3e 8d 24 2d d0 14 a2 e0 43 d2 12 a8 12 c4 34 df 08 47 38 60 bf 5b d9 3d b2 3f 3b 86 56 32 b2 67 3f c4 38 4c 60 c1 58 Data Ascii: w-#4#C@&q#.9{9HA#LTFE @6d%N]^fP1d-IS\|Fc;5b$1&(.M`iyYK)4M/NMBYghgK[IgO]:-km28wOTKf&2V>$-C4G8`[=?;V2g?8L`X
2024-03-18 16:22:05 UTC	1369	IN	Data Raw: ef 6e c2 63 0b a1 b7 7d b0 5c ba e5 81 ba 36 77 fd d0 68 22 75 c1 1a 23 c1 f7 8d b8 92 d4 59 97 bc b9 63 34 c0 a4 79 a7 0e 9b 2d 19 4f d5 28 14 c3 03 20 f1 32 73 9d 6a 92 69 1d db 4d d2 b2 db 33 cb 27 36 cc 84 8e b3 0e 7c 90 b3 56 6e e4 be 5d f3 b8 ee c1 55 dc fc f0 4a 36 0d 2d 28 fd af e9 04 09 27 38 64 c5 83 9c 71 fc 5d bc e8 a8 07 e9 ef 6d 17 2e fd 4c c0 b5 28 db 2c e8 94 a4 0c 56 76 fe ea be dc 4e 1a b8 7f 01 f4 30 41 b8 c5 7f 14 5b 6e fb 64 17 a6 20 3f 0e 3e fc eb c8 c4 cf 2d 24 2d 1b 90 b7 09 4b d2 d7 26 30 6d 42 49 a5 ce 1b 94 e7 4f c9 73 a9 f3 24 2b e8 22 75 be a4 05 de 71 81 77 5c 50 ec df dd 0e b9 73 fb 62 1e 1c 9a cf 43 43 f3 d9 36 3c 97 b1 56 c4 e8 44 13 44 99 d5 33 41 b3 31 c1 7e 0b 77 70 c0 c2 41 9e b5 74 2b c7 ae dc 4c 4f e4 fd 2e 5d 87 ed Data Ascii: nc}\6wh"u#Yc4y-O( 2sjiM3'6\|Vn]UJ6-('8dq]m.L(,VvN0A[nd ?>-$-K&0mBIOs$+"uqw\PsbCC6<VDD3A1~wpAt+LO.]
2024-03-18 16:22:05 UTC	1308	IN	Data Raw: 63 78 a6 fd bf d7 12 07 f0 4d ee d4 57 b8 a5 df 6f 9a f9 07 0b 1c 0d 15 f5 27 55 b9 f0 0c bd 77 c1 25 c9 cb fb a4 8b 5a 94 4c 6a fc f2 74 bb 4e 35 76 53 87 9a 4a 53 ad b4 55 d2 92 c4 99 42 3d 56 a5 d0 0a c4 41 32 a0 8e 85 f2 cc 50 9a cf 8e 87 1f 31 6f f7 89 f2 19 26 f6 a6 ef 65 ea 2a 53 87 6b 58 13 12 ed b9 22 0c da af cf 5e c3 4a bc cc b8 f4 c8 27 4c cb 82 cc cb 94 c2 d3 34 d9 b7 c2 7c 27 27 bb fb 33 af 31 cc 24 a7 e2 41 06 ce ab d7 c5 8b ac f3 28 33 a9 2a fd ec a7 27 79 79 3e db 4e 53 bc d4 40 ae 2e 54 60 2c 2c 6c 5e a6 ba 33 6d 92 2c 0c 6e 21 f2 26 f9 a7 a1 6f ec 4b 9f ef 93 c4 65 e1 df b9 d6 ad 74 2f fe ce 72 d3 6e 0a 72 6a 7e 37 74 64 92 b4 bc 68 58 4a da a6 18 b9 17 d2 94 68 a4 1a 1b 56 95 b4 e9 78 91 dd 9c 91 49 a5 ac 52 66 bd 7d 9a e6 db 01 8c 34 Data Ascii: cxMWo'Uw%ZLjtN5vSJSUB=VA2P1o&eSkX"^J'L4\|''31$A(3'yy>NS@.T`,,l^3m,n!&oKet/rnrj~7tdhXJhVxIRf}4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49790	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:05 UTC	749	OUT	GET /static/img/big/o.png HTTP/1.1 Host: browser-update.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://browser-update.org/update-browser.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0
2024-03-18 16:22:05 UTC	682	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:05 GMT Content-Type: image/png Content-Length: 5266 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=o.png last-modified: Sun, 01 Aug 2021 16:06:48 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2ByLQBlssSYEKNt4l4hNOji%2FBKRgU7%2F0cs2xLrGxKv3ZPL7smZ0RDf3P0FMYX6yzNK7er9EhW4DkpeWBcuMtXgFCq0Wa8jxiiEI1iFguOP%2FLoIabc4vTFb5mWQMy%2BrGtOlXm%2B4Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f3a48988ccc-EWR
2024-03-18 16:22:05 UTC	687	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6e 00 00 00 6e 08 06 00 00 00 c6 5b 26 fb 00 00 14 59 49 44 41 54 78 9c ed dc 79 78 54 55 9a c7 f1 37 6b 55 aa b2 54 d6 aa 54 56 12 20 0b 21 6c 61 13 50 11 89 80 40 d8 41 67 da 79 c6 19 9f 19 9b 99 b6 7b 9c ee b6 75 ba 9f 1e 87 b1 e7 71 d4 69 50 04 41 14 81 90 10 56 65 0f b2 c9 22 01 65 31 48 d8 41 90 b0 6f 91 35 b5 bc f3 3b b7 2a 58 c6 ac 55 f7 9e 04 e5 8f cf 73 49 a8 e4 dc 7b be 39 77 49 02 c4 09 1d e9 3e 13 0c b9 30 16 5e 86 19 b0 12 ca e0 30 9c 81 ab 50 e5 76 19 4e c1 01 d8 06 4b 61 32 fc 1a 06 43 9a 94 fd 4e ee 46 3b 23 cc f4 6e a0 1f 15 87 84 d0 02 83 c1 27 2d 1d a1 29 ac 30 1e fe 0a eb e0 1c b0 ca 8e ba 83 be 0a f9 60 7c 10 ce 3b 5d e0 45 77 a8 6a 0d 42 35 e6 22 14 c3 b3 90 f4 20 5c e3 2b 6b Data Ascii: PNGIHDRnn[&YIDATxyxTU7kUTTV !laP@Agy{uqiPAVe"e1HAo5;*XUsI{9wI>0^0PvNKa2CNF;#n'-)0`\|;]EwjB5" \+k
2024-03-18 16:22:05 UTC	1369	IN	Data Raw: 7f 9e 13 18 c8 1f 49 20 c6 99 e9 ef c7 6f b9 be 50 9c 2b 42 c2 f9 64 ac 12 f0 79 ac 40 25 5c 59 2b 0e 17 c7 d2 1e a0 73 58 b9 b6 e0 94 78 26 ae ad 6d 99 3e d4 86 60 ce 77 b0 02 e6 04 05 f2 dc a0 20 6c e5 9b 07 1f 61 fc 29 7e ae 95 be ca 10 ce 97 2c 19 53 39 ad 0f ed 33 59 e9 9d 40 6a 75 e1 3a c2 79 39 d1 72 95 55 56 9d 90 6b df 14 16 6d 9b ea 4f 2c cc 0b 0e e6 42 98 d7 0a 88 fd 98 13 1c c4 53 b0 5f ef 05 10 1f 88 4e 2a dd 15 61 0e 9c 11 e4 df aa c2 3d 0a 0e 29 ab 2c b1 b3 88 e6 c4 69 c8 21 26 48 4c cc 1c 5d 30 17 e9 f5 3c 5f a7 3b 08 4b 61 72 a1 4e f7 47 f8 03 fc 19 6f 4f 85 15 70 04 b8 50 12 31 56 91 4e cf b3 11 70 46 a0 1f cf d3 05 ef c7 7e 46 b5 96 70 f9 72 56 59 8e eb f6 3e a9 ab 73 a7 c9 cc d3 30 11 33 83 03 ee 2e 08 09 29 c1 64 3c 37 5f af 6f 07 84 Data Ascii: I oP+Bdy@%\Y+sXx&m>`w la)~,S93Y@ju:y9rUVkmO,BS_N*a=),i!&HL]0<_;KarNGoOpP1VNpF~FprVY>s03.)d<7_o
2024-03-18 16:22:05 UTC	1369	IN	Data Raw: 48 e7 ce ca 83 b6 08 a8 92 72 60 8d 4d f2 1c d3 73 12 da 48 5c 6d 13 55 0b 17 9f 43 67 a3 da d1 ed fe 8f 13 8f 2c 68 38 9c 30 6a 14 5d 7b f4 51 e5 ce ec 73 4c c0 8e 36 6d d4 f0 a7 1d 69 69 ac b1 53 40 35 c8 89 83 77 7b 01 58 02 27 44 79 8c eb 35 f1 40 5e 6d ce a6 6f 22 db 52 f5 80 81 4d 0b 37 7c 38 39 07 0f a6 2f 70 2d dc 86 6b 45 19 26 41 05 99 c0 12 64 d6 8c e9 39 11 6b 25 85 fb 54 8d 68 35 e1 aa 62 33 e9 98 29 1d e1 f2 9b 16 6e e8 50 e2 82 02 3a dc a9 93 72 77 b6 0b 01 55 91 9e 7e 00 58 63 bf 03 31 d6 bd 70 a1 60 93 14 ee 05 35 c3 5d 8a 6e 4f c7 9b 13 4e 18 31 82 ce f7 e9 43 5b 71 91 ff a2 5d 3b b5 bc 06 ac b1 6d 35 e3 d5 4c c2 08 49 d1 84 5e aa 44 4b c8 25 07 6e 4c 2a 71 9a 3c 69 6a db bc 70 b8 49 b9 31 60 80 6b c2 b1 5a 76 b7 6f af 86 02 60 8d 39 21 Data Ascii: Hr`MsH\mUCg,h80j]{QsL6miiS@5w{X'Dy5@^mo"RM7\|89/p-kE&Ad9k%Th5b3)nP:rwU~Xc1p`5]nON1C[q];m5LI^DK%nL*q<ijpI1`kZvo`9!
2024-03-18 16:22:05 UTC	1369	IN	Data Raw: df 44 b5 f5 14 0e 2c c9 a4 5a 63 7b e5 70 70 22 5d 48 eb 44 ce 11 c3 89 87 0d 6d 89 70 b3 25 44 db 57 7b 5c 3a 81 d3 4c 2d 25 c0 12 5c af 63 ec 26 3b 89 d5 76 30 28 91 4e e1 21 5c 39 45 0a e2 df bd c9 8d 16 22 69 b5 3d f3 a3 70 c7 31 09 b5 64 00 4b f2 8b 3a c6 6f d4 09 11 4d 9f 44 47 c3 db e0 42 8d 58 63 46 b6 44 34 e1 15 09 d1 2e d6 35 36 1d 35 a5 d7 65 07 b0 04 e7 ea 19 bf 5e c7 10 ee 90 21 85 2a 10 ee 8e f8 4f 69 26 8c 6e a9 68 c1 70 47 42 b8 57 ea 0c 77 04 93 51 87 3e c0 92 fc 63 3d fb f0 63 b8 f5 3f 84 55 56 1e 60 a5 aa 1e fd 88 9f 1a d3 12 c1 6a fc 59 42 b4 db 60 a8 33 dc 61 53 5a 9d 0e 99 d2 3e 07 96 e0 fa a1 88 b4 20 a0 86 1c 46 b8 83 88 b6 97 2c 74 29 a7 07 f1 f8 d1 ae ff 6c a6 65 a2 45 83 43 42 b8 3f d4 b7 0f 74 10 93 52 8f 3c 60 49 a6 34 b0 1f Data Ascii: D,Zc{pp"]HDmp%DW{\:L-%\c&;v0(N!\9E"i=p1dK:oMDGBXcFD4.565e^!*Oi&nhpGBWwQ>c=c?UV`jYB`3aSZ> F,t)leECB?tR<`I4
2024-03-18 16:22:05 UTC	472	IN	Data Raw: ad b8 7e 3a b8 60 b8 e3 4e fe 20 fb b9 5e fd 6c fb db 75 b2 6d 8a 6c 63 ff d8 2f 96 8b f1 c5 b2 90 22 2b 57 06 98 47 e3 8b 48 39 f6 52 cc c1 fd 1e 8e 56 04 5a 32 96 07 9a 97 00 bb 58 24 31 f3 32 8a 45 40 13 17 52 18 26 37 ca b1 4a 6f b5 6f 8c 4c b5 97 59 33 ec 62 f2 8f 75 ec 6e fb b6 5b 6f fb 85 9e fd 6c 17 7b 3f ec b8 d4 fb 61 65 7b be 67 5f db e9 ae bd ed 47 3b e4 d9 ca 71 fd dc 11 df de be c1 94 ea 58 11 1c 6f 2f c1 23 89 f8 7c d8 f2 32 84 c3 58 ff 83 63 34 ae c2 b1 fe d4 c2 11 26 91 3e 09 30 8f fc 38 c0 bc 15 b8 25 2c f3 8f e3 45 b8 1b 2d 56 42 86 f3 5c 4c fe 3c 0a 77 16 91 c9 59 4c 91 ce 05 14 25 d8 c5 56 bc 3d 1f ef 17 7f 2f 5e 57 88 9b 20 bc 4f f9 78 f1 79 dc 9f b3 08 c7 d4 49 1c 9b 38 c6 9f 72 38 5a a6 88 1b b7 d4 3f ae 0c b8 35 58 22 f8 09 b1 1e Data Ascii: ~:`N ^lumlc/"+WGH9RVZ2X$12E@R&7JooLY3bun[ol{?ae{g_G;qXo/#\|2Xc4&>08%,E-VB\L<wYL%V=/^W OxyI8r8Z?5X"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49789	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:05 UTC	773	OUT	GET /static/img/speed.png HTTP/1.1 Host: browser-update.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://browser-update.org/update-browser.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause
2024-03-18 16:22:05 UTC	682	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:05 GMT Content-Type: image/png Content-Length: 1539 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=speed.png last-modified: Sun, 21 Mar 2021 12:19:12 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i6v0CWap5YKbdm1VnY2UeewcxTMGJC7PEVt%2Fudcjt%2BapLLwa9U%2F2bvREcsdhy8HHt8RspE49rUEUUQ2MViXYfVvLBEMbPLoi5HzO0yX81BUTDdtuUtolhRRBUPBZJq%2F8YgpRxg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f3a3cc19e08-EWR
2024-03-18 16:22:05 UTC	687	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 03 00 00 00 44 a4 8a c6 00 00 02 88 50 4c 54 45 00 00 00 f6 f6 f6 e8 e7 ea e7 e7 e7 e3 e3 e3 ee ee f0 ee ee ee f1 f1 f1 f3 f3 f3 e8 e8 e6 e5 e5 e3 e3 e3 e1 ee ee ec f2 f2 f0 e7 e7 e5 ec ec eb e2 e2 e1 f0 f0 ee eb eb e9 df e0 dd dc dc db e0 e0 df d9 d9 d9 e1 e1 df dd dd db ea ea e8 de de dc 66 5f 78 f5 f5 f3 db db d9 cd cd cd 80 7f 9a 7f 7d 98 f4 f4 f2 7d 7a 94 78 74 8e de dc df 9a 9a b3 b7 ba b2 7b 79 94 79 76 91 75 71 8c 72 6d 87 69 61 78 f2 f1 ef cd cc d2 c7 c7 c8 a6 a6 be a9 a5 b3 aa a9 b0 90 92 ac 85 84 9f 82 81 9c 88 83 98 5c 54 6e f7 f7 f5 e1 e0 e3 df de df d5 d4 d9 d6 d5 d6 d0 ce d4 d2 d1 d2 c9 c6 cf c3 c0 c9 c0 c0 c1 c4 c6 c0 bb bb bc b2 b2 b2 b0 b0 b0 a0 9f ad 92 91 a7 8a Data Ascii: PNGIHDR DPLTEf_x}}zxt{yyvuqrmiax\Tn
2024-03-18 16:22:05 UTC	852	IN	Data Raw: 00 00 3d c8 43 46 00 00 00 09 74 52 4e 53 00 22 cc cc ee 88 88 66 44 b7 99 31 40 00 00 03 21 49 44 41 54 38 cb 6d 92 63 7f 1c 51 14 87 53 77 76 67 d6 33 8b 59 1b 59 23 b6 8d a6 b1 8d c6 aa 6d 44 8d 93 da b6 6d 5b 5f a7 f7 ee 44 fd a5 e7 e5 3c cf 3d e7 3f f7 1e 9f b9 b5 a2 70 6f 4a 4a bc cd ec f3 df 5a b2 df ad b1 5a ad db ce 68 62 53 dd 81 f3 f9 9e cb eb ad a5 b5 4e 97 2c 59 27 8f 2b 4d 74 2f fc 17 fb a7 ae df e2 a8 88 2d b7 17 6c 2d da 9d a0 34 c8 2a 54 a1 73 79 70 62 9e c6 11 13 29 e1 ac 3d 76 08 15 0a 2c 76 83 b1 46 59 38 e7 7c 62 5e e9 4e 7b c0 da 89 67 7d 5a 2d 8a 32 39 ac 70 77 b3 4c 17 36 23 a4 e6 39 62 f2 d1 b1 ee a4 03 49 17 4e 61 6c 94 29 44 42 6c ad 2e d5 ea 29 be 77 8b 23 36 dc b7 bb a9 3a a9 af be 69 13 e6 0b 5a 20 b4 a0 de d6 da 34 8a 2f ac Data Ascii: =CFtRNS"fD1@!IDAT8mcQSwvg3YY#mDm[_D<=?poJJZZhbSN,Y'+Mt/-l-4*Tsypb)=v,vFY8\|b^N{g}Z-29pwL6#9bINal)DBl.)w#6:iZ 4/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49791	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:05 UTC	775	OUT	GET /static/img/comfort.png HTTP/1.1 Host: browser-update.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://browser-update.org/update-browser.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause
2024-03-18 16:22:05 UTC	688	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:05 GMT Content-Type: image/png Content-Length: 1648 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=comfort.png last-modified: Sun, 21 Mar 2021 12:19:11 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IXH%2BCBY34r0%2FST9%2FLy2JXdUQxP1uFm4OjNP5OZ1qPoeNAO9WBA9MpclpPEC85Pz4yJoB3%2B7LzT0C3iptNJ0dZEdeIl%2FrNobrfRpqJiljJ8hJGW1dfzP3KIMoncZjr%2B5iEgOmSA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f3ccc7bc44f-EWR
2024-03-18 16:22:05 UTC	681	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 03 00 00 00 44 a4 8a c6 00 00 02 fa 50 4c 54 45 00 00 00 e3 e3 e3 e6 e6 e6 e7 e7 e7 f1 f0 e5 e5 e5 e5 e2 e2 e2 e8 e8 e8 fe b7 38 ca 00 00 f8 d8 5a f8 ed 8c f8 ec 87 f9 ee 94 f8 eb 84 f6 e3 66 fb c8 49 fd bd 3e d7 d7 d7 fa f0 9f f9 ee 90 fa cf 50 fc c4 45 d9 00 00 df df de ce ce ce c4 c4 c4 fb f3 ac fa f0 9c f7 ea 7b f7 e9 78 fd bf 40 fe bb 3c fd f7 c5 bd bd bc fc f5 b9 fb f4 b4 fa f2 a8 fa f1 a3 f3 d9 9c f6 e8 6e f8 da 5c f9 d4 56 fe ba 3c b6 a5 3c e1 e1 e1 c8 c8 c8 b3 b3 b3 db d6 aa f9 ef 98 cf c5 85 f6 e9 73 fe cb 6b f7 e1 63 f8 dd 5f c7 b5 5b fa d0 52 fc c6 47 b6 a9 40 fd f9 cf ca ca ca f8 f1 ba ee e4 a8 fa f2 a7 fd d9 97 f7 eb 81 dc 78 78 fe ce 76 f6 e7 6a f6 e6 69 ce bc 68 f7 Data Ascii: PNGIHDR DPLTE8ZfI>PE{x@<n\V<<skc_[RG@xxvjih
2024-03-18 16:22:05 UTC	967	IN	Data Raw: 71 64 cb b5 63 c9 b6 61 c3 b6 61 8c 89 61 a7 9e 60 71 71 60 7c 7a 5e e9 c4 5d bb 5c 5c ef c8 56 e8 bd 54 b8 51 51 af 51 51 e7 b7 50 ae 9f 4c fc c7 49 d8 91 47 f4 b8 45 a2 45 45 ea aa 44 fc c1 43 c9 68 43 aa 42 42 ad 9e 37 eb 9a 33 c5 63 30 e0 84 2e b4 3f 2b b4 42 28 d4 6a 27 d6 6e 26 ca 58 24 a2 2f 22 9c 2a 22 92 28 22 c4 44 1b 9d 1f 17 b8 28 13 ba 14 09 ba 09 04 ee 81 2a 26 00 00 00 08 74 52 4e 53 00 cc 66 44 88 88 ee 22 1d d2 fe fa 00 00 03 1d 49 44 41 54 38 cb 62 40 02 81 46 39 56 19 19 56 56 49 21 0c d8 80 81 d5 09 3b db 12 69 d5 b0 85 76 fb 75 8c 30 a4 03 ad e2 8b d4 b8 f9 f8 1c 65 e5 8c 35 76 96 af d7 31 40 95 2f cd b0 15 e6 e1 16 11 11 e1 e6 71 94 35 76 31 3d 56 ee d6 8c 2c 5f 99 52 c4 cd cd 6b 28 23 23 63 c8 cb cd 27 6b ec 6a c6 b5 22 fe 06 42 3e Data Ascii: qdcaaa`qq`\|z^]\\VTQQQQPLIGEEEDChCBB73c0.?+B(j'n&X$/""("D(&tRNSfD"IDAT8b@F9VVVI!;ivu0e5v1@/q5v1=V,_Rk(##c'kj"B>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49797	142.250.80.98	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:05 UTC	642	OUT	GET /tag/js/gpt.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:05 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Vary: Accept-Encoding Date: Mon, 18 Mar 2024 16:22:05 GMT Expires: Mon, 18 Mar 2024 16:22:05 GMT Cache-Control: private, max-age=900, stale-while-revalidate=3600 Content-Type: text/javascript; charset=UTF-8 ETag: 777 / 19800 / m202403140101 / config-hash: 4748565741924653083 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 89460 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:05 UTC	467	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 73 74 74 63 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 67 6f 6f 67 6c 65 74 61 67 2e 65 76 61 6c 53 63 72 69 70 74 73 29 7b 67 6f 6f 67 6c 65 74 61 67 2e 65 76 61 6c 53 63 72 69 70 74 73 28 29 3b 7d 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 67 6f 6f 67 6c 65 74 61 67 2e 5f 6c 6f 61 64 65 64 5f 29 72 65 74 75 72 6e 3b 76 61 72 20 6e 2c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 62 61 3d 22 66 75 6e Data Ascii: (function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="fun
2024-03-18 16:22:05 UTC	1252	IN	Data Raw: 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 2c 64 61 3d 63 61 28 74 68 69 73 29 2c 65 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d Data Ascii: "object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),ea="function"===typeof Symbol&&"symbol"=
2024-03-18 16:22:05 UTC	1252	IN	Data Raw: 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 36 34 41 72 72 61 79 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 64 61 5b 62 5b 63 5d 5d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 26 26 62 61 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 Data Ascii: "Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float64Array".split(" "),c=0;c<b.length;c++){var d=da[b[c]];"function"===typeof d&&"function"!=typeof d.prototype[a]&&ba(d.prototype,a,{configurable:!
2024-03-18 16:22:05 UTC	1252	IN	Data Raw: 29 6c 61 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 65 6c 73 65 7b 76 61 72 20 6d 61 3b 61 3a 7b 76 61 72 20 6e 61 3d 7b 61 3a 21 30 7d 2c 6f 61 3d 7b 7d 3b 74 72 79 7b 6f 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6e 61 3b 6d 61 3d 6f 61 2e 61 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 61 29 7b 7d 6d 61 3d 21 31 7d 6c 61 3d 6d 61 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 2c 41 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 70 72 Data Ascii: )la=Object.setPrototypeOf;else{var ma;a:{var na={a:!0},oa={};try{oa.__proto__=na;ma=oa.a;break a}catch(a){}ma=!1}la=ma?function(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}var pa=la,A=function(a,b){a.pr
2024-03-18 16:22:05 UTC	1252	IN	Data Raw: 28 67 29 3b 66 6f 72 28 76 61 72 20 68 3b 21 28 68 3d 67 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 68 3d 68 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 68 5b 30 5d 2c 68 5b 31 5d 29 7d 7d 3b 66 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 21 63 28 67 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 57 65 61 6b 4d 61 70 20 6b 65 79 22 29 3b 69 66 28 21 79 28 67 2c 64 29 29 7b 76 61 72 20 6b 3d 6e 65 77 20 62 3b 62 61 28 67 2c 64 2c 7b 76 61 6c 75 65 3a 6b 7d 29 7d 69 66 28 21 79 28 67 2c 64 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 57 65 61 6b 4d 61 70 20 6b 65 79 20 66 61 69 6c 3a 20 22 2b 67 29 3b 67 5b 64 5d 5b 74 68 69 73 2e 67 5d 3d 68 3b 72 65 74 75 72 6e 20 74 68 69 73 Data Ascii: (g);for(var h;!(h=g.next()).done;)h=h.value,this.set(h[0],h[1])}};f.prototype.set=function(g,h){if(!c(g))throw Error("Invalid WeakMap key");if(!y(g,d)){var k=new b;ba(g,d,{value:k})}if(!y(g,d))throw Error("WeakMap key fail: "+g);g[d][this.g]=h;return this
2024-03-18 16:22:05 UTC	1252	IN	Data Raw: 64 3a 74 68 69 73 5b 31 5d 2c 6b 65 79 3a 68 2c 76 61 6c 75 65 3a 6b 7d 2c 6c 2e 6c 69 73 74 2e 70 75 73 68 28 6c 2e 42 29 2c 74 68 69 73 5b 31 5d 2e 47 2e 6e 65 78 74 3d 6c 2e 42 2c 74 68 69 73 5b 31 5d 2e 47 3d 6c 2e 42 2c 74 68 69 73 2e 73 69 7a 65 2b 2b 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 3d 64 28 74 68 69 73 2c 68 29 3b 72 65 74 75 72 6e 20 68 2e 42 26 26 68 2e 6c 69 73 74 3f 28 68 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 68 2e 69 6e 64 65 78 2c 31 29 2c 68 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 68 2e 69 64 5d 2c 68 2e 42 2e 47 2e 6e 65 78 74 3d 68 2e 42 2e 6e 65 78 74 2c 68 2e 42 2e 6e 65 78 74 2e 47 Data Ascii: d:this[1],key:h,value:k},l.list.push(l.B),this[1].G.next=l.B,this[1].G=l.B,this.size++);return this};c.prototype.delete=function(h){h=d(this,h);return h.B&&h.list?(h.list.splice(h.index,1),h.list.length\|\|delete this[0][h.id],h.B.G.next=h.B.next,h.B.next.G
2024-03-18 16:22:05 UTC	1252	IN	Data Raw: 3d 68 5b 31 5d 3b 29 6c 3d 6c 2e 47 3b 66 6f 72 28 3b 6c 2e 6e 65 78 74 21 3d 6c 2e 68 65 61 64 3b 29 72 65 74 75 72 6e 20 6c 3d 6c 2e 6e 65 78 74 2c 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 6b 28 6c 29 7d 3b 6c 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 29 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 7b 7d 3b 72 65 74 75 72 6e 20 68 2e 47 3d 68 2e 6e 65 78 74 3d 68 2e 68 65 61 64 3d 68 7d 2c 67 3d 30 3b 72 65 74 75 72 6e 20 63 7d 2c 22 65 73 36 22 29 3b 76 28 22 4e 75 6d 62 65 72 2e 4d 41 58 5f 53 41 46 45 5f 49 4e 54 45 47 45 52 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 39 30 30 37 31 39 39 32 35 34 37 34 30 39 39 31 7d 2c 22 65 73 36 22 29 3b 76 28 22 Data Ascii: =h[1];)l=l.G;for(;l.next!=l.head;)return l=l.next,{done:!1,value:k(l)};l=null}return{done:!0,value:void 0}})},f=function(){var h={};return h.G=h.next=h.head=h},g=0;return c},"es6");v("Number.MAX_SAFE_INTEGER",function(){return 9007199254740991},"es6");v("
2024-03-18 16:22:05 UTC	1252	IN	Data Raw: 7c 75 28 4f 62 6a 65 63 74 2c 22 69 73 22 29 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 2c 66 2c 62 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 7d 2c 22 65 73 37 22 29 3b 76 61 72 20 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 Data Ascii: \|u(Object,"is").call(Object,f,b))return!0}return!1}},"es7");var sa=function(a,b,c){if(null==a)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to St
2024-03-18 16:22:05 UTC	1252	IN	Data Raw: 74 28 29 29 2e 64 6f 6e 65 3b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 66 2e 76 61 6c 75 65 2c 67 2b 2b 29 29 7d 65 6c 73 65 20 66 6f 72 28 66 3d 62 2e 6c 65 6e 67 74 68 2c 67 3d 30 3b 67 3c 66 3b 67 2b 2b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 62 5b 67 5d 2c 67 29 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 22 65 73 36 22 29 3b 76 28 22 53 65 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21 75 28 61 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 74 72 69 65 73 22 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 Data Ascii: t()).done;)e.push(c.call(d,f.value,g++))}else for(f=b.length,g=0;g<f;g++)e.push(c.call(d,b[g],g));return e}},"es6");v("Set",function(a){if(function(){if(!a\|\|"function"!=typeof a\|\|!u(a.prototype,"entries")\|\|"function"!=typeof Object.seal)return!1;try{var c
2024-03-18 16:22:05 UTC	1252	IN	Data Raw: 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 67 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 63 2e 63 61 6c 6c 28 64 2c 66 2c 66 2c 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 62 7d 2c 22 65 73 36 22 29 3b 76 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 79 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 2c 22 65 73 38 22 29 3b 76 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 Data Ascii: ach=function(c,d){var e=this;this.g.forEach(function(f){return c.call(d,f,f,e)})};return b},"es6");v("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)y(b,d)&&c.push([d,b[d]]);return c}},"es8");v("String.prototype.startsWith",funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49796	108.138.115.149	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:05 UTC	537	OUT	GET /aax2/apstag.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:05 UTC	642	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 305153 Connection: close Date: Mon, 18 Mar 2024 16:22:06 GMT Last-Modified: Wed, 06 Mar 2024 21:59:42 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 e685e9e08c2e4b105f4d86b35da50628.cloudfront.net (CloudFront), 1.1 153c5cd2b3e635613d0a2fa0f107993a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C3 ETag: "b9e5bc6ae2304c1ff623d74c6e93fe00" Vary: Accept-Encoding X-Cache: Miss from cloudfront X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: nRDwDMrZCBxfdl6htOgrN80YAE7uSUZNi9Jj7IMXGKJgasNzzGy4JQ==
2024-03-18 16:22:05 UTC	15742	IN	Data Raw: 2f 2a 21 20 40 61 6d 7a 6e 2f 61 70 73 77 65 62 61 70 73 74 61 67 6c 69 62 72 61 72 79 20 2d 20 77 65 62 2d 63 6c 69 65 6e 74 2d 62 75 6e 64 6c 65 20 2d 20 76 32 34 2e 33 30 35 2e 31 30 30 32 20 2d 20 32 30 32 34 2d 30 33 2d 30 35 20 31 30 3a 30 32 3a 31 38 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 65 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e Data Ascii: /! @amzn/apswebapstaglibrary - web-client-bundle - v24.305.1002 - 2024-03-05 10:02:18 /!function(){"use strict";var t=function(e,n){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in
2024-03-18 16:22:05 UTC	10807	IN	Data Raw: 61 3b 72 65 74 75 72 6e 20 72 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 74 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 6e 2e 64 65 74 61 69 6c 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 73 75 63 63 65 73 73 2c 65 2e 75 70 64 61 74 65 28 5f 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7c 7c 21 30 3d 3d 3d 74 7d 29 29 2c 6f 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 2e 64 65 74 61 69 6c 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 74 63 44 61 74 61 2c 65 2e 75 70 64 61 74 65 28 45 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 6f 7c 7c 21 30 3d 3d 3d 74 3f 6f 3a 65 7d 29 29 2c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 Data Ascii: a;return r(this,(function(r){return t=null===(i=n.detail)\|\|void 0===i?void 0:i.success,e.update(_,(function(e){return e\|\|!0===t})),o=null===(a=n.detail)\|\|void 0===a?void 0:a.tcData,e.update(E,(function(e){return void 0!==o\|\|!0===t?o:e})),"object"!=typeof
2024-03-18 16:22:05 UTC	16384	IN	Data Raw: 73 73 69 6f 6e 49 64 28 29 2c 22 20 7c 20 5b 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2c 22 5d 22 29 7d 2c 74 2e 5f 69 6e 73 74 61 6e 63 65 3d 6e 65 77 20 74 2c 74 2e 5f 73 65 73 73 69 6f 6e 49 64 3d 22 22 2e 63 6f 6e 63 61 74 28 44 61 74 65 2e 6e 6f 77 28 29 29 2c 74 7d 28 29 2c 51 3d 57 2e 49 6e 73 74 61 6e 63 65 28 29 2c 4b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 3b 64 6f 7b 69 66 28 74 2e 69 6e 63 6c 75 64 65 73 28 6e 75 6c 6c 3d 3d 3d 28 65 3d 6e 75 6c 6c 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 6c 6f 63 61 74 69 6f 6e 29 7c 7c 76 6f 69 Data Ascii: ssionId()," \| [").concat(n.toUpperCase(),"]")},t._instance=new t,t._sessionId="".concat(Date.now()),t}(),Q=W.Instance(),K=function(t){var e,n;if(void 0===t\|\|!Array.isArray(t))return!0;var o=window;do{if(t.includes(null===(e=null==o?void 0:o.location)\|\|voi
2024-03-18 16:22:05 UTC	16384	IN	Data Raw: 76 65 6e 74 73 3f 74 2e 73 74 61 74 75 73 45 76 65 6e 74 73 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 74 2e 74 79 70 65 2c 73 74 61 74 75 73 3a 65 2e 74 79 70 65 2c 64 65 74 61 69 6c 3a 74 2e 64 65 74 61 69 6c 2c 74 69 6d 65 73 74 61 6d 70 3a 65 2e 74 69 6d 65 53 74 61 6d 70 7d 7d 29 29 3a 5b 5d 7d 29 29 2e 66 6c 61 74 28 29 29 2c 21 31 29 2c 61 28 65 2e 71 75 65 75 65 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 74 2e 73 74 61 74 75 73 45 76 65 6e 74 73 3f 74 2e 73 74 61 74 75 73 45 76 65 6e 74 73 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 74 2e 74 79 70 65 2c 73 74 61 74 75 73 3a 65 2e 74 79 70 65 2c 64 65 74 61 Data Ascii: vents?t.statusEvents.map((function(e){return{type:t.type,status:e.type,detail:t.detail,timestamp:e.timeStamp}})):[]})).flat()),!1),a(e.queue.map((function(t){return null!=t.statusEvents?t.statusEvents.map((function(e){return{type:t.type,status:e.type,deta
2024-03-18 16:22:05 UTC	5788	IN	Data Raw: 6c 3d 3d 3d 28 65 3d 74 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 74 6f 70 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 6e 3d 74 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 74 6f 70 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 7d 63 61 74 63 68 28 74 29 7b 7d 74 72 79 7b 69 66 28 74 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 74 6f 70 21 3d 3d 74 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 73 65 6c 66 29 72 65 74 75 72 6e 20 74 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 7d Data Ascii: l===(e=t.globalContext.top)\|\|void 0===e?void 0:e.location.href))return null===(n=t.globalContext.top)\|\|void 0===n?void 0:n.location.href}catch(t){}try{if(t.globalContext.top!==t.globalContext.self)return t.globalContext.document.referrer}catch(t){}return}
2024-03-18 16:22:05 UTC	6396	IN	Data Raw: 6f 69 64 20 30 3a 6e 2e 66 65 74 63 68 42 69 64 73 29 3f 5b 32 2c 6c 2e 77 61 69 74 69 6e 67 5d 3a 5b 34 2c 65 65 28 65 29 5d 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 74 3d 6f 2e 73 65 6e 74 28 29 2c 5b 32 2c 7b 73 74 61 74 75 73 3a 6c 2e 63 6f 6d 70 6c 65 74 65 64 2c 76 61 6c 75 65 3a 7b 62 69 64 52 65 73 70 6f 6e 73 65 3a 74 7d 7d 5d 7d 7d 29 29 7d 29 29 7d 5d 5d 29 2c 72 65 3d 7b 6b 65 79 3a 22 63 78 6d 2f 69 64 73 22 2c 64 65 66 61 75 6c 74 3a 76 6f 69 64 20 30 7d 2c 69 65 3d 7b 6b 65 79 3a 22 63 78 6d 2f 6d 65 74 61 64 61 74 61 22 2c 64 65 66 61 75 6c 74 3a 76 6f 69 64 20 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 65 28 74 2c 6e 29 7b 76 61 72 20 6f 3d 74 28 6e 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 6f 3f 28 6e 2e 75 70 64 61 74 65 28 72 65 2c Data Ascii: oid 0:n.fetchBids)?[2,l.waiting]:[4,ee(e)];case 1:return t=o.sent(),[2,{status:l.completed,value:{bidResponse:t}}]}}))}))}]]),re={key:"cxm/ids",default:void 0},ie={key:"cxm/metadata",default:void 0};function ae(t,n){var o=t(n);return null!=o?(n.update(re,
2024-03-18 16:22:05 UTC	2553	IN	Data Raw: 6e 74 28 74 29 2c 6e 65 77 47 65 6e 3a 63 65 2e 6e 6f 54 69 6d 65 73 74 61 6d 70 7d 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 72 65 61 64 4c 6f 63 61 6c 53 74 6f 72 61 67 65 28 76 65 29 3b 69 66 28 6e 75 6c 6c 21 3d 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 6e 3d 74 2e 72 65 61 64 43 6f 6f 6b 69 65 53 74 6f 72 61 67 65 28 76 65 29 3b 69 66 28 6e 75 6c 6c 21 3d 6e 29 72 65 74 75 72 6e 20 6e 3b 76 61 72 20 6f 3d 74 2e 72 65 61 64 4c 6f 63 61 6c 53 74 6f 72 61 67 65 28 70 65 29 3b 69 66 28 6e 75 6c 6c 21 3d 6f 29 72 65 74 75 72 6e 20 6f 3b 76 61 72 20 72 3d 74 2e 72 65 61 64 43 6f 6f 6b 69 65 53 74 6f 72 61 67 65 28 70 65 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 72 3f 72 3a 6e 75 6c 6c 7d 28 Data Ascii: nt(t),newGen:ce.noTimestamp}}return null}(function(t){var e=t.readLocalStorage(ve);if(null!=e)return e;var n=t.readCookieStorage(ve);if(null!=n)return n;var o=t.readLocalStorage(pe);if(null!=o)return o;var r=t.readCookieStorage(pe);return null!=r?r:null}(
2024-03-18 16:22:05 UTC	16384	IN	Data Raw: 65 63 74 75 72 65 22 2c 22 62 69 74 6e 65 73 73 22 2c 22 66 75 6c 6c 56 65 72 73 69 6f 6e 4c 69 73 74 22 2c 22 6d 6f 64 65 6c 22 2c 22 70 6c 61 74 66 6f 72 6d 56 65 72 73 69 6f 6e 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 4f 65 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6f 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3b 72 65 74 75 72 6e 20 72 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 73 77 69 74 63 68 28 72 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 72 2e 74 72 79 73 2e 70 75 73 68 28 5b 30 2c 32 2c 2c 33 5d 29 2c 5b 34 2c 6e 2e 67 65 74 48 69 67 68 45 6e 74 72 6f 70 79 56 61 6c 75 65 73 28 63 28 63 28 5b 5d 2c 61 28 6b 65 29 2c 21 31 29 2c 61 28 4e 65 29 Data Ascii: ecture","bitness","fullVersionList","model","platformVersion"];function Oe(t,e,n){return o(this,void 0,void 0,(function(){var o;return r(this,(function(r){switch(r.label){case 0:return r.trys.push([0,2,,3]),[4,n.getHighEntropyValues(c(c([],a(ke),!1),a(Ne)
2024-03-18 16:22:05 UTC	371	IN	Data Raw: 29 29 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 74 29 3b 76 61 72 20 73 2c 66 2c 62 3d 7b 74 73 3a 44 61 74 65 2e 6e 6f 77 28 29 2c 75 72 6c 3a 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 4f 62 6a 65 63 74 28 61 2e 67 29 28 77 69 6e 64 6f 77 29 29 2c 72 3a 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 4f 62 6a 65 63 74 28 61 2e 68 29 28 77 69 6e 64 6f 77 29 29 2c 5f 74 79 70 65 3a 22 61 70 73 4c 69 62 72 61 72 79 45 72 72 6f 72 22 2c 65 3a 7b 65 74 3a 74 2e 6e 61 6d 65 2c 65 6c 3a 65 2c 6d 73 67 3a 74 2e 6d 65 73 73 61 67 65 7d 7d 3b 72 65 74 75 72 6e 20 6c 2e 70 75 73 68 28 62 29 2c 6f 2e 61 2e 64 69 73 70 61 74 63 68 28 7b 74 79 70 65 3a 22 4c 4f 47 5f 45 52 52 4f 52 22 2c 65 72 72 6f 72 3a 62 7d 29 2c 4d 61 74 68 2e 72 61 Data Ascii: ))&&console.error(t);var s,f,b={ts:Date.now(),url:encodeURIComponent(Object(a.g)(window)),r:encodeURIComponent(Object(a.h)(window)),_type:"apsLibraryError",e:{et:t.name,el:e,msg:t.message}};return l.push(b),o.a.dispatch({type:"LOG_ERROR",error:b}),Math.ra
2024-03-18 16:22:05 UTC	16384	IN	Data Raw: 62 29 28 62 29 2c 21 30 29 7d 63 61 74 63 68 28 74 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 74 29 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 62 28 74 2c 65 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 66 28 7b 6e 61 6d 65 3a 65 2c 6d 65 73 73 61 67 65 3a 22 22 2e 63 6f 6e 63 61 74 28 74 2c 22 20 77 61 73 20 6f 66 20 74 79 70 65 20 27 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 27 20 69 6e 73 74 65 61 64 20 6f 66 20 27 22 29 2e 63 6f 6e 63 61 74 28 6e 2c 22 27 22 29 7d 2c 22 54 79 70 65 45 72 72 6f 72 2d 22 2e 63 6f 6e 63 61 74 28 74 29 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 74 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 Data Ascii: b)(b),!0)}catch(t){console.error(t)}return!1}function b(t,e,n,r){return f({name:e,message:"".concat(t," was of type '").concat(e,"' instead of '").concat(n,"'")},"TypeError-".concat(t),r)}function p(t,e){return function(){try{return t.apply(null,arguments

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49798	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:05 UTC	781	OUT	GET /static/img/compatibility.png HTTP/1.1 Host: browser-update.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://browser-update.org/update-browser.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause
2024-03-18 16:22:05 UTC	685	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:05 GMT Content-Type: image/png Content-Length: 761 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=compatibility.png last-modified: Sun, 21 Mar 2021 12:19:11 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qedc3bDQWlzDbGCBVQscgauxm9t9hDXcTujRG8vSj7A4n1VSYknY44OKYGj3XeJ0lnT%2FwQywI4l4qd0NfjV2GpAgcKssvm7FLisknZRdqxOyqcnZw7lHaZTBv8jaiXL%2Fp2e1lA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f3d7f688c8f-EWR
2024-03-18 16:22:05 UTC	684	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 03 00 00 00 44 a4 8a c6 00 00 00 81 50 4c 54 45 00 00 00 ee ee ee e3 e3 e3 e7 e7 e7 f1 f1 f1 f3 f3 f3 eb eb eb f6 f6 f6 f8 f8 f8 cc cc cc c4 c4 c4 c7 c7 c7 db db db b7 b7 b7 de de de bc bc bc bf bf bf e0 e0 e0 f0 f0 f0 b4 b4 b4 d4 d4 d4 d2 d2 d2 ce ce ce c1 c1 c1 b9 b9 b9 c9 c9 c9 d8 d8 d8 d6 d6 d6 ed ed ed eb eb eb e3 e3 e3 e7 e7 e7 e5 e5 e5 f6 f6 f6 f4 f4 f4 f2 f2 f2 b0 b0 b0 aa aa aa e9 e9 e9 a4 a4 a4 a0 a0 a0 99 99 99 ac ac ac 07 47 21 ed 00 00 00 08 74 52 4e 53 00 88 ee cc 66 44 aa 22 e4 e3 11 58 00 00 02 1f 49 44 41 54 38 cb 7d 52 d7 62 db 30 0c 8c 47 5a ee bd 29 89 9a 76 92 ff ff c0 42 b5 93 ba ad 5b 3c f2 0e 38 de 01 2f f7 12 24 be fc b7 72 c9 ff 06 95 3a 6a 22 44 7c c1 98 Data Ascii: PNGIHDR DPLTEG!tRNSfD"XIDAT8}Rb0GZ)vB[<8/$r:j"D\|
2024-03-18 16:22:05 UTC	77	IN	Data Raw: f5 63 db b6 8f d5 de f0 ca 8e f7 d3 3c 08 06 94 0c 32 4a 4a a9 14 21 00 3b 26 be fd 5a f7 f9 24 58 71 de 87 bd bc 77 85 89 13 e8 ff 51 e7 c3 e9 a8 b5 3e 9e 0e 0f 47 ff 03 e7 6e 34 32 47 41 bf 22 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: c<2JJ!;&Z$XqwQ>Gn42GA"IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49799	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:05 UTC	776	OUT	GET /static/img/security.png HTTP/1.1 Host: browser-update.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://browser-update.org/update-browser.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause
2024-03-18 16:22:05 UTC	680	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:05 GMT Content-Type: image/png Content-Length: 761 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=security.png last-modified: Sun, 21 Mar 2021 12:19:12 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rom1pvIrdCwdni5PoBA2XdV6C1QvgV%2BRX8jK3c1OQzLyk4yQ57DCkbgIcCDXA6xbpi4iVMjSZ1V0ux0O2r64%2BmlwCMXoYAPxsyq5wzOGVGjr93ve5tkf0RW0boIAJaPx7c6enA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f3d8bf132ca-EWR
2024-03-18 16:22:05 UTC	689	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 03 00 00 00 44 a4 8a c6 00 00 00 b4 50 4c 54 45 00 00 00 e9 e9 e9 f9 f9 f9 f1 f2 f1 e4 e4 e4 f5 f5 f5 ed ed ed fc fc fc e5 e7 e3 da dc d7 e2 e5 e0 de e1 db e1 e2 df ea eb e7 e4 e6 e1 e0 e3 dd dc de da de e0 dd e7 e9 e4 d7 d9 d5 f3 f4 f2 e8 ea e6 e1 e4 df d8 da d6 d0 d1 ce eb ec e9 dd e0 d9 ee f0 ec ed ee eb d6 d7 d3 f1 f2 f0 f5 f6 f4 d2 d3 d0 da de d7 d4 d6 d1 e4 e6 e3 ab ad a8 b5 b7 b4 f8 f9 f8 d7 d7 d6 d4 d4 d3 cd d0 cb c4 c5 c4 da da da cd cd cd cc ce c9 c8 c9 c8 c6 c8 c4 c1 c3 bf bb bd ba a4 a6 a1 ca cc c8 b3 b5 b1 a7 a9 a5 dc dd dc be bf be b8 b9 b6 b1 b1 b0 ae af ab 9e 9f 9b 67 ee 56 1d 00 00 00 08 74 52 4e 53 00 cc 44 88 ee 66 aa 22 52 77 80 69 00 00 01 ec 49 44 41 54 38 cb Data Ascii: PNGIHDR DPLTEgVtRNSDf"RwiIDAT8
2024-03-18 16:22:05 UTC	72	IN	Data Raw: fc ab 8e f9 a9 bc 3f 5f 91 ef 47 af e7 bd 3c e5 b7 d5 f2 06 05 1a 75 d9 f5 71 fc ea ca fa 94 1f 95 bf ff 0f b1 d2 8f 59 ce ce 35 cb b3 a3 fe 47 f8 75 fe 01 eb ca 3e e2 96 37 26 cf 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: ?_G<uqY5Gu>7&IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49801	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:05 UTC	515	OUT	GET /static/img/big/f.png HTTP/1.1 Host: browser-update.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause
2024-03-18 16:22:06 UTC	677	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:06 GMT Content-Type: image/png Content-Length: 11583 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=f.png last-modified: Sun, 01 Aug 2021 16:06:48 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sl2D%2BpxIbuAUAh5jS0JxH%2FYPmyrpwZpo0woxwYCJA8G0L7JNSB81d7fQFsdhuBojXW1z85l44iwELGyq23OUG0bc5gBOULW3dIsJwXHAmu%2BxyuVZfnvmm4MCiZxgMCbxRsriOw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f3f0c817d24-EWR
2024-03-18 16:22:06 UTC	692	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6e 00 00 00 72 08 06 00 00 00 b2 4f e4 1b 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 01 b4 00 00 01 b4 01 4c 22 4d f8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ed 9d 77 bc 1d 47 7d e8 bf bf d9 dd 73 8f 6e 51 2f b6 25 cb 92 65 e4 86 3b 18 db d8 60 1b 9b d0 8c 29 36 21 e0 18 1e 18 87 50 f2 28 01 f2 80 24 32 38 81 cf 07 12 1e 84 98 f0 52 70 30 2d 06 d3 f3 02 a6 b8 53 25 e3 26 77 c9 b6 dc d4 ae ae a4 ab db ce d9 99 df fb 63 db ec 9e 3d b7 48 2e e4 7d 3c 9f cf dc 99 9d 9d dd 3b 3b df fd 95 99 9d dd 03 cf 84 29 83 6e e6 45 ba 85 63 9e ee 76 f8 c1 3c dd 0d f8 7d 0f 3a c4 41 Data Ascii: PNGIHDRnrOsBIT\|dpHYsL"MtEXtSoftwarewww.inkscape.org< IDATxwG}snQ/%e;`)6!P($28Rp0-S%&wc=H.}<;;)nEcv<}:A
2024-03-18 16:22:06 UTC	1369	IN	Data Raw: f2 cd a1 5d 4f 64 d7 ec b3 8d 1b 3a e8 05 af 79 22 1a 52 0a 6f 1b 3c 92 77 ee f8 24 3d bb 1f 41 b9 16 31 7f 85 f0 7c 20 4a 2a f8 f7 5b 66 7f 34 29 ce d3 9a 32 e3 e7 b5 14 9f 1d dd c9 bc d9 bb 82 e4 64 73 a7 d7 4e 59 00 d1 0b c1 cc 5d 85 f2 5b 1d 64 59 69 ff ba 65 af 26 d4 17 11 36 ce df bb 8e e8 1e f6 09 dc 8e e5 a7 5f 60 44 bf a5 27 9c 10 ed 73 4b ce df 30 87 ff b1 e5 cf b9 68 eb ed 18 ee 40 e5 43 08 8b 73 46 39 2b 1f 9a 78 90 bc 08 40 15 a4 d6 80 4c cb 8c f2 d1 85 9f 2d 8e 35 73 a6 d7 66 55 d0 26 84 a7 40 b0 6c 19 6d 6e d5 2d ac ca f7 47 fa 3e 02 07 a1 be 57 cf 27 98 69 97 4c 16 c2 bd 3d f0 f1 fd 4e 5b a4 46 2f 43 90 91 c1 81 05 50 56 13 d3 0d 03 af be 6b c1 c4 ac e6 bb e3 20 fa 33 07 f3 f2 de ab f0 99 12 92 9f 76 48 9f 16 75 6b f7 29 2f 9a 77 83 f7 ff Data Ascii: ]Od:y"Ro<w$=A1\| J*[f4)2dsNY][dYie&6_`D'sK0h@CsF9+x@L-5sfU&@lmn-G>W'iL=N[F/CPVk 3vHuk)/w
2024-03-18 16:22:06 UTC	1369	IN	Data Raw: 8f fe 94 fb ed 21 10 36 20 8a 8a 49 66 1f de 54 93 cb d9 c4 32 6d 98 18 67 f8 8c 67 d3 df 33 52 5c ac 39 10 82 63 a7 00 30 45 a8 03 e6 17 d9 ad f0 db 75 a0 fa 25 39 87 b7 cc ec e4 d3 54 95 ca f9 41 8c 79 76 0c c4 aa 58 94 76 aa 26 fb cc 38 07 87 3b 38 20 da c5 ac a0 95 4e da 92 ab b5 6c 2e 30 8f d5 6d a3 ac 68 3c c2 cb 7a af 2d 1f eb c7 54 55 be 7d eb 67 b8 bf 75 30 88 49 54 64 de 40 4f 35 56 55 a2 93 ce bc 4b b7 6d 32 9e 19 9c a8 4c 2a bb 6d de b9 67 32 96 ab 51 9f b9 4a ad d4 31 8b e0 84 c3 a1 87 37 eb 35 75 43 a4 c9 c3 b4 c0 dd 77 50 bc 7a 42 a5 61 45 89 45 89 15 02 62 96 07 3b 59 1a 0c 13 19 5b 06 23 3e 20 4a 9d 3f 15 c4 f2 7e 72 db 76 c5 ee d7 71 d5 ee 73 92 0b 0f a2 14 8e d7 29 2a 93 40 93 32 34 3f aa b0 71 a4 3a 63 37 0e 6e d7 cc ec 57 1d 9c d2 f1 Data Ascii: !6 IfT2mgg3R\9c0Eu%9TAyvXv&8;8 Nl.0mh<z-TU}gu0ITd@O5VUKm2Lmg2QJ175uCwPzBaEEb;Y[#> J?~rvqs)@24?q:c7nW
2024-03-18 16:22:06 UTC	1369	IN	Data Raw: 50 ba c9 13 58 7b 5c 93 9d ed 39 14 0e 8b e7 49 66 d0 72 89 4b 63 63 36 68 c4 d6 e1 45 bc e9 da cf d4 83 73 0a f6 56 70 db bb 03 ab f5 18 bb 49 d8 24 d1 2d 3a 5a 1f a3 b7 ee 92 3b c0 89 e3 cf 13 68 5e 59 d6 d1 1d 95 99 44 ca ba 95 4f a3 6e 7e 7e af 43 fc a0 50 7e 22 e0 ed 4b c7 62 57 6d 7d 09 a8 2b 3c d0 12 3c 29 03 cb 00 aa 40 73 0e a8 e1 eb f7 bc 8a cf de f1 d6 4e 75 a9 80 5a 88 7f 07 ee 11 af 3d dd 80 31 39 9c aa a4 95 f6 35 a1 75 c0 67 3b 3b be 02 6e fd fc 0b 5e 82 70 ac a4 ad 91 0c a0 64 9c a6 2b 51 dd ca bb 95 75 39 47 a8 d4 c2 a9 9e 2e eb dc 34 6e b5 f3 79 fb 1d 9f 28 43 53 2d 40 56 ed 5b 9e 1a 20 4a e0 59 78 cf 75 97 f0 c3 4d 67 d5 4b 9e 2a c4 77 82 7d b0 dc b8 3a 60 93 c1 99 0a a6 9b f3 c7 75 5d 53 02 a7 2a 6f 2f dd fd 90 df f5 55 ad d5 d5 ee 65 Data Ascii: PX{\9IfrKcc6hEsVpI$-:Z;h^YDOn~~CP~"KbWm}+<<)@sNuZ=195ug;;n^pd+Qu9G.4ny(CS-@V[ JYxuMgKw}:`u]So/Ue
2024-03-18 16:22:06 UTC	1369	IN	Data Raw: 8d 90 7f 18 20 6f a6 4c 2d fc 9a fe 09 9b 30 36 ce 6d 9b 0e e6 de c1 e5 ac 3e 6e 13 fc 8a c2 59 39 ac ee b8 34 6d 3d 04 44 60 52 7f 23 57 75 7e 5e 8b ff 95 0d 09 d4 2c a3 6d 3e 4f 33 fc 59 c2 4b e4 f0 3a fb e6 03 eb 50 95 7e 43 4a 52 d3 4d fa 92 f2 a1 dd b3 d8 b6 63 00 1b 07 44 a1 25 0c 1c 51 60 21 b0 fc 78 f8 28 fe 72 d3 f9 10 08 96 90 2f dc 7e 0e 1f 39 f9 eb fc 6e c7 2a 6e de bc 8a 20 b0 88 8d d3 d7 b2 12 60 e0 03 d3 1c 96 a8 43 25 40 45 d2 7d 09 40 15 41 25 fd 2a 11 3e 40 3f 9d 0c 5a 9a 91 46 22 a1 38 7e 72 e7 73 59 7d fa a6 c4 ce ed 04 76 00 0f 02 07 d5 f4 55 16 26 1e 80 c6 6a 92 f7 cd 2b 90 ba e5 9d 99 47 db 04 04 c1 f2 e0 1a de 33 37 0c dd a5 81 58 8c 58 02 71 18 71 04 69 34 a6 d8 36 92 ac 35 c9 17 0f 09 de 5b 32 7e a4 63 9d 87 13 78 78 fb 5c 06 07 Data Ascii: oL-06m>nY94m=D`R#Wu~^,m>O3YK:P~CJRMcD%Q`!x(r/~9nn `C%@E}@A%>@?ZF"8~rsY}vU&j+G37XXqqi465[2~cxx\
2024-03-18 16:22:06 UTC	1369	IN	Data Raw: 2b d5 cd 67 6e 33 70 a0 1b 43 f5 51 13 c4 66 3d 98 71 55 53 48 18 82 2b 81 34 e5 7c 9d 9d 73 54 d4 a6 60 ac d0 83 d2 40 09 4a ef c5 39 ef fb 23 94 06 ef 03 e1 04 9f 7d e9 97 38 6e f1 3d a9 6d 8b 09 52 5b 57 97 d6 d9 b5 4e fb 57 b5 5f 75 b1 9b ad ab ab 93 a4 12 8f e5 b6 78 f1 c0 ae f2 03 d5 ca 97 13 73 d5 39 5e dc d8 b5 f6 2e 1e 2b 3f 07 f4 e3 50 08 03 71 13 67 37 98 b3 f8 c4 20 ce 0c 3a 5f c2 34 b1 71 ae 0a b2 34 2d e6 dd 91 15 60 d9 6b bc 46 95 08 87 54 df 90 c9 de 48 cd 25 0f 6f b6 05 1a c6 f2 b9 57 fc 33 ef 7d fe 55 cc 0e 47 52 48 b6 16 5e 69 92 79 4a 68 9d 4f 16 3a 21 75 07 1c c6 c5 fe 30 6e 23 ed 09 8c b5 cc 6e 8c b0 df dc 1a 70 e2 c5 ec 4d dc b8 06 56 c9 49 a9 82 b3 45 6c 3a 50 6b 70 76 43 62 2a 8d d9 ae 54 d4 63 4d de 97 bc 5a 3b 57 7a 94 21 98 7c Data Ascii: +gn3pCQf=qUSH+4\|sT`@J9#}8n=mR[WNW_uxs9^.+?Pqg7 :_4q4-`kFTH%oW3}UGRH^iyJhO:!u0n#npMVIEl:PkpvCb*TcMZ;Wz!\|
2024-03-18 16:22:06 UTC	1369	IN	Data Raw: 77 2d 23 34 11 b3 23 43 40 bb c3 ab ec 26 71 23 f1 2e c4 b6 39 fb c4 7b 39 f5 a8 07 48 9f 41 97 83 23 91 b8 4c 0b 54 46 45 b5 20 fd d4 40 b1 10 36 8f a3 b4 f5 db 1d e0 00 9c 9a 9f 64 e0 ea a0 25 db 01 4e 5d 5e 66 b4 50 95 a5 31 9d 93 64 2d a1 49 9d 0b 53 e3 7c 18 a1 bf b9 9d 46 63 94 ed 3b 0f a6 35 da 8f 04 16 09 62 24 8c 31 19 b0 d0 26 f9 28 2e c1 4d 60 a7 69 fa a3 0c 79 59 e8 f8 d5 c3 4b f8 cc b5 c7 f3 d0 e0 1c 10 a1 d7 84 84 d2 c0 89 c3 29 34 4d 2f a6 4e 4d 42 ad c4 59 67 99 68 ef a6 af 67 82 8f fe f1 cf bb 4b 5b f6 49 67 7f bf af 16 a5 a6 cc 4f 5d 3a ce 2d 81 e3 6b f2 c6 e2 6d aa 32 38 c7 77 9d 98 4f 97 54 a3 4b 66 26 32 88 56 0d a6 a2 3e 8d 24 2d d0 14 a2 e0 43 d2 12 a8 12 c4 34 df 08 47 38 60 bf 5b d9 3d b2 3f 3b 86 56 32 b2 67 3f c4 38 4c 60 c1 58 Data Ascii: w-#4#C@&q#.9{9HA#LTFE @6d%N]^fP1d-IS\|Fc;5b$1&(.M`iyYK)4M/NMBYghgK[IgO]:-km28wOTKf&2V>$-C4G8`[=?;V2g?8L`X
2024-03-18 16:22:06 UTC	1369	IN	Data Raw: ef 6e c2 63 0b a1 b7 7d b0 5c ba e5 81 ba 36 77 fd d0 68 22 75 c1 1a 23 c1 f7 8d b8 92 d4 59 97 bc b9 63 34 c0 a4 79 a7 0e 9b 2d 19 4f d5 28 14 c3 03 20 f1 32 73 9d 6a 92 69 1d db 4d d2 b2 db 33 cb 27 36 cc 84 8e b3 0e 7c 90 b3 56 6e e4 be 5d f3 b8 ee c1 55 dc fc f0 4a 36 0d 2d 28 fd af e9 04 09 27 38 64 c5 83 9c 71 fc 5d bc e8 a8 07 e9 ef 6d 17 2e fd 4c c0 b5 28 db 2c e8 94 a4 0c 56 76 fe ea be dc 4e 1a b8 7f 01 f4 30 41 b8 c5 7f 14 5b 6e fb 64 17 a6 20 3f 0e 3e fc eb c8 c4 cf 2d 24 2d 1b 90 b7 09 4b d2 d7 26 30 6d 42 49 a5 ce 1b 94 e7 4f c9 73 a9 f3 24 2b e8 22 75 be a4 05 de 71 81 77 5c 50 ec df dd 0e b9 73 fb 62 1e 1c 9a cf 43 43 f3 d9 36 3c 97 b1 56 c4 e8 44 13 44 99 d5 33 41 b3 31 c1 7e 0b 77 70 c0 c2 41 9e b5 74 2b c7 ae dc 4c 4f e4 fd 2e 5d 87 ed Data Ascii: nc}\6wh"u#Yc4y-O( 2sjiM3'6\|Vn]UJ6-('8dq]m.L(,VvN0A[nd ?>-$-K&0mBIOs$+"uqw\PsbCC6<VDD3A1~wpAt+LO.]
2024-03-18 16:22:06 UTC	1308	IN	Data Raw: 63 78 a6 fd bf d7 12 07 f0 4d ee d4 57 b8 a5 df 6f 9a f9 07 0b 1c 0d 15 f5 27 55 b9 f0 0c bd 77 c1 25 c9 cb fb a4 8b 5a 94 4c 6a fc f2 74 bb 4e 35 76 53 87 9a 4a 53 ad b4 55 d2 92 c4 99 42 3d 56 a5 d0 0a c4 41 32 a0 8e 85 f2 cc 50 9a cf 8e 87 1f 31 6f f7 89 f2 19 26 f6 a6 ef 65 ea 2a 53 87 6b 58 13 12 ed b9 22 0c da af cf 5e c3 4a bc cc b8 f4 c8 27 4c cb 82 cc cb 94 c2 d3 34 d9 b7 c2 7c 27 27 bb fb 33 af 31 cc 24 a7 e2 41 06 ce ab d7 c5 8b ac f3 28 33 a9 2a fd ec a7 27 79 79 3e db 4e 53 bc d4 40 ae 2e 54 60 2c 2c 6c 5e a6 ba 33 6d 92 2c 0c 6e 21 f2 26 f9 a7 a1 6f ec 4b 9f ef 93 c4 65 e1 df b9 d6 ad 74 2f fe ce 72 d3 6e 0a 72 6a 7e 37 74 64 92 b4 bc 68 58 4a da a6 18 b9 17 d2 94 68 a4 1a 1b 56 95 b4 e9 78 91 dd 9c 91 49 a5 ac 52 66 bd 7d 9a e6 db 01 8c 34 Data Ascii: cxMWo'Uw%ZLjtN5vSJSUB=VA2P1o&eSkX"^J'L4\|''31$A(3'yy>NS@.T`,,l^3m,n!&oKet/rnrj~7tdhXJhVxIRf}4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49795	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:05 UTC	749	OUT	GET /static/img/big/c.png HTTP/1.1 Host: browser-update.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://browser-update.org/update-browser.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0
2024-03-18 16:22:06 UTC	681	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:06 GMT Content-Type: image/png Content-Length: 26933 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=c.png last-modified: Sun, 01 Aug 2021 16:06:48 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jC4IscFBMQQDBmTWjTjJlW0ArTozjVkrbsuayhKptIJwpXB%2BUwjV%2Fa7cvJ9tcs%2BAgf9l9QfIUYeCu32qeTVDl1p%2FfLRF8J6EULI14L0u%2BrvxWLwZR2tK5JxWgpRBbkmeSvMpfA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f3ebf6c437b-EWR
2024-03-18 16:22:06 UTC	688	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 06 00 00 00 5c 72 a8 66 00 00 68 fc 49 44 41 54 78 01 ec d4 35 76 03 31 10 c6 f1 19 69 9f eb e0 11 7c 05 5f 20 54 86 99 99 99 99 f1 8c 61 8d dd 05 0e 10 4b 99 7d db 86 9a f0 f7 7b fe 6b 77 05 a5 45 7f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 30 fd 19 e0 a6 06 98 98 89 d8 30 29 56 14 33 86 28 04 a6 0f 09 fa d3 98 03 79 9f cc a8 e4 c5 eb 5c 48 36 fd 09 c0 6e a2 8f 7e 11 b0 96 c9 18 8e 91 a6 ef c4 c6 06 53 58 ec bf ec 8f e9 f3 ec 1f ef 4d 78 ca 33 79 4f 14 12 3a 1f 70 39 fc 32 7a 01 fc d4 d0 f4 10 cb dc 88 95 f9 d1 48 96 26 6c 6e 77 85 35 7a ad 8b ba 8a d4 ed 48 67 a9 9b 1c 48 eb d9 8c 9e ad 92 b9 d1 66 59 18 1f d4 e7 9c cc 8f 6d 64 17 26 f6 b4 a3 ec e2 c4 a9 76 96 a4 ef 3a a7 ed c5 Data Ascii: PNGIHDR\rfhIDATx5v1i\|_ TaK}{kwE00)V3(y\H6n~SXMx3yO:p92zH&lnw5zHgHfYmd&v:
2024-03-18 16:22:06 UTC	1369	IN	Data Raw: 08 11 88 f7 2a 3e 53 a9 54 20 95 2a e6 cf b3 44 e7 00 75 73 10 3e 42 e2 3d 30 7b 33 8b ce 3b f2 67 9f 79 a2 5f f0 6a 17 5d 2a ec b4 1d 42 b4 e3 eb 0e 4a 48 9a 17 51 e2 d5 2e fa 4c e1 bd 6a 7d 24 f6 77 bb b0 77 cf e9 5a ad 5d 0d e7 6e 05 70 2d c8 ad 88 c1 77 0b dc 3a 1d b0 dd 42 2a 0c b2 08 11 16 05 a4 40 20 80 08 44 8e 28 6c f6 9d 2c 0a c8 97 d8 38 62 ef 76 3d 82 09 a0 88 10 aa ec 3e 6f a9 d6 12 ab d0 5a 6d 5e 14 e0 7d 80 c8 e3 00 de 8c 18 1f b0 76 eb cd 00 76 e1 20 fc 09 a7 88 b5 e6 1c 43 28 c5 e0 b8 38 80 57 45 00 4a a8 f7 8a 2e ab b5 5e d1 b7 de f2 9f 5a bb fc 0d 17 8b cf 3e 16 22 1f 0b f2 0d 88 71 84 79 07 c9 2a 83 ed 66 b7 f0 23 42 20 c8 83 43 38 e4 70 a1 cb d0 02 27 89 45 05 79 8c b7 93 41 71 e0 3c 05 06 ef 45 ab 55 27 b5 11 24 31 44 57 18 e0 5c 0b Data Ascii: >ST Dus>B=0{3;gy_j]BJHQ.Lj}$wwZ]np-w:B@ D(l,8bv=>oZm^}vv C(8WEJ.^Z>"qy*f#B C8p'EyAq<EU'$1DW\
2024-03-18 16:22:06 UTC	1369	IN	Data Raw: ba 4d 27 89 64 d9 9b 99 77 be 0e c0 87 b4 36 e2 d8 e9 ac c9 43 8b 55 9c c7 9a 61 b5 26 ae d1 70 10 b1 ce 63 0f 2b 63 f8 11 c9 2a ef 49 45 7f 6d fe dc 33 31 4c 4f 01 aa 0e c3 bb 7e d9 b5 57 aa 1b 52 95 44 17 a6 a6 90 3f fd 64 4c d9 ce 35 dd f7 3e f1 47 3b 8f 3f ea d2 fb 6f 10 71 0c 85 24 62 ad 50 d7 ca 13 95 5a 55 75 64 44 e1 b3 c8 18 5f 5f d9 b2 ed 5d cc f3 1f 2e 76 3d a7 69 d6 8f 88 d1 89 f7 b2 1a 3e f8 c3 83 c0 12 e2 bd c0 cc 15 e3 bb 63 f1 dc b3 ca 4e e7 87 2a 9b b7 bc 2b 3b f3 ac d7 d3 62 d4 91 51 85 f7 5d 62 2d 70 4d 3c 51 49 5d 9f 22 36 7d c7 1d 84 c5 1f 10 ef df 96 ec fe 65 dd ae 6f cd a6 a6 eb 0e 22 00 59 76 f7 d5 ee 74 48 40 04 e2 bd b3 e6 01 cd 9f 79 2a c6 bd 2f 5c 2a ce bf 4d 7c f6 83 fb ef fb 67 1e f8 ef bb 4c 20 4e b0 fa ff 49 21 e0 6b 57 ed Data Ascii: M'dw6CUa&pc+cIEm31LO~WRD?dL5>G;?oq$bPZUudD__].v=i>cN+;bQ]b-pM<QI]"6}eo"YvtH@y/\M\|gL NI!kW
2024-03-18 16:22:06 UTC	1369	IN	Data Raw: 00 77 80 8c 2f d3 09 94 0e e0 80 8a 92 8c 34 3b 1d ea ee cc 27 27 4e 4b 73 56 14 e7 95 03 81 5e af d8 85 20 13 7b 35 cd 61 2e 60 30 10 ec 81 2b 2b 10 2c 41 2c 2b 87 d3 97 09 74 77 07 4e 83 ea 1d a4 9d 9e 18 41 6a 29 00 0b e0 1c 28 8c d1 ac d5 6a 48 96 fd 73 b1 67 72 4b 31 3d 1d e1 bd eb ab ee c1 5e 0f f6 ee 03 83 ee 60 f0 c2 80 3d 1e b8 cf 63 69 66 64 39 47 97 0e e7 c8 dd 81 99 a9 18 26 27 b6 8a cf fe 19 79 3e c6 bc 63 34 93 44 2c 27 ba 6f 7d fd 65 cb a7 f8 69 e2 1a 1b f0 f0 2f ff 8e 9c 7c c3 d5 ff 50 bc b0 e7 c6 c4 20 de fb 23 5c 9f 00 02 19 74 81 bd f5 83 3f 89 3d d5 ee ad f7 ff 3b d2 77 d2 7f db de 3a 8f d1 65 96 28 77 07 9c 53 6b ce 05 11 39 cb ad 3f e1 d2 5d bf f5 27 7f b3 fe 86 6b c1 76 4b 96 97 03 88 11 cb 85 6e ac a1 b0 c0 0b be fd 6b 7f 2d 4c 4f Data Ascii: w/4;''NKsV^ {5a.`0++,A,+twNAj)(jHsgrK1=^`=cifd9G&'y>c4D,'o}ei/\|P #\t?=;w:e(wSk9?]'kvKnk-LO
2024-03-18 16:22:06 UTC	1369	IN	Data Raw: 3a 3d b7 df ff a1 9f ed e9 e7 6f 59 b5 c8 d6 ab 01 2a 02 b8 22 5b 32 78 93 01 9b 21 23 bb 13 c4 ba 01 23 d3 b6 a0 26 fd 2c 2c d8 7c 08 80 ba cb 6d 27 08 aa 36 d8 32 90 d7 f1 f1 0f 37 9d 66 03 91 36 9d 1d ed 66 47 9f e0 25 ff fb 60 6f 59 71 91 ae ee 5c 72 c1 d6 f1 91 93 36 d4 c7 c2 bf 1e bb b7 19 b0 4a 45 15 51 c0 81 b5 ea 74 82 60 02 0b 60 3a 16 a0 80 45 a7 ea 1f 80 14 16 a0 6e c1 91 53 af 34 0f d9 7f 17 a4 ff 0b 4b 81 f1 30 18 da 7a 92 14 0a 17 e4 76 df 43 fd d5 6b bc a6 b3 23 dd ec c8 83 bf e4 9c 87 4b 60 c3 b0 27 d7 b1 72 a4 5e 7e db 40 75 8c 7c 2d 30 37 f4 77 71 e3 01 ab 18 2a d5 69 88 93 a5 1d 91 6d 5a 41 70 f2 35 65 ed ee f0 88 c4 bb 03 27 f7 09 44 63 c9 8c 44 17 58 c0 0c 23 e0 82 e9 34 4b 81 ad 83 ad 5d 01 c9 17 56 98 ae ee 50 c3 50 9a ce 8e 72 b3 Data Ascii: :=oY"[2x!##&,,\|m'627f6fG%`oYq\r6JEQt``:EnS4K0zvCk#K`'r^~@u\|-07wqimZAp5e'DcDX#4K]VPPr
2024-03-18 16:22:06 UTC	1369	IN	Data Raw: 3d 48 3e 87 88 d9 26 9c aa 8d 09 a8 00 ea 5c 85 62 22 6d 58 50 b5 68 58 c7 d6 c6 08 ca 9b 68 0c df 45 6d f0 46 1a 83 37 60 47 ee a2 39 80 e7 19 8c 5f 44 4c 2e a6 a3 90 1c 00 4c 2c 00 38 7f 9f 10 cd 4d 04 b7 7b cd 48 fb 78 89 28 17 8d 1d 47 24 31 21 20 ce b9 04 68 07 84 f8 3c f7 14 e2 02 58 1c 10 eb 64 f2 d0 84 df 5d 80 96 3b 87 93 e8 3a 15 45 62 93 45 03 ab fe 12 a3 85 fe a7 03 17 a2 f5 39 65 01 12 fc e7 b9 cc a5 d5 8e f8 bc 79 dc 6f de fb 9f 66 00 58 67 55 2d 60 a6 7b b6 a3 58 4b d0 dd c9 a9 d7 6d e5 94 df dc 8c df 9d 27 a7 8a 05 0a 11 13 98 04 d6 76 2c 05 14 10 92 c1 4e c6 a7 0a a9 c6 97 02 6e 10 88 05 29 41 64 6e c0 6f 44 c0 18 2a 41 c0 68 b9 cc 78 10 62 96 2e a7 e7 a0 43 59 bc ee 68 7a 0e 3c 84 c2 aa d5 78 1d 1d a8 55 34 68 34 3d 40 c3 10 8d ab a8 ce Data Ascii: =H>&\b"mXPhXhEmF7`G9_DL.L,8M{Hx(G$1! h<Xd];:EbE9eyofXgU-`{XKm'v,Nn)AdnoD*Ahxb.CYhz<xU4h4=@
2024-03-18 16:22:06 UTC	1369	IN	Data Raw: b1 c7 5e 84 95 71 6c bd ee 02 fe bf c4 14 55 8b f1 f2 48 ae 93 da d6 3b 19 be f6 2b 34 ee fd 15 1d 79 83 57 e8 44 6d 88 82 c3 00 26 b3 ab ba 3b 09 f1 25 9f 80 20 ce 32 c1 3a 4b 83 38 8d 97 96 c7 8e 97 80 e9 e8 fc 46 40 41 d4 89 02 06 8c 01 af e5 12 65 7c e2 e6 88 92 92 9c 39 64 ba a2 23 49 98 2b 8a 86 22 85 65 55 ba 1f 7c 38 70 0b f5 e1 ed 66 01 12 5e 76 16 db 63 67 6c ec f7 80 30 67 fc f7 34 f7 fd df 58 09 ea a1 11 f1 04 99 6d 2e 21 04 96 f9 45 ce f9 de 35 2c 1f ae b4 2e 98 f8 7a 5e 81 bc c0 a2 76 10 48 14 04 dd 6d a0 14 ca ef d4 06 c4 46 dc 20 30 f5 0e 82 b4 03 07 d9 b6 05 01 63 0c f5 d0 b2 69 68 08 b3 f7 be ec 79 ee 0b 58 fc b0 47 10 d6 eb d8 6a 75 87 00 5f dd 1f 5c 6a bb a3 02 81 5f 44 bc 02 a5 7b fe c6 f0 95 9f c2 2b df 42 47 d7 a2 c9 c2 22 57 08 94 Data Ascii: ^qlUH;+4yWDm&;% 2:K8F@Ae\|9d#I+"eU\|8pf^vcgl0g4Xm.!E5,.z^vHmF 0cihyXGju_\j_D{+BG"W
2024-03-18 16:22:06 UTC	1369	IN	Data Raw: 1b 47 20 b0 93 f4 df 33 09 12 93 c6 8f 95 7c b1 b9 9f 09 ec e4 32 c0 33 b0 b2 17 0e ef 57 1e b9 af 72 d0 83 94 ce e8 77 09 62 f7 ae c9 6c 6a 41 3c 4c be 8b e1 eb be c6 d8 75 9f a6 bb bb 13 cf 78 a8 86 20 a4 04 00 89 02 ac 22 28 0a 48 6c 09 e4 fb 32 f1 ea 09 62 40 62 4c 4e d3 97 da 09 80 97 b4 79 29 f8 96 ec 1d 9d 2e e0 13 4d b7 89 81 74 3c e8 0d c0 fb b1 81 07 84 b3 d4 00 9e ce f6 d8 71 f7 ef 7e d9 fa f1 ad eb 04 2c 60 98 63 13 ab 04 dd 1d 9c 71 ed 56 4e fd ed 4d f8 91 20 d8 86 77 7c 0b 50 81 7c 8b 09 b8 60 77 fb 04 48 67 01 49 4d 41 2a b1 62 93 0c 82 a0 b4 33 af 47 3d 0c d8 58 a9 b1 c7 4b 5f c3 aa 47 3d 96 c6 c8 c8 8c 85 3e 1b 01 bf 33 0f 83 65 f8 fb ad c2 1f 6e 12 ee d8 2c 34 c2 68 dd ee 81 b8 e0 9e a3 2e d7 38 6b 68 84 50 6b 4c 9c 6f 9f 15 ca 29 07 2a Data Ascii: G 3\|23WrwbljA<Lux "(Hl2b@bLNy).Mt<q~,`cqVNM w\|P\|`wHgIMAb3G=XK_G=>3en,4h.8khPkLo)
2024-03-18 16:22:06 UTC	1369	IN	Data Raw: 02 d1 b1 8d 31 8c 0d 8f 22 47 1c cd 83 5f f0 b2 d6 56 9f 88 64 ce fc 8b 3a 68 6d e7 bd ee 12 8f 2b ee 11 7a 3b 01 e6 15 fc db 5d 95 d8 d7 09 57 dc 2d ad 02 a4 ab ef 15 7a 3b 66 50 40 24 82 06 65 0a 07 be 9c a0 f7 61 94 5b c1 d4 8b 57 c6 c4 3d 66 ee b8 38 4e 7a b1 4d ec 16 5d c4 7c 4a 13 d7 c5 71 a6 76 6d bb d3 99 68 24 f5 bb 49 cb 45 44 03 08 2b 67 34 1d 36 fd d4 36 9d 99 b8 99 c9 e4 47 6d 38 40 ce 38 e4 4c 7d ce d1 4f df bd 12 d4 8f b2 6a 53 e3 ee 5c 07 03 05 bc 50 d9 9c 0b f9 c7 31 7b 61 1b 21 75 40 d4 4e ce d0 f8 cd 61 14 24 5a 3e 28 94 23 a0 4a 04 fa 6c 0f 18 c5 19 9f a2 ab 4f 84 7a ad 4a 69 e9 0a d6 be fa 8d 88 08 1a 86 20 92 0d fc 45 f8 ed 0d c2 db 7f 6c 18 1a 87 9e 22 84 96 74 9b 7f ea 9f 99 d5 0c 8d d3 aa 30 fc f5 f5 c2 a2 62 d6 20 20 51 c6 17 0a Data Ascii: 1"G_Vd:hm+z;]W-z;fP@$ea[W=f8NzM]\|Jqvmh$IED+g466Gm8@8L}OjS\P1{a!u@Na$Z>(#JlOzJi El"t0b Q
2024-03-18 16:22:06 UTC	1369	IN	Data Raw: 5d 2c fb bb 66 04 c6 aa ca ba 3d e1 5d 8f b7 34 c2 8c bb 02 f9 3e ea b7 7d 16 b9 f7 2b f4 b6 0a 84 6c 42 0d 48 86 be 1b c9 da d3 af c8 ec af f0 99 17 12 25 0b 58 29 3d d5 6a f0 16 cd b8 3b 50 ec 95 8f 9e be f7 ff 81 c3 05 d0 55 9d 7d ab ae 18 b8 f3 96 52 a3 ba c8 38 f7 fe 9b d7 40 60 2d 7e 4f 0f cf f9 e5 ed 1c 7a fd 7a 0a f1 3e 01 37 08 98 58 25 60 7c 23 49 c0 07 3a 8d 41 d0 d4 e7 05 22 02 41 c8 58 4f 2f 07 7c f2 2b e4 17 2d 42 83 f4 b5 7f 68 a1 b7 03 be fb 9f 09 d1 af b7 73 01 fc 6d 5d c6 33 13 9d 8e e7 1f a7 3c eb e1 ca 48 65 ba 6a 41 05 f1 a1 31 4a f5 f2 f3 e9 ce 8d 52 2c e4 50 d5 e4 ad 1d 17 80 a9 d5 75 19 f0 96 a5 3f 28 bd a7 3f 5b 6f b0 68 d6 d3 2b 58 c1 eb 1c a1 eb e0 fd 80 4d 34 06 32 dd 2b 50 9a eb fb e9 7b fe 6f 6f 97 ff 7a 27 de 5f 1a fc 63 2d Data Ascii: ],f=]4>}+lBH%X)=j;PU}R8@`-~Ozz>7X%`\|#I:A"AXO/\|+-Bhsm]3<HejA1JR,Pu?(?[oh+XM42+P{ooz'_c-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49802	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:05 UTC	515	OUT	GET /static/img/speed.png HTTP/1.1 Host: browser-update.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause
2024-03-18 16:22:06 UTC	688	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:06 GMT Content-Type: image/png Content-Length: 1539 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=speed.png last-modified: Sun, 21 Mar 2021 12:19:12 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pUBr6WslHavb7W3wiafo5h3GoM%2F2evqtaGPT%2F2FJ7rEDSH79G9j%2BRBWN42%2FWi7OmG91qQs8dvsl9CftdLEdIL%2FuLc4hHUZEyF8PA%2FO0RcS66uk290Hq32VIPBK7bvsO%2FL0v06A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f3f3cd0c347-EWR
2024-03-18 16:22:06 UTC	681	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 03 00 00 00 44 a4 8a c6 00 00 02 88 50 4c 54 45 00 00 00 f6 f6 f6 e8 e7 ea e7 e7 e7 e3 e3 e3 ee ee f0 ee ee ee f1 f1 f1 f3 f3 f3 e8 e8 e6 e5 e5 e3 e3 e3 e1 ee ee ec f2 f2 f0 e7 e7 e5 ec ec eb e2 e2 e1 f0 f0 ee eb eb e9 df e0 dd dc dc db e0 e0 df d9 d9 d9 e1 e1 df dd dd db ea ea e8 de de dc 66 5f 78 f5 f5 f3 db db d9 cd cd cd 80 7f 9a 7f 7d 98 f4 f4 f2 7d 7a 94 78 74 8e de dc df 9a 9a b3 b7 ba b2 7b 79 94 79 76 91 75 71 8c 72 6d 87 69 61 78 f2 f1 ef cd cc d2 c7 c7 c8 a6 a6 be a9 a5 b3 aa a9 b0 90 92 ac 85 84 9f 82 81 9c 88 83 98 5c 54 6e f7 f7 f5 e1 e0 e3 df de df d5 d4 d9 d6 d5 d6 d0 ce d4 d2 d1 d2 c9 c6 cf c3 c0 c9 c0 c0 c1 c4 c6 c0 bb bb bc b2 b2 b2 b0 b0 b0 a0 9f ad 92 91 a7 8a Data Ascii: PNGIHDR DPLTEf_x}}zxt{yyvuqrmiax\Tn
2024-03-18 16:22:06 UTC	858	IN	Data Raw: 1a 1a 11 11 11 00 00 00 3d c8 43 46 00 00 00 09 74 52 4e 53 00 22 cc cc ee 88 88 66 44 b7 99 31 40 00 00 03 21 49 44 41 54 38 cb 6d 92 63 7f 1c 51 14 87 53 77 76 67 d6 33 8b 59 1b 59 23 b6 8d a6 b1 8d c6 aa 6d 44 8d 93 da b6 6d 5b 5f a7 f7 ee 44 fd a5 e7 e5 3c cf 3d e7 3f f7 1e 9f b9 b5 a2 70 6f 4a 4a bc cd ec f3 df 5a b2 df ad b1 5a ad db ce 68 62 53 dd 81 f3 f9 9e cb eb ad a5 b5 4e 97 2c 59 27 8f 2b 4d 74 2f fc 17 fb a7 ae df e2 a8 88 2d b7 17 6c 2d da 9d a0 34 c8 2a 54 a1 73 79 70 62 9e c6 11 13 29 e1 ac 3d 76 08 15 0a 2c 76 83 b1 46 59 38 e7 7c 62 5e e9 4e 7b c0 da 89 67 7d 5a 2d 8a 32 39 ac 70 77 b3 4c 17 36 23 a4 e6 39 62 f2 d1 b1 ee a4 03 49 17 4e 61 6c 94 29 44 42 6c ad 2e d5 ea 29 be 77 8b 23 36 dc b7 bb a9 3a a9 af be 69 13 e6 0b 5a 20 b4 a0 de Data Ascii: =CFtRNS"fD1@!IDAT8mcQSwvg3YY#mDm[_D<=?poJJZZhbSN,Y'+Mt/-l-4*Tsypb)=v,vFY8\|b^N{g}Z-29pwL6#9bINal)DBl.)w#6:iZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49800	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:05 UTC	845	OUT	GET /cnt?what=view&cv=base&tv=0&ref=iwu.marketing&from=c&fromv=117&dice=47&rnd=0.8140456435354542 HTTP/1.1 Host: browser-update.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://browser-update.org/update-browser.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause
2024-03-18 16:22:06 UTC	550	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:06 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GF24b2B14n4UXh%2FHi3YnJAP0WgrmWn9QkDxxOZL5TWBkemFj4Wj05C7qOr5lWwm5pHxZD9zIQyfVqs%2FU3PTLXczmL8PYSTue03V8mj7rPBBmjERODRGS7u9FgMUPwRRbWhR%2Beg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f3f2d52c42f-EWR
2024-03-18 16:22:06 UTC	11	IN	Data Raw: 36 0d 0a 6f 6b 76 69 65 77 0d 0a Data Ascii: 6okview
2024-03-18 16:22:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49803	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:06 UTC	515	OUT	GET /static/img/big/o.png HTTP/1.1 Host: browser-update.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause
2024-03-18 16:22:06 UTC	670	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:06 GMT Content-Type: image/png Content-Length: 5266 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=o.png last-modified: Sun, 01 Aug 2021 16:06:48 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZYyTqTifgvzPxTgHsRORtoeWScrfiGLlJx1niqqDOB471TJDF2mlTBiNea1i7w2Rq8fpwMdRLye3Mn3xkdrDnpupSUawOxXKMvNct69XBsOJOk1MQ9HAbNG4tWCBNkOnEO0QTg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f40cd230c7a-EWR
2024-03-18 16:22:06 UTC	699	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6e 00 00 00 6e 08 06 00 00 00 c6 5b 26 fb 00 00 14 59 49 44 41 54 78 9c ed dc 79 78 54 55 9a c7 f1 37 6b 55 aa b2 54 d6 aa 54 56 12 20 0b 21 6c 61 13 50 11 89 80 40 d8 41 67 da 79 c6 19 9f 19 9b 99 b6 7b 9c ee b6 75 ba 9f 1e 87 b1 e7 71 d4 69 50 04 41 14 81 90 10 56 65 0f b2 c9 22 01 65 31 48 d8 41 90 b0 6f 91 35 b5 bc f3 3b b7 2a 58 c6 ac 55 f7 9e 04 e5 8f cf 73 49 a8 e4 dc 7b be 39 77 49 02 c4 09 1d e9 3e 13 0c b9 30 16 5e 86 19 b0 12 ca e0 30 9c 81 ab 50 e5 76 19 4e c1 01 d8 06 4b 61 32 fc 1a 06 43 9a 94 fd 4e ee 46 3b 23 cc f4 6e a0 1f 15 87 84 d0 02 83 c1 27 2d 1d a1 29 ac 30 1e fe 0a eb e0 1c b0 ca 8e ba 83 be 0a f9 60 7c 10 ce 3b 5d e0 45 77 a8 6a 0d 42 35 e6 22 14 c3 b3 90 f4 20 5c e3 2b 6b Data Ascii: PNGIHDRnn[&YIDATxyxTU7kUTTV !laP@Agy{uqiPAVe"e1HAo5;*XUsI{9wI>0^0PvNKa2CNF;#n'-)0`\|;]EwjB5" \+k
2024-03-18 16:22:06 UTC	1369	IN	Data Raw: c7 6f b9 be 50 9c 2b 42 c2 f9 64 ac 12 f0 79 ac 40 25 5c 59 2b 0e 17 c7 d2 1e a0 73 58 b9 b6 e0 94 78 26 ae ad 6d 99 3e d4 86 60 ce 77 b0 02 e6 04 05 f2 dc a0 20 6c e5 9b 07 1f 61 fc 29 7e ae 95 be ca 10 ce 97 2c 19 53 39 ad 0f ed 33 59 e9 9d 40 6a 75 e1 3a c2 79 39 d1 72 95 55 56 9d 90 6b df 14 16 6d 9b ea 4f 2c cc 0b 0e e6 42 98 d7 0a 88 fd 98 13 1c c4 53 b0 5f ef 05 10 1f 88 4e 2a dd 15 61 0e 9c 11 e4 df aa c2 3d 0a 0e 29 ab 2c b1 b3 88 e6 c4 69 c8 21 26 48 4c cc 1c 5d 30 17 e9 f5 3c 5f a7 3b 08 4b 61 72 a1 4e f7 47 f8 03 fc 19 6f 4f 85 15 70 04 b8 50 12 31 56 91 4e cf b3 11 70 46 a0 1f cf d3 05 ef c7 7e 46 b5 96 70 f9 72 56 59 8e eb f6 3e a9 ab 73 a7 c9 cc d3 30 11 33 83 03 ee 2e 08 09 29 c1 64 3c 37 5f af 6f 07 84 c9 52 14 7a a8 79 9f f2 f7 7a 7d 16 Data Ascii: oP+Bdy@%\Y+sXx&m>`w la)~,S93Y@ju:y9rUVkmO,BS_N*a=),i!&HL]0<_;KarNGoOpP1VNpF~FprVY>s03.)d<7_oRzyz}
2024-03-18 16:22:06 UTC	1369	IN	Data Raw: 4d f2 1c d3 73 12 da 48 5c 6d 13 55 0b 17 9f 43 67 a3 da d1 ed fe 8f 13 8f 2c 68 38 9c 30 6a 14 5d 7b f4 51 e5 ce ec 73 4c c0 8e 36 6d d4 f0 a7 1d 69 69 ac b1 53 40 35 c8 89 83 77 7b 01 58 02 27 44 79 8c eb 35 f1 40 5e 6d ce a6 6f 22 db 52 f5 80 81 4d 0b 37 7c 38 39 07 0f a6 2f 70 2d dc 86 6b 45 19 26 41 05 99 c0 12 64 d6 8c e9 39 11 6b 25 85 fb 54 8d 68 35 e1 aa 62 33 e9 98 29 1d e1 f2 9b 16 6e e8 50 e2 82 02 3a dc a9 93 72 77 b6 0b 01 55 91 9e 7e 00 58 63 bf 03 31 d6 bd 70 a1 60 93 14 ee 05 35 c3 5d 8a 6e 4f c7 9b 13 4e 18 31 82 ce f7 e9 43 5b 71 91 ff a2 5d 3b b5 bc 06 ac b1 6d 35 e3 d5 4c c2 08 49 d1 84 5e aa 44 4b c8 25 07 6e 4c 2a 71 9a 3c 69 6a db bc 70 b8 49 b9 31 60 80 6b c2 b1 5a 76 b7 6f af 86 02 60 8d 39 21 5a 8c a7 1c 3c bc 09 2c 41 15 e8 dc Data Ascii: MsH\mUCg,h80j]{QsL6miiS@5w{X'Dy5@^mo"RM7\|89/p-kE&Ad9k%Th5b3)nP:rwU~Xc1p`5]nON1C[q];m5LI^DK%nL*q<ijpI1`kZvo`9!Z<,A
2024-03-18 16:22:06 UTC	1369	IN	Data Raw: e5 70 70 22 5d 48 eb 44 ce 11 c3 89 87 0d 6d 89 70 b3 25 44 db 57 7b 5c 3a 81 d3 4c 2d 25 c0 12 5c af 63 ec 26 3b 89 d5 76 30 28 91 4e e1 21 5c 39 45 0a e2 df bd c9 8d 16 22 69 b5 3d f3 a3 70 c7 31 09 b5 64 00 4b f2 8b 3a c6 6f d4 09 11 4d 9f 44 47 c3 db e0 42 8d 58 63 46 b6 44 34 e1 15 09 d1 2e d6 35 36 1d 35 a5 d7 65 07 b0 04 e7 ea 19 bf 5e c7 10 ee 90 21 85 2a 10 ee 8e f8 4f 69 26 8c 6e a9 68 c1 70 47 42 b8 57 ea 0c 77 04 93 51 87 3e c0 92 fc 63 3d fb f0 63 b8 f5 3f 84 55 56 1e 60 a5 aa 1e fd 88 9f 1a d3 12 c1 6a fc 59 42 b4 db 60 a8 33 dc 61 53 5a 9d 0e 99 d2 3e 07 96 e0 fa a1 88 b4 20 a0 86 1c 46 b8 83 88 b6 97 2c 74 29 a7 07 f1 f8 d1 ae ff 6c a6 65 a2 45 83 43 42 b8 3f d4 b7 0f 74 10 93 52 8f 3c 60 49 a6 34 b0 1f f7 ec f1 8f a7 4a dc 41 f2 b8 51 c4 Data Ascii: pp"]HDmp%DW{\:L-%\c&;v0(N!\9E"i=p1dK:oMDGBXcFD4.565e^!*Oi&nhpGBWwQ>c=c?UV`jYB`3aSZ> F,t)leECB?tR<`I4JAQ
2024-03-18 16:22:06 UTC	460	IN	Data Raw: b9 5e fd 6c fb db 75 b2 6d 8a 6c 63 ff d8 2f 96 8b f1 c5 b2 90 22 2b 57 06 98 47 e3 8b 48 39 f6 52 cc c1 fd 1e 8e 56 04 5a 32 96 07 9a 97 00 bb 58 24 31 f3 32 8a 45 40 13 17 52 18 26 37 ca b1 4a 6f b5 6f 8c 4c b5 97 59 33 ec 62 f2 8f 75 ec 6e fb b6 5b 6f fb 85 9e fd 6c 17 7b 3f ec b8 d4 fb 61 65 7b be 67 5f db e9 ae bd ed 47 3b e4 d9 ca 71 fd dc 11 df de be c1 94 ea 58 11 1c 6f 2f c1 23 89 f8 7c d8 f2 32 84 c3 58 ff 83 63 34 ae c2 b1 fe d4 c2 11 26 91 3e 09 30 8f fc 38 c0 bc 15 b8 25 2c f3 8f e3 45 b8 1b 2d 56 42 86 f3 5c 4c fe 3c 0a 77 16 91 c9 59 4c 91 ce 05 14 25 d8 c5 56 bc 3d 1f ef 17 7f 2f 5e 57 88 9b 20 bc 4f f9 78 f1 79 dc 9f b3 08 c7 d4 49 1c 9b 38 c6 9f 72 38 5a a6 88 1b b7 d4 3f ae 0c b8 35 58 22 f8 09 b1 1e 5c ef af e7 63 96 e2 38 7a 21 9c 72 Data Ascii: ^lumlc/"+WGH9RVZ2X$12E@R&7JooLY3bun[ol{?ae{g_G;qXo/#\|2Xc4&>08%,E-VB\L<wYL%V=/^W OxyI8r8Z?5X"\c8z!r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49806	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:06 UTC	517	OUT	GET /static/img/comfort.png HTTP/1.1 Host: browser-update.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause
2024-03-18 16:22:06 UTC	692	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:06 GMT Content-Type: image/png Content-Length: 1648 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=comfort.png last-modified: Sun, 21 Mar 2021 12:19:11 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FGny2%2B%2FgiP6KQ0jBP9L7sY7G47psx5YRc9RKFt%2B%2FKyT9i1Oe76Sw0hMG6CAIhXnFqvGdT7uWc9stcjytAc%2FT0SmsOqROAhHoovKJfaPnAJNRp%2F7HALbtpzue3172FbRWP%2FTFlA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f40af951768-EWR
2024-03-18 16:22:06 UTC	677	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 03 00 00 00 44 a4 8a c6 00 00 02 fa 50 4c 54 45 00 00 00 e3 e3 e3 e6 e6 e6 e7 e7 e7 f1 f0 e5 e5 e5 e5 e2 e2 e2 e8 e8 e8 fe b7 38 ca 00 00 f8 d8 5a f8 ed 8c f8 ec 87 f9 ee 94 f8 eb 84 f6 e3 66 fb c8 49 fd bd 3e d7 d7 d7 fa f0 9f f9 ee 90 fa cf 50 fc c4 45 d9 00 00 df df de ce ce ce c4 c4 c4 fb f3 ac fa f0 9c f7 ea 7b f7 e9 78 fd bf 40 fe bb 3c fd f7 c5 bd bd bc fc f5 b9 fb f4 b4 fa f2 a8 fa f1 a3 f3 d9 9c f6 e8 6e f8 da 5c f9 d4 56 fe ba 3c b6 a5 3c e1 e1 e1 c8 c8 c8 b3 b3 b3 db d6 aa f9 ef 98 cf c5 85 f6 e9 73 fe cb 6b f7 e1 63 f8 dd 5f c7 b5 5b fa d0 52 fc c6 47 b6 a9 40 fd f9 cf ca ca ca f8 f1 ba ee e4 a8 fa f2 a7 fd d9 97 f7 eb 81 dc 78 78 fe ce 76 f6 e7 6a f6 e6 69 ce bc 68 f7 Data Ascii: PNGIHDR DPLTE8ZfI>PE{x@<n\V<<skc_[RG@xxvjih
2024-03-18 16:22:06 UTC	971	IN	Data Raw: ac a5 66 71 71 64 cb b5 63 c9 b6 61 c3 b6 61 8c 89 61 a7 9e 60 71 71 60 7c 7a 5e e9 c4 5d bb 5c 5c ef c8 56 e8 bd 54 b8 51 51 af 51 51 e7 b7 50 ae 9f 4c fc c7 49 d8 91 47 f4 b8 45 a2 45 45 ea aa 44 fc c1 43 c9 68 43 aa 42 42 ad 9e 37 eb 9a 33 c5 63 30 e0 84 2e b4 3f 2b b4 42 28 d4 6a 27 d6 6e 26 ca 58 24 a2 2f 22 9c 2a 22 92 28 22 c4 44 1b 9d 1f 17 b8 28 13 ba 14 09 ba 09 04 ee 81 2a 26 00 00 00 08 74 52 4e 53 00 cc 66 44 88 88 ee 22 1d d2 fe fa 00 00 03 1d 49 44 41 54 38 cb 62 40 02 81 46 39 56 19 19 56 56 49 21 0c d8 80 81 d5 09 3b db 12 69 d5 b0 85 76 fb 75 8c 30 a4 03 ad e2 8b d4 b8 f9 f8 1c 65 e5 8c 35 76 96 af d7 31 40 95 2f cd b0 15 e6 e1 16 11 11 e1 e6 71 94 35 76 31 3d 56 ee d6 8c 2c 5f 99 52 c4 cd cd 6b 28 23 23 63 c8 cb cd 27 6b ec 6a c6 b5 22 Data Ascii: fqqdcaaa`qq`\|z^]\\VTQQQQPLIGEEEDChCBB73c0.?+B(j'n&X$/""("D(&tRNSfD"IDAT8b@F9VVVI!;ivu0e5v1@/q5v1=V,_Rk(##c'kj"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49807	142.250.80.98	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:06 UTC	679	OUT	GET /pagead/managed/js/gpt/m202403140101/pubads_impl.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:06 UTC	742	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 447232 X-XSS-Protection: 0 Date: Sun, 17 Mar 2024 18:15:29 GMT Expires: Mon, 17 Mar 2025 18:15:29 GMT Cache-Control: public, immutable, max-age=31536000 Age: 79597 ETag: 16686147382162094741 Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:06 UTC	510	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 2f 2a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 2f 2a 20 0a 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 76 61 72 20 62 61 2c 64 61 2c 69 61 2c 6c 61 2c 6e 61 2c 70 61 2c 75 61 2c 74 61 2c 76 61 2c 77 61 2c 78 61 2c 79 61 2c 41 61 2c 43 61 2c 45 61 2c 48 61 2c 49 61 2c 4a 61 2c 4b 61 2c 4c 61 2c 4f 61 2c 56 61 2c 62 62 2c 63 62 2c 6a 62 2c 6d 62 2c 6e 62 2c 6f 62 2c 70 62 2c 72 62 2c 76 62 2c 78 62 2c 43 62 2c 45 62 Data Ascii: (function(_){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / / SPDX-License-Identifier: Apache-2.0 */ var ba,da,ia,la,na,pa,ua,ta,va,wa,xa,ya,Aa,Ca,Ea,Ha,Ia,Ja,Ka,La,Oa,Va,bb,cb,jb,mb,nb,ob,pb,rb,vb,xb,Cb,Eb
2024-03-18 16:22:06 UTC	1252	IN	Data Raw: 2c 4d 65 2c 4e 65 2c 4f 65 2c 50 65 2c 72 65 2c 51 65 2c 52 65 2c 53 65 2c 55 65 2c 56 65 2c 57 65 2c 58 65 2c 61 66 2c 62 66 2c 63 66 2c 5a 65 2c 6b 66 2c 24 65 2c 6c 66 2c 41 66 2c 44 66 2c 46 66 2c 4a 66 2c 4b 66 2c 4c 66 2c 50 66 2c 51 66 2c 52 66 2c 54 66 2c 55 66 2c 56 66 2c 57 66 2c 58 66 2c 24 66 2c 64 67 2c 66 67 2c 65 67 2c 6a 67 2c 6c 67 2c 6d 67 2c 45 67 2c 46 67 2c 48 67 2c 4a 67 2c 4d 67 2c 50 67 2c 51 67 2c 53 67 2c 55 67 2c 57 67 2c 58 67 2c 24 67 2c 61 68 2c 62 68 2c 63 68 2c 64 68 2c 65 68 2c 66 68 2c 68 68 2c 69 68 2c 6b 68 2c 6c 68 2c 6d 68 2c 6e 68 2c 6f 68 2c 70 68 2c 73 68 2c 75 68 2c 79 68 2c 77 68 2c 50 68 2c 51 68 2c 52 68 2c 4e 68 2c 4f 68 2c 53 68 2c 54 68 2c 65 69 2c 63 69 2c 68 69 2c 70 69 2c 55 68 2c 79 69 2c 4b 69 2c 4c 69 Data Ascii: ,Me,Ne,Oe,Pe,re,Qe,Re,Se,Ue,Ve,We,Xe,af,bf,cf,Ze,kf,$e,lf,Af,Df,Ff,Jf,Kf,Lf,Pf,Qf,Rf,Tf,Uf,Vf,Wf,Xf,$f,dg,fg,eg,jg,lg,mg,Eg,Fg,Hg,Jg,Mg,Pg,Qg,Sg,Ug,Wg,Xg,$g,ah,bh,ch,dh,eh,fh,hh,ih,kh,lh,mh,nh,oh,ph,sh,uh,yh,wh,Ph,Qh,Rh,Nh,Oh,Sh,Th,ei,ci,hi,pi,Uh,yi,Ki,Li
2024-03-18 16:22:06 UTC	1252	IN	Data Raw: 69 6f 6e 28 61 2c 62 29 7b 62 3d 5f 2e 63 61 28 61 2c 62 29 3b 76 61 72 20 63 3b 28 63 3d 30 3c 3d 62 29 26 26 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 70 6c 69 63 65 2e 63 61 6c 6c 28 61 2c 62 2c 31 29 3b 72 65 74 75 72 6e 20 63 7d 3b 5f 2e 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 41 72 72 61 79 28 62 29 2c 64 3d 30 3b 64 3c 62 3b 64 2b 2b 29 63 5b 64 5d 3d 61 5b 64 5d 3b 72 65 74 75 72 6e 20 63 7d 72 65 74 75 72 6e 5b 5d 7d 3b 69 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 32 3e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 Data Ascii: ion(a,b){b=_.ca(a,b);var c;(c=0<=b)&&Array.prototype.splice.call(a,b,1);return c};_.ha=function(a){var b=a.length;if(0<b){for(var c=Array(b),d=0;d<b;d++)c[d]=a[d];return c}return[]};ia=function(a,b,c){return 2>=arguments.length?Array.prototype.slice.call(
2024-03-18 16:22:06 UTC	1252	IN	Data Raw: 75 73 68 28 66 5b 67 5d 29 3b 65 6c 73 65 20 62 2e 70 75 73 68 28 64 29 7d 72 65 74 75 72 6e 20 62 7d 3b 78 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 61 5b 63 5d 2c 63 2c 61 29 7d 3b 79 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 2c 63 3d 30 2c 64 3b 66 6f 72 28 64 20 69 6e 20 61 29 62 5b 63 2b 2b 5d 3d 61 5b 64 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 41 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 61 5b 63 5d 2c 63 2c 61 29 29 72 65 74 75 72 6e 20 63 7d 3b 43 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 2c 64 2c 65 3d Data Ascii: ush(f[g]);else b.push(d)}return b};xa=function(a,b){for(var c in a)b.call(void 0,a[c],c,a)};ya=function(a){var b=[],c=0,d;for(d in a)b[c++]=a[d];return b};Aa=function(a,b){for(var c in a)if(b.call(void 0,a[c],c,a))return c};Ca=function(a,b){for(var c,d,e=
2024-03-18 16:22:06 UTC	1252	IN	Data Raw: 59 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 57 61 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 24 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 51 61 3f 5f 2e 5a 61 28 61 29 3a 5f 2e 59 61 28 61 29 7d 3b 62 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6e 65 77 20 61 62 3b 62 2e 57 69 3d 61 3b 72 65 74 75 72 6e 20 62 7d 3b 63 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 73 70 6c 69 74 28 2f 5c 3f 7c 23 2f 29 2c 63 3d 2f 5c 3f 2f 2e 74 65 73 74 28 61 29 3f 22 3f 22 2b 62 5b 31 5d 3a 22 22 3b 72 65 74 75 72 6e 7b 70 61 74 68 3a 62 5b 30 5d 2c 65 65 3a 63 2c 68 61 73 68 3a 2f 23 2f 2e 74 65 73 74 28 61 29 3f 22 23 22 2b 28 63 3f 62 5b Data Ascii: Ya=function(a){if(Wa.test(a))return a};_.$a=function(a){return a instanceof _.Qa?_.Za(a):_.Ya(a)};bb=function(a){var b=new ab;b.Wi=a;return b};cb=function(a){var b=a.split(/\?\|#/),c=/\?/.test(a)?"?"+b[1]:"";return{path:b[0],ee:c,hash:/#/.test(a)?"#"+(c?b[
2024-03-18 16:22:06 UTC	1252	IN	Data Raw: 72 20 62 3d 77 69 6e 64 6f 77 2c 63 3d 21 30 3b 63 3d 76 6f 69 64 20 30 3d 3d 3d 63 3f 21 31 3a 63 3b 6e 65 77 20 5f 2e 75 2e 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 64 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 67 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 3b 67 2e 6f 6e 65 72 72 6f 72 3d 6e 75 6c 6c 3b 76 61 72 20 68 3b 6e 75 6c 6c 3d 3d 28 68 3d 67 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 7c 7c 68 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 67 29 7d 76 61 72 20 67 3d 62 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 67 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 28 29 3b 64 28 29 7d 3b 67 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 28 29 3b 65 28 76 6f Data Ascii: r b=window,c=!0;c=void 0===c?!1:c;new _.u.Promise(function(d,e){function f(){g.onload=null;g.onerror=null;var h;null==(h=g.parentElement)\|\|h.removeChild(g)}var g=b.document.createElement("script");g.onload=function(){f();d()};g.onerror=function(){f();e(vo
2024-03-18 16:22:06 UTC	1252	IN	Data Raw: 67 6c 65 47 63 4c 4b 68 4f 6d 73 3d 5b 5d 29 3b 76 61 72 20 68 3d 7b 7d 3b 67 2e 70 75 73 68 28 28 68 2e 5f 63 74 78 5f 3d 64 2e 63 6f 6e 74 65 78 74 2c 68 2e 5f 62 67 76 5f 3d 64 2e 62 6b 2c 68 2e 5f 62 67 70 5f 3d 64 2e 61 6b 2c 68 2e 5f 6c 69 5f 3d 64 2e 77 6c 2c 68 2e 5f 6a 6b 5f 3d 64 2e 55 64 2c 68 2e 5f 73 74 5f 3d 64 2e 78 64 2c 68 2e 5f 72 63 5f 3d 64 2e 61 66 2c 68 2e 5f 64 6c 5f 3d 64 2e 79 66 2c 68 2e 5f 67 32 5f 3d 64 2e 5a 65 2c 68 29 29 3b 69 66 28 64 3d 66 2e 47 6f 6f 67 6c 65 44 58 35 59 4b 55 53 6b 29 66 2e 47 6f 6f 67 6c 65 44 58 35 59 4b 55 53 6b 3d 76 6f 69 64 20 30 2c 64 5b 31 5d 28 29 3b 65 3d 5f 2e 66 62 28 77 62 2c 65 29 3b 72 62 28 65 29 7d 72 65 74 75 72 6e 20 63 2e 72 65 74 75 72 6e 28 62 29 7d 29 7d 3b 43 62 3d 66 75 6e 63 74 Data Ascii: gleGcLKhOms=[]);var h={};g.push((h._ctx_=d.context,h._bgv_=d.bk,h._bgp_=d.ak,h._li_=d.wl,h._jk_=d.Ud,h._st_=d.xd,h._rc_=d.af,h._dl_=d.yf,h._g2_=d.Ze,h));if(d=f.GoogleDX5YKUSk)f.GoogleDX5YKUSk=void 0,d[1]();e=_.fb(wb,e);rb(e)}return c.return(b)})};Cb=funct
2024-03-18 16:22:06 UTC	1252	IN	Data Raw: 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4b 62 5b 61 5d 7c 7c 22 22 7d 3b 4e 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4d 62 26 26 6e 75 6c 6c 21 3d 61 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 7d 3b 53 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 21 3d 3d 51 62 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 69 6c 6c 65 67 61 6c 20 65 78 74 65 72 6e 61 6c 20 63 61 6c 6c 65 72 22 29 3b 7d 3b 54 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 42 69 67 49 6e 74 7d 3b 58 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3e 61 3b 61 3d 4d 61 74 68 2e 61 62 73 28 61 29 3b 76 61 72 20 63 3d 61 3e 3e 3e 30 3b 61 3d 4d Data Ascii: ction(a){return Kb[a]\|\|""};Nb=function(a){return Mb&&null!=a&&a instanceof Uint8Array};Sb=function(a){if(a!==Qb)throw Error("illegal external caller");};Tb=function(){return"function"===typeof BigInt};Xb=function(a){var b=0>a;a=Math.abs(a);var c=a>>>0;a=M
2024-03-18 16:22:06 UTC	1252	IN	Data Raw: 57 62 3e 3e 3e 3d 30 2c 56 62 3e 3e 3e 3d 30 29 3b 62 26 26 28 62 3d 5f 2e 78 28 55 62 28 56 62 2c 57 62 29 29 2c 61 3d 62 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 2c 62 3d 62 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 2c 56 62 3d 61 2c 57 62 3d 62 29 7d 7d 3b 55 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 7e 62 3b 61 3f 61 3d 7e 61 2b 31 3a 62 2b 3d 31 3b 72 65 74 75 72 6e 5b 61 2c 62 5d 7d 3b 66 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 29 7d 3b 67 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 5f 2e 75 2e 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 3d 74 79 70 65 Data Ascii: Wb>>>=0,Vb>>>=0);b&&(b=_.x(Ub(Vb,Wb)),a=b.next().value,b=b.next().value,Vb=a,Wb=b)}};Ub=function(a,b){b=~b;a?a=~a+1:b+=1;return[a,b]};fc=function(a){return Array.prototype.slice.call(a)};gc=function(a){return"function"===typeof _.u.Symbol&&"symbol"===type
2024-03-18 16:22:06 UTC	1252	IN	Data Raw: 2c 62 3b 7d 7d 3b 45 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 45 72 72 6f 72 28 29 3b 43 63 28 61 2c 22 69 6e 63 69 64 65 6e 74 22 29 3b 7a 63 3f 42 63 28 61 29 3a 45 62 28 61 29 7d 3b 46 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 45 72 72 6f 72 28 61 29 3b 43 63 28 61 2c 22 77 61 72 6e 69 6e 67 22 29 3b 42 63 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 47 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 6e 75 6c 6c 21 3d 61 26 26 22 6e 75 6d 62 65 72 22 21 3d 3d 74 79 70 65 6f 66 20 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 56 61 6c 75 65 20 6f 66 20 66 6c 6f 61 74 2f 64 6f 75 62 6c 65 20 66 69 65 6c 64 20 6d 75 73 74 20 62 65 20 61 20 6e 75 6d 62 65 72 2c 20 66 6f 75 6e 64 20 22 2b 74 79 70 65 6f 66 20 61 2b 22 3a 20 22 2b Data Ascii: ,b;}};Ec=function(){var a=Error();Cc(a,"incident");zc?Bc(a):Eb(a)};Fc=function(a){a=Error(a);Cc(a,"warning");Bc(a);return a};_.Gc=function(a){if(null!=a&&"number"!==typeof a)throw Error("Value of float/double field must be a number, found "+typeof a+": "+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49808	151.101.65.229	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:06 UTC	627	OUT	GET /gh/prebid/currency-file@1/latest.json?date=20240318 HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://browser-update.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:06 UTC	744	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1595 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/json; charset=utf-8 X-JSD-Version: 1.0.1999 X-JSD-Version-Type: version ETag: W/"63b-AW42c0NMEzihSdFfGxlMz19C+r0" Accept-Ranges: bytes Date: Mon, 18 Mar 2024 16:22:06 GMT Age: 1278 X-Served-By: cache-fra-eddf8230103-FRA, cache-ewr18167-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-03-18 16:22:06 UTC	1378	IN	Data Raw: 7b 22 64 61 74 61 41 73 4f 66 22 3a 22 32 30 32 34 2d 30 33 2d 31 38 54 30 30 3a 30 30 3a 30 30 2e 30 30 30 5a 22 2c 22 67 65 6e 65 72 61 74 65 64 41 74 22 3a 22 32 30 32 34 2d 30 33 2d 31 38 54 31 36 3a 30 30 3a 33 35 2e 36 36 34 5a 22 2c 22 63 6f 6e 76 65 72 73 69 6f 6e 73 22 3a 7b 22 55 53 44 22 3a 7b 22 55 53 44 22 3a 31 2c 22 4a 50 59 22 3a 31 34 39 2e 32 30 31 32 34 38 36 32 32 38 34 32 34 36 2c 22 42 47 4e 22 3a 31 2e 37 39 35 36 32 39 38 32 30 30 35 31 34 31 34 2c 22 43 5a 4b 22 3a 32 33 2e 31 33 36 32 34 36 37 38 36 36 33 32 33 39 2c 22 44 4b 4b 22 3a 36 2e 38 34 36 35 38 34 36 34 39 32 38 33 38 37 38 2c 22 47 42 50 22 3a 30 2e 37 38 35 32 30 39 33 32 37 39 34 37 31 31 37 32 2c 22 48 55 46 22 3a 33 36 32 2e 36 30 35 35 38 32 30 37 38 35 38 39 38 Data Ascii: {"dataAsOf":"2024-03-18T00:00:00.000Z","generatedAt":"2024-03-18T16:00:35.664Z","conversions":{"USD":{"USD":1,"JPY":149.20124862284246,"BGN":1.795629820051414,"CZK":23.13624678663239,"DKK":6.846584649283878,"GBP":0.7852093279471172,"HUF":362.6055820785898
2024-03-18 16:22:06 UTC	217	IN	Data Raw: 22 3a 31 36 39 38 2e 36 32 36 31 33 32 37 30 39 37 33 34 2c 22 4d 58 4e 22 3a 32 31 2e 33 30 34 35 33 30 38 33 38 39 33 35 39 38 35 2c 22 4d 59 52 22 3a 36 2e 30 30 39 32 33 37 30 36 35 31 38 35 36 31 38 2c 22 4e 5a 44 22 3a 32 2e 30 39 30 37 33 33 37 30 33 35 39 35 34 34 2c 22 50 48 50 22 3a 37 30 2e 38 30 39 37 30 34 37 36 34 36 38 38 36 39 2c 22 53 47 44 22 3a 31 2e 37 30 34 31 38 30 30 36 34 33 30 38 36 38 31 37 2c 22 54 48 42 22 3a 34 35 2e 38 30 32 39 38 31 35 38 34 33 33 32 30 37 2c 22 5a 41 52 22 3a 32 34 2e 30 37 30 30 33 38 30 30 30 35 38 34 36 32 34 2c 22 45 55 52 22 3a 31 2e 31 36 39 32 34 38 37 35 37 36 37 33 31 39 35 31 7d 7d 7d Data Ascii: ":1698.626132709734,"MXN":21.304530838935985,"MYR":6.009237065185618,"NZD":2.09073370359544,"PHP":70.80970476468869,"SGD":1.7041800643086817,"THB":45.80298158433207,"ZAR":24.070038000584624,"EUR":1.1692487576731951}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49811	108.138.115.149	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:06 UTC	582	OUT	GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://browser-update.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:06 UTC	715	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6482 Connection: close Date: Mon, 18 Mar 2024 16:22:07 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 29 Feb 2024 02:13:08 GMT ETag: "a4d296427fc806b21335359e398c025c" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 x-amz-version-id: r5.lR.LJ66XEXzxUUVo7iMemjL_F_GoE Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding,Origin X-Cache: Miss from cloudfront Via: 1.1 472c04481f2812a974e09db484cbbc3a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: DGat6Wj-J2b-QkMUKZ55GQAOrrpgRmn5rdjxBXhVMtX0z5YS8OXulg==
2024-03-18 16:22:06 UTC	6482	IN	Data Raw: 76 61 72 20 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 3d 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 7c 7c 7b 7d 3b 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 3d 5b 5d 2c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 72 65 70 6f 72 74 45 72 72 6f 72 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3b 66 6f 72 28 2f 5e 68 74 74 70 73 3f 3a 5c 2f 5c 2f 2f 2e 74 65 73 74 28 61 29 3d 3d 3d 21 31 26 26 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 61 29 2c 22 2f 22 21 3d 3d 61 2e 73 75 62 73 74 72 28 61 2e 6c 65 6e 67 74 68 2d 31 29 26 26 28 61 2b 3d 22 2f 22 29 2c 62 3d 30 3b 62 3c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 63 3d 27 7b 22 61 64 Data Ascii: var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"ad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49812	108.138.115.149	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:06 UTC	656	OUT	GET /cdn/prod/config?src=600&u=https%3A%2F%2Fbrowser-update.org&pubid=8b48e249-e9e6-4a52-8b48-396ea93403e8 HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://browser-update.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:06 UTC	439	IN	HTTP/1.1 204 No Content Connection: close Access-Control-Allow-Origin: https://browser-update.org Access-Control-Allow-Credentials: true Cache-Control: max-age=21550, s-maxage=21600 Date: Mon, 18 Mar 2024 16:22:06 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 e87e1498b0d1acb21c287e606097161a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: 2Hgk9bQ6M4ULZvjpfYCHYB6qLXHdJxtHIJb4_JweK0vQ8yBcvifBLg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49819	54.208.230.72	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:06 UTC	626	OUT	POST /rtb/bid?src=prebid_prebid_8.5.0 HTTP/1.1 Host: ap.lijit.com Connection: keep-alive Content-Length: 2030 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://browser-update.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:06 UTC	2030	OUT	Data Raw: 7b 22 69 64 22 3a 22 33 30 35 35 66 66 33 34 61 62 65 30 38 65 33 22 2c 22 69 6d 70 22 3a 5b 7b 22 61 64 75 6e 69 74 63 6f 64 65 22 3a 22 66 75 73 65 2d 73 6c 6f 74 2d 32 32 37 32 38 38 30 36 39 34 34 2d 31 22 2c 22 69 64 22 3a 22 31 39 39 33 33 31 34 31 31 32 30 38 31 30 36 22 2c 22 74 61 67 69 64 22 3a 22 31 30 32 30 30 31 34 22 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 22 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 39 37 30 2c 22 68 22 3a 39 30 7d 5d 2c 22 77 22 3a 31 2c 22 68 22 3a 31 7d 2c 22 65 78 74 22 3a 7b 22 74 69 64 22 3a 22 62 63 64 36 31 66 33 35 2d 62 35 35 35 2d 34 35 65 32 2d 61 31 34 39 2d 35 31 35 37 61 37 64 34 63 35 37 31 22 2c 22 64 61 74 61 22 3a 7b 22 Data Ascii: {"id":"3055ff34abe08e3","imp":[{"adunitcode":"fuse-slot-22728806944-1","id":"199331411208106","tagid":"1020014","bidfloor":"","banner":{"format":[{"w":728,"h":90},{"w":970,"h":90}],"w":1,"h":1},"ext":{"tid":"bcd61f35-b555-45e2-a149-5157a7d4c571","data":{"
2024-03-18 16:22:07 UTC	499	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:07 GMT Content-Type: application/json Content-Length: 24 Connection: close Set-Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: https://browser-update.org Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type Vary: Accept-Encoding, User-Agent
2024-03-18 16:22:07 UTC	24	IN	Data Raw: 7b 22 69 64 22 3a 22 33 30 35 35 66 66 33 34 61 62 65 30 38 65 33 22 7d Data Ascii: {"id":"3055ff34abe08e3"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49814	34.199.60.123	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:07 UTC	728	OUT	POST /header/auction?lib=prebid&v=8.5.0&referrer=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&tmax=1500 HTTP/1.1 Host: tlx.3lift.com Connection: keep-alive Content-Length: 2289 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://browser-update.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:07 UTC	2289	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 30 2c 22 74 61 67 69 64 22 3a 22 42 72 6f 77 73 65 72 75 70 64 61 74 65 5f 53 74 61 6e 64 61 72 64 44 69 73 70 6c 61 79 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 39 37 30 2c 22 68 22 3a 39 30 7d 5d 7d 2c 22 66 70 64 22 3a 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 74 69 64 22 3a 22 62 63 64 36 31 66 33 35 2d 62 35 35 35 2d 34 35 65 32 2d 61 31 34 39 2d 35 31 35 37 61 37 64 34 63 35 37 31 22 2c 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 2f 37 31 31 36 31 36 33 33 2c 31 30 30 37 36 36 39 2f 42 52 4f 57 55 50 44 5f 62 72 6f 77 73 65 72 75 70 64 61 74 65 2f 73 74 69 63 6b 79 5f 66 6f 6f 74 65 72 23 73 69 6e 67 6c 65 Data Ascii: {"imp":[{"id":0,"tagid":"Browserupdate_StandardDisplay","banner":{"format":[{"w":728,"h":90},{"w":970,"h":90}]},"fpd":{"context":{"tid":"bcd61f35-b555-45e2-a149-5157a7d4c571","data":{"pbadslot":"/71161633,1007669/BROWUPD_browserupdate/sticky_footer#single
2024-03-18 16:22:07 UTC	779	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:07 GMT Content-Type: application/json; charset=utf-8 Content-Length: 19 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 15 Oct 1992 20:10:00 GMT Pragma: no-cache X-XSS-Protection: 0 P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Access-Control-Allow-Origin: https://browser-update.org Access-Control-Allow-Credentials: true Set-Cookie: receive-cookie-deprecation=1; Secure; HttpOnly; Path=/; Domain=.3lift.com; SameSite=None; Partitioned; Max-Age=7776000 set-cookie: tluid=3712186363653833678472; Max-Age=7776000; Expires=Sun, 16 Jun 2024 16:22:07 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-03-18 16:22:07 UTC	19	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6e 6f 5f 62 69 64 22 7d Data Ascii: {"status":"no_bid"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49823	44.207.26.76	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:07 UTC	1003	OUT	GET /hbid/imp?lt=1710778925844&to=-60&aun=fuse-slot-22728806944-1&gpid=%2F71161633%2C1007669%2FBROWUPD_browserupdate%2Fsticky_footer%23single-1&t=282948&pi=2&schain=1.0%2C1!publift.com%2C01FY417JCJKFQDQNA30FCX4RZF%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.5.0%22%7D&ogu=null&ns=6963 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://browser-update.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:07 UTC	477	IN	HTTP/1.1 200 Date: Mon, 18 Mar 2024 16:22:07 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 2 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Tue, 18 Mar 2025 16:22:07 GMT; Path=/; Secure; SameSite=None Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Access-Control-Allow-Origin: https://browser-update.org Access-Control-Allow-Credentials: true Timing-Allow-Origin: *
2024-03-18 16:22:07 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49821	44.207.26.76	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:07 UTC	1003	OUT	GET /hbid/imp?lt=1710778925845&to=-60&aun=fuse-slot-22728806944-1&gpid=%2F71161633%2C1007669%2FBROWUPD_browserupdate%2Fsticky_footer%23single-1&t=282949&pi=2&schain=1.0%2C1!publift.com%2C01FY417JCJKFQDQNA30FCX4RZF%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.5.0%22%7D&ogu=null&ns=6963 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://browser-update.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:07 UTC	477	IN	HTTP/1.1 200 Date: Mon, 18 Mar 2024 16:22:07 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 2 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Tue, 18 Mar 2025 16:22:07 GMT; Path=/; Secure; SameSite=None Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Access-Control-Allow-Origin: https://browser-update.org Access-Control-Allow-Credentials: true Timing-Allow-Origin: *
2024-03-18 16:22:07 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49822	44.207.26.76	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:07 UTC	1003	OUT	GET /hbid/imp?lt=1710778925845&to=-60&aun=fuse-slot-22728807289-1&gpid=%2F71161633%2C1007669%2FBROWUPD_browserupdate%2Fupdate_vrec_1%23single-1&t=282943&pi=2&schain=1.0%2C1!publift.com%2C01FY417JCJKFQDQNA30FCX4RZF%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.5.0%22%7D&ogu=null&ns=6963 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://browser-update.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:07 UTC	477	IN	HTTP/1.1 200 Date: Mon, 18 Mar 2024 16:22:07 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 2 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Tue, 18 Mar 2025 16:22:07 GMT; Path=/; Secure; SameSite=None Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Access-Control-Allow-Origin: https://browser-update.org Access-Control-Allow-Credentials: true Timing-Allow-Origin: *
2024-03-18 16:22:07 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49824	108.138.122.147	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:07 UTC	1676	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&pid=dELdySLbcyIwE&cb=0&ws=1280x907&v=24.305.1002&t=2000&slots=%5B%7B%22sd%22%3A%22fuse-slot-22728807289-1%22%2C%22s%22%3A%5B%22300x250%22%2C%22336x280%22%5D%2C%22sn%22%3A%22%2F71161633%2C1007669%2FBROWUPD_browserupdate%2Fupdate_vrec_1%22%7D%2C%7B%22sd%22%3A%22fuse-slot-22728806944-1%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%5D%2C%22sn%22%3A%22%2F71161633%2C1007669%2FBROWUPD_browserupdate%2Fsticky_footer%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22mobile%22%3A0%2C%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1!publift.com%2C01FY417JCJKFQDQNA30FCX4RZF%2C1%2C%2C%2C&sm=f401e106-9815-45f3-82fa-11a4f7f4db10&pubid=8b48e249-e9e6-4a52-8b48-396ea93403e8&gdprl=%7B%22status%22%3A%22no-cmp%22%2C%22cmpTimeout%22%3A0%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://browser-update.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:07 UTC	475	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 199 Connection: close Access-Control-Allow-Origin: https://browser-update.org Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Date: Mon, 18 Mar 2024 16:22:06 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 fcce23e7f4e791fa67223a305c4debb8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P4 X-Amz-Cf-Id: Me6ovAHh96KnIbQ7vt2z1tWxvLLM1KCjkAI2C8FdTVBDgYHQaXOHgg==
2024-03-18 16:22:07 UTC	199	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 6d 70 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 69 75 33 3f 63 6d 33 70 70 64 3d 31 26 64 3d 64 74 62 2d 70 75 62 26 63 73 69 66 3d 74 26 64 6c 3d 6e 2d 6d 65 64 69 61 67 72 69 64 5f 6e 2d 61 64 4d 65 64 69 61 56 31 5f 70 6d 2d 64 62 35 5f 6e 2d 73 69 6d 70 6c 69 2e 66 69 5f 6e 2d 62 61 69 64 75 5f 6e 2d 42 65 65 73 77 61 78 5f 6f 78 2d 64 62 35 5f 73 6d 72 74 5f 6e 2d 69 6e 6d 6f 62 69 5f 73 6f 76 72 6e 5f 33 6c 69 66 74 5f 6e 2d 4f 75 74 62 72 61 69 6e 22 2c 22 63 62 22 3a 22 30 22 7d 29 Data Ascii: apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-mediagrid_n-adMediaV1_pm-db5_n-simpli.fi_n-baidu_n-Beeswax_ox-db5_smrt_n-inmobi_sovrn_3lift_n-Outbrain","cb":"0"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49818	68.67.160.114	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:07 UTC	607	OUT	POST /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Content-Length: 1366 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://browser-update.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:07 UTC	1366	OUT	Data Raw: 7b 22 74 61 67 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 7b 22 77 69 64 74 68 22 3a 39 37 30 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 5d 2c 22 70 72 69 6d 61 72 79 5f 73 69 7a 65 22 3a 7b 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 22 61 64 5f 74 79 70 65 73 22 3a 5b 22 62 61 6e 6e 65 72 22 5d 2c 22 75 75 69 64 22 3a 22 31 36 38 38 64 30 37 39 31 65 61 32 30 38 34 22 2c 22 69 64 22 3a 32 35 30 32 36 38 39 37 2c 22 61 6c 6c 6f 77 5f 73 6d 61 6c 6c 65 72 5f 73 69 7a 65 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 5f 70 6d 74 5f 72 75 6c 65 22 3a 66 61 6c 73 65 2c 22 70 72 65 62 69 64 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 70 73 61 22 3a 74 72 75 65 Data Ascii: {"tags":[{"sizes":[{"width":728,"height":90},{"width":970,"height":90}],"primary_size":{"width":728,"height":90},"ad_types":["banner"],"uuid":"1688d0791ea2084","id":25026897,"allow_smaller_sizes":false,"use_pmt_rule":false,"prebid":true,"disable_psa":true
2024-03-18 16:22:07 UTC	1570	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Mon, 18 Mar 2024 16:22:07 GMT Content-Type: application/json; charset=utf-8 Content-Length: 256 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://browser-update.org Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 15f59c21-96ec-4aac-9c4f-b06451bb6339 Set-Cookie: XANDR_PANID=sc-qkOWOy4X_p3mD-LWUzAd-XDCZQmscLkmizNrfavkuQbEqumPcpRbLQP5MYfuaYQ8bCCHdAwNtUmwS86qSDkNpL-Zwzckxzo46gNxy6nM.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 16-Jun-2024 16:22:07 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: icu=ChgIs8t_EAoYASABKAEwr9ThrwY4AUABSAEQr9ThrwYYAA..; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 16-Jun-2024 16:22:07 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 06-Mar-2034 16:22:07 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=9164480480629189644; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 16-Jun-2024 16:22:07 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 191.96.227.194; 191.96.227.194; 672.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-03-18 16:22:07 UTC	256	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 61 67 73 22 3a 5b 7b 22 75 75 69 64 22 3a 22 31 36 38 38 64 30 37 39 31 65 61 32 30 38 34 22 2c 22 74 61 67 5f 69 64 22 3a 32 35 30 32 36 38 39 37 2c 22 61 75 63 74 69 6f 6e 5f 69 64 22 3a 22 34 37 34 34 34 31 31 38 39 34 32 34 30 35 38 37 36 35 30 22 2c 22 6e 6f 62 69 64 22 3a 74 72 75 65 2c 22 61 64 5f 70 72 6f 66 69 6c 65 5f 69 64 22 3a 31 35 32 36 30 33 34 7d 2c 7b 22 75 75 69 64 22 3a 22 31 37 34 31 62 61 30 66 30 61 61 66 36 30 31 22 2c 22 74 61 67 5f 69 64 22 3a 32 35 30 32 36 38 39 32 2c 22 61 75 63 74 69 6f 6e 5f 69 64 22 3a 22 38 37 32 36 34 34 33 35 37 34 39 36 36 36 33 37 34 35 30 22 2c 22 6e 6f 62 69 64 22 3a 74 72 75 65 2c 22 61 64 5f 70 72 6f 66 69 6c 65 5f 69 64 22 3a 30 7d 5d Data Ascii: {"version":"3.0.0","tags":[{"uuid":"1688d0791ea2084","tag_id":25026897,"auction_id":"4744411894240587650","nobid":true,"ad_profile_id":1526034},{"uuid":"1741ba0f0aaf601","tag_id":25026892,"auction_id":"8726443574966637450","nobid":true,"ad_profile_id":0}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49813	104.36.115.111	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:07 UTC	636	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 1673 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://browser-update.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:07 UTC	1673	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 31 30 37 37 38 39 32 35 38 32 33 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 31 33 32 33 33 39 66 31 37 39 30 38 38 65 32 22 2c 22 74 61 67 69 64 22 3a 22 37 31 31 36 31 36 33 33 2f 42 52 4f 57 55 50 44 5f 62 72 6f 77 73 65 72 75 70 64 61 74 65 2f 73 74 69 63 6b 79 5f 66 6f 6f 74 65 72 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 2f 37 31 31 36 31 36 33 33 2c 31 30 30 37 36 36 39 2f 42 52 4f 57 55 50 44 5f 62 72 6f 77 73 65 72 75 70 64 61 74 65 2f 73 74 69 63 6b 79 5f 66 6f 6f 74 65 72 23 73 69 6e 67 6c 65 2d 31 22 7d 7d 2c 22 62 69 64 66 6c 6f 6f 72 63 75 72 22 3a 22 55 53 44 22 2c 22 62 Data Ascii: {"id":"1710778925823","at":1,"cur":["USD"],"imp":[{"id":"132339f179088e2","tagid":"71161633/BROWUPD_browserupdate/sticky_footer","secure":1,"ext":{"data":{"pbadslot":"/71161633,1007669/BROWUPD_browserupdate/sticky_footer#single-1"}},"bidfloorcur":"USD","b
2024-03-18 16:22:07 UTC	232	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://browser-update.org Cache-Control: no-cache, no-store, must-revalidate Date: Mon, 18 Mar 2024 16:22:07 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49817	108.138.106.108	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:07 UTC	576	OUT	GET /configs/8b48e249-e9e6-4a52-8b48-396ea93403e8 HTTP/1.1 Host: config.aps.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:07 UTC	390	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 563 Connection: close Server: CloudFront Date: Mon, 18 Mar 2024 15:22:51 GMT Cache-Control: max-age=3600 X-Cache: Hit from cloudfront Via: 1.1 d33ed2107293e32734a96656b820e092.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: 28eAdFhc9TP9MS_HUmYm38KM29EAkblimfnKqW3lEFX3B9mEmt8j-g== Age: 3556
2024-03-18 16:22:07 UTC	563	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 74 72 79 20 7b 63 6f 6e 73 74 20 61 63 63 6f 75 6e 74 49 64 20 3d 20 22 38 62 34 38 65 32 34 39 2d 65 39 65 36 2d 34 61 35 32 2d 38 62 34 38 2d 33 39 36 65 61 39 33 34 30 33 65 38 22 3b 77 69 6e 64 6f 77 2e 5f 61 70 73 20 3d 20 77 69 6e 64 6f 77 2e 5f 61 70 73 20 7c 7c 20 6e 65 77 20 4d 61 70 28 29 3b 69 66 20 28 21 5f 61 70 73 2e 68 61 73 28 61 63 63 6f 75 6e 74 49 64 29 29 20 7b 5f 61 70 73 2e 73 65 74 28 61 63 63 6f 75 6e 74 49 64 2c 20 7b 20 71 75 65 75 65 3a 20 6e 65 77 20 41 72 72 61 79 28 29 2c 20 73 74 6f 72 65 3a 20 6e 65 77 20 4d 61 70 28 29 20 7d 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 72 65 63 6f 72 64 28 6e 61 6d 65 2c 20 64 65 74 61 69 6c 29 20 7b 5f 61 70 73 2e 67 65 74 28 61 63 63 6f 75 6e 74 49 64 29 Data Ascii: (function () {try {const accountId = "8b48e249-e9e6-4a52-8b48-396ea93403e8";window._aps = window._aps \|\| new Map();if (!_aps.has(accountId)) {_aps.set(accountId, { queue: new Array(), store: new Map() });}function record(name, detail) {_aps.get(accountId)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49816	74.119.119.129	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:07 UTC	657	OUT	POST /cdb?profileId=207&av=36&wv=8.5.0&cb=19595786290&lsavail=0 HTTP/1.1 Host: bidder.criteo.com Connection: keep-alive Content-Length: 2480 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://browser-update.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:07 UTC	2480	OUT	Data Raw: 7b 22 69 64 22 3a 22 65 66 64 35 39 35 31 37 2d 34 35 36 34 2d 34 33 37 32 2d 62 38 62 65 2d 37 34 66 61 62 32 33 64 32 39 62 33 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 62 72 6f 77 73 65 72 2d 75 70 64 61 74 65 2e 6f 72 67 2f 75 70 64 61 74 65 2d 62 72 6f 77 73 65 72 2e 68 74 6d 6c 23 33 2e 33 2e 35 31 3a 69 77 75 2e 6d 61 72 6b 65 74 69 6e 67 22 7d 2c 22 72 65 67 73 22 3a 7b 7d 2c 22 73 6c 6f 74 73 22 3a 5b 7b 22 69 6d 70 69 64 22 3a 22 66 75 73 65 2d 73 6c 6f 74 2d 32 32 37 32 38 38 30 36 39 34 34 2d 31 22 2c 22 74 72 61 6e 73 61 63 74 69 6f 6e 69 64 22 3a 22 62 63 64 36 31 66 33 35 2d 62 35 35 35 2d 34 35 65 32 2d 61 31 34 39 2d 35 31 35 37 61 37 64 34 63 35 37 31 22 2c 22 7a 6f 6e 65 69 64 22 3a 31 34 Data Ascii: {"id":"efd59517-4564-4372-b8be-74fab23d29b3","publisher":{"url":"https://browser-update.org/update-browser.html#3.3.51:iwu.marketing"},"regs":{},"slots":[{"impid":"fuse-slot-22728806944-1","transactionid":"bcd61f35-b555-45e2-a149-5157a7d4c571","zoneid":14
2024-03-18 16:22:07 UTC	310	IN	HTTP/1.1 204 No Content date: Mon, 18 Mar 2024 16:22:07 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-origin: https://browser-update.org vary: Origin cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49820	147.75.198.144	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:07 UTC	601	OUT	POST /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive Content-Length: 2466 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://browser-update.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:07 UTC	2466	OUT	Data Raw: 7b 22 61 22 3a 22 32 62 61 37 33 39 61 38 2d 39 63 35 39 2d 34 35 35 64 2d 39 63 38 64 2d 34 30 37 36 33 39 34 34 33 63 66 33 22 2c 22 42 22 3a 30 2c 22 62 22 3a 22 62 72 6f 77 73 65 72 2d 75 70 64 61 74 65 2e 6f 72 67 22 2c 22 62 72 63 22 3a 31 2c 22 62 77 63 22 3a 30 2c 22 74 72 63 22 3a 31 2c 22 74 6d 22 3a 66 61 6c 73 65 2c 22 56 22 3a 22 38 2e 35 2e 30 22 2c 22 76 67 22 3a 22 66 75 73 65 50 62 6a 73 22 2c 22 69 22 3a 22 59 6e 4a 76 64 33 4e 6c 63 69 31 31 63 47 52 68 64 47 55 75 62 33 4a 6e 22 2c 22 6c 22 3a 7b 7d 2c 22 66 22 3a 30 2e 30 31 2c 22 63 76 22 3a 22 70 62 61 31 2e 33 2e 33 22 2c 22 73 74 22 3a 22 70 72 65 62 69 64 22 2c 22 68 22 3a 31 30 32 34 2c 22 77 22 3a 31 32 38 30 2c 22 67 73 22 3a 22 22 2c 22 67 63 22 3a 22 22 2c 22 67 70 70 22 3a Data Ascii: {"a":"2ba739a8-9c59-455d-9c8d-407639443cf3","B":0,"b":"browser-update.org","brc":1,"bwc":0,"trc":1,"tm":false,"V":"8.5.0","vg":"fusePbjs","i":"YnJvd3Nlci11cGRhdGUub3Jn","l":{},"f":0.01,"cv":"pba1.3.3","st":"prebid","h":1024,"w":1280,"gs":"","gc":"","gpp":
2024-03-18 16:22:07 UTC	322	IN	HTTP/1.1 204 No Content access-control-allow-credentials: true access-control-allow-origin: https://browser-update.org cache-control: max-age=0, private, must-revalidate date: Mon, 18 Mar 2024 16:22:07 GMT server: envoy vary: origin, Accept-Encoding x-nbr: 1 x-envoy-upstream-service-time: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49815	34.120.63.153	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:07 UTC	623	OUT	POST /rtb/prebid?cid=8CU995W35 HTTP/1.1 Host: prebid.media.net Connection: keep-alive Content-Length: 2445 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://browser-update.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:07 UTC	2445	OUT	Data Raw: 7b 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 62 72 6f 77 73 65 72 2d 75 70 64 61 74 65 2e 6f 72 67 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 62 72 6f 77 73 65 72 2d 75 70 64 61 74 65 2e 6f 72 67 2f 75 70 64 61 74 65 2d 62 72 6f 77 73 65 72 2e 68 74 6d 6c 23 33 2e 33 2e 35 31 3a 69 77 75 2e 6d 61 72 6b 65 74 69 6e 67 22 2c 22 72 65 66 22 3a 22 22 2c 22 74 6f 70 4d 6f 73 74 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 62 72 6f 77 73 65 72 2d 75 70 64 61 74 65 2e 6f 72 67 2f 75 70 64 61 74 65 2d 62 72 6f 77 73 65 72 2e 68 74 6d 6c 23 33 2e 33 2e 35 31 3a 69 77 75 2e 6d 61 72 6b 65 74 69 6e 67 22 2c 22 69 73 54 6f 70 22 3a 74 72 75 65 7d 2c 22 65 78 74 22 3a 7b 22 63 75 73 74 6f 6d 65 72 5f 69 64 22 3a 22 38 43 55 39 39 35 Data Ascii: {"site":{"domain":"browser-update.org","page":"https://browser-update.org/update-browser.html#3.3.51:iwu.marketing","ref":"","topMostLocation":"https://browser-update.org/update-browser.html#3.3.51:iwu.marketing","isTop":true},"ext":{"customer_id":"8CU995
2024-03-18 16:22:07 UTC	667	IN	HTTP/1.1 200 OK cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache expires: Mon, 18 Mar 2024 16:22:07 GMT accept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://browser-update.org content-type: application/json;charset=utf-8 date: Mon, 18 Mar 2024 16:22:06 GMT x-envoy-upstream-service-time: 104 vary: Accept-Encoding server: envoy Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-03-18 16:22:07 UTC	1252	IN	Data Raw: 35 32 39 0d 0a 7b 22 69 64 22 3a 22 31 22 2c 22 62 69 64 4c 69 73 74 22 3a 5b 5d 2c 22 65 78 74 22 3a 7b 22 63 73 55 72 6c 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 38 22 7d 2c 7b 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 6d 65 64 69 61 6e 65 74 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 64 70 72 5f 70 64 3d 31 22 7d 2c 7b 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 69 73 2e 63 72 69 74 65 6f 2e 63 6f 6d 2f 64 69 73 2f 75 Data Ascii: 529{"id":"1","bidList":[],"ext":{"csUrl":[{"type":"image","url":"https://cs.media.net/cksync.php?cs=8"},{"type":"image","url":"https://x.bidswitch.net/sync?ssp=medianet&gdpr=0&gdpr_consent=&gdpr_pd=1"},{"type":"image","url":"https://dis.criteo.com/dis/u
2024-03-18 16:22:07 UTC	81	IN	Data Raw: 49 44 26 70 75 72 70 6f 73 65 31 3d 31 26 67 64 70 72 63 6f 6e 73 65 6e 74 3d 31 26 67 64 70 72 3d 30 26 63 6f 70 70 61 3d 30 26 75 73 70 5f 73 74 61 74 75 73 3d 30 26 75 73 70 5f 63 6f 6e 73 65 6e 74 3d 31 22 7d 5d 7d 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: ID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=0&usp_consent=1"}]}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49827	142.250.80.98	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:07 UTC	2780	OUT	GET /gampad/ads?pvsid=1702785379071819&correlator=202337239561750&eid=31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403140101&ptt=17&impl=fifs&iu_parts=71161633%3A1007669%2CBROWUPD_browserupdate%2Cweb_interstitial&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=1x1&ifi=1&sfv=1-0-40&ists=1&fas=8&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1710778926434&lmt=1710778926&adxs=-9&adys=-9&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=-1&ucis=1&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&vis=1&psz=0x-1&msz=0x-1&fws=2&ohw=0&ga_vid=1126053991.1710778926&ga_sid=1710778926&ga_hid=1902104362&ga_fc=false&td=1&topics=9&tps=9&htps=10&a3p=EhwKDWNyd2RjbnRybC5uZXQYhIn7kuUxSABSAghk&nt=1&psd=WzE1LFsyLFtbIi83MTE2MTYzMywxMDA3NjY5L0JST1dVUERfYnJvd3NlcnVwZGF0ZS93ZWJfaW50ZXJzdGl0aWFsIixbXV1dXSxudWxsLDNd&dlt=1710778923330&idt=2820&prev_scp=in2w_key20%3D1x09%2C1x0r%2C1x0x%26in2w_key15%3Du0&cust_params=in2w_key15%3Du0%26intowow_optimized%3Dfalse%26fuse_site%3Dbrowser-update.org%26fuse_path%3D%252Fupdate-browser.html%26fuse_query%3D%26fuse_category%3D%26fuse_industry_2%3DIAB19%26testmode%3Dfalse%26inskin_yes%3Dtrue%26fuse_uuid%3De77f8bfe-60b6-5c8b-a657-64bfafdad065%26fuse_publication_id%3D5%26fuse_flavour%3Ddefault%26GPT_READY_MS%3D4000-4999%26PREBID_READY_MS%3D3000-3499%26UAM_READY_MS%3D3500-3999%26CMP_DETERMINED_MS%3Ddisabled%26CMP_GDPR_CACHED%3Dfalse%26FUSE_LOADED_MS%3D2000-2499%26FIRST_ZONE_MS%3D3500-3999%26HB_AUCTION_START_MS%3D3500-3999%26CMP_JURISDICTION%3Dunknown%26CMP_ALLOW_PERSONAL%3Dtrue%26fuse_exp_0%3Dfalse%26fuse_exp_2%3Dtrue%26fuse_exp_3%3Dtrue%26fuse_exp_4%3Dtrue%26fuse_exp_5%3Dtrue%26fuse_exp_6%3Dtrue%26fuse_exp_7%3Dtrue%26fuse_exp_8%3Dtrue%26fuse_exp_9%3Dfalse%26fuse_exp_10%3Dfalse%26chrome_label%3Dstandard&adks=2017541439&frm=20 HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Ad-Auction-Fetch: ?1 Origin: https://browser-update.org X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:08 UTC	988	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://browser-update.org Observe-Browsing-Topics: ?1 Google-LineItem-Id: 6421268774 Google-Creative-Id: 333430296156 Date: Mon, 18 Mar 2024 16:22:08 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Mon, 18-Mar-2024 16:37:07 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-18 16:22:08 UTC	264	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 2f 37 31 31 36 31 36 33 33 2f 42 52 4f 57 55 50 44 5f 62 72 6f 77 73 65 72 75 70 64 61 74 65 2f 77 65 62 5f 69 6e 74 65 72 73 74 69 74 69 61 6c 22 3a 5b 22 68 74 6d 6c 22 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 39 30 37 2c 31 32 36 33 2c 30 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 31 2c 5b 5b 22 49 44 3d 35 61 39 66 33 35 39 62 65 30 33 30 33 64 39 61 3a 54 3d 31 37 31 30 37 37 38 39 32 37 3a 52 54 3d 31 37 31 30 37 37 38 39 32 37 3a 53 3d 41 4c 4e 49 5f 4d 61 39 79 61 43 75 47 76 2d 5a 59 57 68 77 57 76 33 67 49 35 62 64 69 38 6b 39 39 67 22 2c 31 37 34 34 34 37 34 39 32 37 2c 22 2f 22 2c 22 62 72 6f 77 73 65 72 2d 75 70 64 61 74 65 2e 6f 72 67 22 2c 31 5d 2c 5b 22 55 49 44 3d 30 30 30 30 30 61 31 33 37 38 33 61 31 32 36 Data Ascii: 8000{"/71161633/BROWUPD_browserupdate/web_interstitial":["html",1,null,null,1,907,1263,0,0,null,null,1,1,[["ID=5a9f359be0303d9a:T=1710778927:RT=1710778927:S=ALNI_Ma9yaCuGv-ZYWhwWv3gI5bdi8k99g",1744474927,"/","browser-update.org",1],["UID=00000a13783a126
2024-03-18 16:22:08 UTC	1252	IN	Data Raw: 37 38 39 32 37 3a 52 54 3d 31 37 31 30 37 37 38 39 32 37 3a 53 3d 41 4c 4e 49 5f 4d 62 53 47 43 77 65 55 6b 61 44 39 59 79 36 71 5a 58 44 6a 31 44 61 67 37 30 35 6a 51 22 2c 31 37 34 34 34 37 34 39 32 37 2c 22 2f 22 2c 22 62 72 6f 77 73 65 72 2d 75 70 64 61 74 65 2e 6f 72 67 22 2c 32 5d 5d 2c 5b 31 33 38 34 35 35 38 37 35 33 32 32 5d 2c 5b 36 34 32 31 32 36 38 37 37 34 5d 2c 5b 35 33 36 38 30 36 33 33 34 33 5d 2c 5b 33 32 37 33 36 35 36 38 34 33 5d 2c 5b 34 38 36 33 30 37 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 41 4f 72 59 47 73 6c 6c 6b 38 6e 33 74 6f 5a 65 63 57 4e 52 67 51 32 7a 73 48 4e 49 76 65 45 Data Ascii: 78927:RT=1710778927:S=ALNI_MbSGCweUkaD9Yy6qZXDj1Dag705jQ",1744474927,"/","browser-update.org",2]],[138455875322],[6421268774],[5368063343],[3273656843],[486307],null,null,null,null,null,null,1,null,null,null,null,null,null,"AOrYGsllk8n3toZecWNRgQ2zsHNIveE
2024-03-18 16:22:08 UTC	1252	IN	Data Raw: 20 62 6c 75 72 28 31 35 70 78 29 3b 20 2f 2a 70 6f 74 65 6e 74 69 61 6c 20 69 73 73 75 65 3a 20 6d 69 6e 69 6d 61 6c 20 62 72 6f 77 73 65 72 20 73 75 70 70 6f 72 74 2a 2f 2d 77 65 62 6b 69 74 2d 62 61 63 6b 64 72 6f 70 2d 66 69 6c 74 65 72 3a 20 62 6c 75 72 28 31 35 70 78 29 3b 20 2f 2a 66 6f 72 20 73 61 66 61 72 69 2a 2f 68 65 69 67 68 74 3a 20 31 30 30 25 3b 7d 23 61 64 5f 69 66 72 61 6d 65 20 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 6c 65 66 74 3a 20 61 75 74 6f 3b 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 20 61 75 74 6f 3b 7d 2e 63 72 65 61 74 69 76 65 20 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 Data Ascii: blur(15px); /potential issue: minimal browser support/-webkit-backdrop-filter: blur(15px); /for safari/height: 100%;}#ad_iframe {box-shadow: 0 !important;display: block;left: auto;margin: 0 auto;position: relative;top: auto;}.creative {transition: op
2024-03-18 16:22:08 UTC	1252	IN	Data Raw: 74 69 76 65 3b 68 65 69 67 68 74 3a 20 32 35 70 78 3b 70 61 64 64 69 6e 67 3a 20 31 32 70 78 20 31 36 70 78 20 30 3b 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 7d 2e 72 65 70 6f 72 74 20 73 76 67 20 7b 68 65 69 67 68 74 3a 20 31 2e 35 65 6d 3b 77 69 64 74 68 3a 20 31 2e 35 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 30 2e 33 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 2d 30 2e 33 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 3b 7d 2e 61 74 74 72 69 62 75 74 69 6f 6e 20 7b 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 70 61 64 64 69 6e 67 3a 20 30 3b 6d 61 72 67 69 6e 3a 20 31 32 70 78 20 34 70 78 20 30 3b 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 7d 23 Data Ascii: tive;height: 25px;padding: 12px 16px 0;float: left;}.report svg {height: 1.5em;width: 1.5em;margin-left: -0.3em;margin-right: -0.3em;vertical-align: middle;padding-bottom: 1px;}.attribution {position: relative;padding: 0;margin: 12px 4px 0;float: right;}#
2024-03-18 16:22:08 UTC	1252	IN	Data Raw: 31 38 43 34 20 31 39 2e 31 20 33 2e 31 20 32 30 20 32 20 32 30 43 30 2e 39 20 32 30 20 30 20 31 39 2e 31 20 30 20 31 38 5a 22 20 66 69 6c 6c 3d 22 23 35 46 36 33 36 38 22 2f 3e 3c 2f 73 76 67 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 61 74 74 72 69 62 75 74 69 6f 6e 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 61 74 74 72 69 62 75 74 69 6f 6e 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 72 65 61 74 69 76 65 22 20 69 64 3d 22 63 72 65 61 74 69 76 65 22 3e 3c 69 66 72 61 6d 65 20 74 69 74 6c 65 3d 22 41 64 76 65 72 74 69 73 65 6d 65 6e 74 22 20 69 64 3d 22 61 64 5f 69 66 72 61 6d 65 22 20 6e 61 6d 65 3d 22 61 64 5f 69 66 72 61 6d 65 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 20 73 72 63 3d 22 61 62 6f 75 74 3a 62 6c Data Ascii: 18C4 19.1 3.1 20 2 20C0.9 20 0 19.1 0 18Z" fill="#5F6368"/></svg></div><div id="attribution" class="btn attribution"></div></div><div class="creative" id="creative"><iframe title="Advertisement" id="ad_iframe" name="ad_iframe" scrolling="no" src="about:bl
2024-03-18 16:22:08 UTC	1252	IN	Data Raw: 75 73 65 20 73 74 72 69 63 74 5c 5c 78 32 37 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 71 5c 5c 78 33 64 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 61 3a 7b 76 61 72 20 62 5c 5c 78 33 64 5b 5c 5c 78 32 32 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 5c 5c 78 32 32 5d 3b 66 6f 72 28 76 61 72 20 63 5c 5c 78 33 64 71 2c 64 5c 5c 78 33 64 30 3b 64 5c 5c 78 33 63 62 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 69 66 28 63 5c 5c 78 33 64 63 5b 62 5b 64 5d 5d 2c 6e 75 6c 6c 5c 5c 78 33 64 5c 5c 78 33 64 63 29 7b 62 5c 5c 78 33 Data Ascii: use strict\\x27;/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var q\\x3dthis\|\|self;function aa(a){a:{var b\\x3d[\\x22CLOSURE_FLAGS\\x22];for(var c\\x3dq,d\\x3d0;d\\x3cb.length;d++)if(c\\x3dc[b[d]],null\\x3d\\x3dc){b\\x3
2024-03-18 16:22:08 UTC	1252	IN	Data Raw: 74 69 6f 6e 20 6c 61 28 61 29 7b 72 65 74 75 72 6e 21 28 21 61 7c 7c 5c 5c 78 32 32 6f 62 6a 65 63 74 5c 5c 78 32 32 21 5c 5c 78 33 64 5c 5c 78 33 64 74 79 70 65 6f 66 20 61 7c 7c 61 2e 67 21 5c 5c 78 33 64 5c 5c 78 33 64 6b 61 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 5c 5c 78 33 64 5c 5c 78 33 64 61 5c 5c 78 32 36 5c 5c 78 32 36 5c 5c 78 32 32 6f 62 6a 65 63 74 5c 5c 78 32 32 5c 5c 78 33 64 5c 5c 78 33 64 5c 5c 78 33 64 74 79 70 65 6f 66 20 61 5c 5c 78 32 36 5c 5c 78 32 36 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 5c 5c 78 32 36 5c 5c 78 32 36 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 5c 5c 78 33 64 5c 5c 78 33 64 5c 5c 78 33 64 4f 62 6a 65 63 74 7d 6c 65 74 20 6e 61 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 Data Ascii: tion la(a){return!(!a\|\|\\x22object\\x22!\\x3d\\x3dtypeof a\|\|a.g!\\x3d\\x3dka)}function ma(a){return null!\\x3d\\x3da\\x26\\x26\\x22object\\x22\\x3d\\x3d\\x3dtypeof a\\x26\\x26!Array.isArray(a)\\x26\\x26a.constructor\\x3d\\x3d\\x3dObject}let na;function z(
2024-03-18 16:22:08 UTC	1252	IN	Data Raw: 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 61 5c 5c 78 33 64 7a 28 61 2c 76 6f 69 64 20 30 2c 30 29 3f 76 6f 69 64 20 30 3a 65 5c 5c 78 32 36 5c 5c 78 32 36 28 61 5b 79 5d 7c 30 29 5c 5c 78 32 36 32 3f 61 3a 79 61 28 61 2c 62 2c 63 2c 76 6f 69 64 20 30 21 5c 5c 78 33 64 5c 5c 78 33 64 64 2c 65 29 3b 65 6c 73 65 20 69 66 28 6d 61 28 61 29 29 7b 63 6f 6e 73 74 20 66 5c 5c 78 33 64 7b 7d 3b 66 6f 72 28 6c 65 74 20 67 20 69 6e 20 61 29 66 5b 67 5d 5c 5c 78 33 64 78 61 28 61 5b 67 5d 2c 62 2c 63 2c 64 2c 65 29 3b 61 5c 5c 78 33 64 66 7d 65 6c 73 65 20 61 5c 5c 78 33 64 62 28 61 2c 64 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 61 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 63 6f 6e 73 74 20 66 5c 5c 78 33 64 64 7c 7c 63 3f 61 5b 79 5d Data Ascii: (Array.isArray(a))a\\x3dz(a,void 0,0)?void 0:e\\x26\\x26(a[y]\|0)\\x262?a:ya(a,b,c,void 0!\\x3d\\x3dd,e);else if(ma(a)){const f\\x3d{};for(let g in a)f[g]\\x3dxa(a[g],b,c,d,e);a\\x3df}else a\\x3db(a,d);return a}}function ya(a,b,c,d,e){const f\\x3dd\|\|c?a[y]
2024-03-18 16:22:08 UTC	1252	IN	Data Raw: 6c 6c 5c 5c 78 33 64 5c 5c 78 33 64 61 5c 5c 78 32 36 5c 5c 78 32 36 28 61 5c 5c 78 33 64 72 61 29 3b 72 61 5c 5c 78 33 64 76 6f 69 64 20 30 3b 69 66 28 6e 75 6c 6c 5c 5c 78 33 64 5c 5c 78 33 64 61 29 7b 76 61 72 20 62 5c 5c 78 33 64 39 36 3b 61 5c 5c 78 33 64 5b 5d 7d 65 6c 73 65 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 62 5c 5c 78 33 64 61 5b 79 5d 7c 30 3b 69 66 28 62 5c 5c 78 32 36 32 30 34 38 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 69 66 28 62 5c 5c 78 32 36 36 34 29 62 72 65 61 6b 20 61 3b 76 61 72 20 63 5c 5c 78 33 64 61 3b 62 7c 5c 5c 78 33 64 36 34 3b 76 61 72 20 64 5c 5c 78 33 64 63 2e 6c 65 6e 67 74 68 3b 69 66 28 64 5c 5c 78 32 36 5c 5c 78 32 36 28 2d 2d 64 2c 6d 61 28 63 Data Ascii: ll\\x3d\\x3da\\x26\\x26(a\\x3dra);ra\\x3dvoid 0;if(null\\x3d\\x3da){var b\\x3d96;a\\x3d[]}else{if(!Array.isArray(a))throw Error();b\\x3da[y]\|0;if(b\\x262048)throw Error();if(b\\x2664)break a;var c\\x3da;b\|\\x3d64;var d\\x3dc.length;if(d\\x26\\x26(--d,ma(c
2024-03-18 16:22:08 UTC	1252	IN	Data Raw: 61 29 3b 68 5c 5c 78 32 36 5c 5c 78 32 36 62 2e 70 75 73 68 28 68 29 3b 20 72 65 74 75 72 6e 20 62 7d 3b 76 61 72 20 44 61 5c 5c 78 33 64 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 46 7b 7d 3b 76 61 72 20 47 5c 5c 78 33 64 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 5c 5c 78 33 64 21 31 29 7b 74 68 69 73 2e 6b 65 79 5c 5c 78 33 64 61 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 5c 5c 78 33 64 62 3b 74 68 69 73 2e 76 61 6c 75 65 54 79 70 65 5c 5c 78 33 64 5c 5c 78 32 32 62 6f 6f 6c 65 61 6e 5c 5c 78 32 32 7d 7d 3b 76 61 72 20 45 61 5c 5c 78 33 64 6e 65 77 20 47 28 5c 5c 78 32 32 31 30 30 30 30 30 5c 5c 78 32 32 29 2c 46 61 5c 5c 78 33 64 6e 65 77 20 47 28 5c 5c 78 32 32 34 35 33 36 38 32 35 39 5c 5c 78 32 32 29 2c 47 61 5c 5c 78 Data Ascii: a);h\\x26\\x26b.push(h); return b};var Da\\x3dclass extends F{};var G\\x3dclass{constructor(a,b\\x3d!1){this.key\\x3da;this.defaultValue\\x3db;this.valueType\\x3d\\x22boolean\\x22}};var Ea\\x3dnew G(\\x22100000\\x22),Fa\\x3dnew G(\\x2245368259\\x22),Ga\\x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49828	142.250.80.98	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:07 UTC	694	OUT	GET /pagead/managed/js/gpt/m202403140101/pubads_impl_page_level_ads.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:07 UTC	741	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 48104 X-XSS-Protection: 0 Date: Mon, 18 Mar 2024 00:23:41 GMT Expires: Tue, 18 Mar 2025 00:23:41 GMT Cache-Control: public, immutable, max-age=31536000 ETag: 12543669647762169130 Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 57506 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:07 UTC	511	IN	Data Raw: 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 74 79 70 65 6f 66 20 67 6f 6f 67 6c 65 74 61 67 2e 5f 67 70 74 5f 6a 73 5f 6c 6f 61 64 5f 32 5f 3d 3d 27 66 75 6e 63 74 69 6f 6e 27 26 26 67 6f 6f 67 6c 65 74 61 67 2e 5f 67 70 74 5f 6a 73 5f 6c 6f 61 64 5f 32 5f 28 66 75 6e 63 74 69 6f 6e 28 5f 2c 5f 6d 29 7b 76 61 72 20 4f 51 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 45 66 28 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 61 29 74 68 72 6f 77 20 62 3d 62 3f 62 28 29 2b 22 5c 6e 22 3a 22 22 2c 45 72 72 6f 72 28 62 2b 53 74 72 69 6e 67 28 61 29 29 3b 72 65 74 75 72 6e 20 61 7d 2c 51 51 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 50 51 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b Data Ascii: window.googletag&&typeof googletag._gpt_js_load_2_=='function'&&googletag._gpt_js_load_2_(function(_,_m){var OQ=function(a){var b=_.Ef();if("function"!==typeof a)throw b=b?b()+"\n":"",Error(b+String(a));return a},QQ=function(a){if(!PQ.test(a))return null;
2024-03-18 16:22:07 UTC	1252	IN	Data Raw: 65 66 74 3a 22 61 75 74 6f 22 2c 6d 61 72 67 69 6e 3a 30 2c 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 22 3a 30 2c 22 6d 61 72 67 69 6e 2d 6c 65 66 74 22 3a 30 2c 22 6d 61 72 67 69 6e 2d 72 69 67 68 74 22 3a 22 30 22 2c 22 6d 61 72 67 69 6e 2d 74 6f 70 22 3a 30 2c 22 6d 61 78 2d 68 65 69 67 68 74 22 3a 22 6e 6f 6e 65 22 2c 22 6d 61 78 2d 77 69 64 74 68 22 3a 22 6e 6f 6e 65 22 2c 6f 70 61 63 69 74 79 3a 31 2c 6f 76 65 72 66 6c 6f 77 3a 22 76 69 73 69 62 6c 65 22 2c 70 61 64 64 69 6e 67 3a 30 2c 22 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 22 3a 30 2c 22 70 61 64 64 69 6e 67 2d 6c 65 66 74 22 3a 30 2c 22 70 61 64 64 69 6e 67 2d 72 69 67 68 74 22 3a 30 2c 22 70 61 64 64 69 6e 67 2d 74 6f 70 22 3a 30 2c 70 6f 73 69 74 69 6f 6e 3a 22 73 74 61 74 69 63 22 2c 72 Data Ascii: eft:"auto",margin:0,"margin-bottom":0,"margin-left":0,"margin-right":"0","margin-top":0,"max-height":"none","max-width":"none",opacity:1,overflow:"visible",padding:0,"padding-bottom":0,"padding-left":0,"padding-right":0,"padding-top":0,position:"static",r
2024-03-18 16:22:07 UTC	1252	IN	Data Raw: 30 2f 73 76 67 22 2c 22 6c 69 6e 65 22 29 3b 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 78 31 22 2c 22 32 32 22 29 3b 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 79 31 22 2c 22 31 38 22 29 3b 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 78 32 22 2c 22 32 38 22 29 3b 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 79 32 22 2c 22 31 32 22 29 3b 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 29 3b 62 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 22 6c 69 6e 65 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 78 31 22 2c 22 32 38 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 79 31 22 2c 22 31 32 22 29 3b 62 2e 73 65 74 41 74 74 72 69 Data Ascii: 0/svg","line");c.setAttribute("x1","22");c.setAttribute("y1","18");c.setAttribute("x2","28");c.setAttribute("y2","12");a.appendChild(c);b=b.createElementNS("http://www.w3.org/2000/svg","line");b.setAttribute("x1","28");b.setAttribute("y1","12");b.setAttri
2024-03-18 16:22:07 UTC	1252	IN	Data Raw: 3d 3d 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 6e 6f 64 65 54 79 70 65 3f 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3a 6e 75 6c 6c 7d 7d 65 3d 61 2e 50 2e 73 6c 69 63 65 28 29 3b 21 63 26 26 61 2e 6c 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 65 2e 70 6f 70 28 29 3b 76 61 72 20 66 3b 69 66 28 64 29 66 6f 72 28 63 3d 65 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 3d 63 3b 2d 2d 63 29 28 66 3d 65 5b 63 5d 29 26 26 62 2e 63 61 6c 6c 28 61 2c 66 2c 63 2c 65 29 3b 65 6c 73 65 20 66 6f 72 28 63 3d 30 3b 63 3c 65 2e 6c 65 6e 67 74 68 3b 2b 2b 63 29 28 66 3d 65 5b 63 5d 29 26 26 62 2e 63 61 6c 6c 28 61 2c 66 2c 63 2c 65 29 7d 2c 69 52 3d 7b 63 61 70 74 75 72 65 3a 21 30 7d 2c 6a 52 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e Data Ascii: ===e.parentNode.nodeType?e.parentNode:null}}e=a.P.slice();!c&&a.l===e[e.length-1]&&e.pop();var f;if(d)for(c=e.length-1;0<=c;--c)(f=e[c])&&b.call(a,f,c,e);else for(c=0;c<e.length;++c)(f=e[c])&&b.call(a,f,c,e)},iR={capture:!0},jR=function(a,b){return new _.
2024-03-18 16:22:07 UTC	1252	IN	Data Raw: 74 61 6e 74 22 29 3a 63 2e 74 65 73 74 28 64 29 26 26 21 62 28 65 2c 64 29 26 26 61 2e 73 74 79 6c 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 65 2c 64 2c 22 22 29 7d 29 7d 2c 6f 52 3d 2f 5c 2e 70 72 6f 78 79 5c 2e 28 67 6f 6f 67 6c 65 70 72 6f 64 7c 67 6f 6f 67 6c 65 72 73 29 5c 2e 63 6f 6d 28 3a 5c 64 2b 29 3f 24 2f 2c 70 52 3d 2f 2e 2a 64 6f 6d 61 69 6e 5c 2e 74 65 73 74 24 2f 2c 71 52 3d 2f 5c 2e 70 72 6f 64 5c 2e 67 6f 6f 67 6c 65 5c 2e 63 6f 6d 28 3a 5c 64 2b 29 3f 24 2f 2c 72 52 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 3f 61 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3a 61 2e 72 65 74 75 72 6e 56 61 6c 75 65 3d 21 31 7d 2c 73 52 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 31 3d 3d 61 2e 6e 6f Data Ascii: tant"):c.test(d)&&!b(e,d)&&a.style.setProperty(e,d,"")})},oR=/\.proxy\.(googleprod\|googlers)\.com(:\d+)?$/,pR=/.*domain\.test$/,qR=/\.prod\.google\.com(:\d+)?$/,rR=function(a){a.preventDefault?a.preventDefault():a.returnValue=!1},sR=function(a){if(1==a.no
2024-03-18 16:22:07 UTC	1252	IN	Data Raw: 67 29 7c 7c 63 28 68 2c 67 29 7d 3b 5f 2e 71 62 28 61 2c 22 6d 65 73 73 61 67 65 22 2c 65 29 3b 76 61 72 20 66 3d 21 31 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 21 31 3b 66 7c 7c 28 66 3d 21 30 2c 67 3d 5f 2e 63 67 28 61 2c 22 6d 65 73 73 61 67 65 22 2c 65 29 29 3b 72 65 74 75 72 6e 20 67 7d 7d 2c 77 52 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 69 66 28 21 28 30 3e 3d 65 29 26 26 28 63 2e 67 6f 6f 67 4d 73 67 54 79 70 65 3d 62 2c 61 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 63 29 2c 64 29 2c 61 3d 61 2e 66 72 61 6d 65 73 29 29 66 6f 72 28 76 61 72 20 66 3d 30 3b 66 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 66 29 31 3c 65 26 26 77 52 28 61 5b 66 5d 2c 62 2c 63 2c 64 Data Ascii: g)\|\|c(h,g)};_.qb(a,"message",e);var f=!1;return function(){var g=!1;f\|\|(f=!0,g=_.cg(a,"message",e));return g}},wR=function(a,b,c,d,e){if(!(0>=e)&&(c.googMsgType=b,a.postMessage(JSON.stringify(c),d),a=a.frames))for(var f=0;f<a.length;++f)1<e&&wR(a[f],b,c,d
2024-03-18 16:22:07 UTC	1252	IN	Data Raw: 53 72 28 61 2e 42 2e 64 6f 63 75 6d 65 6e 74 29 3f 21 30 3a 21 31 2c 61 2e 6c 28 63 2e 74 69 6d 65 53 74 61 6d 70 29 29 7d 3b 5f 2e 71 62 28 61 2e 42 2e 64 6f 63 75 6d 65 6e 74 2c 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 62 29 3b 5f 2e 70 70 28 61 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 61 2e 42 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 62 29 7d 29 3b 61 2e 67 3d 31 3d 3d 3d 5f 2e 53 72 28 61 2e 42 2e 64 6f 63 75 6d 65 6e 74 29 7d 2c 41 52 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 42 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 Data Ascii: Sr(a.B.document)?!0:!1,a.l(c.timeStamp))};_.qb(a.B.document,"visibilitychange",b);_.pp(a,function(){return void a.B.document.removeEventListener("visibilitychange",b)});a.g=1===_.Sr(a.B.document)},AR=function(a){var b=a.B.document.body.getBoundingClientRe
2024-03-18 16:22:07 UTC	1252	IN	Data Raw: 20 62 3d 21 31 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 73 54 72 75 73 74 65 64 26 26 28 62 3d 21 30 29 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 66 3d 65 2e 74 69 6d 65 53 74 61 6d 70 3b 69 66 28 65 3d 65 2e 69 73 54 72 75 73 74 65 64 26 26 21 62 29 65 3d 28 65 3d 61 2e 42 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 55 52 4c 3f 28 6e 65 77 20 55 52 4c 28 65 29 29 2e 6f 72 69 67 69 6e 3d 3d 3d 61 2e 42 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 3a 21 31 3b 69 66 28 65 29 7b 66 3d 7b 69 63 3a 66 7d 3b 65 3d 5f 2e 78 28 61 2e 67 29 3b 66 6f 72 28 76 61 72 20 67 3d 65 2e 6e 65 78 74 28 29 3b 21 67 2e 64 6f 6e 65 3b 67 3d 65 2e 6e 65 78 74 28 29 Data Ascii: b=!1,c=function(e){e.isTrusted&&(b=!0)},d=function(e){var f=e.timeStamp;if(e=e.isTrusted&&!b)e=(e=a.B.document.referrer)&&"function"===typeof URL?(new URL(e)).origin===a.B.location.origin:!1;if(e){f={ic:f};e=_.x(a.g);for(var g=e.next();!g.done;g=e.next()
2024-03-18 16:22:07 UTC	1252	IN	Data Raw: 3b 76 61 72 20 49 52 3d 7b 53 43 52 49 50 54 3a 31 2c 53 54 59 4c 45 3a 31 2c 48 45 41 44 3a 31 2c 49 46 52 41 4d 45 3a 31 2c 4f 42 4a 45 43 54 3a 31 2c 4e 4f 53 43 52 49 50 54 3a 31 7d 2c 4a 52 3d 7b 49 4d 47 3a 22 20 22 2c 42 52 3a 22 5c 6e 22 7d 2c 4b 52 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 21 28 61 2e 6e 6f 64 65 4e 61 6d 65 20 69 6e 20 49 52 29 29 69 66 28 33 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 63 3f 62 2e 70 75 73 68 28 53 74 72 69 6e 67 28 61 2e 6e 6f 64 65 56 61 6c 75 65 29 2e 72 65 70 6c 61 63 65 28 2f 28 5c 72 5c 6e 7c 5c 72 7c 5c 6e 29 2f 67 2c 22 22 29 29 3a 62 2e 70 75 73 68 28 61 2e 6e 6f 64 65 56 61 6c 75 65 29 3b 65 6c 73 65 20 69 66 28 61 2e 6e 6f 64 65 4e 61 6d 65 20 69 6e 20 4a 52 29 64 26 26 22 49 4d 47 Data Ascii: ;var IR={SCRIPT:1,STYLE:1,HEAD:1,IFRAME:1,OBJECT:1,NOSCRIPT:1},JR={IMG:" ",BR:"\n"},KR=function(a,b,c,d){if(!(a.nodeName in IR))if(3==a.nodeType)c?b.push(String(a.nodeValue).replace(/(\r\n\|\r\|\n)/g,"")):b.push(a.nodeValue);else if(a.nodeName in JR)d&&"IMG
2024-03-18 16:22:07 UTC	1252	IN	Data Raw: 3d 31 29 3b 61 3d 74 68 69 73 2e 6a 3f 74 68 69 73 2e 6a 28 74 68 69 73 2e 70 72 6f 67 72 65 73 73 29 3a 74 68 69 73 2e 70 72 6f 67 72 65 73 73 3b 74 68 69 73 2e 6c 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 74 68 69 73 2e 67 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 74 68 69 73 2e 6c 2e 70 75 73 68 28 28 74 68 69 73 2e 44 5b 62 5d 2d 74 68 69 73 2e 67 5b 62 5d 29 2a 61 2b 74 68 69 73 2e 67 5b 62 5d 29 3b 74 68 69 73 2e 6f 28 29 3b 31 3d 3d 74 68 69 73 2e 70 72 6f 67 72 65 73 73 26 26 28 74 68 69 73 2e 4d 2e 67 3d 21 31 2c 74 68 69 73 2e 49 28 29 29 7d 7d 3b 54 52 2e 70 72 6f 74 6f 74 79 70 65 2e 49 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 54 52 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 76 61 72 20 55 52 3d 66 75 Data Ascii: =1);a=this.j?this.j(this.progress):this.progress;this.l=[];for(var b=0;b<this.g.length;b++)this.l.push((this.D[b]-this.g[b])*a+this.g[b]);this.o();1==this.progress&&(this.M.g=!1,this.I())}};TR.prototype.I=function(){};TR.prototype.o=function(){};var UR=fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49833	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:07 UTC	567	OUT	GET /static/img/compatibility.png HTTP/1.1 Host: browser-update.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770
2024-03-18 16:22:08 UTC	693	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:08 GMT Content-Type: image/png Content-Length: 761 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=compatibility.png last-modified: Sun, 21 Mar 2021 12:19:11 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7OgxJ7WNETEffHPoQzglP8VnD8qNK%2BktQDEASl%2F7snbjVt4I1ihf5S%2BINz8BzN%2BYIrogL0aklhhldrAXUzwZVnT4p5Stmp2Q9XQXO5hGsaZaKJg5E8a%2BVjIg5fFX3ksYS%2BufQQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f4bcd917d1c-EWR
2024-03-18 16:22:08 UTC	676	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 03 00 00 00 44 a4 8a c6 00 00 00 81 50 4c 54 45 00 00 00 ee ee ee e3 e3 e3 e7 e7 e7 f1 f1 f1 f3 f3 f3 eb eb eb f6 f6 f6 f8 f8 f8 cc cc cc c4 c4 c4 c7 c7 c7 db db db b7 b7 b7 de de de bc bc bc bf bf bf e0 e0 e0 f0 f0 f0 b4 b4 b4 d4 d4 d4 d2 d2 d2 ce ce ce c1 c1 c1 b9 b9 b9 c9 c9 c9 d8 d8 d8 d6 d6 d6 ed ed ed eb eb eb e3 e3 e3 e7 e7 e7 e5 e5 e5 f6 f6 f6 f4 f4 f4 f2 f2 f2 b0 b0 b0 aa aa aa e9 e9 e9 a4 a4 a4 a0 a0 a0 99 99 99 ac ac ac 07 47 21 ed 00 00 00 08 74 52 4e 53 00 88 ee cc 66 44 aa 22 e4 e3 11 58 00 00 02 1f 49 44 41 54 38 cb 7d 52 d7 62 db 30 0c 8c 47 5a ee bd 29 89 9a 76 92 ff ff c0 42 b5 93 ba ad 5b 3c f2 0e 38 de 01 2f f7 12 24 be fc b7 72 c9 ff 06 95 3a 6a 22 44 7c c1 98 Data Ascii: PNGIHDR DPLTEG!tRNSfD"XIDAT8}Rb0GZ)vB[<8/$r:j"D\|
2024-03-18 16:22:08 UTC	85	IN	Data Raw: 11 af 27 51 81 11 21 99 f5 63 db b6 8f d5 de f0 ca 8e f7 d3 3c 08 06 94 0c 32 4a 4a a9 14 21 00 3b 26 be fd 5a f7 f9 24 58 71 de 87 bd bc 77 85 89 13 e8 ff 51 e7 c3 e9 a8 b5 3e 9e 0e 0f 47 ff 03 e7 6e 34 32 47 41 bf 22 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 'Q!c<2JJ!;&Z$XqwQ>Gn42GA"IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49831	108.138.128.124	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:07 UTC	542	OUT	GET /lt/c/16589/sync.min.js HTTP/1.1 Host: tags.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:08 UTC	564	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 39827 Connection: close Date: Sun, 17 Mar 2024 17:44:02 GMT Last-Modified: Wed, 14 Feb 2024 17:39:57 GMT ETag: "21f8671135afbd2e874c42d3dc478afa" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b4bbc10bb9b68293dc88560c2ddfcc2c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P4 X-Amz-Cf-Id: JmuMSKUrzqOqiGEf2XSLXPvrUsu8ZclN31bIQQsaWxXfZUVUhBZrDA== Age: 81486
2024-03-18 16:22:08 UTC	15820	IN	Data Raw: 76 61 72 20 6c 6f 74 61 6d 65 49 73 43 6f 6d 70 61 74 69 62 6c 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 6e 20 28 20 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 6b 65 79 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 70 6f 73 74 4d 65 73 73 61 67 65 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 28 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 29 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 20 21 3d 3d 20 27 Data Ascii: var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== '
2024-03-18 16:22:08 UTC	16384	IN	Data Raw: 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 61 26 26 28 62 3d 21 31 2c 73 79 6e 63 31 36 35 38 39 5f 2e 65 72 72 6f 72 28 22 74 61 67 49 6e 70 75 74 2e 64 61 74 61 2e 74 68 69 72 64 50 61 72 74 79 20 73 68 6f 75 6c 64 20 62 65 20 61 6e 20 6f 62 6a 65 63 74 22 29 29 3b 61 2e 6e 61 6d 65 73 70 61 63 65 7c 7c 28 62 3d 21 31 2c 73 79 6e 63 31 36 35 38 39 5f 2e 65 72 72 6f 72 28 22 74 61 67 49 6e 70 75 74 2e 64 61 74 61 2e 74 68 69 72 64 50 61 72 74 79 2e 6e 61 6d 65 73 70 61 63 65 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 29 3b 61 2e 76 61 6c 75 65 7c 7c 28 62 3d 21 31 2c 73 79 6e 63 31 36 35 38 39 5f 2e 65 72 72 6f 72 28 22 74 61 67 49 6e 70 75 74 2e 64 61 74 61 2e 74 68 69 72 64 50 61 72 74 79 2e 76 61 6c 75 65 20 69 73 20 6e 6f 74 20 64 65 66 69 Data Ascii: bject"!=typeof a&&(b=!1,sync16589_.error("tagInput.data.thirdParty should be an object"));a.namespace\|\|(b=!1,sync16589_.error("tagInput.data.thirdParty.namespace is not defined"));a.value\|\|(b=!1,sync16589_.error("tagInput.data.thirdParty.value is not defi
2024-03-18 16:22:08 UTC	7623	IN	Data Raw: 76 6f 69 64 20 30 7d 20 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 31 36 35 38 39 5f 47 61 28 61 2c 62 29 7b 76 61 72 20 63 3d 76 6f 69 64 20 30 3d 3d 3d 63 3f 73 79 6e 63 31 36 35 38 39 5f 45 3a 63 3b 62 26 26 73 79 6e 63 31 36 35 38 39 5f 77 28 62 29 26 26 21 73 79 6e 63 31 36 35 38 39 5f 44 28 62 29 26 26 21 62 2e 75 28 29 26 26 73 79 6e 63 31 36 35 38 39 5f 39 28 61 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 64 3d 73 79 6e 63 31 36 35 38 39 5f 48 61 28 61 2c 62 2c 64 29 3b 73 79 6e 63 31 36 35 38 39 5f 37 28 61 2c 73 79 6e 63 31 36 35 38 39 5f 30 28 64 29 2c 73 79 6e 63 31 36 35 38 39 5f 38 28 61 2c 64 29 2c 22 64 61 74 61 22 2c 63 29 7d 29 7d 20 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 31 36 35 38 39 5f 49 61 28 61 2c 62 2c 63 29 7b 63 3d 76 Data Ascii: void 0} function sync16589_Ga(a,b){var c=void 0===c?sync16589_E:c;b&&sync16589_w(b)&&!sync16589_D(b)&&!b.u()&&sync16589_9(a).then(function(d){d=sync16589_Ha(a,b,d);sync16589_7(a,sync16589_0(d),sync16589_8(a,d),"data",c)})} function sync16589_Ia(a,b,c){c=v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49832	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:07 UTC	562	OUT	GET /static/img/security.png HTTP/1.1 Host: browser-update.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770
2024-03-18 16:22:08 UTC	694	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:08 GMT Content-Type: image/png Content-Length: 761 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=security.png last-modified: Sun, 21 Mar 2021 12:19:12 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F5X9%2B3LfKAwkaNv7%2FM%2BgMjj1tTAwGOva7QkCY2%2BFQczEhkX2JH%2F4SgJIMEeHW89qY25KTpt30MU0q%2F%2FjNN4Hs2mVRAq3hd7dV2iYi8qoLJIY7WukQjCqCiUNKYLkX%2Bec%2FPrhCQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f4bd9ca5e82-EWR
2024-03-18 16:22:08 UTC	675	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 03 00 00 00 44 a4 8a c6 00 00 00 b4 50 4c 54 45 00 00 00 e9 e9 e9 f9 f9 f9 f1 f2 f1 e4 e4 e4 f5 f5 f5 ed ed ed fc fc fc e5 e7 e3 da dc d7 e2 e5 e0 de e1 db e1 e2 df ea eb e7 e4 e6 e1 e0 e3 dd dc de da de e0 dd e7 e9 e4 d7 d9 d5 f3 f4 f2 e8 ea e6 e1 e4 df d8 da d6 d0 d1 ce eb ec e9 dd e0 d9 ee f0 ec ed ee eb d6 d7 d3 f1 f2 f0 f5 f6 f4 d2 d3 d0 da de d7 d4 d6 d1 e4 e6 e3 ab ad a8 b5 b7 b4 f8 f9 f8 d7 d7 d6 d4 d4 d3 cd d0 cb c4 c5 c4 da da da cd cd cd cc ce c9 c8 c9 c8 c6 c8 c4 c1 c3 bf bb bd ba a4 a6 a1 ca cc c8 b3 b5 b1 a7 a9 a5 dc dd dc be bf be b8 b9 b6 b1 b1 b0 ae af ab 9e 9f 9b 67 ee 56 1d 00 00 00 08 74 52 4e 53 00 cc 44 88 ee 66 aa 22 52 77 80 69 00 00 01 ec 49 44 41 54 38 cb Data Ascii: PNGIHDR DPLTEgVtRNSDf"RwiIDAT8
2024-03-18 16:22:08 UTC	86	IN	Data Raw: 19 a9 93 18 6f 4d 73 8f af 49 4d 32 7d bd fc ab 8e f9 a9 bc 3f 5f 91 ef 47 af e7 bd 3c e5 b7 d5 f2 06 05 1a 75 d9 f5 71 fc ea ca fa 94 1f 95 bf ff 0f b1 d2 8f 59 ce ce 35 cb b3 a3 fe 47 f8 75 fe 01 eb ca 3e e2 96 37 26 cf 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: oMsIM2}?_G<uqY5Gu>7&IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49829	104.22.75.216	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:07 UTC	547	OUT	GET /tag?o=5708166709903360&upapi=true HTTP/1.1 Host: btloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:08 UTC	447	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:07 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=300, must-revalidate, stale-if-error=3600, stale-while-revalidate=300 Etag: W/"71590c3ab981609709d4adbf1c947519" Last-Modified: Mon, 18 Mar 2024 15:49:40 GMT Vary: Origin Via: 1.1 google CF-Cache-Status: HIT Age: 1933 Server: cloudflare CF-RAY: 86668f4bd88541ec-EWR
2024-03-18 16:22:08 UTC	922	IN	Data Raw: 37 64 65 31 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 73 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 73 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 2c 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 Data Ascii: 7de1!function(){"use strict";var e=function(){return e=Object.assign\|\|function(e){for(var t,n=1,s=arguments.length;n<s;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e},e.apply(this,arguments)};function t(e
2024-03-18 16:22:08 UTC	1369	IN	Data Raw: 6f 77 7c 7c 28 28 72 3d 73 2e 72 65 74 75 72 6e 29 26 26 72 2e 63 61 6c 6c 28 73 29 2c 30 29 3a 73 2e 6e 65 78 74 29 26 26 21 28 72 3d 72 2e 63 61 6c 6c 28 73 2c 69 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 72 3b 73 77 69 74 63 68 28 73 3d 30 2c 72 26 26 28 69 3d 5b 32 26 69 5b 30 5d 2c 72 2e 76 61 6c 75 65 5d 29 2c 69 5b 30 5d 29 7b 63 61 73 65 20 30 3a 63 61 73 65 20 31 3a 72 3d 69 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 20 6f 2e 6c 61 62 65 6c 2b 2b 2c 7b 76 61 6c 75 65 3a 69 5b 31 5d 2c 64 6f 6e 65 3a 21 31 7d 3b 63 61 73 65 20 35 3a 6f 2e 6c 61 62 65 6c 2b 2b 2c 73 3d 69 5b 31 5d 2c 69 3d 5b 30 5d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 20 37 3a 69 3d 6f 2e 6f 70 73 2e 70 6f 70 28 29 2c 6f 2e 74 72 79 73 2e 70 6f 70 Data Ascii: ow\|\|((r=s.return)&&r.call(s),0):s.next)&&!(r=r.call(s,i[1])).done)return r;switch(s=0,r&&(i=[2&i[0],r.value]),i[0]){case 0:case 1:r=i;break;case 4:return o.label++,{value:i[1],done:!1};case 5:o.label++,s=i[1],i=[0];continue;case 7:i=o.ops.pop(),o.trys.pop
2024-03-18 16:22:08 UTC	1369	IN	Data Raw: 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 69 2c 61 2c 63 3b 72 65 74 75 72 6e 20 6e 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 73 77 69 74 63 68 28 6e 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 6e 2e 74 72 79 73 2e 70 75 73 68 28 5b 30 2c 33 2c 2c 34 5d 29 2c 77 69 6e 64 6f 77 2e 5f 5f 62 74 3d 77 69 6e 64 6f 77 2e 5f 5f 62 74 7c 7c 7b 7d 2c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 5f 5f 62 74 2e 63 75 73 74 6f 6d 44 65 74 65 63 74 41 64 42 6c 6f 63 6b 3f 5b 33 2c 32 5d 3a 5b 34 2c 77 69 6e 64 6f 77 2e 5f 5f 62 74 2e 63 75 73 74 6f 6d 44 65 74 65 63 74 41 64 42 6c 6f 63 6b 28 29 5d 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 5b 32 2c 6e 2e 73 65 Data Ascii: void 0,(function(){var e,t,i,a,c;return n(this,(function(n){switch(n.label){case 0:return n.trys.push([0,3,,4]),window.__bt=window.__bt\|\|{},"function"!=typeof window.__bt.customDetectAdBlock?[3,2]:[4,window.__bt.customDetectAdBlock()];case 1:return[2,n.se
2024-03-18 16:22:08 UTC	1369	IN	Data Raw: 29 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 28 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 7c 7c 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 29 7d 76 61 72 20 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 77 69 6e 64 6f 77 3b 74 72 79 7b 69 66 28 74 6f 70 2e 64 6f 63 75 6d 65 6e 74 29 72 65 74 75 72 6e 20 74 6f 70 7d 63 61 74 63 68 28 65 29 7b 7d 74 72 79 7b 66 6f 72 28 3b 65 2e 70 61 72 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 3b 29 65 3d 65 2e 70 61 72 65 6e 74 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 65 7d 28 29 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 22 22 21 3d 3d Data Ascii: ))}))}function l(e){(window.document.body\|\|window.document.documentElement).removeChild(e)}var u=function(){var e=window;try{if(top.document)return top}catch(e){}try{for(;e.parent.document;)e=e.parent}catch(e){}return e}();var d=function(){try{return""!==
2024-03-18 16:22:08 UTC	1369	IN	Data Raw: 22 6c 6f 67 6f 22 3a 22 22 2c 20 22 6e 61 6d 65 22 3a 22 22 2c 20 22 76 69 65 77 22 3a 22 22 2c 20 22 73 69 6e 67 6c 65 5f 63 6c 69 63 6b 5f 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 20 22 70 61 67 65 5f 76 69 65 77 73 5f 74 6f 5f 72 65 6e 64 65 72 22 3a 22 30 22 2c 20 22 70 72 65 6d 69 75 6d 5f 62 79 70 61 73 73 5f 6d 6f 64 65 5f 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 20 22 68 61 72 64 5f 6d 65 73 73 61 67 65 5f 77 61 6c 6c 5f 6d 6f 64 65 5f 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 20 22 61 6c 6c 6f 77 5f 72 65 6e 64 65 72 5f 74 6f 5f 61 61 5f 75 73 65 72 73 22 3a 66 61 6c 73 65 2c 20 22 6c 61 6e 64 69 6e 67 5f 74 65 78 74 5f 65 6e 22 3a 22 22 2c 20 22 63 74 61 5f 62 75 74 74 6f 6e 5f 63 6f 6c 6f 72 22 3a 22 22 2c 20 22 66 6f 6e 74 5f 74 79 Data Ascii: "logo":"", "name":"", "view":"", "single_click_enabled":false, "page_views_to_render":"0", "premium_bypass_mode_enabled":false, "hard_message_wall_mode_enabled":false, "allow_render_to_aa_users":false, "landing_text_en":"", "cta_button_color":"", "font_ty
2024-03-18 16:22:08 UTC	1369	IN	Data Raw: 65 22 3a 74 72 75 65 2c 22 77 22 3a 22 36 32 30 37 33 38 36 34 33 32 33 30 37 32 30 30 22 2c 22 77 69 64 67 65 74 22 3a 66 61 6c 73 65 2c 22 61 22 3a 66 61 6c 73 65 7d 2c 22 39 39 69 6d 61 67 65 73 2e 63 6f 6d 22 3a 7b 22 63 65 22 3a 66 61 6c 73 65 2c 22 6d 65 22 3a 66 61 6c 73 65 2c 22 77 22 3a 22 36 33 32 39 39 37 33 34 36 33 33 31 38 35 32 38 22 2c 22 77 69 64 67 65 74 22 3a 66 61 6c 73 65 2c 22 61 22 3a 66 61 6c 73 65 7d 2c 22 39 64 65 73 69 72 65 73 2e 78 79 7a 22 3a 7b 22 63 65 22 3a 66 61 6c 73 65 2c 22 6d 65 22 3a 66 61 6c 73 65 2c 22 77 22 3a 22 35 37 32 31 36 34 32 32 30 31 32 35 31 38 34 30 22 2c 22 77 69 64 67 65 74 22 3a 66 61 6c 73 65 2c 22 61 22 3a 66 61 6c 73 65 7d 2c 22 61 61 72 6f 61 64 73 2e 63 6f 6d 22 3a 7b 22 63 65 22 3a 66 61 6c 73 Data Ascii: e":true,"w":"6207386432307200","widget":false,"a":false},"99images.com":{"ce":false,"me":false,"w":"6329973463318528","widget":false,"a":false},"9desires.xyz":{"ce":false,"me":false,"w":"5721642201251840","widget":false,"a":false},"aaroads.com":{"ce":fals
2024-03-18 16:22:08 UTC	1369	IN	Data Raw: 73 65 2c 22 61 22 3a 66 61 6c 73 65 7d 2c 22 61 72 61 72 61 74 61 64 76 65 72 74 69 73 65 72 2e 63 6f 6d 2e 61 75 22 3a 7b 22 63 65 22 3a 66 61 6c 73 65 2c 22 6d 65 22 3a 66 61 6c 73 65 2c 22 77 22 3a 22 35 30 37 35 35 35 30 37 35 38 37 36 34 35 34 34 22 2c 22 77 69 64 67 65 74 22 3a 66 61 6c 73 65 2c 22 61 22 3a 66 61 6c 73 65 7d 2c 22 61 72 63 68 69 74 65 63 74 75 72 61 6c 64 65 73 69 67 6e 73 2e 63 6f 6d 22 3a 7b 22 63 65 22 3a 74 72 75 65 2c 22 6d 65 22 3a 74 72 75 65 2c 22 77 22 3a 22 36 33 30 30 30 33 33 30 30 39 33 31 39 39 33 36 22 2c 22 77 69 64 67 65 74 22 3a 66 61 6c 73 65 2c 22 61 22 3a 66 61 6c 73 65 7d 2c 22 61 72 65 61 6c 6d 65 2e 63 6f 6d 22 3a 7b 22 63 65 22 3a 74 72 75 65 2c 22 6d 65 22 3a 74 72 75 65 2c 22 77 22 3a 22 35 38 34 31 33 37 Data Ascii: se,"a":false},"araratadvertiser.com.au":{"ce":false,"me":false,"w":"5075550758764544","widget":false,"a":false},"architecturaldesigns.com":{"ce":true,"me":true,"w":"6300033009319936","widget":false,"a":false},"arealme.com":{"ce":true,"me":true,"w":"584137
2024-03-18 16:22:08 UTC	1369	IN	Data Raw: 61 6c 73 65 7d 2c 22 61 75 73 74 72 61 6c 69 61 6e 67 6f 6c 66 64 69 67 65 73 74 2e 63 6f 6d 2e 61 75 22 3a 7b 22 63 65 22 3a 74 72 75 65 2c 22 6d 65 22 3a 74 72 75 65 2c 22 77 22 3a 22 34 39 30 34 35 33 34 39 37 30 37 32 38 34 34 38 22 2c 22 77 69 64 67 65 74 22 3a 66 61 6c 73 65 2c 22 61 22 3a 66 61 6c 73 65 7d 2c 22 61 75 74 6f 75 6e 63 6c 65 2e 61 74 22 3a 7b 22 63 65 22 3a 74 72 75 65 2c 22 6d 65 22 3a 74 72 75 65 2c 22 77 22 3a 22 36 37 32 38 35 35 35 35 31 32 32 30 31 32 31 36 22 2c 22 77 69 64 67 65 74 22 3a 66 61 6c 73 65 2c 22 61 22 3a 66 61 6c 73 65 7d 2c 22 61 75 74 6f 75 6e 63 6c 65 2e 63 68 22 3a 7b 22 63 65 22 3a 74 72 75 65 2c 22 6d 65 22 3a 66 61 6c 73 65 2c 22 77 22 3a 22 34 38 35 38 31 38 39 39 33 32 31 33 34 34 30 30 22 2c 22 77 69 64 Data Ascii: alse},"australiangolfdigest.com.au":{"ce":true,"me":true,"w":"4904534970728448","widget":false,"a":false},"autouncle.at":{"ce":true,"me":true,"w":"6728555512201216","widget":false,"a":false},"autouncle.ch":{"ce":true,"me":false,"w":"4858189932134400","wid
2024-03-18 16:22:08 UTC	1369	IN	Data Raw: 3a 66 61 6c 73 65 2c 22 61 22 3a 66 61 6c 73 65 7d 2c 22 61 76 69 61 74 69 6f 6e 73 6f 75 72 63 65 6e 65 77 73 2e 63 6f 6d 22 3a 7b 22 63 65 22 3a 66 61 6c 73 65 2c 22 6d 65 22 3a 66 61 6c 73 65 2c 22 77 22 3a 22 35 31 39 37 34 38 31 31 33 38 39 37 38 38 31 36 22 2c 22 77 69 64 67 65 74 22 3a 66 61 6c 73 65 2c 22 61 22 3a 66 61 6c 73 65 7d 2c 22 61 76 69 6f 6e 69 6f 2e 63 6f 6d 22 3a 7b 22 63 65 22 3a 74 72 75 65 2c 22 6d 65 22 3a 74 72 75 65 2c 22 77 22 3a 22 36 32 37 36 39 37 32 38 34 35 34 36 35 36 30 30 22 2c 22 77 69 64 67 65 74 22 3a 66 61 6c 73 65 2c 22 61 22 3a 66 61 6c 73 65 7d 2c 22 61 76 69 6f 6e 69 6f 2e 63 6f 6d 65 6e 22 3a 7b 22 63 65 22 3a 66 61 6c 73 65 2c 22 6d 65 22 3a 66 61 6c 73 65 2c 22 77 22 3a 22 35 31 31 30 36 36 34 36 30 37 30 33 Data Ascii: :false,"a":false},"aviationsourcenews.com":{"ce":false,"me":false,"w":"5197481138978816","widget":false,"a":false},"avionio.com":{"ce":true,"me":true,"w":"6276972845465600","widget":false,"a":false},"avionio.comen":{"ce":false,"me":false,"w":"511066460703
2024-03-18 16:22:08 UTC	1369	IN	Data Raw: 69 64 67 65 74 22 3a 66 61 6c 73 65 2c 22 61 22 3a 66 61 6c 73 65 7d 2c 22 62 69 6b 65 65 78 63 68 61 6e 67 65 2e 63 6f 6d 2e 61 75 22 3a 7b 22 63 65 22 3a 66 61 6c 73 65 2c 22 6d 65 22 3a 66 61 6c 73 65 2c 22 77 22 3a 22 35 36 34 39 32 32 34 30 34 36 37 33 39 34 35 36 22 2c 22 77 69 64 67 65 74 22 3a 66 61 6c 73 65 2c 22 61 22 3a 66 61 6c 73 65 7d 2c 22 62 69 6b 65 65 78 63 68 61 6e 67 65 2e 64 65 22 3a 7b 22 63 65 22 3a 66 61 6c 73 65 2c 22 6d 65 22 3a 66 61 6c 73 65 2c 22 77 22 3a 22 35 37 31 35 30 32 32 30 39 34 32 37 30 34 36 34 22 2c 22 77 69 64 67 65 74 22 3a 66 61 6c 73 65 2c 22 61 22 3a 66 61 6c 73 65 7d 2c 22 62 69 72 6d 65 2e 6e 65 74 22 3a 7b 22 63 65 22 3a 74 72 75 65 2c 22 6d 65 22 3a 74 72 75 65 2c 22 77 22 3a 22 36 32 33 37 35 31 36 33 37 Data Ascii: idget":false,"a":false},"bikeexchange.com.au":{"ce":false,"me":false,"w":"5649224046739456","widget":false,"a":false},"bikeexchange.de":{"ce":false,"me":false,"w":"5715022094270464","widget":false,"a":false},"birme.net":{"ce":true,"me":true,"w":"623751637

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49834	142.250.80.1	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:07 UTC	862	OUT	GET /safeframe/1-0-40/html/container.html HTTP/1.1 Host: e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:08 UTC	707	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-gpt-scs" Report-To: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} Timing-Allow-Origin: * Content-Length: 6162 Date: Mon, 18 Mar 2024 16:22:07 GMT Expires: Tue, 18 Mar 2025 16:22:07 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Thu, 03 Nov 2022 19:10:08 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:08 UTC	545	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 61 66 65 46 72 61 6d 65 20 43 6f 6e 74 61 69 6e 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 6e 3d 66 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8"> <title>SafeFrame Container</title> <script>(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var f=this\|\|self,h=function(a){return a};var n=f
2024-03-18 16:22:08 UTC	1252	IN	Data Raw: 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 67 6f 6f 67 23 68 74 6d 6c 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 68 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 68 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 68 7d 29 7d 63 61 74 63 68 28 63 29 7b 66 2e 63 6f 6e 73 6f 6c 65 26 26 66 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 63 2e 6d 65 73 73 61 67 65 29 7d 74 3d 61 7d 65 6c 73 65 20 74 3d 61 7d 72 65 74 75 72 6e 20 74 7d 3b 76 61 72 20 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 67 3d 62 61 3d 3d 3d 62 61 3f 61 3a 22 22 7d 3b 63 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2b 22 22 7d 3b 76 61 72 20 62 61 3d 7b 7d 2c 64 61 3d 66 75 6e 63 74 69 Data Ascii: .createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=functi
2024-03-18 16:22:08 UTC	1252	IN	Data Raw: 74 68 69 73 2e 69 3d 22 26 22 3b 74 68 69 73 2e 68 3d 7b 7d 3b 74 68 69 73 2e 6f 3d 30 3b 74 68 69 73 2e 67 3d 5b 5d 7d 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 3b 63 5b 61 5d 3d 62 3b 72 65 74 75 72 6e 5b 63 5d 7d 2c 71 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 6b 3d 5b 5d 3b 6a 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 67 2c 41 29 7b 28 67 3d 70 61 28 67 2c 62 2c 63 2c 64 2c 65 29 29 26 26 6b 2e 70 75 73 68 28 41 2b 22 3d 22 2b 67 29 7d 29 3b 72 65 74 75 72 6e 20 6b 2e 6a 6f 69 6e 28 62 29 7d 2c 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 72 65 74 75 72 6e 22 22 3b 62 3d 62 7c 7c 22 26 22 3b 63 3d 63 7c 7c 22 2c 24 22 3b 22 73 74 Data Ascii: this.i="&";this.h={};this.o=0;this.g=[]},z=function(a,b){var c={};c[a]=b;return[c]},qa=function(a,b,c,d,e){var k=[];ja(a,function(g,A){(g=pa(g,b,c,d,e))&&k.push(A+"="+g)});return k.join(b)},pa=function(a,b,c,d,e){if(null==a)return"";b=b\|\|"&";c=c\|\|",$";"st
2024-03-18 16:22:08 UTC	1252	IN	Data Raw: 28 29 3b 61 2e 6e 61 6d 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6e 61 6d 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6e 61 6d 65 29 3b 61 2e 6d 65 73 73 61 67 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6d 65 73 73 61 67 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6d 65 73 73 61 67 65 29 3b 69 66 28 61 2e 73 74 61 63 6b 29 7b 61 3d 61 2e 73 74 61 63 6b 3b 76 61 72 20 63 3d 62 3b 74 72 79 7b 2d 31 3d 3d 61 2e 69 6e 64 65 78 4f 66 28 63 29 26 26 28 61 3d 63 2b 22 5c 6e 22 2b 61 29 3b 66 6f 72 28 76 61 72 20 64 3b 61 21 3d 64 3b 29 64 3d 61 2c 61 3d 61 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 28 28 68 74 74 70 73 3f 3a 2f 2e 2e 2a 2f 29 5b 5e 2f 3a 5d 2a 3a 5c 5c 64 2b 28 3f 3a 2e 7c 5c 6e 29 2a 29 5c 5c 32 22 29 2c Data Ascii: ();a.name&&-1==b.indexOf(a.name)&&(b+=": "+a.name);a.message&&-1==b.indexOf(a.message)&&(b+=": "+a.message);if(a.stack){a=a.stack;var c=b;try{-1==a.indexOf(c)&&(a=c+"\n"+a);for(var d;a!=d;)d=a,a=a.replace(RegExp("((https?:/../)[^/:]:\\d+(?:.\|\n)*)\\2"),
2024-03-18 16:22:08 UTC	1252	IN	Data Raw: 5b 32 5d 2c 45 3d 43 5b 33 5d 3b 69 66 28 44 3e 45 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 50 61 72 73 65 64 20 63 6f 6e 74 65 6e 74 20 73 69 7a 65 20 64 6f 65 73 6e 27 74 20 6d 61 74 63 68 2e 20 22 2b 44 2b 22 3a 22 2b 45 2e 6c 65 6e 67 74 68 29 3b 42 3d 7b 6d 3a 43 5b 31 5d 2c 63 6f 6e 74 65 6e 74 3a 45 2e 73 75 62 73 74 72 28 30 2c 44 29 2c 6c 3a 45 2e 73 75 62 73 74 72 28 44 29 7d 3b 76 61 72 20 46 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 42 2e 6c 29 3b 77 69 6e 64 6f 77 2e 6e 61 6d 65 3d 22 22 3b 76 61 72 20 42 61 3d 42 2e 63 6f 6e 74 65 6e 74 3b 46 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c 74 26 26 28 66 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c 74 3d 46 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c Data Ascii: [2],E=C[3];if(D>E.length)throw Error("Parsed content size doesn't match. "+D+":"+E.length);B={m:C[1],content:E.substr(0,D),l:E.substr(D)};var F=JSON.parse(B.l);window.name="";var Ba=B.content;F.goog_safeframe_hlt&&(f.goog_safeframe_hlt=F.goog_safeframe_hl
2024-03-18 16:22:08 UTC	609	IN	Data Raw: 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 21 31 29 2c 46 61 3d 6e 75 6c 6c 2c 55 3d 4b 2e 6c 65 6e 67 74 68 2d 31 2c 56 3d 55 3b 30 3c 3d 56 3b 2d 2d 56 29 7b 76 61 72 20 57 3d 4b 5b 56 5d 3b 21 46 61 26 26 6b 61 2e 74 65 73 74 28 57 2e 75 72 6c 29 26 26 28 46 61 3d 57 29 3b 69 66 28 57 2e 75 72 6c 26 26 21 57 2e 6a 29 7b 78 3d 57 3b 62 72 65 61 6b 7d 7d 76 61 72 20 6c 61 3d 6e 75 6c 6c 2c 47 61 3d 4b 2e 6c 65 6e 67 74 68 26 26 4b 5b 55 5d 2e 75 72 6c 3b 30 21 3d 78 2e 64 65 70 74 68 26 26 47 61 26 26 28 6c 61 3d 4b 5b 55 5d 29 3b 48 3d 6e 65 77 20 6d 61 3b 69 66 28 48 2e 68 29 7b 76 61 72 20 48 61 3d 48 2e 68 2e 75 72 6c 7c 7c 22 22 3b 49 2e 67 2e 70 75 73 68 28 34 29 3b 49 2e 68 5b 34 5d 3d 7a 28 22 74 6f 70 22 2c 48 61 29 7d 76 61 72 20 49 61 3d 7b Data Ascii: .location.href,!1),Fa=null,U=K.length-1,V=U;0<=V;--V){var W=K[V];!Fa&&ka.test(W.url)&&(Fa=W);if(W.url&&!W.j){x=W;break}}var la=null,Ga=K.length&&K[U].url;0!=x.depth&&Ga&&(la=K[U]);H=new ma;if(H.h){var Ha=H.h.url\|\|"";I.g.push(4);I.h[4]=z("top",Ha)}var Ia={

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49830	142.251.40.226	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:08 UTC	823	OUT	GET /static/topics/topics_frame.html HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:08 UTC	710	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-gpt-scs" Report-To: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} Content-Length: 104272 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 18 Mar 2024 15:32:19 GMT Expires: Mon, 18 Mar 2024 16:22:19 GMT Cache-Control: public, max-age=3000, stale-while-revalidate=3600 Age: 2989 Last-Modified: Mon, 11 Mar 2024 19:46:25 GMT Content-Type: text/html Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:08 UTC	542	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 6f 70 69 63 73 20 46 72 61 6d 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <title>Topics Frame</title> <meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iO
2024-03-18 16:22:08 UTC	1252	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 63 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 2c 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c Data Ascii: ){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof global
2024-03-18 16:22:08 UTC	1252	IN	Data Raw: 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 31 45 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3e 3e 3e 30 29 2b 22 5f 22 2c 64 3d 30 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 63 2b 28 67 7c 7c 22 22 29 2b 22 5f 22 2b 64 2b 2b 2c 67 29 7d 3b 72 65 74 75 72 6e 20 65 7d 2c 22 65 73 36 22 29 3b 77 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 28 30 2c 71 2e 53 79 6d 62 6f 6c 29 28 22 53 79 6d 62 6f 6c 2e 69 74 Data Ascii: comp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(g){if(this instanceof e)throw new TypeError("Symbol is not a constructor");return new b(c+(g\|\|"")+"_"+d++,g)};return e},"es6");w("Symbol.iterator",function(a){if(a)return a;a=(0,q.Symbol)("Symbol.it
2024-03-18 16:22:08 UTC	1252	IN	Data Raw: 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 69 66 28 64 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 64 29 6c 61 28 64 2c 65 29 26 26 28 61 5b 65 5d 3d 64 5b 65 5d 29 7d 72 65 74 75 72 6e 20 61 7d 3b 77 28 22 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 6d 61 7d 2c 22 65 73 36 22 29 3b 76 61 72 20 6e 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 2c 6f 61 3b 69 66 28 66 61 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 Data Ascii: rguments[c];if(d)for(var e in d)la(d,e)&&(a[e]=d[e])}return a};w("Object.assign",function(a){return a\|\|ma},"es6");var na="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b},oa;if(fa&&"function"==typeof
2024-03-18 16:22:08 UTC	1252	IN	Data Raw: 28 61 2c 62 29 7b 75 61 28 61 2e 67 29 3b 76 61 72 20 63 3d 61 2e 67 2e 69 3b 69 66 28 63 29 72 65 74 75 72 6e 20 7a 61 28 61 2c 22 72 65 74 75 72 6e 22 69 6e 20 63 3f 63 5b 22 72 65 74 75 72 6e 22 5d 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 64 2c 64 6f 6e 65 3a 21 30 7d 7d 2c 62 2c 61 2e 67 2e 72 65 74 75 72 6e 29 3b 61 2e 67 2e 72 65 74 75 72 6e 28 62 29 3b 72 65 74 75 72 6e 20 41 61 28 61 29 7d 2c 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 74 72 79 7b 76 61 72 20 65 3d 62 2e 63 61 6c 6c 28 61 2e 67 2e 69 2c 63 29 3b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 74 65 72 61 74 6f 72 20 72 65 73 75 6c Data Ascii: (a,b){ua(a.g);var c=a.g.i;if(c)return za(a,"return"in c?c["return"]:function(d){return{value:d,done:!0}},b,a.g.return);a.g.return(b);return Aa(a)},za=function(a,b,c,d){try{var e=b.call(a.g.i,c);if(!(e instanceof Object))throw new TypeError("Iterator resul
2024-03-18 16:22:08 UTC	1252	IN	Data Raw: 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 62 5b 63 2d 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 77 28 22 52 65 66 6c 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 73 61 3f 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 73 61 28 62 2c 63 29 2c 21 30 7d 63 61 74 63 68 28 64 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3a 6e 75 6c 6c 7d 2c 22 65 73 36 22 29 3b 77 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 63 28 66 29 7b 72 65 74 75 72 6e 20 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 3f 66 3a 6e Data Ascii: nts.length;c++)b[c-a]=arguments[c];return b};w("Reflect.setPrototypeOf",function(a){return a?a:sa?function(b,c){try{return sa(b,c),!0}catch(d){return!1}}:null},"es6");w("Promise",function(a){function b(){this.g=null}function c(f){return f instanceof e?f:n
2024-03-18 16:22:08 UTC	1252	IN	Data Raw: 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 73 28 6b 29 3b 72 65 74 75 72 6e 7d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 68 3f 74 68 69 73 2e 79 61 28 68 2c 66 29 3a 74 68 69 73 2e 46 28 66 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 74 68 69 73 2e 57 28 32 2c 66 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 46 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 74 68 69 73 2e 57 28 31 2c 66 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 57 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 29 7b 69 66 28 30 21 3d 74 68 69 73 2e 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 73 65 74 74 6c 65 28 22 2b 66 2b 22 2c 20 22 2b 68 2b 22 29 3a 20 50 72 6f 6d 69 73 65 20 61 6c 72 65 61 64 79 20 73 65 Data Ascii: then}catch(k){this.s(k);return}"function"==typeof h?this.ya(h,f):this.F(f)};e.prototype.s=function(f){this.W(2,f)};e.prototype.F=function(f){this.W(1,f)};e.prototype.W=function(f,h){if(0!=this.h)throw Error("Cannot settle("+f+", "+h+"): Promise already se
2024-03-18 16:22:08 UTC	1252	IN	Data Raw: 76 61 72 20 6c 2c 6e 2c 70 3d 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6e 3d 74 7d 29 3b 74 68 69 73 2e 5a 28 6b 28 66 2c 6c 29 2c 6b 28 68 2c 6e 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 66 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5a 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 68 29 7b 63 61 73 65 20 31 3a 66 28 6c 2e 69 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 69 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 Data Ascii: var l,n,p=new e(function(r,t){l=r;n=t});this.Z(k(f,l),k(h,n));return p};e.prototype.catch=function(f){return this.then(void 0,f)};e.prototype.Z=function(f,h){function k(){switch(l.h){case 1:f(l.i);break;case 2:h(l.i);break;default:throw Error("Unexpected
2024-03-18 16:22:08 UTC	1252	IN	Data Raw: 66 28 66 29 7b 66 3d 78 28 66 29 3b 66 6f 72 28 76 61 72 20 68 3b 21 28 68 3d 66 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 68 3d 68 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 68 5b 30 5d 2c 68 5b 31 5d 29 7d 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 29 7b 69 66 28 21 63 28 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 57 65 61 6b 4d 61 70 20 6b 65 79 22 29 3b 69 66 28 21 6c 61 28 66 2c 64 29 29 7b 76 61 72 20 6b 3d 6e 65 77 20 62 3b 63 61 28 66 2c 64 2c 7b 76 61 6c 75 65 3a 6b 7d 29 7d 69 66 28 21 6c 61 28 66 2c 64 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 57 65 61 6b 4d 61 70 20 6b 65 79 20 66 61 69 6c 3a 20 22 2b 66 29 3b 66 5b 64 5d 5b 74 68 69 73 2e 67 5d 3d 68 3b 72 Data Ascii: f(f){f=x(f);for(var h;!(h=f.next()).done;)h=h.value,this.set(h[0],h[1])}};g.prototype.set=function(f,h){if(!c(f))throw Error("Invalid WeakMap key");if(!la(f,d)){var k=new b;ca(f,d,{value:k})}if(!la(f,d))throw Error("WeakMap key fail: "+f);f[d][this.g]=h;r
2024-03-18 16:22:08 UTC	1252	IN	Data Raw: 3a 74 68 69 73 5b 31 5d 2c 6b 65 79 3a 68 2c 76 61 6c 75 65 3a 6b 7d 2c 6c 2e 6c 69 73 74 2e 70 75 73 68 28 6c 2e 41 29 2c 74 68 69 73 5b 31 5d 2e 48 2e 6e 65 78 74 3d 6c 2e 41 2c 74 68 69 73 5b 31 5d 2e 48 3d 6c 2e 41 2c 74 68 69 73 2e 73 69 7a 65 2b 2b 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 3d 64 28 74 68 69 73 2c 68 29 3b 72 65 74 75 72 6e 20 68 2e 41 26 26 68 2e 6c 69 73 74 3f 28 68 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 68 2e 69 6e 64 65 78 2c 31 29 2c 68 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 68 2e 69 64 5d 2c 68 2e 41 2e 48 2e 6e 65 78 74 3d 68 2e 41 2e 6e 65 78 74 2c 68 2e 41 2e 6e 65 78 74 2e 48 3d Data Ascii: :this[1],key:h,value:k},l.list.push(l.A),this[1].H.next=l.A,this[1].H=l.A,this.size++);return this};c.prototype.delete=function(h){h=d(this,h);return h.A&&h.list?(h.list.splice(h.index,1),h.list.length\|\|delete this[0][h.id],h.A.H.next=h.A.next,h.A.next.H=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49835	209.54.182.161	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:08 UTC	823	OUT	GET /iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-mediagrid_n-adMediaV1_pm-db5_n-simpli.fi_n-baidu_n-Beeswax_ox-db5_smrt_n-inmobi_sovrn_3lift_n-Outbrain HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:08 UTC	836	IN	HTTP/1.1 302 Found Server: Server Date: Mon, 18 Mar 2024 16:22:08 GMT Content-Length: 0 Connection: close x-amz-rid: 58J97KQPQ2A5584YKSY7 Set-Cookie: ad-id=AylOXD6udEkArigs61cOqe8\|t; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 16:22:08 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-mediagrid_n-adMediaV1_pm-db5_n-simpli.fi_n-baidu_n-Beeswax_ox-db5_smrt_n-inmobi_sovrn_3lift_n-Outbrain&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49836	142.250.80.98	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:08 UTC	3349	OUT	GET /gampad/ads?pvsid=1702785379071819&correlator=202337239561750&eid=31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403140101&ptt=17&impl=fifs&iu_parts=71161633%3A1007669%2CBROWUPD_browserupdate%2Cupdate_vrec_1%2Csticky_footer&enc_prev_ius=%2F0%2F1%2F2%2C%2F0%2F1%2F3&prev_iu_szs=320x50%7C300x250%7C336x280%2C728x90%7C970x90&fluid=height%2C0&ifi=2&sfv=1-0-40&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1710778927012&lmt=1710778927&adxs=875%2C268&adys=95%2C952&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0%7C1&ucis=2%7C3&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&vis=1&psz=350x0%7C0x-1&msz=300x0%7C728x-1&fws=128%2C644&ohw=0%2C1263&ga_vid=1126053991.1710778926&ga_sid=1710778926&ga_hid=1902104362&ga_fc=false&td=1&topics=9&tps=9&htps=10&a3p=EhwKDWNyd2RjbnRybC5uZXQYhIn7kuUxSABSAghk&nt=1&psd=WzE1LFsyLFtbIi83MTE2MTYzMywxMDA3NjY5L0JST1dVUERfYnJvd3NlcnVwZGF0ZS91cGRhdGVfdnJlY18xIixbXV0sWyIvNzExNjE2MzMsMTAwNzY2OS9CUk9XVVBEX2Jyb3dzZXJ1cGRhdGUvc3RpY2t5X2Zvb3RlciIsW11dXV0sbnVsbCwzXQ..&dlt=1710778923330&idt=2820&prev_scp=in2w_key20%3D1p09%2C1p0r%2C1p0x%26in2w_key21%3D2738828490%26amznbid%3D2%26amznp%3D2%26is_refresh%3Dfalse%26slot_prev_count%3D0%26adunit_prev_count%3D0%26in2w_key15%3Du0%7Cin2w_key20%3D1p09%2C1p0r%2C1p0x%26in2w_key21%3D549476650%26amznbid%3D2%26amznp%3D2%26is_refresh%3Dfalse%26slot_prev_count%3D0%26adunit_prev_count%3D0%26in2w_key15%3Du0&cust_params=in2w_key15%3Du0%26intowow_optimized%3Dfalse%26fuse_site%3Dbrowser-update.org%26fuse_path%3D%252Fupdate-browser.html%26fuse_query%3D%26fuse_category%3D%26fuse_industry_2%3DIAB19%26testmode%3Dfalse%26inskin_yes%3Dtrue%26fuse_uuid%3De77f8bfe-60b6-5c8b-a657-64bfafdad065%26fuse_publication_id%3D5%26fuse_flavour%3Ddefault%26GPT_READY_MS%3D4000-4999%26PREBID_READY_MS%3D3000-3499%26UAM_READY_MS%3D3500-3999%26CMP_DETERMINED_MS%3Ddisabled%26CMP_GDPR_CACHED%3Dfalse%26FUSE_LOADED_MS%3D2000-2499%26FIRST_ZONE_MS%3D3500-3999%26HB_AUCTION_START_MS%3D3500-3999%26CMP_JURISDICTION%3Dunknown%26CMP_ALLOW_PERSONAL%3Dtrue%26fuse_exp_0%3Dfalse%26fuse_exp_2%3Dtrue%26fuse_exp_3%3Dtrue%26fuse_exp_4%3Dtrue%26fuse_exp_5%3Dtrue%26fuse_exp_6%3Dtrue%26fuse_exp_7%3Dtrue%26fuse_exp_8%3Dtrue%26fuse_exp_9%3Dfalse%26fuse_exp_10%3Dfalse%26chrome_label%3Dstandard%26zone_count_above_vp%3D1%26GPT_AUCTION_START_MS%3D4000-4999&adks=2065841319%2C1568334319&frm=20 HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Ad-Auction-Fetch: ?1 Origin: https://browser-update.org X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:09 UTC	1071	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://browser-update.org Observe-Browsing-Topics: ?1 Google-LineItem-Id: 208234953,208234953 Google-Creative-Id: 107027455473,107027454993 Google-MediationGroup-Id: -2,-2 Google-MediationTag-Id: -2 Date: Mon, 18 Mar 2024 16:22:09 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Mon, 18-Mar-2024 16:37:08 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-18 16:22:09 UTC	181	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 2f 37 31 31 36 31 36 33 33 2f 42 52 4f 57 55 50 44 5f 62 72 6f 77 73 65 72 75 70 64 61 74 65 2f 75 70 64 61 74 65 5f 76 72 65 63 5f 31 22 3a 5b 22 68 74 6d 6c 22 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 32 38 30 2c 33 33 36 2c 30 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 31 2c 5b 5b 22 49 44 3d 61 30 33 62 31 30 36 37 36 37 32 31 64 31 31 31 3a 54 3d 31 37 31 30 37 37 38 39 32 38 3a 52 54 3d 31 37 31 30 37 37 38 39 32 38 3a 53 3d 41 4c 4e 49 5f 4d 62 54 4f 72 36 72 46 5f 4b 49 4a 51 62 65 35 69 34 31 73 71 Data Ascii: 8000{"/71161633/BROWUPD_browserupdate/update_vrec_1":["html",1,null,null,1,280,336,0,0,null,null,1,1,[["ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sq
2024-03-18 16:22:09 UTC	1252	IN	Data Raw: 4d 4e 52 43 68 5f 54 77 22 2c 31 37 34 34 34 37 34 39 32 38 2c 22 2f 22 2c 22 62 72 6f 77 73 65 72 2d 75 70 64 61 74 65 2e 6f 72 67 22 2c 31 5d 2c 5b 22 55 49 44 3d 30 30 30 30 30 61 31 33 37 38 30 62 39 33 38 65 3a 54 3d 31 37 31 30 37 37 38 39 32 38 3a 52 54 3d 31 37 31 30 37 37 38 39 32 38 3a 53 3d 41 4c 4e 49 5f 4d 5a 36 72 51 47 69 5f 6f 76 75 4f 45 4d 5a 72 50 37 32 45 2d 7a 47 2d 43 39 4c 59 67 22 2c 31 37 34 34 34 37 34 39 32 38 2c 22 2f 22 2c 22 62 72 6f 77 73 65 72 2d 75 70 64 61 74 65 2e 6f 72 67 22 2c 32 5d 5d 2c 5b 31 30 37 30 32 37 34 35 35 34 37 33 5d 2c 5b 32 30 38 32 33 34 39 35 33 5d 2c 5b 36 36 32 30 33 34 33 33 5d 2c 5b 34 31 35 31 34 32 31 39 33 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c Data Ascii: MNRCh_Tw",1744474928,"/","browser-update.org",1],["UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg",1744474928,"/","browser-update.org",2]],[107027455473],[208234953],[66203433],[415142193],null,null,null,null,null,nul
2024-03-18 16:22:09 UTC	1252	IN	Data Raw: 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 75 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 61 3a 7b 76 61 72 20 62 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 3b 66 6f 72 28 76 61 72 20 63 3d 75 2c 64 3d 30 3b 64 3c 62 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 69 66 28 63 3d 63 5b 62 5b 64 5d 5d 2c 6e 75 6c 6c 3d 3d 63 29 7b 62 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 62 3d 63 7d 61 3d 62 26 26 62 5b 61 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 3f 61 3a 21 31 7d 3b 76 61 72 20 62 61 3d 61 61 28 36 31 30 34 30 31 33 30 31 29 2c 63 61 3d 61 61 28 31 38 38 35 38 38 37 33 36 29 3b 76 61 72 20 76 3b 63 6f 6e 73 74 20 64 61 3d 75 2e 6e 61 76 69 67 61 74 6f 72 3b 76 3d 64 61 3f 64 61 2e 75 73 65 72 41 67 65 6e 74 44 61 Data Ascii: e-2.0 */ var u=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=u,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1};var ba=aa(610401301),ca=aa(188588736);var v;const da=u.navigator;v=da?da.userAgentDa
2024-03-18 16:22:09 UTC	1252	IN	Data Raw: 62 6f 6f 6c 65 61 6e 22 21 3d 3d 74 79 70 65 6f 66 20 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 60 45 78 70 65 63 74 65 64 20 62 6f 6f 6c 65 61 6e 20 62 75 74 20 67 6f 74 20 24 7b 22 6f 62 6a 65 63 74 22 21 3d 62 3f 62 3a 61 3f 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 3f 22 61 72 72 61 79 22 3a 62 3a 22 6e 75 6c 6c 22 7d 3a 20 24 7b 61 7d 60 29 3b 7d 72 65 74 75 72 6e 20 61 7d 3b 6c 65 74 20 6f 61 3b 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 71 61 28 62 29 7d 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 29 7b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 61 29 7b 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 61 29 3f 61 3a 53 74 72 69 6e Data Ascii: boolean"!==typeof a){var b=typeof a;throw Error(`Expected boolean but got ${"object"!=b?b:a?Array.isArray(a)?"array":b:"null"}: ${a}`);}return a};let oa;function pa(a,b){return qa(b)}function qa(a){switch(typeof a){case "number":return isFinite(a)?a:Strin
2024-03-18 16:22:09 UTC	1252	IN	Data Raw: 2b 28 2b 21 21 28 62 26 35 31 32 29 2d 31 29 5d 3d 76 6f 69 64 20 30 29 3b 67 21 3d 3d 62 26 26 28 61 5b 47 5d 3d 67 29 7d 65 6c 73 65 20 61 5b 63 2b 28 2b 21 21 28 62 26 35 31 32 29 2d 31 29 5d 3d 64 2c 62 26 32 35 36 26 26 28 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 2c 63 20 69 6e 20 61 26 26 64 65 6c 65 74 65 20 61 5b 63 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 61 2c 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 21 3d 63 26 26 22 73 74 72 69 6e 67 22 21 3d 3d 74 79 70 65 6f 66 20 63 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 72 65 74 75 72 6e 20 4c 28 61 2c 62 2c 63 29 7d 3b 76 61 72 20 4f 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 61 3a 7b 76 61 72 20 61 3d 76 6f 69 64 20 30 3b 6e 75 6c 6c 3d 3d 61 26 26 28 61 3d 6f 61 29 3b 6f 61 3d Data Ascii: +(+!!(b&512)-1)]=void 0);g!==b&&(a[G]=g)}else a[c+(+!!(b&512)-1)]=d,b&256&&(a=a[a.length-1],c in a&&delete a[c])}function N(a,b,c){if(null!=c&&"string"!==typeof c)throw Error();return L(a,b,c)};var O=class{constructor(){a:{var a=void 0;null==a&&(a=oa);oa=
2024-03-18 16:22:09 UTC	1252	IN	Data Raw: 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 62 3b 74 68 69 73 2e 76 61 6c 75 65 54 79 70 65 3d 22 62 6f 6f 6c 65 61 6e 22 7d 7d 3b 76 61 72 20 76 61 3d 6e 65 77 20 50 28 22 34 35 33 36 38 32 35 39 22 29 2c 77 61 3d 6e 65 77 20 50 28 22 34 35 33 35 37 31 35 36 22 2c 21 30 29 2c 78 61 3d 6e 65 77 20 50 28 22 34 35 33 35 30 38 39 30 22 29 2c 79 61 3d 6e 65 77 20 50 28 22 34 35 34 31 34 38 39 32 22 29 3b 63 6f 6e 73 74 20 7a 61 3d 52 65 67 45 78 70 28 22 61 64 5c 5c 5c 5c 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 5c 5c 5c 5c 2e 6e 65 74 2f 64 64 6d 2f 74 72 61 63 6b 69 6d 70 22 29 3b 76 61 72 20 51 3d 28 61 2c 62 29 3d 3e 22 26 61 64 75 72 6c 3d 22 3d 3d 61 2e 73 75 62 73 74 72 69 6e 67 28 61 2e 6c 65 6e 67 74 68 2d 37 29 3f 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c Data Ascii: .defaultValue=b;this.valueType="boolean"}};var va=new P("45368259"),wa=new P("45357156",!0),xa=new P("45350890"),ya=new P("45414892");const za=RegExp("ad\\\\.doubleclick\\\\.net/ddm/trackimp");var Q=(a,b)=>"&adurl="==a.substring(a.length-7)?a.substring(0,
2024-03-18 16:22:09 UTC	1252	IN	Data Raw: 73 6c 69 63 65 28 30 2c 64 29 2c 65 2c 61 2e 73 6c 69 63 65 28 63 29 5d 2c 63 3d 61 5b 31 5d 2c 61 5b 31 5d 3d 62 3f 63 3f 63 2b 22 26 22 2b 62 3a 62 3a 63 2c 62 3d 61 5b 30 5d 2b 28 61 5b 31 5d 3f 22 3f 22 2b 61 5b 31 5d 3a 22 22 29 2b 61 5b 32 5d 29 3a 62 3d 61 3b 72 65 74 75 72 6e 20 62 7d 3b 66 75 6e 63 74 69 6f 6e 20 48 61 28 29 7b 69 66 28 21 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 29 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 74 72 79 7b 63 6f 6e 73 74 20 61 3d 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 3b 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 61 29 3b 72 65 74 75 72 6e 20 61 5b 30 5d 2f 36 35 35 33 36 2f 36 35 35 33 36 7d 63 61 74 63 68 7b 72 Data Ascii: slice(0,d),e,a.slice(c)],c=a[1],a[1]=b?c?c+"&"+b:b:c,b=a[0]+(a[1]?"?"+a[1]:"")+a[2]):b=a;return b};function Ha(){if(!globalThis.crypto)return Math.random();try{const a=new Uint32Array(1);globalThis.crypto.getRandomValues(a);return a[0]/65536/65536}catch{r
2024-03-18 16:22:09 UTC	1252	IN	Data Raw: 75 74 65 28 22 64 61 74 61 2d 6a 63 2d 66 6c 61 67 73 22 29 7c 7c 22 22 3b 74 72 79 7b 63 6f 6e 73 74 20 62 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 61 29 5b 30 5d 3b 61 3d 22 22 3b 66 6f 72 28 6c 65 74 20 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 61 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 62 2e 63 68 61 72 43 6f 64 65 41 74 28 63 29 5e 22 5c 5c 75 30 30 30 33 5c 5c 75 30 30 30 37 5c 5c 75 30 30 30 33 5c 5c 75 30 30 30 37 5c 5c 62 5c 5c 75 30 30 30 34 5c 5c 75 30 30 30 34 5c 5c 75 30 30 30 36 5c 5c 75 30 30 30 35 5c 5c 75 30 30 30 33 22 2e 63 68 61 72 43 6f 64 65 41 74 28 63 25 31 30 29 29 3b 74 68 69 73 2e 67 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 61 29 7d 63 61 74 63 68 28 62 29 7b 7d 7d 7d 2c 53 61 3b 63 6c 61 73 73 20 Data Ascii: ute("data-jc-flags")\|\|"";try{const b=JSON.parse(a)[0];a="";for(let c=0;c<b.length;c++)a+=String.fromCharCode(b.charCodeAt(c)^"\\u0003\\u0007\\u0003\\u0007\\b\\u0004\\u0004\\u0006\\u0005\\u0003".charCodeAt(c%10));this.g=JSON.parse(a)}catch(b){}}},Sa;class
2024-03-18 16:22:09 UTC	1252	IN	Data Raw: 30 3c 3d 62 2e 69 6e 64 65 78 4f 66 28 22 31 33 33 37 22 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 63 62 28 61 29 7b 61 26 26 55 26 26 56 28 29 26 26 28 55 2e 63 6c 65 61 72 4d 61 72 6b 73 28 60 67 6f 6f 67 5f 24 7b 61 2e 6c 61 62 65 6c 7d 5f 24 7b 61 2e 75 6e 69 71 75 65 49 64 7d 5f 73 74 61 72 74 60 29 2c 55 2e 63 6c 65 61 72 4d 61 72 6b 73 28 60 67 6f 6f 67 5f 24 7b 61 2e 6c 61 62 65 6c 7d 5f 24 7b 61 2e 75 6e 69 71 75 65 49 64 7d 5f 65 6e 64 60 29 29 7d 20 63 6c 61 73 73 20 64 62 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 3b 74 68 69 73 2e 68 3d 5b 5d 3b 74 68 69 73 2e 69 3d 61 7c 7c 75 3b 6c 65 74 20 62 3d 6e 75 6c 6c 3b 61 26 26 28 61 2e 67 6f 6f 67 6c 65 5f 6a 73 5f 72 65 70 6f 72 74 69 Data Ascii: 0<=b.indexOf("1337")}return a});function cb(a){a&&U&&V()&&(U.clearMarks(`goog_${a.label}_${a.uniqueId}_start`),U.clearMarks(`goog_${a.label}_${a.uniqueId}_end`))} class db{constructor(){var a=window;this.h=[];this.i=a\|\|u;let b=null;a&&(a.google_js_reporti
2024-03-18 16:22:09 UTC	1252	IN	Data Raw: 6c 65 6e 67 74 68 3e 62 3f 63 2e 6c 65 6e 67 74 68 3a 62 3b 72 65 74 75 72 6e 20 33 39 39 37 2d 62 2d 61 2e 69 2e 6c 65 6e 67 74 68 2d 31 7d 20 66 75 6e 63 74 69 6f 6e 20 68 62 28 61 2c 62 29 7b 6c 65 74 20 63 3d 22 68 74 74 70 73 3a 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 22 2b 62 2c 64 3d 67 62 28 61 29 2d 62 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3e 64 29 72 65 74 75 72 6e 22 22 3b 61 2e 67 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 2d 67 7d 29 3b 62 3d 6e 75 6c 6c 3b 6c 65 74 20 65 3d 22 22 3b 66 6f 72 28 6c 65 74 20 66 3d 30 3b 66 3c 61 2e 67 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 7b 63 6f 6e 73 74 20 67 3d 61 2e 67 5b 66 5d 2c 70 3d 61 2e 68 5b 67 5d 3b 66 6f 72 Data Ascii: length>b?c.length:b;return 3997-b-a.i.length-1} function hb(a,b){let c="https://pagead2.googlesyndication.com"+b,d=gb(a)-b.length;if(0>d)return"";a.g.sort(function(f,g){return f-g});b=null;let e="";for(let f=0;f<a.g.length;f++){const g=a.g[f],p=a.h[g];for

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49839	74.119.119.131	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:08 UTC	551	OUT	GET /js/ld/publishertag.prebid.136.js HTTP/1.1 Host: static.criteo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:08 UTC	484	IN	HTTP/1.1 200 OK server: nginx date: Mon, 18 Mar 2024 16:22:08 GMT content-type: text/javascript content-length: 96004 last-modified: Tue, 07 Nov 2023 09:08:30 GMT etag: "6549fe8e-17704" expires: Tue, 19 Mar 2024 16:22:08 GMT cache-control: max-age=86400 cross-origin-resource-policy: cross-origin cache-control: public timing-allow-origin: * access-control-allow-origin: * accept-ranges: bytes strict-transport-security: max-age=31536000; preload; connection: close
2024-03-18 16:22:08 UTC	15900	IN	Data Raw: 2f 2f 20 48 61 73 68 3a 20 65 4d 59 45 61 45 65 55 53 55 5a 47 51 43 72 34 47 69 56 55 2f 31 71 44 53 42 56 73 4e 39 4f 74 64 4e 59 44 50 57 41 32 7a 6c 5a 50 70 6d 68 48 61 41 4a 64 2f 66 69 59 63 37 38 6a 4d 50 6c 44 57 72 59 33 5a 56 45 4c 68 66 63 66 7a 41 50 59 48 47 36 42 6a 44 55 39 6e 30 77 50 73 38 65 33 62 67 76 4d 76 35 34 41 51 30 79 50 75 79 30 58 6d 66 5a 46 38 2f 6b 31 51 48 68 72 6e 62 67 68 58 5a 39 39 59 79 38 6f 32 46 6c 70 55 74 69 4b 4b 70 6d 47 49 4c 4e 38 6f 58 68 2b 51 75 38 31 78 33 31 6f 79 6e 70 71 4c 6b 59 3d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 6e 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 Data Ascii: // Hash: eMYEaEeUSUZGQCr4GiVU/1qDSBVsN9OtdNYDPWA2zlZPpmhHaAJd/fiYc78jMPlDWrY3ZVELhfcfzAPYHG6BjDU9n0wPs8e3bgvMv54AQ0yPuy0XmfZF8/k1QHhrnbghXZ99Yy8o2FlpUtiKKpmGILN8oXh+Qu81x31oynpqLkY=!function(e){"use strict";var n=function(e,t){return(n=Object.setPrototyp
2024-03-18 16:22:08 UTC	16319	IN	Data Raw: 49 54 45 4f 5f 43 53 4d 5f 43 4f 55 4e 54 45 52 53 5f 48 41 4e 44 4c 45 52 3d 22 63 73 6d 2f 63 6f 75 6e 74 65 72 73 22 2c 77 65 2e 43 52 49 54 45 4f 5f 45 52 52 4f 52 5f 48 41 4e 44 4c 45 52 3d 22 65 72 72 6f 72 22 2c 77 65 2e 43 52 49 54 45 4f 5f 42 49 44 44 45 52 5f 41 55 44 49 54 5f 48 41 4e 44 4c 45 52 3d 22 70 72 65 62 69 64 2f 61 75 64 69 74 22 2c 77 65 29 3b 66 75 6e 63 74 69 6f 6e 20 77 65 28 65 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 74 68 69 73 2e 61 75 64 69 74 4d 6f 64 65 3d 65 7d 76 61 72 20 62 65 3d 28 43 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 6e 64 45 76 65 6e 74 73 54 6f 42 65 61 63 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 26 26 65 26 26 6e 61 Data Ascii: ITEO_CSM_COUNTERS_HANDLER="csm/counters",we.CRITEO_ERROR_HANDLER="error",we.CRITEO_BIDDER_AUDIT_HANDLER="prebid/audit",we);function we(e){void 0===e&&(e=!1),this.auditMode=e}var be=(Ce.prototype.sendEventsToBeacon=function(e,t){navigator.sendBeacon&&e&&na
2024-03-18 16:22:08 UTC	16384	IN	Data Raw: 65 77 20 5a 65 28 74 74 2e 61 70 70 65 6e 64 55 73 65 72 53 79 6e 63 50 69 78 65 6c 73 2c 65 2c 6e 29 2e 72 65 74 72 69 65 76 65 50 69 78 65 6c 73 28 74 2c 69 29 7d 2c 74 74 2e 67 65 74 4f 72 43 72 65 61 74 65 54 61 67 43 6f 6e 74 61 69 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 74 2e 74 61 67 45 6c 65 6d 65 6e 74 4e 61 6d 65 29 3b 69 66 28 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 72 65 74 75 72 6e 20 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 74 74 2e 74 61 67 45 6c 65 6d 65 6e 74 4e 61 6d 65 29 2c 74 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d Data Ascii: ew Ze(tt.appendUserSyncPixels,e,n).retrievePixels(t,i)},tt.getOrCreateTagContainer=function(){var e=document.getElementById(tt.tagElementName);if(e)return e;var t=document.createElement("div");return t.setAttribute("id",tt.tagElementName),t.style.display=
2024-03-18 16:22:08 UTC	16384	IN	Data Raw: 2e 5f 5f 63 6d 70 4c 6f 63 61 74 6f 72 26 26 28 65 3d 74 29 7d 63 61 74 63 68 28 65 29 7b 7d 69 66 28 74 3d 3d 3d 74 68 69 73 2e 63 75 72 72 65 6e 74 57 69 6e 64 6f 77 2e 74 6f 70 29 62 72 65 61 6b 3b 74 3d 74 2e 70 61 72 65 6e 74 7d 72 65 74 75 72 6e 20 65 7d 2c 67 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 43 61 6c 6c 65 72 46 75 6e 63 74 69 6f 6e 49 6e 46 72 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 63 75 72 72 65 6e 74 57 69 6e 64 6f 77 2e 5f 5f 63 6d 70 7d 2c 67 74 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 61 64 79 54 6f 52 65 74 72 69 65 76 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 68 61 73 43 61 6c 6c 65 72 46 75 6e 63 74 69 Data Ascii: .__cmpLocator&&(e=t)}catch(e){}if(t===this.currentWindow.top)break;t=t.parent}return e},gt.prototype.hasCallerFunctionInFrame=function(){return"function"==typeof this.currentWindow.__cmp},gt.prototype.readyToRetrieve=function(){return this.hasCallerFuncti
2024-03-18 16:22:08 UTC	960	IN	Data Raw: 70 65 2e 6f 6e 45 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 68 61 73 52 65 73 70 6f 6e 64 65 64 3d 21 30 2c 74 68 69 73 2e 68 61 73 54 69 6d 65 6f 75 74 65 64 7c 7c 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b 45 72 72 6f 72 28 65 2c 74 29 7d 2c 4c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 48 74 74 70 54 69 6d 65 6f 75 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 68 61 73 52 65 73 70 6f 6e 64 65 64 3d 21 30 2c 74 68 69 73 2e 68 61 73 54 69 6d 65 6f 75 74 65 64 7c 7c 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b 54 69 6d 65 6f 75 74 28 29 7d 2c 4c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 54 69 6d 65 6f 75 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 68 61 73 52 65 73 70 6f 6e 64 65 64 7c 7c 28 74 68 69 73 2e 68 61 73 54 Data Ascii: pe.onError=function(e,t){this.hasResponded=!0,this.hasTimeouted\|\|this.callbackError(e,t)},Lt.prototype.onHttpTimeout=function(){this.hasResponded=!0,this.hasTimeouted\|\|this.callbackTimeout()},Lt.prototype.onTimeout=function(){this.hasResponded\|\|(this.hasT
2024-03-18 16:22:08 UTC	16384	IN	Data Raw: 64 20 30 2c 21 31 29 2e 73 65 6e 64 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 73 65 74 49 74 65 6d 28 69 2c 65 2c 38 36 34 65 35 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 5a 2e 45 72 72 6f 72 28 22 43 6f 75 6c 64 20 6e 6f 74 20 75 70 64 61 74 65 20 46 61 73 74 42 69 64 22 2b 28 74 3f 22 20 28 22 2b 74 2b 22 29 22 3a 22 22 29 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 74 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 63 61 74 63 68 28 65 29 7b 5a 2e 45 72 72 6f 72 28 22 45 78 63 65 70 74 69 6f 6e 20 63 61 75 67 68 74 3a 20 22 2b 65 2e 74 6f 53 74 72 69 6e 67 28 29 29 7d 7d 76 61 72 20 69 3d 65 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 Data Ascii: d 0,!1).send(function(e){t.setItem(i,e,864e5)},function(e,t){Z.Error("Could not update FastBid"+(t?" ("+t+")":""))})}function Nt(e){function t(){try{return i.apply(this,arguments)}catch(e){Z.Error("Exception caught: "+e.toString())}}var i=e;for(var n in t
2024-03-18 16:22:08 UTC	13673	IN	Data Raw: 66 72 6f 6d 41 6c 6c 53 74 6f 72 61 67 65 73 28 29 2e 68 61 73 56 61 6c 75 65 28 29 7d 2c 4f 69 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 6e 44 72 6f 70 53 79 6e 63 66 72 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 74 68 69 73 2e 77 69 6e 64 6f 77 2e 63 72 69 74 65 6f 5f 73 79 6e 63 66 72 61 6d 65 5f 73 74 61 74 65 2e 73 79 6e 63 66 72 61 6d 65 52 65 71 75 65 73 74 65 64 7d 2c 4f 69 2e 70 72 6f 74 6f 74 79 70 65 2e 64 69 73 63 61 72 64 4d 65 73 73 61 67 65 46 72 6f 6d 4f 74 68 65 72 46 72 61 6d 65 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 65 2e 64 61 74 61 7c 7c 65 2e 6f 72 69 67 69 6e 21 3d 74 68 69 73 2e 73 79 6e 63 66 72 61 6d 65 4f 72 69 67 69 6e 7d 2c 4f 69 2e 70 72 6f 74 6f 74 79 70 65 2e 61 70 70 65 6e 64 47 Data Ascii: fromAllStorages().hasValue()},Oi.prototype.canDropSyncframe=function(){return!this.window.criteo_syncframe_state.syncframeRequested},Oi.prototype.discardMessageFromOtherFrames=function(e){return!e.data\|\|e.origin!=this.syncframeOrigin},Oi.prototype.appendG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49840	209.54.182.161	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:08 UTC	870	OUT	GET /iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-mediagrid_n-adMediaV1_pm-db5_n-simpli.fi_n-baidu_n-Beeswax_ox-db5_smrt_n-inmobi_sovrn_3lift_n-Outbrain&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AylOXD6udEkArigs61cOqe8\|t
2024-03-18 16:22:08 UTC	827	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 18 Mar 2024 16:22:08 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 369 Connection: close x-amz-rid: 4E0MDS4CDVAANW3HQEZC Set-Cookie: ad-id=AylOXD6udEkArigs61cOqe8; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 16:22:08 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Apr-2029 16:22:08 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-18 16:22:08 UTC	369	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 72 63 3d 22 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 76 33 2f 70 72 3f 65 78 6c 69 73 74 3d 6e 2d 6d 65 64 69 61 67 72 69 64 5f 6e 2d 61 64 4d 65 64 69 61 56 31 5f 70 6d 2d 64 62 35 5f 6e 2d 73 69 6d 70 6c 69 2e 66 69 5f 6e 2d 62 61 69 64 75 5f 6e 2d 42 65 65 73 77 61 78 5f 6f 78 2d 64 62 35 5f 73 6d 72 74 5f 6e 2d 69 6e 6d 6f 62 69 5f 73 6f 76 Data Ascii: <html><body style="background-color:transparent"><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" src="//s.amazon-adsystem.com/v3/pr?exlist=n-mediagrid_n-adMediaV1_pm-db5_n-simpli.fi_n-baidu_n-Beeswax_ox-db5_smrt_n-inmobi_sov

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49841	44.205.216.19	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:08 UTC	618	OUT	POST /6/map HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive Content-Length: 439 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://browser-update.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:08 UTC	439	OUT	Data Raw: 7b 22 72 22 3a 7b 22 72 69 64 22 3a 74 72 75 65 7d 2c 22 6d 22 3a 7b 22 64 63 63 22 3a 31 36 35 38 39 2c 22 73 72 63 22 3a 22 53 59 4e 43 4a 53 22 2c 22 63 68 22 3a 7b 22 62 72 61 6e 64 73 22 3a 5b 7b 22 62 72 61 6e 64 22 3a 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 31 37 22 7d 2c 7b 22 62 72 61 6e 64 22 3a 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 38 22 7d 2c 7b 22 62 72 61 6e 64 22 3a 22 43 68 72 6f 6d 69 75 6d 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 31 37 22 7d 5d 2c 22 66 75 6c 6c 56 65 72 73 69 6f 6e 4c 69 73 74 22 3a 5b 7b 22 62 72 61 6e 64 22 3a 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 7d Data Ascii: {"r":{"rid":true},"m":{"dcc":16589,"src":"SYNCJS","ch":{"brands":[{"brand":"Google Chrome","version":"117"},{"brand":"Not;A=Brand","version":"8"},{"brand":"Chromium","version":"117"}],"fullVersionList":[{"brand":"Google Chrome","version":"117.0.5938.132"}
2024-03-18 16:22:08 UTC	650	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:08 GMT Content-Type: application/json;charset=utf-8 Content-Length: 156 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.14.91 Set-Cookie: _cc_dc=0;Path=/;Domain=crwdcntrl.net;Expires=Fri, 13-Dec-2024 16:12:00 GMT;SameSite=None;Secure Set-Cookie: _cc_id=cd7195d98b33730cda0d063b9003130e;Path=/;Domain=crwdcntrl.net;Expires=Fri, 13-Dec-2024 16:12:00 GMT;SameSite=None;Secure Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://browser-update.org Server: Jetty(9.4.38.v20210224)
2024-03-18 16:22:08 UTC	156	IN	Data Raw: 7b 22 70 69 64 22 3a 22 63 64 37 31 39 35 64 39 38 62 33 33 37 33 30 63 64 61 30 64 30 36 33 62 39 30 30 33 31 33 30 65 22 2c 22 63 22 3a 5b 7b 22 6b 22 3a 22 5f 63 63 5f 69 64 22 2c 22 76 22 3a 22 63 64 37 31 39 35 64 39 38 62 33 33 37 33 30 63 64 61 30 64 30 36 33 62 39 30 30 33 31 33 30 65 22 2c 22 65 22 3a 32 33 33 32 38 30 30 30 7d 5d 2c 22 69 64 73 22 3a 5b 7b 22 63 22 3a 22 63 6f 72 65 22 2c 22 65 22 3a 22 31 37 31 30 38 36 35 33 32 38 38 32 39 22 7d 5d 7d Data Ascii: {"pid":"cd7195d98b33730cda0d063b9003130e","c":[{"k":"_cc_id","v":"cd7195d98b33730cda0d063b9003130e","e":23328000}],"ids":[{"c":"core","e":"1710865328829"}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49845	130.211.23.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:08 UTC	570	OUT	GET /mw/state?bt_env=prod HTTP/1.1 Host: api.btloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://browser-update.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:08 UTC	203	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Vary: Origin Date: Mon, 18 Mar 2024 16:22:08 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49844	104.26.2.70	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:08 UTC	588	OUT	GET /px.gif?ch=2 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:08 UTC	1216	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:08 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPof8oVZy8f-YawZYTApO5mAq3xTkpTgU5AAGDdN2ngyWVPi1E3pZwAWofBj9c1HY-4-Yxw x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Tue, 19 Mar 2024 16:22:08 GMT Cache-Control: public, max-age=86400 Age: 35 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xvJSXxmfP2bps8ycGWdMrdnSW0mQWWwjD987Z1VVU3MAwBnAdwRJ2sOJwU1slDK8EvEXiyfgRUDAIC0cfuGUm6sZsKN2lph8HL9qOmgcj4ayq8YmKrbz43ZZ2asFKF%2B%2Byw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f514daa7cae-EWR
2024-03-18 16:22:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49842	142.251.40.230	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:08 UTC	739	OUT	GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:09 UTC	746	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Content-Length: 1078 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 18 Mar 2024 04:27:29 GMT Expires: Tue, 19 Mar 2024 04:27:29 GMT Cache-Control: public, max-age=86400 Age: 42879 Last-Modified: Tue, 08 May 2012 13:08:06 GMT Content-Type: image/x-icon Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:09 UTC	506	IN	Data Raw: 00 00 01 00 02 00 10 10 10 00 00 00 00 00 28 01 00 00 26 00 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 4e 01 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 04 00 00 00 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii: (& N(
2024-03-18 16:22:09 UTC	572	IN	Data Raw: 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49847	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:08 UTC	559	OUT	GET /static/img/big/c.png HTTP/1.1 Host: browser-update.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770
2024-03-18 16:22:09 UTC	681	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:09 GMT Content-Type: image/png Content-Length: 26933 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=c.png last-modified: Sun, 01 Aug 2021 16:06:48 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wddxserwmW6UnjFv%2B4b5Ldy39HX0EXmq6wekEN7Ytt1GWL%2F%2Fblq3jc6xcSjpMNQTHQLJHGz9rkTmv4cN%2B4fVWYBGSOISE5PJLFLBa7lX%2FeNK2EN1NDT2U8sxAaM4s8LhxPhLVg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f520e477d20-EWR
2024-03-18 16:22:09 UTC	688	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 06 00 00 00 5c 72 a8 66 00 00 68 fc 49 44 41 54 78 01 ec d4 35 76 03 31 10 c6 f1 19 69 9f eb e0 11 7c 05 5f 20 54 86 99 99 99 99 f1 8c 61 8d dd 05 0e 10 4b 99 7d db 86 9a f0 f7 7b fe 6b 77 05 a5 45 7f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 30 fd 19 e0 a6 06 98 98 89 d8 30 29 56 14 33 86 28 04 a6 0f 09 fa d3 98 03 79 9f cc a8 e4 c5 eb 5c 48 36 fd 09 c0 6e a2 8f 7e 11 b0 96 c9 18 8e 91 a6 ef c4 c6 06 53 58 ec bf ec 8f e9 f3 ec 1f ef 4d 78 ca 33 79 4f 14 12 3a 1f 70 39 fc 32 7a 01 fc d4 d0 f4 10 cb dc 88 95 f9 d1 48 96 26 6c 6e 77 85 35 7a ad 8b ba 8a d4 ed 48 67 a9 9b 1c 48 eb d9 8c 9e ad 92 b9 d1 66 59 18 1f d4 e7 9c cc 8f 6d 64 17 26 f6 b4 a3 ec e2 c4 a9 76 96 a4 ef 3a a7 ed c5 Data Ascii: PNGIHDR\rfhIDATx5v1i\|_ TaK}{kwE00)V3(y\H6n~SXMx3yO:p92zH&lnw5zHgHfYmd&v:
2024-03-18 16:22:09 UTC	1369	IN	Data Raw: 08 11 88 f7 2a 3e 53 a9 54 20 95 2a e6 cf b3 44 e7 00 75 73 10 3e 42 e2 3d 30 7b 33 8b ce 3b f2 67 9f 79 a2 5f f0 6a 17 5d 2a ec b4 1d 42 b4 e3 eb 0e 4a 48 9a 17 51 e2 d5 2e fa 4c e1 bd 6a 7d 24 f6 77 bb b0 77 cf e9 5a ad 5d 0d e7 6e 05 70 2d c8 ad 88 c1 77 0b dc 3a 1d b0 dd 42 2a 0c b2 08 11 16 05 a4 40 20 80 08 44 8e 28 6c f6 9d 2c 0a c8 97 d8 38 62 ef 76 3d 82 09 a0 88 10 aa ec 3e 6f a9 d6 12 ab d0 5a 6d 5e 14 e0 7d 80 c8 e3 00 de 8c 18 1f b0 76 eb cd 00 76 e1 20 fc 09 a7 88 b5 e6 1c 43 28 c5 e0 b8 38 80 57 45 00 4a a8 f7 8a 2e ab b5 5e d1 b7 de f2 9f 5a bb fc 0d 17 8b cf 3e 16 22 1f 0b f2 0d 88 71 84 79 07 c9 2a 83 ed 66 b7 f0 23 42 20 c8 83 43 38 e4 70 a1 cb d0 02 27 89 45 05 79 8c b7 93 41 71 e0 3c 05 06 ef 45 ab 55 27 b5 11 24 31 44 57 18 e0 5c 0b Data Ascii: >ST Dus>B=0{3;gy_j]BJHQ.Lj}$wwZ]np-w:B@ D(l,8bv=>oZm^}vv C(8WEJ.^Z>"qy*f#B C8p'EyAq<EU'$1DW\
2024-03-18 16:22:09 UTC	1369	IN	Data Raw: ba 4d 27 89 64 d9 9b 99 77 be 0e c0 87 b4 36 e2 d8 e9 ac c9 43 8b 55 9c c7 9a 61 b5 26 ae d1 70 10 b1 ce 63 0f 2b 63 f8 11 c9 2a ef 49 45 7f 6d fe dc 33 31 4c 4f 01 aa 0e c3 bb 7e d9 b5 57 aa 1b 52 95 44 17 a6 a6 90 3f fd 64 4c d9 ce 35 dd f7 3e f1 47 3b 8f 3f ea d2 fb 6f 10 71 0c 85 24 62 ad 50 d7 ca 13 95 5a 55 75 64 44 e1 b3 c8 18 5f 5f d9 b2 ed 5d cc f3 1f 2e 76 3d a7 69 d6 8f 88 d1 89 f7 b2 1a 3e f8 c3 83 c0 12 e2 bd c0 cc 15 e3 bb 63 f1 dc b3 ca 4e e7 87 2a 9b b7 bc 2b 3b f3 ac d7 d3 62 d4 91 51 85 f7 5d 62 2d 70 4d 3c 51 49 5d 9f 22 36 7d c7 1d 84 c5 1f 10 ef df 96 ec fe 65 dd ae 6f cd a6 a6 eb 0e 22 00 59 76 f7 d5 ee 74 48 40 04 e2 bd b3 e6 01 cd 9f 79 2a c6 bd 2f 5c 2a ce bf 4d 7c f6 83 fb ef fb 67 1e f8 ef bb 4c 20 4e b0 fa ff 49 21 e0 6b 57 ed Data Ascii: M'dw6CUa&pc+cIEm31LO~WRD?dL5>G;?oq$bPZUudD__].v=i>cN+;bQ]b-pM<QI]"6}eo"YvtH@y/\M\|gL NI!kW
2024-03-18 16:22:09 UTC	1369	IN	Data Raw: 00 77 80 8c 2f d3 09 94 0e e0 80 8a 92 8c 34 3b 1d ea ee cc 27 27 4e 4b 73 56 14 e7 95 03 81 5e af d8 85 20 13 7b 35 cd 61 2e 60 30 10 ec 81 2b 2b 10 2c 41 2c 2b 87 d3 97 09 74 77 07 4e 83 ea 1d a4 9d 9e 18 41 6a 29 00 0b e0 1c 28 8c d1 ac d5 6a 48 96 fd 73 b1 67 72 4b 31 3d 1d e1 bd eb ab ee c1 5e 0f f6 ee 03 83 ee 60 f0 c2 80 3d 1e b8 cf 63 69 66 64 39 47 97 0e e7 c8 dd 81 99 a9 18 26 27 b6 8a cf fe 19 79 3e c6 bc 63 34 93 44 2c 27 ba 6f 7d fd 65 cb a7 f8 69 e2 1a 1b f0 f0 2f ff 8e 9c 7c c3 d5 ff 50 bc b0 e7 c6 c4 20 de fb 23 5c 9f 00 02 19 74 81 bd f5 83 3f 89 3d d5 ee ad f7 ff 3b d2 77 d2 7f db de 3a 8f d1 65 96 28 77 07 9c 53 6b ce 05 11 39 cb ad 3f e1 d2 5d bf f5 27 7f b3 fe 86 6b c1 76 4b 96 97 03 88 11 cb 85 6e ac a1 b0 c0 0b be fd 6b 7f 2d 4c 4f Data Ascii: w/4;''NKsV^ {5a.`0++,A,+twNAj)(jHsgrK1=^`=cifd9G&'y>c4D,'o}ei/\|P #\t?=;w:e(wSk9?]'kvKnk-LO
2024-03-18 16:22:09 UTC	1369	IN	Data Raw: 3a 3d b7 df ff a1 9f ed e9 e7 6f 59 b5 c8 d6 ab 01 2a 02 b8 22 5b 32 78 93 01 9b 21 23 bb 13 c4 ba 01 23 d3 b6 a0 26 fd 2c 2c d8 7c 08 80 ba cb 6d 27 08 aa 36 d8 32 90 d7 f1 f1 0f 37 9d 66 03 91 36 9d 1d ed 66 47 9f e0 25 ff fb 60 6f 59 71 91 ae ee 5c 72 c1 d6 f1 91 93 36 d4 c7 c2 bf 1e bb b7 19 b0 4a 45 15 51 c0 81 b5 ea 74 82 60 02 0b 60 3a 16 a0 80 45 a7 ea 1f 80 14 16 a0 6e c1 91 53 af 34 0f d9 7f 17 a4 ff 0b 4b 81 f1 30 18 da 7a 92 14 0a 17 e4 76 df 43 fd d5 6b bc a6 b3 23 dd ec c8 83 bf e4 9c 87 4b 60 c3 b0 27 d7 b1 72 a4 5e 7e db 40 75 8c 7c 2d 30 37 f4 77 71 e3 01 ab 18 2a d5 69 88 93 a5 1d 91 6d 5a 41 70 f2 35 65 ed ee f0 88 c4 bb 03 27 f7 09 44 63 c9 8c 44 17 58 c0 0c 23 e0 82 e9 34 4b 81 ad 83 ad 5d 01 c9 17 56 98 ae ee 50 c3 50 9a ce 8e 72 b3 Data Ascii: :=oY"[2x!##&,,\|m'627f6fG%`oYq\r6JEQt``:EnS4K0zvCk#K`'r^~@u\|-07wqimZAp5e'DcDX#4K]VPPr
2024-03-18 16:22:09 UTC	1369	IN	Data Raw: 3d 48 3e 87 88 d9 26 9c aa 8d 09 a8 00 ea 5c 85 62 22 6d 58 50 b5 68 58 c7 d6 c6 08 ca 9b 68 0c df 45 6d f0 46 1a 83 37 60 47 ee a2 39 80 e7 19 8c 5f 44 4c 2e a6 a3 90 1c 00 4c 2c 00 38 7f 9f 10 cd 4d 04 b7 7b cd 48 fb 78 89 28 17 8d 1d 47 24 31 21 20 ce b9 04 68 07 84 f8 3c f7 14 e2 02 58 1c 10 eb 64 f2 d0 84 df 5d 80 96 3b 87 93 e8 3a 15 45 62 93 45 03 ab fe 12 a3 85 fe a7 03 17 a2 f5 39 65 01 12 fc e7 b9 cc a5 d5 8e f8 bc 79 dc 6f de fb 9f 66 00 58 67 55 2d 60 a6 7b b6 a3 58 4b d0 dd c9 a9 d7 6d e5 94 df dc 8c df 9d 27 a7 8a 05 0a 11 13 98 04 d6 76 2c 05 14 10 92 c1 4e c6 a7 0a a9 c6 97 02 6e 10 88 05 29 41 64 6e c0 6f 44 c0 18 2a 41 c0 68 b9 cc 78 10 62 96 2e a7 e7 a0 43 59 bc ee 68 7a 0e 3c 84 c2 aa d5 78 1d 1d a8 55 34 68 34 3d 40 c3 10 8d ab a8 ce Data Ascii: =H>&\b"mXPhXhEmF7`G9_DL.L,8M{Hx(G$1! h<Xd];:EbE9eyofXgU-`{XKm'v,Nn)AdnoD*Ahxb.CYhz<xU4h4=@
2024-03-18 16:22:09 UTC	1369	IN	Data Raw: b1 c7 5e 84 95 71 6c bd ee 02 fe bf c4 14 55 8b f1 f2 48 ae 93 da d6 3b 19 be f6 2b 34 ee fd 15 1d 79 83 57 e8 44 6d 88 82 c3 00 26 b3 ab ba 3b 09 f1 25 9f 80 20 ce 32 c1 3a 4b 83 38 8d 97 96 c7 8e 97 80 e9 e8 fc 46 40 41 d4 89 02 06 8c 01 af e5 12 65 7c e2 e6 88 92 92 9c 39 64 ba a2 23 49 98 2b 8a 86 22 85 65 55 ba 1f 7c 38 70 0b f5 e1 ed 66 01 12 5e 76 16 db 63 67 6c ec f7 80 30 67 fc f7 34 f7 fd df 58 09 ea a1 11 f1 04 99 6d 2e 21 04 96 f9 45 ce f9 de 35 2c 1f ae b4 2e 98 f8 7a 5e 81 bc c0 a2 76 10 48 14 04 dd 6d a0 14 ca ef d4 06 c4 46 dc 20 30 f5 0e 82 b4 03 07 d9 b6 05 01 63 0c f5 d0 b2 69 68 08 b3 f7 be ec 79 ee 0b 58 fc b0 47 10 d6 eb d8 6a 75 87 00 5f dd 1f 5c 6a bb a3 02 81 5f 44 bc 02 a5 7b fe c6 f0 95 9f c2 2b df 42 47 d7 a2 c9 c2 22 57 08 94 Data Ascii: ^qlUH;+4yWDm&;% 2:K8F@Ae\|9d#I+"eU\|8pf^vcgl0g4Xm.!E5,.z^vHmF 0cihyXGju_\j_D{+BG"W
2024-03-18 16:22:09 UTC	1369	IN	Data Raw: 1b 47 20 b0 93 f4 df 33 09 12 93 c6 8f 95 7c b1 b9 9f 09 ec e4 32 c0 33 b0 b2 17 0e ef 57 1e b9 af 72 d0 83 94 ce e8 77 09 62 f7 ae c9 6c 6a 41 3c 4c be 8b e1 eb be c6 d8 75 9f a6 bb bb 13 cf 78 a8 86 20 a4 04 00 89 02 ac 22 28 0a 48 6c 09 e4 fb 32 f1 ea 09 62 40 62 4c 4e d3 97 da 09 80 97 b4 79 29 f8 96 ec 1d 9d 2e e0 13 4d b7 89 81 74 3c e8 0d c0 fb b1 81 07 84 b3 d4 00 9e ce f6 d8 71 f7 ef 7e d9 fa f1 ad eb 04 2c 60 98 63 13 ab 04 dd 1d 9c 71 ed 56 4e fd ed 4d f8 91 20 d8 86 77 7c 0b 50 81 7c 8b 09 b8 60 77 fb 04 48 67 01 49 4d 41 2a b1 62 93 0c 82 a0 b4 33 af 47 3d 0c d8 58 a9 b1 c7 4b 5f c3 aa 47 3d 96 c6 c8 c8 8c 85 3e 1b 01 bf 33 0f 83 65 f8 fb ad c2 1f 6e 12 ee d8 2c 34 c2 68 dd ee 81 b8 e0 9e a3 2e d7 38 6b 68 84 50 6b 4c 9c 6f 9f 15 ca 29 07 2a Data Ascii: G 3\|23WrwbljA<Lux "(Hl2b@bLNy).Mt<q~,`cqVNM w\|P\|`wHgIMAb3G=XK_G=>3en,4h.8khPkLo)
2024-03-18 16:22:09 UTC	1369	IN	Data Raw: 02 d1 b1 8d 31 8c 0d 8f 22 47 1c cd 83 5f f0 b2 d6 56 9f 88 64 ce fc 8b 3a 68 6d e7 bd ee 12 8f 2b ee 11 7a 3b 01 e6 15 fc db 5d 95 d8 d7 09 57 dc 2d ad 02 a4 ab ef 15 7a 3b 66 50 40 24 82 06 65 0a 07 be 9c a0 f7 61 94 5b c1 d4 8b 57 c6 c4 3d 66 ee b8 38 4e 7a b1 4d ec 16 5d c4 7c 4a 13 d7 c5 71 a6 76 6d bb d3 99 68 24 f5 bb 49 cb 45 44 03 08 2b 67 34 1d 36 fd d4 36 9d 99 b8 99 c9 e4 47 6d 38 40 ce 38 e4 4c 7d ce d1 4f df bd 12 d4 8f b2 6a 53 e3 ee 5c 07 03 05 bc 50 d9 9c 0b f9 c7 31 7b 61 1b 21 75 40 d4 4e ce d0 f8 cd 61 14 24 5a 3e 28 94 23 a0 4a 04 fa 6c 0f 18 c5 19 9f a2 ab 4f 84 7a ad 4a 69 e9 0a d6 be fa 8d 88 08 1a 86 20 92 0d fc 45 f8 ed 0d c2 db 7f 6c 18 1a 87 9e 22 84 96 74 9b 7f ea 9f 99 d5 0c 8d d3 aa 30 fc f5 f5 c2 a2 62 d6 20 20 51 c6 17 0a Data Ascii: 1"G_Vd:hm+z;]W-z;fP@$ea[W=f8NzM]\|Jqvmh$IED+g466Gm8@8L}OjS\P1{a!u@Na$Z>(#JlOzJi El"t0b Q
2024-03-18 16:22:09 UTC	1369	IN	Data Raw: 5d 2c fb bb 66 04 c6 aa ca ba 3d e1 5d 8f b7 34 c2 8c bb 02 f9 3e ea b7 7d 16 b9 f7 2b f4 b6 0a 84 6c 42 0d 48 86 be 1b c9 da d3 af c8 ec af f0 99 17 12 25 0b 58 29 3d d5 6a f0 16 cd b8 3b 50 ec 95 8f 9e be f7 ff 81 c3 05 d0 55 9d 7d ab ae 18 b8 f3 96 52 a3 ba c8 38 f7 fe 9b d7 40 60 2d 7e 4f 0f cf f9 e5 ed 1c 7a fd 7a 0a f1 3e 01 37 08 98 58 25 60 7c 23 49 c0 07 3a 8d 41 d0 d4 e7 05 22 02 41 c8 58 4f 2f 07 7c f2 2b e4 17 2d 42 83 f4 b5 7f 68 a1 b7 03 be fb 9f 09 d1 af b7 73 01 fc 6d 5d c6 33 13 9d 8e e7 1f a7 3c eb e1 ca 48 65 ba 6a 41 05 f1 a1 31 4a f5 f2 f3 e9 ce 8d 52 2c e4 50 d5 e4 ad 1d 17 80 a9 d5 75 19 f0 96 a5 3f 28 bd a7 3f 5b 6f b0 68 d6 d3 2b 58 c1 eb 1c a1 eb e0 fd 80 4d 34 06 32 dd 2b 50 9a eb fb e9 7b fe 6f 6f 97 ff 7a 27 de 5f 1a fc 63 2d Data Ascii: ],f=]4>}+lBH%X)=j;PU}R8@`-~Ozz>7X%`\|#I:A"AXO/\|+-Bhsm]3<HejA1JR,Pu?(?[oh+XM42+P{ooz'_c-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49848	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:08 UTC	631	OUT	GET /cnt?what=view&cv=base&tv=0&ref=iwu.marketing&from=c&fromv=117&dice=47&rnd=0.8140456435354542 HTTP/1.1 Host: browser-update.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770
2024-03-18 16:22:09 UTC	552	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:09 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NH8bPwS6Q7DuUODnteAD3Qyo0eMEuQI3R6BzFi0x4WWqXkDn6AuAcN0c%2BWFsZvA%2FJ54Gxe%2FIUw343mW6%2B0e3SeGLTZxcqUQyGX9ZyzppuMvcBj2UoFhBTFWFMuYixY1q84yM2w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f527c8d17b5-EWR
2024-03-18 16:22:09 UTC	11	IN	Data Raw: 36 0d 0a 6f 6b 76 69 65 77 0d 0a Data Ascii: 6okview
2024-03-18 16:22:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49852	151.101.193.229	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:08 UTC	391	OUT	GET /gh/prebid/currency-file@1/latest.json?date=20240318 HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:09 UTC	744	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1595 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/json; charset=utf-8 X-JSD-Version: 1.0.1999 X-JSD-Version-Type: version ETag: W/"63b-AW42c0NMEzihSdFfGxlMz19C+r0" Accept-Ranges: bytes Date: Mon, 18 Mar 2024 16:22:09 GMT Age: 1280 X-Served-By: cache-fra-eddf8230103-FRA, cache-lga21982-LGA X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-03-18 16:22:09 UTC	1378	IN	Data Raw: 7b 22 64 61 74 61 41 73 4f 66 22 3a 22 32 30 32 34 2d 30 33 2d 31 38 54 30 30 3a 30 30 3a 30 30 2e 30 30 30 5a 22 2c 22 67 65 6e 65 72 61 74 65 64 41 74 22 3a 22 32 30 32 34 2d 30 33 2d 31 38 54 31 36 3a 30 30 3a 33 35 2e 36 36 34 5a 22 2c 22 63 6f 6e 76 65 72 73 69 6f 6e 73 22 3a 7b 22 55 53 44 22 3a 7b 22 55 53 44 22 3a 31 2c 22 4a 50 59 22 3a 31 34 39 2e 32 30 31 32 34 38 36 32 32 38 34 32 34 36 2c 22 42 47 4e 22 3a 31 2e 37 39 35 36 32 39 38 32 30 30 35 31 34 31 34 2c 22 43 5a 4b 22 3a 32 33 2e 31 33 36 32 34 36 37 38 36 36 33 32 33 39 2c 22 44 4b 4b 22 3a 36 2e 38 34 36 35 38 34 36 34 39 32 38 33 38 37 38 2c 22 47 42 50 22 3a 30 2e 37 38 35 32 30 39 33 32 37 39 34 37 31 31 37 32 2c 22 48 55 46 22 3a 33 36 32 2e 36 30 35 35 38 32 30 37 38 35 38 39 38 Data Ascii: {"dataAsOf":"2024-03-18T00:00:00.000Z","generatedAt":"2024-03-18T16:00:35.664Z","conversions":{"USD":{"USD":1,"JPY":149.20124862284246,"BGN":1.795629820051414,"CZK":23.13624678663239,"DKK":6.846584649283878,"GBP":0.7852093279471172,"HUF":362.6055820785898
2024-03-18 16:22:09 UTC	217	IN	Data Raw: 22 3a 31 36 39 38 2e 36 32 36 31 33 32 37 30 39 37 33 34 2c 22 4d 58 4e 22 3a 32 31 2e 33 30 34 35 33 30 38 33 38 39 33 35 39 38 35 2c 22 4d 59 52 22 3a 36 2e 30 30 39 32 33 37 30 36 35 31 38 35 36 31 38 2c 22 4e 5a 44 22 3a 32 2e 30 39 30 37 33 33 37 30 33 35 39 35 34 34 2c 22 50 48 50 22 3a 37 30 2e 38 30 39 37 30 34 37 36 34 36 38 38 36 39 2c 22 53 47 44 22 3a 31 2e 37 30 34 31 38 30 30 36 34 33 30 38 36 38 31 37 2c 22 54 48 42 22 3a 34 35 2e 38 30 32 39 38 31 35 38 34 33 33 32 30 37 2c 22 5a 41 52 22 3a 32 34 2e 30 37 30 30 33 38 30 30 30 35 38 34 36 32 34 2c 22 45 55 52 22 3a 31 2e 31 36 39 32 34 38 37 35 37 36 37 33 31 39 35 31 7d 7d 7d Data Ascii: ":1698.626132709734,"MXN":21.304530838935985,"MYR":6.009237065185618,"NZD":2.09073370359544,"PHP":70.80970476468869,"SGD":1.7041800643086817,"THB":45.80298158433207,"ZAR":24.070038000584624,"EUR":1.1692487576731951}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49843	104.26.2.70	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:08 UTC	610	OUT	GET /px.gif?ch=1&e=0.49315834659810265 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:09 UTC	1228	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:09 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPof8oVZy8f-YawZYTApO5mAq3xTkpTgU5AAGDdN2ngyWVPi1E3pZwAWofBj9c1HY-4-Yxw x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Wed, 13 Mar 2024 16:05:51 GMT Cache-Control: public, max-age=86400 Age: 434957 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SwqQcg7HtltDL1R8%2FKyjBLKjVOdrmmUbrmfv56TmwS4sdYeJRrF%2FexI9beOS%2BVPYsw5cUcsWwWjA5WunV04aIE9QWAHOF%2Fy17S%2BnmcvXTTB3nEUQ%2Bj9DltTMKrKke5Zqtg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f52ec06c339-EWR
2024-03-18 16:22:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49859	18.164.117.3	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:09 UTC	1507	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&pid=dELdySLbcyIwE&cb=0&ws=1280x907&v=24.305.1002&t=2000&slots=%5B%7B%22sd%22%3A%22fuse-slot-22728807289-1%22%2C%22s%22%3A%5B%22300x250%22%2C%22336x280%22%5D%2C%22sn%22%3A%22%2F71161633%2C1007669%2FBROWUPD_browserupdate%2Fupdate_vrec_1%22%7D%2C%7B%22sd%22%3A%22fuse-slot-22728806944-1%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%5D%2C%22sn%22%3A%22%2F71161633%2C1007669%2FBROWUPD_browserupdate%2Fsticky_footer%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22mobile%22%3A0%2C%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1!publift.com%2C01FY417JCJKFQDQNA30FCX4RZF%2C1%2C%2C%2C&sm=f401e106-9815-45f3-82fa-11a4f7f4db10&pubid=8b48e249-e9e6-4a52-8b48-396ea93403e8&gdprl=%7B%22status%22%3A%22no-cmp%22%2C%22cmpTimeout%22%3A0%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AylOXD6udEkArigs61cOqe8\|t
2024-03-18 16:22:09 UTC	354	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 199 Connection: close Date: Mon, 18 Mar 2024 16:22:08 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 b33e91c066f49dc7c18162b9a344e266.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: 0XMW0541YyEtIaFx912eva95Qd1kQzuVrIlRQqO4Gt0WodNwhPHxDg==
2024-03-18 16:22:09 UTC	199	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 6d 70 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 69 75 33 3f 63 6d 33 70 70 64 3d 31 26 64 3d 64 74 62 2d 70 75 62 26 63 73 69 66 3d 74 26 64 6c 3d 6e 2d 6d 65 64 69 61 67 72 69 64 5f 6e 2d 61 64 4d 65 64 69 61 56 31 5f 70 6d 2d 64 62 35 5f 6e 2d 73 69 6d 70 6c 69 2e 66 69 5f 6e 2d 62 61 69 64 75 5f 6e 2d 42 65 65 73 77 61 78 5f 6f 78 2d 64 62 35 5f 73 6d 72 74 5f 6e 2d 69 6e 6d 6f 62 69 5f 73 6f 76 72 6e 5f 33 6c 69 66 74 5f 6e 2d 4f 75 74 62 72 61 69 6e 22 2c 22 63 62 22 3a 22 30 22 7d 29 Data Ascii: apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-mediagrid_n-adMediaV1_pm-db5_n-simpli.fi_n-baidu_n-Beeswax_ox-db5_smrt_n-inmobi_sovrn_3lift_n-Outbrain","cb":"0"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49854	3.222.162.217	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:09 UTC	507	OUT	GET /header/auction?lib=prebid&v=8.5.0&referrer=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&tmax=1500 HTTP/1.1 Host: tlx.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3712186363653833678472
2024-03-18 16:22:09 UTC	426	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:09 GMT Content-Type: application/json; charset=utf-8 Content-Length: 19 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 15 Oct 1992 20:10:00 GMT Pragma: no-cache X-XSS-Protection: 0 Set-Cookie: receive-cookie-deprecation=1; Secure; HttpOnly; Path=/; Domain=.3lift.com; SameSite=None; Partitioned; Max-Age=7776000 x-auction-status: 5
2024-03-18 16:22:09 UTC	19	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6e 6f 5f 62 69 64 22 7d Data Ascii: {"status":"no_bid"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49857	44.210.155.144	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:09 UTC	784	OUT	GET /hbid/imp?lt=1710778925845&to=-60&aun=fuse-slot-22728807289-1&gpid=%2F71161633%2C1007669%2FBROWUPD_browserupdate%2Fupdate_vrec_1%23single-1&t=282943&pi=2&schain=1.0%2C1!publift.com%2C01FY417JCJKFQDQNA30FCX4RZF%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.5.0%22%7D&ogu=null&ns=6963 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true
2024-03-18 16:22:09 UTC	452	IN	HTTP/1.1 200 Date: Mon, 18 Mar 2024 16:22:09 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 2 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Tue, 18 Mar 2025 16:22:09 GMT; Path=/; Secure; SameSite=None Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Timing-Allow-Origin: *
2024-03-18 16:22:09 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49855	44.210.155.144	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:09 UTC	784	OUT	GET /hbid/imp?lt=1710778925844&to=-60&aun=fuse-slot-22728806944-1&gpid=%2F71161633%2C1007669%2FBROWUPD_browserupdate%2Fsticky_footer%23single-1&t=282948&pi=2&schain=1.0%2C1!publift.com%2C01FY417JCJKFQDQNA30FCX4RZF%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.5.0%22%7D&ogu=null&ns=6963 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true
2024-03-18 16:22:09 UTC	452	IN	HTTP/1.1 200 Date: Mon, 18 Mar 2024 16:22:09 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 2 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Tue, 18 Mar 2025 16:22:09 GMT; Path=/; Secure; SameSite=None Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Timing-Allow-Origin: *
2024-03-18 16:22:09 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49853	18.238.48.238	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:09 UTC	413	OUT	GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AylOXD6udEkArigs61cOqe8\|t
2024-03-18 16:22:09 UTC	611	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6482 Connection: close Date: Mon, 18 Mar 2024 16:22:10 GMT Last-Modified: Thu, 29 Feb 2024 02:13:08 GMT ETag: "a4d296427fc806b21335359e398c025c" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 x-amz-version-id: r5.lR.LJ66XEXzxUUVo7iMemjL_F_GoE Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 83f903d51f378add519d351aa3b07052.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: wk3gnmwm-1M_MFtl3LarRGDxo1f5j4SwbenW1JKieulx8Jfa9PALBw==
2024-03-18 16:22:09 UTC	6482	IN	Data Raw: 76 61 72 20 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 3d 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 7c 7c 7b 7d 3b 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 3d 5b 5d 2c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 72 65 70 6f 72 74 45 72 72 6f 72 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3b 66 6f 72 28 2f 5e 68 74 74 70 73 3f 3a 5c 2f 5c 2f 2f 2e 74 65 73 74 28 61 29 3d 3d 3d 21 31 26 26 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 61 29 2c 22 2f 22 21 3d 3d 61 2e 73 75 62 73 74 72 28 61 2e 6c 65 6e 67 74 68 2d 31 29 26 26 28 61 2b 3d 22 2f 22 29 2c 62 3d 30 3b 62 3c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 63 3d 27 7b 22 61 64 Data Ascii: var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"ad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49861	68.67.179.153	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:09 UTC	437	OUT	GET /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: icu=ChgIs8t_EAoYASABKAEwr9ThrwY4AUABSAEQr9ThrwYYAA..; uuid2=9164480480629189644
2024-03-18 16:22:09 UTC	1362	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Mon, 18 Mar 2024 16:22:09 GMT Content-Type: application/json; charset=utf-8 Content-Length: 57 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 16133d13-3a85-432b-ad68-144a899dab8a Set-Cookie: XANDR_PANID=gRB6KyCcZleAfaHINqpefv-ObMdz1uYjX-lpqAripXKungJl-Oa4bpHpO_TfhXWvNEpvhhTCdmIv4ffH5L4BxxqQZOo4jIf5izYZ1ByqPtI.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 16-Jun-2024 16:22:09 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 06-Mar-2034 16:22:09 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=9164480480629189644; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 16-Jun-2024 16:22:09 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 191.96.227.194; 191.96.227.194; 570.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-03-18 16:22:09 UTC	57	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6a 73 6f 6e 70 20 72 65 71 75 69 72 65 73 20 61 20 75 72 69 65 6e 63 6f 64 65 64 20 71 75 65 72 79 73 74 72 69 6e 67 20 70 61 72 61 6d 22 7d Data Ascii: {"error":"jsonp requires a uriencoded querystring param"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49860	34.120.63.153	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:09 UTC	364	OUT	GET /rtb/prebid?cid=8CU995W35 HTTP/1.1 Host: prebid.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:09 UTC	357	IN	HTTP/1.1 204 No Content content-type: text/html;charset=utf-8 content-language: en Content-Length: 0 date: Mon, 18 Mar 2024 16:22:08 GMT x-envoy-upstream-service-time: 0 server: envoy Via: 1.1 google Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49862	209.54.182.161	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:09 UTC	1030	OUT	GET /v3/pr?exlist=n-mediagrid_n-adMediaV1_pm-db5_n-simpli.fi_n-baidu_n-Beeswax_ox-db5_smrt_n-inmobi_sovrn_3lift_n-Outbrain&fv=1.0&a=cm&cm3ppd=1&dmt=3 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-mediagrid_n-adMediaV1_pm-db5_n-simpli.fi_n-baidu_n-Beeswax_ox-db5_smrt_n-inmobi_sovrn_3lift_n-Outbrain&dcc=t Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
2024-03-18 16:22:09 UTC	452	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 18 Mar 2024 16:22:09 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 2669 Connection: close x-amz-rid: WWQWWZN20RB9WYCWX8BN Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-18 16:22:09 UTC	2669	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 72 65 66 65 72 72 65 72 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 33 37 31 66 62 65 61 39 2d 33 66 34 63 2d 34 30 61 65 2d 38 34 36 65 2d 30 39 65 32 35 39 34 65 32 31 61 39 22 3e 20 62 6f 64 79 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 7d 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 63 68 65 63 6b 5f 75 75 69 64 2f 68 74 74 70 73 25 33 41 25 32 46 25 32 Data Ascii: <html><head><meta name="referrer" content="no-referrer" /><style nonce="371fbea9-3f4c-40ae-846e-09e2594e21a9"> body { background-color:transparent } </style></head><body><img width="1" height="1" src="https://x.bidswitch.net/check_uuid/https%3A%2F%2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49858	67.202.24.120	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:09 UTC	412	OUT	GET /rtb/bid?src=prebid_prebid_8.5.0 HTTP/1.1 Host: ap.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv
2024-03-18 16:22:09 UTC	271	IN	HTTP/1.1 204 No Content Date: Mon, 18 Mar 2024 16:22:09 GMT Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49856	44.210.155.144	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:09 UTC	784	OUT	GET /hbid/imp?lt=1710778925845&to=-60&aun=fuse-slot-22728806944-1&gpid=%2F71161633%2C1007669%2FBROWUPD_browserupdate%2Fsticky_footer%23single-1&t=282949&pi=2&schain=1.0%2C1!publift.com%2C01FY417JCJKFQDQNA30FCX4RZF%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.5.0%22%7D&ogu=null&ns=6963 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true
2024-03-18 16:22:09 UTC	452	IN	HTTP/1.1 200 Date: Mon, 18 Mar 2024 16:22:09 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 2 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Tue, 18 Mar 2025 16:22:09 GMT; Path=/; Secure; SameSite=None Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Timing-Allow-Origin: *
2024-03-18 16:22:09 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49863	142.251.40.226	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:09 UTC	443	OUT	GET /pagead/js/car.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive Accept: application/javascript Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-03-18 16:22:09 UTC	689	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 4135 X-XSS-Protection: 0 Date: Mon, 18 Mar 2024 15:36:22 GMT Expires: Mon, 18 Mar 2024 16:36:22 GMT Cache-Control: public, max-age=3600 Age: 2747 ETag: 94558047674370129 Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:09 UTC	563	IN	Data Raw: 2f 2a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 76 61 72 20 65 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 2f 2a 20 0a 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 69 73 46 72 6f 7a 65 6e 28 61 29 26 26 4f 62 6a 65 63 74 2e 69 73 46 72 6f 7a 65 6e 28 61 2e 72 61 77 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 61 29 Data Ascii: /* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / var e=this\|\|self,f=function(a){return a};/ SPDX-License-Identifier: Apache-2.0 */ function g(a){return Object.isFrozen(a)&&Object.isFrozen(a.raw)}function h(a)
2024-03-18 16:22:09 UTC	1252	IN	Data Raw: 3d 3d 6d 29 7b 76 61 72 20 62 3d 6e 75 6c 6c 3b 76 61 72 20 64 3d 65 2e 74 72 75 73 74 65 64 54 79 70 65 73 3b 69 66 28 64 26 26 64 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 74 72 79 7b 62 3d 64 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 67 6f 6f 67 23 68 74 6d 6c 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 66 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 66 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 66 7d 29 7d 63 61 74 63 68 28 63 29 7b 65 2e 63 6f 6e 73 6f 6c 65 26 26 65 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 63 2e 6d 65 73 73 61 67 65 29 7d 6d 3d 62 7d 61 3d 28 62 3d 6d 29 3f 62 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 28 61 29 3a 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 70 28 61 29 7d 3b 76 61 72 20 74 3d 63 6c 61 73 73 7b 63 6f 6e 73 Data Ascii: ==m){var b=null;var d=e.trustedTypes;if(d&&d.createPolicy)try{b=d.createPolicy("goog#html",{createHTML:f,createScript:f,createScriptURL:f})}catch(c){e.console&&e.console.error(c.message)}m=b}a=(b=m)?b.createScriptURL(a):a;return new p(a)};var t=class{cons
2024-03-18 16:22:09 UTC	1252	IN	Data Raw: 3d 61 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 5c 6e 20 20 20 20 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 20 45 52 52 4f 52 20 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 5c 6e 5c 6e 20 20 20 20 49 74 20 6c 6f 6f 6b 73 20 6c 69 6b 65 20 79 6f 75 20 61 72 65 20 74 72 79 69 6e 67 20 74 6f 20 63 61 6c 6c 20 61 20 74 65 6d 70 6c 61 74 65 20 74 61 67 20 66 75 6e 63 74 69 6f 6e 20 28 66 6e 60 2e 2e 2e 60 29 5c 6e 20 20 20 20 75 73 69 6e 67 20 74 68 65 20 6e 6f 72 6d 61 6c 20 66 75 6e 63 74 69 6f 6e 20 73 79 6e 74 61 78 20 28 66 6e 28 2e 2e 2e 29 29 2c 20 77 68 69 63 68 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 2e Data Ascii: =a.length)throw new TypeError("\n ############################## ERROR ##############################\n\n It looks like you are trying to call a template tag function (fn`...`)\n using the normal function syntax (fn(...)), which is not supported.
2024-03-18 16:22:09 UTC	1068	IN	Data Raw: 2e 22 29 3b 69 66 28 21 2f 5e 5b 5e 3a 5d 2a 28 3a 5b 30 2d 39 5d 2b 29 3f 24 2f 69 2e 74 65 73 74 28 63 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 70 6f 72 74 20 6e 75 6d 62 65 72 2e 22 29 3b 20 0a 69 66 28 21 2f 28 5e 7c 5c 2e 29 5b 61 2d 7a 5d 5b 5e 2e 5d 2a 24 2f 69 2e 74 65 73 74 28 63 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 54 68 65 20 74 6f 70 2d 6c 65 76 65 6c 20 64 6f 6d 61 69 6e 20 6d 75 73 74 20 73 74 61 72 74 20 77 69 74 68 20 61 20 6c 65 74 74 65 72 2e 22 29 3b 63 3d 21 30 7d 65 6c 73 65 20 63 3d 21 31 3b 69 66 28 21 63 29 69 66 28 2f 5e 5c 2f 2f 2e 74 65 73 74 28 64 29 29 69 66 28 22 2f 22 3d 3d 3d 64 7c 7c 31 3c 64 2e 6c 65 6e 67 74 68 26 26 22 2f 22 21 3d 3d 64 5b 31 5d 26 26 22 5c 5c 22 21 3d 3d 64 5b 31 5d Data Ascii: .");if(!/^[^:](:[0-9]+)?$/i.test(c))throw Error("Invalid port number."); if(!/(^\|\.)[a-z][^.]$/i.test(c))throw Error("The top-level domain must start with a letter.");c=!0}else c=!1;if(!c)if(/^\//.test(d))if("/"===d\|\|1<d.length&&"/"!==d[1]&&"\\"!==d[1]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49871	35.207.24.140	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:09 UTC	723	OUT	GET /sync?ssp=google&seller_network=google_&bid_id=7add3eaa-1fba-4245-b3d6-c9b0b0ed083e&initiator=me HTTP/1.1 Host: rtb-use.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:09 UTC	756	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Mon, 18 Mar 2024 16:22:09 GMT Location: https://rtb-use.mfadsrvr.com/ul_cb/sync?ssp=google&seller_network=google_&bid_id=7add3eaa-1fba-4245-b3d6-c9b0b0ed083e&initiator=me Set-Cookie: tuuid=309d4a29-7edd-4b82-bd2d-13d7a4d90b1e; path=/; expires=Wed, 18-Mar-2026 16:22:09 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: c=1710778929; path=/; expires=Wed, 18-Mar-2026 16:22:09 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: tuuid_lu=1710778929; path=/; expires=Wed, 18-Mar-2026 16:22:09 GMT; domain=.mfadsrvr.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49872	18.238.79.139	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:09 UTC	673	OUT	GET /0a0dde8b5c2c6b867ddb968a93f6fcd0.webp HTTP/1.1 Host: de9a11s35xj3d.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:09 UTC	644	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 70272 Connection: close Date: Mon, 18 Mar 2024 16:22:10 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: Access-Control-Allow-Origin Access-Control-Max-Age: 3000 Last-Modified: Tue, 05 Mar 2024 10:43:01 GMT ETag: "4ff03c4b83f6fbf0bc586d64a2bbe796" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 bf4deffb26a744d2f90bfb71c1b673b2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P5 X-Amz-Cf-Id: rDHvZ8haPMjZo4ONQaLcPY4CaRL4NyPwdKqWtEXtfoPLDVLSDmqjOw==
2024-03-18 16:22:09 UTC	15642	IN	Data Raw: 52 49 46 46 78 12 01 00 57 45 42 50 56 50 38 20 6c 12 01 00 30 d9 05 9d 01 2a b0 04 73 02 3e 6d 32 95 47 24 23 24 a6 a8 d3 2a c0 d0 0d 89 63 69 82 ca 9c fb d9 fc 69 62 5c 17 69 07 75 fc a3 b9 03 65 d9 4b 11 bc dc ac 39 73 52 af 29 ac d7 ff 3b c2 9f e0 3c 01 bc bb fa 77 fb bf 55 0f 26 8e ea 1e 9b fe 57 d8 17 f9 f7 f9 8f 24 fe 61 74 02 ff 51 e8 71 fa 6f f9 fe 9e 3f e6 f8 d6 fd 83 fe 2f a9 6e 98 dd 4f ea 6f f5 f0 6e b9 ff 1f cb e7 94 7c ef fd d6 94 d8 fa 74 a6 79 7e e1 ff 0f ee 2f 61 be a9 7f 8c 6f 72 f4 7f d3 ab 1d 86 f1 97 e5 5f bf 9f f8 3d 4c fc e7 fc 5f fe 3f f1 fc 93 fc e7 dd e3 dd df f3 1e 9c 7e 5a f7 d7 e8 d7 e0 af ea 7f 9b ff 3b ed 2f 95 3f 9f 78 96 7e 7f fd 87 8f 07 9f e1 12 fd df da df 70 3f 49 ff 77 e8 db fb bf a6 fd d3 9e a4 1f ae 7d 5a 7f e9 e5 Data Ascii: RIFFxWEBPVP8 l0s>m2G$#$ciib\iueK9sR);<wU&W$atQqo?/nOon\|ty~/aor_=L_?~Z;/?x~p?Iw}Z
2024-03-18 16:22:09 UTC	16384	IN	Data Raw: 85 e8 bf b2 fd 98 5b 90 3c b5 a9 e8 c9 7c 77 d0 0f ea 22 c3 a7 46 c9 07 41 93 d4 1c 0e bb bd 85 38 ce f2 60 1c 0d 05 11 57 c0 2e 0d a7 9a 9a ca 84 d6 e6 20 b3 5f d6 fc 86 e8 58 03 9a 1c 5c 44 f6 ac 39 99 9c 5b 96 32 cd 28 ef cc f9 4b c1 fc 98 bd 79 47 b3 c3 fe 67 13 b3 e2 2e ae 62 0f 82 21 6f 06 72 23 1f 6e 14 4d ef 69 f7 0b 79 92 1e 19 9b 68 4d 2a 55 96 36 0d 95 14 16 1b e5 9a 41 9b 66 81 d4 f3 be ac 99 1d 26 b5 17 da 7e 19 1f 2f 3e 4d 10 b1 63 36 cd 4f 33 db 62 94 73 c9 68 77 7d 96 81 a8 11 36 c1 45 95 50 f1 92 25 40 b9 18 4d ec 8f d1 62 5d 82 42 84 a8 69 f0 0e f9 10 36 83 4d ff dd 9b 62 df e1 37 07 0d e0 4c 38 8d 53 23 b4 e6 cb 46 76 31 c3 bc 00 74 e6 2d cc 69 a1 17 a4 21 31 45 98 1a 2e 7f 56 c1 fb a5 3a c2 a1 ff 47 d8 c6 fd aa 8d 15 50 b7 4e 50 87 08 Data Ascii: [<\|w"FA8`W. _X\D9[2(KyGg.b!or#nMiyhM*U6Af&~/>Mc6O3bshw}6EP%@Mb]Bi6Mb7L8S#Fv1t-i!1E.V:GPNP
2024-03-18 16:22:09 UTC	16384	IN	Data Raw: 90 45 d8 50 13 b8 a0 bc fb fc 1d ad 94 d7 50 27 72 d2 cb 1a 71 a4 e2 5b 41 3c 66 b5 03 83 42 6d 99 aa dd 6f 3f 16 58 8e 30 a9 f3 a2 b0 5f b5 4f 69 fb 77 f5 4c 50 a9 a5 fd fa ad a7 c8 bd 29 d9 ca c2 17 9b 8b 3f 17 18 2f ab ff f3 76 4d c5 dc eb 5a fb d3 ba b7 b9 84 7e 95 ba c4 51 d0 8b 8d 68 95 4f 46 60 0b fa e4 6e c1 66 6b d4 eb 7b 8c 1a 79 dd 8f 3e 92 c0 ea 78 f9 71 9f 6d f6 5a ce ff 53 b0 f7 ea 3e 54 e1 d3 7e 19 4c e7 6a 8b 6e bf 3d 96 50 11 1b 17 b2 85 a5 93 14 5c e6 f5 0e 02 73 34 f5 62 a5 e4 ad 93 e5 68 3b 09 59 03 b0 4e 26 98 37 51 3f 1a 8e a6 4b 81 ad a8 b3 ff f1 21 6e 47 ca 5b 26 26 2c c3 9c b2 e6 a4 2e f8 e9 68 69 1d ed e6 75 d9 a6 5f 95 94 d3 72 5c 46 e8 c4 a6 5d 39 ef 23 c4 39 6d 68 41 ae 5d c6 38 63 79 87 49 8b a6 f4 85 0a 63 3b 76 54 88 9f 4e Data Ascii: EPP'rq[A<fBmo?X0_OiwLP)?/vMZ~QhOF`nfk{y>xqmZS>T~Ljn=P\s4bh;YN&7Q?K!nG[&&,.hiu_r\F]9#9mhA]8cyIc;vTN
2024-03-18 16:22:09 UTC	13848	IN	Data Raw: ad 26 c7 eb d5 76 72 90 87 87 57 d1 82 f7 81 78 ae 92 3d 45 79 1e 71 c7 8f 19 f4 b3 32 62 e4 07 0b ec c1 6d 9c db ec 8f 23 c1 9e 6b d1 79 21 e8 db 0c 94 7f a9 24 96 76 da 8b 81 9c ea d9 4e 66 4a ce 01 d7 c7 77 52 87 9b 2f ea 51 0c 1b 18 ed 40 7d e6 15 77 95 bf b5 78 b8 1a d4 9b 0d 4d c8 d1 4d 59 71 33 3a 38 87 65 29 6a 26 c8 f0 45 6b 2d de de e5 02 5b ae 1a bc 24 d8 7d d4 82 ed 7c a8 f3 60 15 94 aa 72 1e cd ec fc 6c 13 a3 94 cb 95 a1 57 82 96 20 ac 5e 74 5a 7a e8 6f a2 92 47 f7 df 4d 3b 96 dd 4e 5b 9e ec 90 e3 1b 18 c7 fe 41 2c 50 e2 bb 95 5a a9 9d 9b 7a c8 f9 df c8 28 d3 9c 9f 4e 42 79 0e 37 23 91 c2 88 14 3c f6 ad d6 e7 42 3e a9 72 5d df 12 43 47 f8 aa bf 12 65 56 dd 9d be 3a 79 2d 4e 61 f0 96 95 d8 f8 11 17 13 fb 13 d5 84 bf 0b fc b2 d3 20 5b f9 57 38 Data Ascii: &vrWx=Eyq2bm#ky!$vNfJwR/Q@}wxMMYq3:8e)j&Ek-[$}\|`rlW ^tZzoGM;N[A,PZz(NBy7#<B>r]CGeV:y-Na [W8
2024-03-18 16:22:09 UTC	5608	IN	Data Raw: c4 ca e3 41 4f 77 4c 52 5b 0a 88 5b 69 a9 0a 8d 1f 6a 4f b9 c7 e3 6f 6c d1 44 81 2e 89 f8 2c 60 20 b5 37 04 45 e0 df 23 a0 f2 bc e3 7f d7 8f 93 4a 18 cb f0 f6 5c 45 93 dd 70 e5 d8 87 8c 27 c0 31 7f 31 61 fc ce d9 9d 84 27 4b f6 fe de 14 9f 72 98 69 37 da ff 1f 1c ef 5f b0 a9 31 bc 3f 46 2f ce 51 39 97 f2 37 36 f5 54 5a f6 2f 7c a0 a4 f5 e0 36 6a 6a 23 9b f9 4f 7e 49 b5 ab 0b 55 1d b3 df e6 3b 62 5c 02 e7 a8 94 b9 74 14 01 df 12 89 78 8f 4f 26 bb 51 f4 4c 3e e8 2b eb a4 79 a7 13 fa cf cc 3f d4 52 fe c1 ec ec b5 db b3 d0 ca 7a d0 0b ee ec 6f 42 8b da 8f 2a b1 74 8f 58 bf 6e e6 80 49 c8 fb 2b 6b fb ab f0 2b 72 5f fb f3 8c a2 77 90 2b f2 b8 6d fd 3c bc f6 6b b0 ac 86 01 9a a8 8a 20 91 42 a1 56 61 08 68 c7 bb b6 c8 3c 18 8c 6a 42 07 19 ed 4b 81 6f 39 c5 75 91 Data Ascii: AOwLR[[ijOolD.,` 7E#J\Ep'11a'Kri7_1?F/Q976TZ/\|6jj#O~IU;b\txO&QL>+y?RzoB*tXnI+k+r_w+m<k BVah<jBKo9u
2024-03-18 16:22:09 UTC	2406	IN	Data Raw: 1f 21 18 56 e0 51 18 ff 61 3e df 3f f9 26 48 70 2e d1 4f 1b 06 df 87 b1 60 8f 1d 89 6a 76 ad 19 4e cc 8b 1e f6 9e 1d 1b 7c 57 93 a0 3b 7a 9d b0 da cc c0 10 a1 26 27 48 5d 93 74 ea 65 b2 75 ed ed 67 87 07 42 4c be 2e 60 70 09 6b 51 97 d8 7c 0e dd 81 fa e6 47 ec 32 43 87 05 5c 5a ce d0 d1 57 c4 13 92 7f 09 60 f7 b9 02 e0 9f 48 d6 3e 52 ac 33 54 22 f6 8f 9d 85 6d 42 3e c6 d8 6e 7b a0 a6 f0 52 26 cc bc 56 de c1 9c 78 ee 7b 94 a6 63 f5 e0 9f 13 34 d1 92 a9 2c b9 9e da 86 f2 24 67 ef 58 6d 6c 73 84 b1 71 50 b5 ef d6 a4 ee bd 70 30 9c 49 df c4 d8 bc 1d ae 71 14 f7 f7 f5 40 ce 20 06 2a fb 24 19 92 95 39 0c 34 4c db bf 9c 17 23 c7 59 ec 39 09 f1 12 b6 15 c1 f4 8a 46 99 b0 19 e5 3e 10 fc 7f bd df f9 c7 a7 8f 8e 1f 73 a9 51 20 ec d9 0e 59 88 60 c3 70 ae 93 ad b4 b5 Data Ascii: !VQa>?&Hp.O`jvN\|W;z&'H]teugBL.`pkQ\|G2C\ZW`H>R3T"mB>n{R&Vx{c4,$gXmlsqPp0Iq@ *$94L#Y9F>sQ Y`p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49873	142.250.65.162	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:09 UTC	2584	OUT	GET /gampad/ads?pvsid=1702785379071819&correlator=202337239561750&eid=31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403140101&ptt=17&impl=fifs&iu_parts=71161633%3A1007669%2CBROWUPD_browserupdate%2Cweb_interstitial&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=1x1&ifi=1&sfv=1-0-40&ists=1&fas=8&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1710778926434&lmt=1710778926&adxs=-9&adys=-9&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=-1&ucis=1&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&vis=1&psz=0x-1&msz=0x-1&fws=2&ohw=0&ga_vid=1126053991.1710778926&ga_sid=1710778926&ga_hid=1902104362&ga_fc=false&td=1&topics=9&tps=9&htps=10&a3p=EhwKDWNyd2RjbnRybC5uZXQYhIn7kuUxSABSAghk&nt=1&psd=WzE1LFsyLFtbIi83MTE2MTYzMywxMDA3NjY5L0JST1dVUERfYnJvd3NlcnVwZGF0ZS93ZWJfaW50ZXJzdGl0aWFsIixbXV1dXSxudWxsLDNd&dlt=1710778923330&idt=2820&prev_scp=in2w_key20%3D1x09%2C1x0r%2C1x0x%26in2w_key15%3Du0&cust_params=in2w_key15%3Du0%26intowow_optimized%3Dfalse%26fuse_site%3Dbrowser-update.org%26fuse_path%3D%252Fupdate-browser.html%26fuse_query%3D%26fuse_category%3D%26fuse_industry_2%3DIAB19%26testmode%3Dfalse%26inskin_yes%3Dtrue%26fuse_uuid%3De77f8bfe-60b6-5c8b-a657-64bfafdad065%26fuse_publication_id%3D5%26fuse_flavour%3Ddefault%26GPT_READY_MS%3D4000-4999%26PREBID_READY_MS%3D3000-3499%26UAM_READY_MS%3D3500-3999%26CMP_DETERMINED_MS%3Ddisabled%26CMP_GDPR_CACHED%3Dfalse%26FUSE_LOADED_MS%3D2000-2499%26FIRST_ZONE_MS%3D3500-3999%26HB_AUCTION_START_MS%3D3500-3999%26CMP_JURISDICTION%3Dunknown%26CMP_ALLOW_PERSONAL%3Dtrue%26fuse_exp_0%3Dfalse%26fuse_exp_2%3Dtrue%26fuse_exp_3%3Dtrue%26fuse_exp_4%3Dtrue%26fuse_exp_5%3Dtrue%26fuse_exp_6%3Dtrue%26fuse_exp_7%3Dtrue%26fuse_exp_8%3Dtrue%26fuse_exp_9%3Dfalse%26fuse_exp_10%3Dfalse%26chrome_label%3Dstandard&adks=2017541439&frm=20 HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-03-18 16:22:09 UTC	1063	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Google-LineItem-Id: 6421268774 Google-Creative-Id: 333430296156 Date: Mon, 18 Mar 2024 16:22:09 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUlwOKvmHNBSt4q4P7T7dRMlZTz-L1taujFMycBNUlPxVWgahBkaQBCHFXWT2Zo; expires=Wed, 18-Mar-2026 16:22:09 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-18 16:22:09 UTC	189	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 2f 37 31 31 36 31 36 33 33 2f 42 52 4f 57 55 50 44 5f 62 72 6f 77 73 65 72 75 70 64 61 74 65 2f 77 65 62 5f 69 6e 74 65 72 73 74 69 74 69 61 6c 22 3a 5b 22 68 74 6d 6c 22 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 39 30 37 2c 31 32 36 33 2c 30 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 31 2c 5b 5b 22 49 44 3d 39 33 62 65 33 66 30 65 31 61 36 65 65 34 39 35 3a 54 3d 31 37 31 30 37 37 38 39 32 39 3a 52 54 3d 31 37 31 30 37 37 38 39 32 39 3a 53 3d 41 4c 4e 49 5f 4d 61 47 77 65 4b 50 39 34 49 41 35 4d 5a 4a 4e 70 4d 73 6b 48 75 47 76 4b Data Ascii: 8000{"/71161633/BROWUPD_browserupdate/web_interstitial":["html",1,null,null,1,907,1263,0,0,null,null,1,1,[["ID=93be3f0e1a6ee495:T=1710778929:RT=1710778929:S=ALNI_MaGweKP94IA5MZJNpMskHuGvK
2024-03-18 16:22:09 UTC	1252	IN	Data Raw: 48 64 56 77 22 2c 31 37 34 34 34 37 34 39 32 39 2c 22 2f 22 2c 22 62 72 6f 77 73 65 72 2d 75 70 64 61 74 65 2e 6f 72 67 22 2c 31 5d 2c 5b 22 55 49 44 3d 30 30 30 30 30 64 64 33 38 31 36 61 62 31 32 36 3a 54 3d 31 37 31 30 37 37 38 39 32 39 3a 52 54 3d 31 37 31 30 37 37 38 39 32 39 3a 53 3d 41 4c 4e 49 5f 4d 59 4f 69 70 4c 51 65 34 69 72 6b 71 52 35 6a 36 6b 6a 6e 37 4f 64 52 55 74 76 50 77 22 2c 31 37 34 34 34 37 34 39 32 39 2c 22 2f 22 2c 22 62 72 6f 77 73 65 72 2d 75 70 64 61 74 65 2e 6f 72 67 22 2c 32 5d 5d 2c 5b 31 33 38 34 35 35 38 37 35 33 32 32 5d 2c 5b 36 34 32 31 32 36 38 37 37 34 5d 2c 5b 35 33 36 38 30 36 33 33 34 33 5d 2c 5b 33 32 37 33 36 35 36 38 34 33 5d 2c 5b 34 38 36 33 30 37 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: HdVw",1744474929,"/","browser-update.org",1],["UID=00000dd3816ab126:T=1710778929:RT=1710778929:S=ALNI_MYOipLQe4irkqR5j6kjn7OdRUtvPw",1744474929,"/","browser-update.org",2]],[138455875322],[6421268774],[5368063343],[3273656843],[486307],null,null,null,null
2024-03-18 16:22:09 UTC	1252	IN	Data Raw: 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 7d 62 6f 64 79 20 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 35 32 2c 20 35 38 2c 20 36 35 2c 20 30 2e 36 30 30 30 30 30 29 3b 62 61 63 6b 64 72 6f 70 2d 66 69 6c 74 65 72 3a 20 62 6c 75 72 28 31 35 70 78 29 3b 20 2f 2a 70 6f 74 65 6e 74 69 61 6c 20 69 73 73 75 65 3a 20 6d 69 6e 69 6d 61 6c 20 62 72 6f 77 73 65 72 20 73 75 70 70 6f 72 74 2a 2f 2d 77 65 62 6b 69 74 2d 62 61 63 6b 64 72 6f 70 2d 66 69 6c 74 65 72 3a 20 62 6c 75 72 28 31 35 70 78 29 3b 20 2f 2a 66 6f 72 20 73 61 66 61 72 69 2a 2f 68 65 69 67 68 74 3a 20 31 30 30 25 3b 7d 23 61 64 5f 69 66 72 61 6d 65 20 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 6c 65 66 74 3a 20 Data Ascii: utline: none;}body {background: rgba(52, 58, 65, 0.600000);backdrop-filter: blur(15px); /potential issue: minimal browser support/-webkit-backdrop-filter: blur(15px); /for safari/height: 100%;}#ad_iframe {box-shadow: 0 !important;display: block;left:
2024-03-18 16:22:09 UTC	1252	IN	Data Raw: 20 37 30 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 2c 20 61 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 20 23 32 30 32 31 32 34 3b 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 68 65 69 67 68 74 3a 20 32 35 70 78 3b 70 61 64 64 69 6e 67 3a 20 31 32 70 78 20 31 36 70 78 20 30 3b 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 7d 2e 72 65 70 6f 72 74 20 73 76 67 20 7b 68 65 69 67 68 74 3a 20 31 2e 35 65 6d 3b 77 69 64 74 68 3a 20 31 2e 35 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 30 2e 33 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 2d 30 2e 33 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 3b 7d 2e 61 74 Data Ascii: 700;font-family: 'Roboto', arial, sans-serif;color: #202124;position: relative;height: 25px;padding: 12px 16px 0;float: left;}.report svg {height: 1.5em;width: 1.5em;margin-left: -0.3em;margin-right: -0.3em;vertical-align: middle;padding-bottom: 1px;}.at
2024-03-18 16:22:09 UTC	1252	IN	Data Raw: 31 34 20 34 20 31 33 2e 31 20 34 20 31 32 43 34 20 31 30 2e 39 20 33 2e 31 20 31 30 20 32 20 31 30 5a 4d 30 20 31 38 43 30 20 31 36 2e 39 20 30 2e 39 20 31 36 20 32 20 31 36 43 33 2e 31 20 31 36 20 34 20 31 36 2e 39 20 34 20 31 38 43 34 20 31 39 2e 31 20 33 2e 31 20 32 30 20 32 20 32 30 43 30 2e 39 20 32 30 20 30 20 31 39 2e 31 20 30 20 31 38 5a 22 20 66 69 6c 6c 3d 22 23 35 46 36 33 36 38 22 2f 3e 3c 2f 73 76 67 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 61 74 74 72 69 62 75 74 69 6f 6e 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 61 74 74 72 69 62 75 74 69 6f 6e 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 72 65 61 74 69 76 65 22 20 69 64 3d 22 63 72 65 61 74 69 76 65 22 3e 3c 69 66 72 61 6d 65 20 74 69 74 6c 65 3d 22 Data Ascii: 14 4 13.1 4 12C4 10.9 3.1 10 2 10ZM0 18C0 16.9 0.9 16 2 16C3.1 16 4 16.9 4 18C4 19.1 3.1 20 2 20C0.9 20 0 19.1 0 18Z" fill="#5F6368"/></svg></div><div id="attribution" class="btn attribution"></div></div><div class="creative" id="creative"><iframe title="
2024-03-18 16:22:09 UTC	1252	IN	Data Raw: 67 74 3b 60 64 6f 70 62 2f 25 5c 5c 78 32 36 6c 74 3b 31 32 34 35 3b 30 35 21 5c 5c 78 33 64 6e 65 68 75 60 7e 5c 5c 78 32 36 71 75 6f 74 3b 5d 5c 5c 78 32 32 5c 5c 78 33 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 5c 5c 78 32 37 75 73 65 20 73 74 72 69 63 74 5c 5c 78 32 37 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 71 5c 5c 78 33 64 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 61 3a 7b 76 61 72 20 62 5c 5c 78 33 64 5b 5c 5c 78 32 32 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 5c 5c 78 32 32 5d 3b 66 6f 72 28 76 61 72 Data Ascii: gt;`dopb/%\\x26lt;1245;05!\\x3dnehu`~\\x26quot;]\\x22\\x3e(function(){\\x27use strict\\x27;/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var q\\x3dthis\|\|self;function aa(a){a:{var b\\x3d[\\x22CLOSURE_FLAGS\\x22];for(var
2024-03-18 16:22:09 UTC	1252	IN	Data Raw: 29 29 3b 76 61 72 20 69 61 5c 5c 78 33 64 7b 7d 2c 78 5c 5c 78 33 64 6e 75 6c 6c 3b 76 61 72 20 79 5c 5c 78 33 64 53 79 6d 62 6f 6c 28 29 3b 76 61 72 20 6a 61 5c 5c 78 33 64 7b 7d 2c 6b 61 5c 5c 78 33 64 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6c 61 28 61 29 7b 72 65 74 75 72 6e 21 28 21 61 7c 7c 5c 5c 78 32 32 6f 62 6a 65 63 74 5c 5c 78 32 32 21 5c 5c 78 33 64 5c 5c 78 33 64 74 79 70 65 6f 66 20 61 7c 7c 61 2e 67 21 5c 5c 78 33 64 5c 5c 78 33 64 6b 61 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 5c 5c 78 33 64 5c 5c 78 33 64 61 5c 5c 78 32 36 5c 5c 78 32 36 5c 5c 78 32 32 6f 62 6a 65 63 74 5c 5c 78 32 32 5c 5c 78 33 64 5c 5c 78 33 64 5c 5c 78 33 64 74 79 70 65 6f 66 20 61 5c 5c 78 32 36 5c 5c 78 32 36 21 41 72 72 61 Data Ascii: ));var ia\\x3d{},x\\x3dnull;var y\\x3dSymbol();var ja\\x3d{},ka\\x3d{};function la(a){return!(!a\|\|\\x22object\\x22!\\x3d\\x3dtypeof a\|\|a.g!\\x3d\\x3dka)}function ma(a){return null!\\x3d\\x3da\\x26\\x26\\x22object\\x22\\x3d\\x3d\\x3dtypeof a\\x26\\x26!Arra
2024-03-18 16:22:09 UTC	1252	IN	Data Raw: 79 28 63 29 3a 61 29 3b 72 65 74 75 72 6e 20 62 74 6f 61 28 62 29 7d 7d 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 78 61 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 69 66 28 6e 75 6c 6c 21 5c 5c 78 33 64 61 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 61 5c 5c 78 33 64 7a 28 61 2c 76 6f 69 64 20 30 2c 30 29 3f 76 6f 69 64 20 30 3a 65 5c 5c 78 32 36 5c 5c 78 32 36 28 61 5b 79 5d 7c 30 29 5c 5c 78 32 36 32 3f 61 3a 79 61 28 61 2c 62 2c 63 2c 76 6f 69 64 20 30 21 5c 5c 78 33 64 5c 5c 78 33 64 64 2c 65 29 3b 65 6c 73 65 20 69 66 28 6d 61 28 61 29 29 7b 63 6f 6e 73 74 20 66 5c 5c 78 33 64 7b 7d 3b 66 6f 72 28 6c 65 74 20 67 20 69 6e 20 61 29 66 5b 67 5d 5c 5c 78 33 64 78 61 28 61 5b 67 5d 2c 62 2c 63 2c 64 2c 65 29 3b 61 5c 5c 78 33 Data Ascii: y(c):a);return btoa(b)}}return a};function xa(a,b,c,d,e){if(null!\\x3da){if(Array.isArray(a))a\\x3dz(a,void 0,0)?void 0:e\\x26\\x26(a[y]\|0)\\x262?a:ya(a,b,c,void 0!\\x3d\\x3dd,e);else if(ma(a)){const f\\x3d{};for(let g in a)f[g]\\x3dxa(a[g],b,c,d,e);a\\x3
2024-03-18 16:22:09 UTC	1252	IN	Data Raw: 73 61 29 7d 66 69 6e 61 6c 6c 79 7b 6e 61 5c 5c 78 33 64 21 31 7d 7d 76 61 72 20 46 5c 5c 78 33 64 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 61 3a 7b 76 61 72 20 61 5c 5c 78 33 64 76 6f 69 64 20 30 3b 6e 75 6c 6c 5c 5c 78 33 64 5c 5c 78 33 64 61 5c 5c 78 32 36 5c 5c 78 32 36 28 61 5c 5c 78 33 64 72 61 29 3b 72 61 5c 5c 78 33 64 76 6f 69 64 20 30 3b 69 66 28 6e 75 6c 6c 5c 5c 78 33 64 5c 5c 78 33 64 61 29 7b 76 61 72 20 62 5c 5c 78 33 64 39 36 3b 61 5c 5c 78 33 64 5b 5d 7d 65 6c 73 65 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 62 5c 5c 78 33 64 61 5b 79 5d 7c 30 3b 69 66 28 62 5c 5c 78 32 36 32 30 34 38 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 69 66 28 62 5c 5c 78 32 36 Data Ascii: sa)}finally{na\\x3d!1}}var F\\x3dclass{constructor(){a:{var a\\x3dvoid 0;null\\x3d\\x3da\\x26\\x26(a\\x3dra);ra\\x3dvoid 0;if(null\\x3d\\x3da){var b\\x3d96;a\\x3d[]}else{if(!Array.isArray(a))throw Error();b\\x3da[y]\|0;if(b\\x262048)throw Error();if(b\\x26
2024-03-18 16:22:09 UTC	1252	IN	Data Raw: 6b 3b 67 5c 5c 78 33 64 21 30 7d 69 66 28 21 66 5c 5c 78 32 36 5c 5c 78 32 36 21 67 29 72 65 74 75 72 6e 20 62 3b 62 5c 5c 78 33 64 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 62 2c 30 2c 61 29 3b 68 5c 5c 78 32 36 5c 5c 78 32 36 62 2e 70 75 73 68 28 68 29 3b 20 72 65 74 75 72 6e 20 62 7d 3b 76 61 72 20 44 61 5c 5c 78 33 64 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 46 7b 7d 3b 76 61 72 20 47 5c 5c 78 33 64 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 5c 5c 78 33 64 21 31 29 7b 74 68 69 73 2e 6b 65 79 5c 5c 78 33 64 61 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 5c 5c 78 33 64 62 3b 74 68 69 73 2e 76 61 6c 75 65 54 79 70 65 5c 5c 78 33 64 5c 5c 78 32 32 62 6f 6f 6c 65 61 6e 5c 5c 78 32 32 7d Data Ascii: k;g\\x3d!0}if(!f\\x26\\x26!g)return b;b\\x3dArray.prototype.slice.call(b,0,a);h\\x26\\x26b.push(h); return b};var Da\\x3dclass extends F{};var G\\x3dclass{constructor(a,b\\x3d!1){this.key\\x3da;this.defaultValue\\x3db;this.valueType\\x3d\\x22boolean\\x22}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49877	142.250.81.230	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:09 UTC	541	OUT	GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-03-18 16:22:09 UTC	746	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Content-Length: 1078 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 18 Mar 2024 11:53:27 GMT Expires: Tue, 19 Mar 2024 11:53:27 GMT Cache-Control: public, max-age=86400 Age: 16122 Last-Modified: Tue, 08 May 2012 13:08:06 GMT Content-Type: image/x-icon Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:09 UTC	506	IN	Data Raw: 00 00 01 00 02 00 10 10 10 00 00 00 00 00 28 01 00 00 26 00 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 4e 01 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 04 00 00 00 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii: (& N(
2024-03-18 16:22:09 UTC	572	IN	Data Raw: 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49870	35.207.24.140	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:09 UTC	725	OUT	GET /sync?ssp=intentiq&seller_network=google_&bid_id=7add3eaa-1fba-4245-b3d6-c9b0b0ed083e&initiator=me HTTP/1.1 Host: rtb-use.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:09 UTC	758	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Mon, 18 Mar 2024 16:22:09 GMT Location: https://rtb-use.mfadsrvr.com/ul_cb/sync?ssp=intentiq&seller_network=google_&bid_id=7add3eaa-1fba-4245-b3d6-c9b0b0ed083e&initiator=me Set-Cookie: tuuid=2393ecfc-a9f7-4cbe-bbea-03c6f5980eff; path=/; expires=Wed, 18-Mar-2026 16:22:09 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: c=1710778929; path=/; expires=Wed, 18-Mar-2026 16:22:09 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: tuuid_lu=1710778929; path=/; expires=Wed, 18-Mar-2026 16:22:09 GMT; domain=.mfadsrvr.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49879	130.211.23.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:09 UTC	557	OUT	GET /country HTTP/1.1 Host: api.btloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://browser-update.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:09 UTC	332	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Cache-Control: private, max-age=300, stale-while-revalidate=600, stale-if-error=600 Content-Type: application/json Vary: Origin Date: Mon, 18 Mar 2024 16:22:09 GMT Content-Length: 16 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:09 UTC	16	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d Data Ascii: {"country":"US"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49874	74.119.119.131	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:09 UTC	373	OUT	GET /js/ld/publishertag.prebid.136.js HTTP/1.1 Host: static.criteo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:09 UTC	484	IN	HTTP/1.1 200 OK server: nginx date: Mon, 18 Mar 2024 16:22:09 GMT content-type: text/javascript content-length: 96004 last-modified: Tue, 07 Nov 2023 09:08:30 GMT etag: "6549fe8e-17704" expires: Tue, 19 Mar 2024 16:22:09 GMT cache-control: max-age=86400 cross-origin-resource-policy: cross-origin cache-control: public timing-allow-origin: * access-control-allow-origin: * accept-ranges: bytes strict-transport-security: max-age=31536000; preload; connection: close
2024-03-18 16:22:09 UTC	15900	IN	Data Raw: 2f 2f 20 48 61 73 68 3a 20 65 4d 59 45 61 45 65 55 53 55 5a 47 51 43 72 34 47 69 56 55 2f 31 71 44 53 42 56 73 4e 39 4f 74 64 4e 59 44 50 57 41 32 7a 6c 5a 50 70 6d 68 48 61 41 4a 64 2f 66 69 59 63 37 38 6a 4d 50 6c 44 57 72 59 33 5a 56 45 4c 68 66 63 66 7a 41 50 59 48 47 36 42 6a 44 55 39 6e 30 77 50 73 38 65 33 62 67 76 4d 76 35 34 41 51 30 79 50 75 79 30 58 6d 66 5a 46 38 2f 6b 31 51 48 68 72 6e 62 67 68 58 5a 39 39 59 79 38 6f 32 46 6c 70 55 74 69 4b 4b 70 6d 47 49 4c 4e 38 6f 58 68 2b 51 75 38 31 78 33 31 6f 79 6e 70 71 4c 6b 59 3d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 6e 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 Data Ascii: // Hash: eMYEaEeUSUZGQCr4GiVU/1qDSBVsN9OtdNYDPWA2zlZPpmhHaAJd/fiYc78jMPlDWrY3ZVELhfcfzAPYHG6BjDU9n0wPs8e3bgvMv54AQ0yPuy0XmfZF8/k1QHhrnbghXZ99Yy8o2FlpUtiKKpmGILN8oXh+Qu81x31oynpqLkY=!function(e){"use strict";var n=function(e,t){return(n=Object.setPrototyp
2024-03-18 16:22:09 UTC	16319	IN	Data Raw: 49 54 45 4f 5f 43 53 4d 5f 43 4f 55 4e 54 45 52 53 5f 48 41 4e 44 4c 45 52 3d 22 63 73 6d 2f 63 6f 75 6e 74 65 72 73 22 2c 77 65 2e 43 52 49 54 45 4f 5f 45 52 52 4f 52 5f 48 41 4e 44 4c 45 52 3d 22 65 72 72 6f 72 22 2c 77 65 2e 43 52 49 54 45 4f 5f 42 49 44 44 45 52 5f 41 55 44 49 54 5f 48 41 4e 44 4c 45 52 3d 22 70 72 65 62 69 64 2f 61 75 64 69 74 22 2c 77 65 29 3b 66 75 6e 63 74 69 6f 6e 20 77 65 28 65 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 74 68 69 73 2e 61 75 64 69 74 4d 6f 64 65 3d 65 7d 76 61 72 20 62 65 3d 28 43 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 6e 64 45 76 65 6e 74 73 54 6f 42 65 61 63 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 26 26 65 26 26 6e 61 Data Ascii: ITEO_CSM_COUNTERS_HANDLER="csm/counters",we.CRITEO_ERROR_HANDLER="error",we.CRITEO_BIDDER_AUDIT_HANDLER="prebid/audit",we);function we(e){void 0===e&&(e=!1),this.auditMode=e}var be=(Ce.prototype.sendEventsToBeacon=function(e,t){navigator.sendBeacon&&e&&na
2024-03-18 16:22:09 UTC	16384	IN	Data Raw: 65 77 20 5a 65 28 74 74 2e 61 70 70 65 6e 64 55 73 65 72 53 79 6e 63 50 69 78 65 6c 73 2c 65 2c 6e 29 2e 72 65 74 72 69 65 76 65 50 69 78 65 6c 73 28 74 2c 69 29 7d 2c 74 74 2e 67 65 74 4f 72 43 72 65 61 74 65 54 61 67 43 6f 6e 74 61 69 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 74 2e 74 61 67 45 6c 65 6d 65 6e 74 4e 61 6d 65 29 3b 69 66 28 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 72 65 74 75 72 6e 20 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 74 74 2e 74 61 67 45 6c 65 6d 65 6e 74 4e 61 6d 65 29 2c 74 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d Data Ascii: ew Ze(tt.appendUserSyncPixels,e,n).retrievePixels(t,i)},tt.getOrCreateTagContainer=function(){var e=document.getElementById(tt.tagElementName);if(e)return e;var t=document.createElement("div");return t.setAttribute("id",tt.tagElementName),t.style.display=
2024-03-18 16:22:09 UTC	14675	IN	Data Raw: 2e 5f 5f 63 6d 70 4c 6f 63 61 74 6f 72 26 26 28 65 3d 74 29 7d 63 61 74 63 68 28 65 29 7b 7d 69 66 28 74 3d 3d 3d 74 68 69 73 2e 63 75 72 72 65 6e 74 57 69 6e 64 6f 77 2e 74 6f 70 29 62 72 65 61 6b 3b 74 3d 74 2e 70 61 72 65 6e 74 7d 72 65 74 75 72 6e 20 65 7d 2c 67 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 43 61 6c 6c 65 72 46 75 6e 63 74 69 6f 6e 49 6e 46 72 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 63 75 72 72 65 6e 74 57 69 6e 64 6f 77 2e 5f 5f 63 6d 70 7d 2c 67 74 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 61 64 79 54 6f 52 65 74 72 69 65 76 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 68 61 73 43 61 6c 6c 65 72 46 75 6e 63 74 69 Data Ascii: .__cmpLocator&&(e=t)}catch(e){}if(t===this.currentWindow.top)break;t=t.parent}return e},gt.prototype.hasCallerFunctionInFrame=function(){return"function"==typeof this.currentWindow.__cmp},gt.prototype.readyToRetrieve=function(){return this.hasCallerFuncti
2024-03-18 16:22:09 UTC	1448	IN	Data Raw: 69 6c 64 65 72 2c 61 29 2c 73 2e 6d 65 74 72 69 63 42 75 69 6c 64 65 72 3d 76 6f 69 64 20 30 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 72 79 7b 64 2e 72 65 71 75 65 73 74 52 65 63 65 69 76 65 64 28 29 2c 76 6f 69 64 20 30 21 3d 3d 73 2e 63 61 6c 6c 62 61 63 6b 45 72 72 6f 72 26 26 73 2e 63 61 6c 6c 62 61 63 6b 45 72 72 6f 72 28 65 2c 74 29 2c 64 2e 66 69 6e 69 73 68 28 29 2c 72 2e 67 65 74 4d 65 74 72 69 63 73 4d 61 6e 61 67 65 72 28 29 2e 73 65 6e 64 45 76 65 6e 74 73 28 72 2c 61 2c 21 30 29 7d 63 61 74 63 68 28 65 29 7b 73 2e 72 65 70 6f 72 74 41 73 79 6e 63 52 65 71 75 65 73 74 45 78 63 65 70 74 69 6f 6e 28 6e 2c 22 6f 6e 45 72 72 6f 72 22 2c 65 29 7d 6e 2e 63 6f 6e 74 65 78 74 2e 72 65 6d 6f 74 65 4c 6f 67 67 69 6e 67 2e 73 65 6e 64 45 72 72 Data Ascii: ilder,a),s.metricBuilder=void 0},function(e,t){try{d.requestReceived(),void 0!==s.callbackError&&s.callbackError(e,t),d.finish(),r.getMetricsManager().sendEvents(r,a,!0)}catch(e){s.reportAsyncRequestException(n,"onError",e)}n.context.remoteLogging.sendErr
2024-03-18 16:22:09 UTC	16384	IN	Data Raw: 79 70 65 2e 65 76 61 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 6f 6e 54 69 6d 65 6f 75 74 28 29 7d 2c 74 68 69 73 2e 74 69 6d 65 6f 75 74 29 2c 74 68 69 73 2e 64 69 72 65 63 74 42 69 64 64 69 6e 67 45 76 65 6e 74 2e 65 76 61 6c 57 69 74 68 54 69 6d 65 6f 75 74 28 65 2c 74 68 69 73 2e 74 69 6d 65 6f 75 74 29 7d 2c 4c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 53 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 68 61 73 52 65 73 70 6f 6e 64 65 64 3d 21 30 2c 74 68 69 73 2e 68 61 73 54 69 6d 65 6f 75 74 65 64 7c 7c 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b 53 75 63 63 65 73 73 28 65 2c 74 29 7d 2c 4c 74 2e 70 Data Ascii: ype.eval=function(e){var t=this;setTimeout(function(){return t.onTimeout()},this.timeout),this.directBiddingEvent.evalWithTimeout(e,this.timeout)},Lt.prototype.onSuccess=function(e,t){this.hasResponded=!0,this.hasTimeouted\|\|this.callbackSuccess(e,t)},Lt.p
2024-03-18 16:22:09 UTC	14894	IN	Data Raw: 54 4f 55 54 5f 52 45 54 45 4e 54 49 4f 4e 5f 54 49 4d 45 5f 48 4f 55 52 3d 34 33 32 30 30 2c 52 69 29 3b 66 75 6e 63 74 69 6f 6e 20 52 69 28 65 29 7b 74 68 69 73 2e 73 74 6f 72 61 67 65 41 64 61 70 74 65 72 3d 65 7d 76 61 72 20 78 69 3d 28 44 69 2e 70 72 6f 74 6f 74 79 70 65 2e 66 72 6f 6d 41 6c 6c 53 74 6f 72 61 67 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 73 74 6f 72 61 67 65 41 64 61 70 74 65 72 2e 72 65 61 64 46 72 6f 6d 41 6c 6c 53 74 6f 72 61 67 65 73 28 74 68 69 73 2e 73 74 6f 72 61 67 65 4b 65 79 29 2c 74 3d 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 65 77 20 74 68 69 73 2e 74 79 70 65 29 2e 76 61 6c 75 65 4f 66 28 29 3f 22 31 22 3d 3d 3d 65 2e 76 61 6c 75 65 3a 65 2e 76 61 6c 75 65 3b 72 65 74 75 72 Data Ascii: TOUT_RETENTION_TIME_HOUR=43200,Ri);function Ri(e){this.storageAdapter=e}var xi=(Di.prototype.fromAllStorages=function(){var e=this.storageAdapter.readFromAllStorages(this.storageKey),t="boolean"==typeof(new this.type).valueOf()?"1"===e.value:e.value;retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49881	172.67.69.19	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:09 UTC	350	OUT	GET /px.gif?ch=2 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:09 UTC	1223	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:09 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPpNNajJRSFwM_0C3hYzCNCujkAURVj2eJaHaN1pvAL62OV4Db0k-n6McK_DMWi8P7kNfg x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Tue, 19 Mar 2024 16:22:09 GMT Cache-Control: public, max-age=86400 Age: 722134 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=haO7WybWqnBgRbHJMCCEgVI239pTOj0L4uLJfoCZt%2BCEGiPuhqT1DZijLU9arGK%2FTxeGOgEI0VDPAG5rJxlGCW7OIB%2F5%2FLb39I14qEEkem9VcZa83eharKaX6VRKpxzYsA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f567e9c4245-EWR
2024-03-18 16:22:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49876	52.207.168.130	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:09 UTC	405	OUT	GET /6/map HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=cd7195d98b33730cda0d063b9003130e
2024-03-18 16:22:09 UTC	239	IN	HTTP/1.1 405 Method Not Allowed Date: Mon, 18 Mar 2024 16:22:09 GMT Content-Type: text/html;charset=iso-8859-1 Content-Length: 484 Connection: close Cache-Control: must-revalidate,no-cache,no-store Server: Jetty(9.4.38.v20210224)
2024-03-18 16:22:09 UTC	484	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 36 2f 6d 61 70 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 3e 53 54 41 54 55 53 3a 3c 2f 74 68 3e 3c 74 64 3e 34 30 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/6/map</td></tr><tr><th>STATUS:</th><td>40

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49880	130.211.23.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:09 UTC	780	OUT	GET /pv?tid=cHQZoYwk&w=5070731193352192&o=5708166709903360&cv=2.1.38-3-g408da7f&widget=false&r=false&vr=1280x907&pageURL=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&sid=rxjhTnM0wo&pm=false&upapi=true HTTP/1.1 Host: api.btloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://browser-update.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:09 UTC	255	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Vary: Origin Date: Mon, 18 Mar 2024 16:22:09 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49875	172.67.69.19	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:09 UTC	372	OUT	GET /px.gif?ch=1&e=0.49315834659810265 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:09 UTC	1216	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:09 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPof8oVZy8f-YawZYTApO5mAq3xTkpTgU5AAGDdN2ngyWVPi1E3pZwAWofBj9c1HY-4-Yxw x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Tue, 19 Mar 2024 16:22:09 GMT Cache-Control: public, max-age=86400 Age: 52 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yc31BHiZ34m1D%2BX1W81vPJ57efLHqBz8PtfgaTnrSRrFtKC2Exi1dKJQWp8MY2ineb5rQN4MUbAXjuBdkLQQUwKdyF1sZ8z2L7q0KfJxM1lyWTqciZYV%2FntBJ8gu19rW1Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f569d4f0ca9-EWR
2024-03-18 16:22:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49884	142.250.65.162	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:09 UTC	3153	OUT	GET /gampad/ads?pvsid=1702785379071819&correlator=202337239561750&eid=31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403140101&ptt=17&impl=fifs&iu_parts=71161633%3A1007669%2CBROWUPD_browserupdate%2Cupdate_vrec_1%2Csticky_footer&enc_prev_ius=%2F0%2F1%2F2%2C%2F0%2F1%2F3&prev_iu_szs=320x50%7C300x250%7C336x280%2C728x90%7C970x90&fluid=height%2C0&ifi=2&sfv=1-0-40&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1710778927012&lmt=1710778927&adxs=875%2C268&adys=95%2C952&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0%7C1&ucis=2%7C3&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fbrowser-update.org%2Fupdate-browser.html%233.3.51%3Aiwu.marketing&vis=1&psz=350x0%7C0x-1&msz=300x0%7C728x-1&fws=128%2C644&ohw=0%2C1263&ga_vid=1126053991.1710778926&ga_sid=1710778926&ga_hid=1902104362&ga_fc=false&td=1&topics=9&tps=9&htps=10&a3p=EhwKDWNyd2RjbnRybC5uZXQYhIn7kuUxSABSAghk&nt=1&psd=WzE1LFsyLFtbIi83MTE2MTYzMywxMDA3NjY5L0JST1dVUERfYnJvd3NlcnVwZGF0ZS91cGRhdGVfdnJlY18xIixbXV0sWyIvNzExNjE2MzMsMTAwNzY2OS9CUk9XVVBEX2Jyb3dzZXJ1cGRhdGUvc3RpY2t5X2Zvb3RlciIsW11dXV0sbnVsbCwzXQ..&dlt=1710778923330&idt=2820&prev_scp=in2w_key20%3D1p09%2C1p0r%2C1p0x%26in2w_key21%3D2738828490%26amznbid%3D2%26amznp%3D2%26is_refresh%3Dfalse%26slot_prev_count%3D0%26adunit_prev_count%3D0%26in2w_key15%3Du0%7Cin2w_key20%3D1p09%2C1p0r%2C1p0x%26in2w_key21%3D549476650%26amznbid%3D2%26amznp%3D2%26is_refresh%3Dfalse%26slot_prev_count%3D0%26adunit_prev_count%3D0%26in2w_key15%3Du0&cust_params=in2w_key15%3Du0%26intowow_optimized%3Dfalse%26fuse_site%3Dbrowser-update.org%26fuse_path%3D%252Fupdate-browser.html%26fuse_query%3D%26fuse_category%3D%26fuse_industry_2%3DIAB19%26testmode%3Dfalse%26inskin_yes%3Dtrue%26fuse_uuid%3De77f8bfe-60b6-5c8b-a657-64bfafdad065%26fuse_publication_id%3D5%26fuse_flavour%3Ddefault%26GPT_READY_MS%3D4000-4999%26PREBID_READY_MS%3D3000-3499%26UAM_READY_MS%3D3500-3999%26CMP_DETERMINED_MS%3Ddisabled%26CMP_GDPR_CACHED%3Dfalse%26FUSE_LOADED_MS%3D2000-2499%26FIRST_ZONE_MS%3D3500-3999%26HB_AUCTION_START_MS%3D3500-3999%26CMP_JURISDICTION%3Dunknown%26CMP_ALLOW_PERSONAL%3Dtrue%26fuse_exp_0%3Dfalse%26fuse_exp_2%3Dtrue%26fuse_exp_3%3Dtrue%26fuse_exp_4%3Dtrue%26fuse_exp_5%3Dtrue%26fuse_exp_6%3Dtrue%26fuse_exp_7%3Dtrue%26fuse_exp_8%3Dtrue%26fuse_exp_9%3Dfalse%26fuse_exp_10%3Dfalse%26chrome_label%3Dstandard%26zone_count_above_vp%3D1%26GPT_AUCTION_START_MS%3D4000-4999&adks=2065841319%2C1568334319&frm=20 HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-03-18 16:22:10 UTC	1146	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Google-LineItem-Id: 208234953,208234953 Google-Creative-Id: 138324663397,138324663415 Google-MediationGroup-Id: -2,-2 Google-MediationTag-Id: -2 Date: Mon, 18 Mar 2024 16:22:10 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY; expires=Wed, 18-Mar-2026 16:22:09 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-18 16:22:10 UTC	106	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 2f 37 31 31 36 31 36 33 33 2f 42 52 4f 57 55 50 44 5f 62 72 6f 77 73 65 72 75 70 64 61 74 65 2f 75 70 64 61 74 65 5f 76 72 65 63 5f 31 22 3a 5b 22 68 74 6d 6c 22 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 32 35 30 2c 33 30 30 2c 30 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 31 2c 5b 5b 22 Data Ascii: 8000{"/71161633/BROWUPD_browserupdate/update_vrec_1":["html",1,null,null,1,250,300,0,0,null,null,1,1,[["
2024-03-18 16:22:10 UTC	1252	IN	Data Raw: 49 44 3d 62 66 65 39 38 30 39 37 32 35 30 35 32 61 35 34 3a 54 3d 31 37 31 30 37 37 38 39 32 39 3a 52 54 3d 31 37 31 30 37 37 38 39 32 39 3a 53 3d 41 4c 4e 49 5f 4d 59 57 71 53 53 43 51 59 63 69 66 73 4f 38 30 54 31 65 79 53 6d 75 44 39 56 4f 31 41 22 2c 31 37 34 34 34 37 34 39 32 39 2c 22 2f 22 2c 22 62 72 6f 77 73 65 72 2d 75 70 64 61 74 65 2e 6f 72 67 22 2c 31 5d 2c 5b 22 55 49 44 3d 30 30 30 30 30 64 64 33 38 30 62 63 30 62 39 32 3a 54 3d 31 37 31 30 37 37 38 39 32 39 3a 52 54 3d 31 37 31 30 37 37 38 39 32 39 3a 53 3d 41 4c 4e 49 5f 4d 62 56 79 67 46 4f 67 47 67 4b 56 38 37 49 35 72 75 73 75 42 50 6c 33 56 4e 69 6e 67 22 2c 31 37 34 34 34 37 34 39 32 39 2c 22 2f 22 2c 22 62 72 6f 77 73 65 72 2d 75 70 64 61 74 65 2e 6f 72 67 22 2c 32 5d 5d 2c 5b 31 33 Data Ascii: ID=bfe9809725052a54:T=1710778929:RT=1710778929:S=ALNI_MYWqSSCQYcifsO80T1eySmuD9VO1A",1744474929,"/","browser-update.org",1],["UID=00000dd380bc0b92:T=1710778929:RT=1710778929:S=ALNI_MbVygFOgGgKV87I5rusuBPl3VNing",1744474929,"/","browser-update.org",2]],[13
2024-03-18 16:22:10 UTC	1252	IN	Data Raw: 27 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 75 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 61 3a 7b 76 61 72 20 62 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 3b 66 6f 72 28 76 61 72 20 63 3d 75 2c 64 3d 30 3b 64 3c 62 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 69 66 28 63 3d 63 5b 62 5b 64 5d 5d 2c 6e 75 6c 6c 3d 3d 63 29 7b 62 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 62 3d 63 7d 61 3d 62 26 26 62 5b 61 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 3f 61 3a 21 31 7d 3b 76 61 72 20 62 61 3d 61 61 Data Ascii: ';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var u=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=u,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1};var ba=aa
2024-03-18 16:22:10 UTC	1252	IN	Data Raw: 7b 7d 63 6c 61 73 73 20 6d 61 7b 7d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 6e 65 77 20 6c 61 29 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 6e 65 77 20 6d 61 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 69 66 28 22 62 6f 6f 6c 65 61 6e 22 21 3d 3d 74 79 70 65 6f 66 20 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 60 45 78 70 65 63 74 65 64 20 62 6f 6f 6c 65 61 6e 20 62 75 74 20 67 6f 74 20 24 7b 22 6f 62 6a 65 63 74 22 21 3d 62 3f 62 3a 61 3f 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 3f 22 61 72 72 61 79 22 3a 62 3a 22 6e 75 6c 6c 22 7d 3a 20 24 7b 61 7d 60 29 3b 7d 72 65 74 75 72 6e 20 61 7d 3b 6c 65 74 20 6f 61 3b 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 71 61 28 Data Ascii: {}class ma{}Object.freeze(new la);Object.freeze(new ma);function na(a){if("boolean"!==typeof a){var b=typeof a;throw Error(`Expected boolean but got ${"object"!=b?b:a?Array.isArray(a)?"array":b:"null"}: ${a}`);}return a};let oa;function pa(a,b){return qa(
2024-03-18 16:22:10 UTC	1252	IN	Data Raw: 2d 31 5d 3b 65 6c 73 65 7b 69 66 28 6e 75 6c 6c 3d 3d 64 29 72 65 74 75 72 6e 3b 66 3d 61 5b 65 2b 28 2b 21 21 28 62 26 35 31 32 29 2d 31 29 5d 3d 7b 7d 3b 67 7c 3d 32 35 36 7d 66 5b 63 5d 3d 64 3b 63 3c 65 26 26 28 61 5b 63 2b 28 2b 21 21 28 62 26 35 31 32 29 2d 31 29 5d 3d 76 6f 69 64 20 30 29 3b 67 21 3d 3d 62 26 26 28 61 5b 47 5d 3d 67 29 7d 65 6c 73 65 20 61 5b 63 2b 28 2b 21 21 28 62 26 35 31 32 29 2d 31 29 5d 3d 64 2c 62 26 32 35 36 26 26 28 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 2c 63 20 69 6e 20 61 26 26 64 65 6c 65 74 65 20 61 5b 63 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 61 2c 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 21 3d 63 26 26 22 73 74 72 69 6e 67 22 21 3d 3d 74 79 70 65 6f 66 20 63 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 72 65 74 Data Ascii: -1];else{if(null==d)return;f=a[e+(+!!(b&512)-1)]={};g\|=256}f[c]=d;c<e&&(a[c+(+!!(b&512)-1)]=void 0);g!==b&&(a[G]=g)}else a[c+(+!!(b&512)-1)]=d,b&256&&(a=a[a.length-1],c in a&&delete a[c])}function N(a,b,c){if(null!=c&&"string"!==typeof c)throw Error();ret
2024-03-18 16:22:10 UTC	1252	IN	Data Raw: 2c 61 29 3b 70 26 26 62 2e 70 75 73 68 28 70 29 3b 20 72 65 74 75 72 6e 20 62 7d 3b 76 61 72 20 50 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 3d 21 31 29 7b 74 68 69 73 2e 6b 65 79 3d 61 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 62 3b 74 68 69 73 2e 76 61 6c 75 65 54 79 70 65 3d 22 62 6f 6f 6c 65 61 6e 22 7d 7d 3b 76 61 72 20 76 61 3d 6e 65 77 20 50 28 22 34 35 33 36 38 32 35 39 22 29 2c 77 61 3d 6e 65 77 20 50 28 22 34 35 33 35 37 31 35 36 22 2c 21 30 29 2c 78 61 3d 6e 65 77 20 50 28 22 34 35 33 35 30 38 39 30 22 29 2c 79 61 3d 6e 65 77 20 50 28 22 34 35 34 31 34 38 39 32 22 29 3b 63 6f 6e 73 74 20 7a 61 3d 52 65 67 45 78 70 28 22 61 64 5c 5c 5c 5c 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 5c 5c 5c 5c 2e 6e 65 74 2f 64 64 Data Ascii: ,a);p&&b.push(p); return b};var P=class{constructor(a,b=!1){this.key=a;this.defaultValue=b;this.valueType="boolean"}};var va=new P("45368259"),wa=new P("45357156",!0),xa=new P("45350890"),ya=new P("45414892");const za=RegExp("ad\\\\.doubleclick\\\\.net/dd
2024-03-18 16:22:10 UTC	1252	IN	Data Raw: 63 3d 61 2e 6c 65 6e 67 74 68 29 2c 64 3d 61 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 2c 30 3e 64 7c 7c 64 3e 63 3f 28 64 3d 63 2c 65 3d 22 22 29 3a 65 3d 61 2e 73 75 62 73 74 72 69 6e 67 28 64 2b 31 2c 63 29 2c 61 3d 5b 61 2e 73 6c 69 63 65 28 30 2c 64 29 2c 65 2c 61 2e 73 6c 69 63 65 28 63 29 5d 2c 63 3d 61 5b 31 5d 2c 61 5b 31 5d 3d 62 3f 63 3f 63 2b 22 26 22 2b 62 3a 62 3a 63 2c 62 3d 61 5b 30 5d 2b 28 61 5b 31 5d 3f 22 3f 22 2b 61 5b 31 5d 3a 22 22 29 2b 61 5b 32 5d 29 3a 62 3d 61 3b 72 65 74 75 72 6e 20 62 7d 3b 66 75 6e 63 74 69 6f 6e 20 48 61 28 29 7b 69 66 28 21 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 29 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 74 72 79 7b 63 6f 6e 73 74 20 61 3d 6e 65 77 20 55 69 6e 74 33 32 41 72 Data Ascii: c=a.length),d=a.indexOf("?"),0>d\|\|d>c?(d=c,e=""):e=a.substring(d+1,c),a=[a.slice(0,d),e,a.slice(c)],c=a[1],a[1]=b?c?c+"&"+b:b:c,b=a[0]+(a[1]?"?"+a[1]:"")+a[2]):b=a;return b};function Ha(){if(!globalThis.crypto)return Math.random();try{const a=new Uint32Ar
2024-03-18 16:22:10 UTC	1252	IN	Data Raw: 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 29 3b 76 61 72 20 61 3d 52 61 28 51 61 2c 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 29 3b 61 3d 61 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6a 63 2d 66 6c 61 67 73 22 29 7c 7c 22 22 3b 74 72 79 7b 63 6f 6e 73 74 20 62 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 61 29 5b 30 5d 3b 61 3d 22 22 3b 66 6f 72 28 6c 65 74 20 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 61 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 62 2e 63 68 61 72 43 6f 64 65 41 74 28 63 29 5e 22 5c 5c 75 30 30 30 33 5c 5c 75 30 30 30 37 5c 5c 75 30 30 30 33 5c 5c 75 30 30 30 37 5c 5c 62 5c 5c 75 30 30 30 34 5c 5c 75 30 30 30 34 5c 5c 75 30 30 30 36 5c 5c Data Ascii: {constructor(){super();var a=Ra(Qa,document.currentScript);a=a&&a.getAttribute("data-jc-flags")\|\|"";try{const b=JSON.parse(a)[0];a="";for(let c=0;c<b.length;c++)a+=String.fromCharCode(b.charCodeAt(c)^"\\u0003\\u0007\\u0003\\u0007\\b\\u0004\\u0004\\u0006\\
2024-03-18 16:22:10 UTC	1252	IN	Data Raw: 28 54 3d 28 62 3d 61 2e 6d 61 74 63 68 28 2f 5c 5c 62 64 65 69 64 3d 28 5b 5c 5c 64 2c 5d 2b 29 2f 29 29 3f 62 5b 31 5d 3a 22 22 29 7d 63 61 74 63 68 28 63 29 7b 7d 7d 62 3d 54 3b 61 3d 21 21 62 2e 69 6e 64 65 78 4f 66 26 26 30 3c 3d 62 2e 69 6e 64 65 78 4f 66 28 22 31 33 33 37 22 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 63 62 28 61 29 7b 61 26 26 55 26 26 56 28 29 26 26 28 55 2e 63 6c 65 61 72 4d 61 72 6b 73 28 60 67 6f 6f 67 5f 24 7b 61 2e 6c 61 62 65 6c 7d 5f 24 7b 61 2e 75 6e 69 71 75 65 49 64 7d 5f 73 74 61 72 74 60 29 2c 55 2e 63 6c 65 61 72 4d 61 72 6b 73 28 60 67 6f 6f 67 5f 24 7b 61 2e 6c 61 62 65 6c 7d 5f 24 7b 61 2e 75 6e 69 71 75 65 49 64 7d 5f 65 6e 64 60 29 29 7d 20 63 6c 61 73 73 20 64 62 7b 63 6f 6e 73 74 72 75 63 Data Ascii: (T=(b=a.match(/\\bdeid=([\\d,]+)/))?b[1]:"")}catch(c){}}b=T;a=!!b.indexOf&&0<=b.indexOf("1337")}return a});function cb(a){a&&U&&V()&&(U.clearMarks(`goog_${a.label}_${a.uniqueId}_start`),U.clearMarks(`goog_${a.label}_${a.uniqueId}_end`))} class db{construc
2024-03-18 16:22:10 UTC	1252	IN	Data Raw: 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 53 74 72 69 6e 67 28 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 67 62 28 61 29 7b 6c 65 74 20 62 3d 31 3b 66 6f 72 28 63 6f 6e 73 74 20 63 20 69 6e 20 61 2e 68 29 62 3d 63 2e 6c 65 6e 67 74 68 3e 62 3f 63 2e 6c 65 6e 67 74 68 3a 62 3b 72 65 74 75 72 6e 20 33 39 39 37 2d 62 2d 61 2e 69 2e 6c 65 6e 67 74 68 2d 31 7d 20 66 75 6e 63 74 69 6f 6e 20 68 62 28 61 2c 62 29 7b 6c 65 74 20 63 3d 22 68 74 74 70 73 3a 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 22 2b 62 2c 64 3d 67 62 28 61 29 2d 62 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3e 64 29 72 65 74 75 72 6e 22 22 3b 61 2e 67 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 2d 67 7d Data Ascii: ncodeURIComponent(String(a))}function gb(a){let b=1;for(const c in a.h)b=c.length>b?c.length:b;return 3997-b-a.i.length-1} function hb(a,b){let c="https://pagead2.googlesyndication.com"+b,d=gb(a)-b.length;if(0>d)return"";a.g.sort(function(f,g){return f-g}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49885	35.207.24.140	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:09 UTC	816	OUT	GET /ul_cb/sync?ssp=google&seller_network=google_&bid_id=7add3eaa-1fba-4245-b3d6-c9b0b0ed083e&initiator=me HTTP/1.1 Host: rtb-use.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=309d4a29-7edd-4b82-bd2d-13d7a4d90b1e; c=1710778929; tuuid_lu=1710778929
2024-03-18 16:22:10 UTC	784	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Mon, 18 Mar 2024 16:22:09 GMT Location: //cm.g.doubleclick.net/pixel?google_nid=media_force_communications_2007_ltd&google_hm=MJ1KKX7dS4K9LRPXpNkLHg==&no_redirect=1&google_cm=1&google_sc=1 Set-Cookie: tuuid=309d4a29-7edd-4b82-bd2d-13d7a4d90b1e; path=/; expires=Wed, 18-Mar-2026 16:22:09 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: tuuid_lu=1710778929; path=/; expires=Wed, 18-Mar-2026 16:22:09 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: ssh=!google,1710778929; path=/; expires=Wed, 18-Mar-2026 16:22:09 GMT; domain=.mfadsrvr.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49894	35.244.159.8	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:09 UTC	816	OUT	GET /w/1.0/cm?id=e818ca1e-0c23-caa8-0dd3-096b0ada08b7&ph=2d1251ae-7f3a-47cf-bd2a-2f288854a0ba&plm=5&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dopenx.com%26id%3D%7BOPENX_ID%7D HTTP/1.1 Host: u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:10 UTC	622	IN	HTTP/1.1 302 Found Set-Cookie: i=32cdd8af-eb5f-02bb-2efb-838ca9f354b0\|1710778930; Version=1; Expires=Tue, 18-Mar-2025 16:22:10 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://u.openx.net/w/1.0/cm?cc=1&id=e818ca1e-0c23-caa8-0dd3-096b0ada08b7&ph=2d1251ae-7f3a-47cf-bd2a-2f288854a0ba&plm=5&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dopenx.com%26id%3D%7BOPENX_ID%7D Date: Mon, 18 Mar 2024 16:22:10 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49893	35.207.24.140	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:09 UTC	818	OUT	GET /ul_cb/sync?ssp=intentiq&seller_network=google_&bid_id=7add3eaa-1fba-4245-b3d6-c9b0b0ed083e&initiator=me HTTP/1.1 Host: rtb-use.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1710778929; tuuid_lu=1710778929; tuuid=2393ecfc-a9f7-4cbe-bbea-03c6f5980eff
2024-03-18 16:22:10 UTC	770	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Mon, 18 Mar 2024 16:22:10 GMT Location: https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=2393ecfc-a9f7-4cbe-bbea-03c6f5980eff Set-Cookie: tuuid=2393ecfc-a9f7-4cbe-bbea-03c6f5980eff; path=/; expires=Wed, 18-Mar-2026 16:22:10 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: tuuid_lu=1710778930; path=/; expires=Wed, 18-Mar-2026 16:22:10 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: ssh=!intentiq,1710778930; path=/; expires=Wed, 18-Mar-2026 16:22:10 GMT; domain=.mfadsrvr.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49897	23.105.12.116	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:09 UTC	674	OUT	GET /api/sync?callerId=2 HTTP/1.1 Host: ssbsync-us.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:10 UTC	348	IN	HTTP/1.1 302 Found content-length: 0 date: Mon, 18 Mar 2024 16:22:09 GMT location: https://s.amazon-adsystem.com/ecm3?ex=smart.com&id=8457389007004702379&gdpr=0&gdpr_consent= set-cookie: pid=8457389007004702379; expires=Fri, 18 Apr 2025 16:21:10 GMT; domain=smartadserver.com; path=/; samesite=None; secure; samesite=none connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49889	35.208.249.213	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:09 UTC	635	OUT	GET /ju/cs/amazon?callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dbaidu.com%26id%3D%24UID HTTP/1.1 Host: trace.mediago.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:10 UTC	564	IN	HTTP/1.1 302 Found Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, POST, OPTIONS Location: https://s.amazon-adsystem.com/ecm3?ex=baidu.com&id=22210ca7211caf792c9xmt00ltx5lqro Set-Cookie: __mguid_=22210ca7211caf792c9xmt00ltx5lqro; Path=/; Domain=mediago.io; Max-Age=31536000; Secure; SameSite=None Date: Mon, 18 Mar 2024 16:22:10 GMT Content-Length: 8 Content-Type: text/plain; charset=utf-8 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:10 UTC	8	IN	Data Raw: 72 65 64 69 72 65 63 74 Data Ascii: redirect

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49887	67.231.251.190	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:09 UTC	644	OUT	GET /sspsync/?ssp=1601&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dadmedia.com%26id%3D%5BUID%5D HTTP/1.1 Host: pixel.s3xified.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:10 UTC	390	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Mon, 18 Mar 2024 16:22:10 GMT Content-Type: text/html Content-Length: 154 Connection: close Set-Cookie: admRtbUidCkey34334Ssp245=363ffa6c7ef48a007acb27f47e31ee34; Path=/; Expires=Thu, 16-Mar-34 16:22:10 GMT; domain=.s3xified.com Location: https://s.amazon-adsystem.com/ecm3?ex=admedia.com&id=363ffa6c7ef48a007acb27f47e31ee34
2024-03-18 16:22:10 UTC	154	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body bgcolor="white"><center><h1>302 Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49888	35.236.220.17	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:09 UTC	610	OUT	GET /amazon/https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsimpli.fi%26id%3D HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:10 UTC	914	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Mon, 18 Mar 2024 16:22:10 GMT Content-Type: text/html Content-Length: 142 Connection: close Set-Cookie: suid=D1B83109A4A44EA780D9F28ECD179B12; Path=/; domain=simpli.fi; Expires=Wed, 19-Mar-25 16:22:10 GMT; SameSite=none; Secure; Set-Cookie: suid_legacy=D1B83109A4A44EA780D9F28ECD179B12; Path=/; domain=simpli.fi; Expires=Wed, 19-Mar-25 16:22:10 GMT; Secure; Location: https://s.amazon-adsystem.com/ecm3?id=D1B83109A4A44EA780D9F28ECD179B12&ex=simpli.fi&status=ok Expires: Sun, 17 Mar 2024 16:22:10 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-03-18 16:22:10 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49896	142.251.40.226	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:10 UTC	1365	OUT	GET /pcs/view?xai=AKAOjsv6jmsRCojlbkN682r2XITg2fmg8pT12__nUiP792DJDQ2y6ttJ2KWuCkATeqVFZ8JjbUaah4Jgbk5zXp35WXvemlmYAAL1PGt5uOkbNxsHZv7HtOXPRejXKVLar5-L1wSbvaLFyChJDBvkfjFBMtbfMMU--YwAg5KlKDwdS3TctluaXKc02jnGKygWh3MaId4MgbDD_JTVjmkVglNaPMoT-JHn0esBNOjOQRBLN-YVS8D3h1IAkkEnmjTPCqZY9Ala-UaeHSXw1nIXtq7bayhEUVjl_AO3NxNQCSN9B2TcdXLAx9erlaezwmCkAl96CMmhnW3ZBC5Zdhmre4RJqWfg74GEsYpaj7BXBmLOaAOYRO8FvUGkYv5OCfuCyyJ2tC2I_vKUkqUEdteMSp-Srj59-QM&sai=AMfl-YRsFIwyPpKiEyF-gUBZCpZPceKWZ-wYwGvwudJpk_jk_w46BYOwoy2yf1ZHk0IvgiScQ2bx_O1VMvK2JL7HvvkN3igGk3U35Gz4c0zcwCleOpOjfc6JXLxwoJHZHRUwLWmC0OwYBkT-na52r5MGScwY&sig=Cg0ArKJSzJjgNueLoiPPEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-03-18 16:22:10 UTC	1153	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 18 Mar 2024 16:22:10 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUmBwb8a0IF1bfDxlKszZVhCfg7HvkCMxJDDevymKbaYSB-og8vMKZxrRd8dvAk; expires=Wed, 18-Mar-2026 16:22:10 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 18 Mar 2024 16:22:10 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49895	142.251.40.226	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:10 UTC	1365	OUT	GET /pcs/view?xai=AKAOjstm4CtLRJCVxa-gUCbNLYVuHIr7Ohfy1frk2cE3O1LthHOrMlqkSKb0OoJSJuk39-jOg-sEUZdDlT2TEL9nOiKxYPgIqI7QgSpqmBHobGLMILxSdWX05PyfCLaOm5GgzFM567x5UP3PGn4o15DQ6FJgE2bS6kqyCoVoMFDvC06r2kvVIJcp01jPbesvqyL-ZNc6dU00R1tXxZIjJnEwq3__tqtq__by0RbrqDatpA5j6KmDEhFaLPZl0tLQH9mrBasQUR7CHKhHO3tCAasKF6Ru-kkfXfKY2zahCYviIb5L16T2gqYT_I3idLjJYdkoXidcJSB1HUROW7DcLGfpHbLBlChOvKhBx5didi6MRPtFr4pdHupt1X_40XE_y6k77kvmkc9nQi4_w7j3PVwEhftq8A4&sai=AMfl-YSMIgkC2KRs8axSIj7Tic2S6pY_Fr-kOqsTR-c1bLVd3-HdJqDYgQcI4nxwQi1kUVvqUUqu1lgGfhAMlNQL_X16dvATca_Oi0d5Z1ier9YgppnIY1K-M1VYea75CzCfztSUMOgb0sUDrCs6t39vlryW&sig=Cg0ArKJSzJIZnHDrpwSgEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-03-18 16:22:10 UTC	1153	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 18 Mar 2024 16:22:10 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUl9ekYwss4eOcdLFF--Kr3rabI98v2UDLVCiR4sFsYeX-RuozpQeBbD-r3Dbgs; expires=Wed, 18-Mar-2026 16:22:10 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 18 Mar 2024 16:22:10 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49890	54.144.102.188	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:10 UTC	636	OUT	GET /cookie-sync/amzn?r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dbeeswax.com%26id%3D%24UID HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:10 UTC	447	IN	HTTP/1.1 303 See Other Date: Mon, 18 Mar 2024 16:22:10 GMT location: https://match.prod.bidr.io/cookie-sync/amzn?r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dbeeswax.com%26id%3D%24UID&_bee_ppp=1 Server: gunicorn set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Mon, 18 Mar 2024 16:32:10 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49891	50.31.142.191	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:10 UTC	644	OUT	GET /usersync/amazon_tam/?cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__ HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:10 UTC	629	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 134 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: /usersync/amazon_tam/?cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__&s=2 P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=pjBc0Ie5PlrpUmpLY0ML; Path=/; Domain=zemanta.com; Expires=Tue, 18 Mar 2025 16:22:10 GMT; Max-Age=31536000; Secure; SameSite=None Date: Mon, 18 Mar 2024 16:22:10 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-03-18 16:22:10 UTC	134	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 2f 75 73 65 72 73 79 6e 63 2f 61 6d 61 7a 6f 6e 5f 74 61 6d 2f 3f 63 62 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 25 32 46 65 63 6d 33 25 33 46 65 78 25 33 44 6f 75 74 62 72 61 69 6e 2e 63 6f 6d 25 32 36 69 64 25 33 44 5f 5f 5a 55 49 44 5f 5f 26 61 6d 70 3b 73 3d 32 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="/usersync/amazon_tam/?cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__&s=2">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49886	35.211.178.172	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:10 UTC	638	OUT	GET /check_uuid/https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dmediagrid.com%26id%3D%24%7BBSW_UUID%7D HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:10 UTC	830	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 18 Mar 2024 16:22:10 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://x.bidswitch.net/ul_cb/check_uuid/https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dmediagrid.com%26id%3D%24%7BBSW_UUID%7D Set-Cookie: tuuid=2b28c092-dd0b-42bb-b143-c15d16fc69ab; path=/; expires=Tue, 18-Mar-2025 16:22:10 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1710778930; path=/; expires=Tue, 18-Mar-2025 16:22:10 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1710778930; path=/; expires=Tue, 18-Mar-2025 16:22:10 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1710778930; path=/; expires=Tue, 18-Mar-2025 16:22:10 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49900	130.211.23.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:10 UTC	347	OUT	GET /country HTTP/1.1 Host: api.btloader.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:10 UTC	300	IN	HTTP/1.1 200 OK Cache-Control: private, max-age=300, stale-while-revalidate=600, stale-if-error=600 Content-Type: application/json Vary: Origin Date: Mon, 18 Mar 2024 16:22:10 GMT Content-Length: 16 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:10 UTC	16	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d Data Ascii: {"country":"US"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49901	23.22.53.123	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:10 UTC	757	OUT	GET /beacon/amazon?url=https://s.amazon-adsystem.com/ecm3?id=$UID&ex=sovrn.com HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv
2024-03-18 16:22:10 UTC	266	IN	HTTP/1.1 302 Moved Temporarily Server: awselb/2.0 Date: Mon, 18 Mar 2024 16:22:10 GMT Content-Type: text/html Content-Length: 110 Connection: close Location: https://ce.lijit.com:443/beacon/amazon?url=https://s.amazon-adsystem.com/ecm3?id=$UID&ex=sovrn.com
2024-03-18 16:22:10 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49902	142.250.176.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:10 UTC	834	OUT	GET /pixel?google_nid=media_force_communications_2007_ltd&google_hm=MJ1KKX7dS4K9LRPXpNkLHg==&no_redirect=1&google_cm=1&google_sc=1 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlwOKvmHNBSt4q4P7T7dRMlZTz-L1taujFMycBNUlPxVWgahBkaQBCHFXWT2Zo
2024-03-18 16:22:10 UTC	677	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://rtb.mfadsrvr.com/sync?ssp=google&no_redirect=1&google_gid=CAESEI8maQdry5oQlan8onqO4PA&google_cver=1 Date: Mon, 18 Mar 2024 16:22:10 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 316 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:10 UTC	316	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 72 74 62 2e 6d 66 61 64 73 72 76 72 2e 63 6f 6d 2f 73 79 6e 63 3f 73 73 70 3d 67 6f 6f 67 6c 65 26 61 6d 70 3b 6e 6f 5f 72 65 64 69 72 65 63 74 3d 31 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 67 69 64 3d 43 41 45 53 45 49 38 6d 61 51 64 72 79 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://rtb.mfadsrvr.com/sync?ssp=google&no_redirect=1&google_gid=CAESEI8maQdry

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49899	18.238.79.3	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:10 UTC	389	OUT	GET /0a0dde8b5c2c6b867ddb968a93f6fcd0.webp HTTP/1.1 Host: de9a11s35xj3d.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:10 UTC	644	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 70272 Connection: close Date: Mon, 18 Mar 2024 16:22:11 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: Access-Control-Allow-Origin Access-Control-Max-Age: 3000 Last-Modified: Tue, 05 Mar 2024 10:43:01 GMT ETag: "4ff03c4b83f6fbf0bc586d64a2bbe796" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 03908ad3a89c7a9cf2855c5435b9497a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P5 X-Amz-Cf-Id: k8FbO4M-dly7wry2kCqGj1KTo5aUJDl61muXl00fPY7pzekdGakyWw==
2024-03-18 16:22:10 UTC	8192	IN	Data Raw: 52 49 46 46 78 12 01 00 57 45 42 50 56 50 38 20 6c 12 01 00 30 d9 05 9d 01 2a b0 04 73 02 3e 6d 32 95 47 24 23 24 a6 a8 d3 2a c0 d0 0d 89 63 69 82 ca 9c fb d9 fc 69 62 5c 17 69 07 75 fc a3 b9 03 65 d9 4b 11 bc dc ac 39 73 52 af 29 ac d7 ff 3b c2 9f e0 3c 01 bc bb fa 77 fb bf 55 0f 26 8e ea 1e 9b fe 57 d8 17 f9 f7 f9 8f 24 fe 61 74 02 ff 51 e8 71 fa 6f f9 fe 9e 3f e6 f8 d6 fd 83 fe 2f a9 6e 98 dd 4f ea 6f f5 f0 6e b9 ff 1f cb e7 94 7c ef fd d6 94 d8 fa 74 a6 79 7e e1 ff 0f ee 2f 61 be a9 7f 8c 6f 72 f4 7f d3 ab 1d 86 f1 97 e5 5f bf 9f f8 3d 4c fc e7 fc 5f fe 3f f1 fc 93 fc e7 dd e3 dd df f3 1e 9c 7e 5a f7 d7 e8 d7 e0 af ea 7f 9b ff 3b ed 2f 95 3f 9f 78 96 7e 7f fd 87 8f 07 9f e1 12 fd df da df 70 3f 49 ff 77 e8 db fb bf a6 fd d3 9e a4 1f ae 7d 5a 7f e9 e5 Data Ascii: RIFFxWEBPVP8 l0s>m2G$#$ciib\iueK9sR);<wU&W$atQqo?/nOon\|ty~/aor_=L_?~Z;/?x~p?Iw}Z
2024-03-18 16:22:10 UTC	16384	IN	Data Raw: e9 84 c9 be 2c 48 fb 42 11 10 78 3b 3a e7 a8 ca 66 2b 47 b6 c9 5d 93 50 32 73 3f cf b2 0a 0e 60 ee e4 2d ef ea ac 9c a6 5f 0a 87 77 e5 ff c5 38 c4 73 f5 d3 97 d1 26 08 93 1a 74 c7 bc 38 41 1f d2 23 33 63 a2 c7 d0 4d 78 cd 59 64 a6 a7 80 c9 b7 12 de a9 0e 3e c6 56 25 c9 e6 e3 d3 f5 67 30 63 a9 84 43 5c 6d 41 61 69 85 47 55 a8 8e bf 19 ac 68 0e 69 5c 29 09 22 75 dc 9f 51 36 65 af 59 2e 51 a0 ed ef 6e e0 2c 9e 3c aa 8e eb 5c f0 56 43 11 8a 74 3b e8 c3 fe 80 3a 7b 2f fc a9 2b e3 89 61 8c a6 68 1a 94 44 90 5e a0 1f 68 09 72 f8 8a 60 bd 6f 6f 16 9e 3f 59 a1 75 41 32 4d 7a f2 cf 5c b7 ff e0 a1 a9 6a 70 9f 6d b7 3a 92 ef 49 37 9a ab 98 eb ab 10 a0 fc 14 21 45 49 50 01 68 61 a1 80 a2 6f 79 a9 5f 59 6a a8 52 99 fd 88 86 10 25 9d d7 ab 39 fc 7d dc 7a 8e 26 34 52 6a Data Ascii: ,HBx;:f+G]P2s?`-_w8s&t8A#3cMxYd>V%g0cC\mAaiGUhi\)"uQ6eY.Qn,<\VCt;:{/+ahD^hr`oo?YuA2Mz\jpm:I7!EIPhaoy_YjR%9}z&4Rj
2024-03-18 16:22:10 UTC	16384	IN	Data Raw: fe bf 08 c1 b8 10 10 97 81 e9 46 72 f2 7e c6 da 13 ae 0f c1 eb 63 c9 c4 d4 a3 15 d8 af 35 c2 f6 cd 5c 81 d5 b0 d3 39 76 f3 25 0a a5 a1 dd a1 d2 70 07 b0 71 c1 77 9c f4 6c 96 70 aa 2f 1f 82 7a 63 ce a0 b9 78 93 fc 69 12 a1 ed 1f 18 89 e3 0d 3c 29 f4 85 69 51 61 fc 2e 2b 93 b7 c0 d9 58 c8 2b fa d0 8c f9 82 bf 32 eb a0 47 9d 34 5e 14 2e 79 25 09 f6 ab e2 a3 fc 08 74 e9 9f 4a 5b 8a 6c f3 ad b4 1b 38 a7 9d bf 19 85 b7 bc 37 27 e3 e5 1b d2 36 6b c1 e9 7b 00 3d 94 6c 3c 0c 82 b1 ab 09 37 13 ee 70 55 9a 98 66 84 55 7c b9 45 9c 38 ea 30 67 4b 09 7c 27 ce 9d 55 ea dd 89 ef 55 8b e4 ad 11 c9 20 15 08 71 71 00 90 ae 84 8c e5 7d 6d eb 08 df cc 71 b1 ad 4d 18 67 74 34 20 87 09 ba 5d 48 0d 39 db 79 07 88 0d c2 a6 76 e4 28 b3 3b 75 3d 30 c7 3f 36 76 46 69 81 21 ff 24 37 Data Ascii: Fr~c5\9v%pqwlp/zcxi<)iQa.+X+2G4^.y%tJ[l87'6k{=l<7pUfU\|E80gK\|'UU qq}mqMgt4 ]H9yv(;u=0?6vFi!$7
2024-03-18 16:22:10 UTC	16384	IN	Data Raw: 79 39 7f 6e 46 7e 27 4c ef 75 38 72 74 5a e4 a7 8a e6 c8 c2 0b d5 38 78 d1 b5 5a 97 51 21 8b 92 e8 0d da 03 07 cf 2a 34 d7 44 f4 81 e3 db d7 93 eb 6f 71 e4 91 f7 7c 7f 50 42 fc 2b c8 35 f4 b7 1f 52 2a 10 de ae 04 c7 7c 00 7f 9e 1c 75 1d 0c 8c 37 25 bc cd 4c a6 0c 1d e4 84 00 19 25 10 2f da 94 24 4c 2e 60 68 d2 95 1a 5d 48 aa 96 46 87 fc 3d 6c ee f7 ea 76 84 11 1e 2c 16 8b 23 0a 8a 6f c4 ba f2 42 cd 7a 3c cb 1f 3f 54 b0 5a be c5 3a b2 ac 45 0e fb c7 ee a7 5e a6 3c 2d 2a 3d 66 1c 22 07 de 1b a3 fa 21 94 98 7c b7 92 85 a7 3a f9 26 d3 c9 82 33 af c1 96 a0 68 be 44 df 66 af 05 98 e5 ad d5 28 39 84 e1 02 ea 4b 80 58 8f 9f 0e 95 a7 7a c4 fa 31 04 e0 2f 87 28 79 24 d6 8a 0e 8b ce ac 0e 2e 49 cd d5 b9 87 b6 e1 1a 20 fe 3f b0 82 42 71 cf 75 53 6f c6 3f ed 79 7b 6c Data Ascii: y9nF~'Lu8rtZ8xZQ!4Doq\|PB+5R\|u7%L%/$L.`h]HF=lv,#oBz<?TZ:E^<-*=f"!\|:&3hDf(9KXz1/(y$.I ?BquSo?y{l
2024-03-18 16:22:10 UTC	4915	IN	Data Raw: 1a 83 19 60 4a 7b 78 1c f3 ce 6c 1e b1 52 16 2d 42 9f f3 ef 9f d6 60 80 c1 e4 8a fa 71 eb c8 3f 7e 15 c2 16 d7 68 51 b7 ce a3 6d f7 9c 40 26 72 57 85 d2 52 ff 02 ca 16 55 e3 a4 1b ae f2 18 45 ce 76 43 ba 39 e5 f5 5b 05 62 62 d2 a4 37 42 c3 1b ee 8b d2 0a 2f 66 52 a3 37 59 8d 7f 51 3c de 3f 54 3f 78 75 8e 29 85 dc 79 d5 1e 2d 1b d1 18 8d 2f b1 68 e6 2d 24 83 35 20 31 60 59 e2 56 1d de 8b 06 cb d5 02 57 11 d7 eb 2f 50 b0 7b 51 8d 00 e4 bb 65 03 36 13 4c cc e0 d8 e1 6b 51 7a 83 cb 89 88 b8 4b c2 2e 9d c0 77 e3 51 4a 6c 16 fd 08 e4 ef 56 51 b6 4d 75 33 01 fe 86 a2 76 72 33 23 d1 94 6e 86 92 26 bf 9c 6a 12 4f 91 91 22 c0 e7 4d 75 c9 62 31 49 77 d6 db 2d 8f b9 e6 79 96 eb 71 44 6c 8f 18 93 7d 1b 60 95 d2 a1 3c 7c 38 2d 0c 9a d9 62 52 d6 a4 46 97 39 2d a5 09 4b Data Ascii: `J{xlR-B`q?~hQm@&rWRUEvC9[bb7B/fR7YQ<?T?xu)y-/h-$5 1`YVW/P{Qe6LkQzK.wQJlVQMu3vr3#n&jO"Mub1Iw-yqDl}`<\|8-bRF9-K
2024-03-18 16:22:10 UTC	8013	IN	Data Raw: ca e3 41 4f 77 4c 52 5b 0a 88 5b 69 a9 0a 8d 1f 6a 4f b9 c7 e3 6f 6c d1 44 81 2e 89 f8 2c 60 20 b5 37 04 45 e0 df 23 a0 f2 bc e3 7f d7 8f 93 4a 18 cb f0 f6 5c 45 93 dd 70 e5 d8 87 8c 27 c0 31 7f 31 61 fc ce d9 9d 84 27 4b f6 fe de 14 9f 72 98 69 37 da ff 1f 1c ef 5f b0 a9 31 bc 3f 46 2f ce 51 39 97 f2 37 36 f5 54 5a f6 2f 7c a0 a4 f5 e0 36 6a 6a 23 9b f9 4f 7e 49 b5 ab 0b 55 1d b3 df e6 3b 62 5c 02 e7 a8 94 b9 74 14 01 df 12 89 78 8f 4f 26 bb 51 f4 4c 3e e8 2b eb a4 79 a7 13 fa cf cc 3f d4 52 fe c1 ec ec b5 db b3 d0 ca 7a d0 0b ee ec 6f 42 8b da 8f 2a b1 74 8f 58 bf 6e e6 80 49 c8 fb 2b 6b fb ab f0 2b 72 5f fb f3 8c a2 77 90 2b f2 b8 6d fd 3c bc f6 6b b0 ac 86 01 9a a8 8a 20 91 42 a1 56 61 08 68 c7 bb b6 c8 3c 18 8c 6a 42 07 19 ed 4b 81 6f 39 c5 75 91 40 Data Ascii: AOwLR[[ijOolD.,` 7E#J\Ep'11a'Kri7_1?F/Q976TZ/\|6jj#O~IU;b\txO&QL>+y?RzoB*tXnI+k+r_w+m<k BVah<jBKo9u@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49903	35.244.159.8	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:10 UTC	880	OUT	GET /w/1.0/cm?cc=1&id=e818ca1e-0c23-caa8-0dd3-096b0ada08b7&ph=2d1251ae-7f3a-47cf-bd2a-2f288854a0ba&plm=5&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dopenx.com%26id%3D%7BOPENX_ID%7D HTTP/1.1 Host: u.openx.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=32cdd8af-eb5f-02bb-2efb-838ca9f354b0\|1710778930
2024-03-18 16:22:10 UTC	620	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Set-Cookie: i=32cdd8af-eb5f-02bb-2efb-838ca9f354b0\|1710778930; Version=1; Expires=Tue, 18-Mar-2025 16:22:10 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Set-Cookie: pd=v2\|1710778930\|vMgavPkWgy; Version=1; Expires=Tue, 02-Apr-2024 16:22:10 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Date: Mon, 18 Mar 2024 16:22:10 GMT Content-Type: text/html Content-Length: 824 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:10 UTC	824	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 3e 69 66 28 22 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 22 69 6e 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 66 65 61 74 75 72 65 50 6f 6c 69 63 79 2e 61 6c 6c 6f 77 73 46 65 61 74 75 72 65 28 22 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 22 29 29 64 6f 63 75 6d 65 6e 74 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 28 29 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 65 63 6d 33 3f 65 78 3d 6f 70 65 6e 78 2e 63 6f 6d 26 69 64 3d 62 39 62 37 39 62 38 62 2d 35 65 37 32 Data Ascii: <html><head><title>Pixels</title></head><body><script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script><img src="https://s.amazon-adsystem.com/ecm3?ex=openx.com&id=b9b79b8b-5e72

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49904	209.54.182.161	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:10 UTC	762	OUT	GET /ecm3?ex=smart.com&id=8457389007004702379&gdpr=0&gdpr_consent= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
2024-03-18 16:22:10 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 18 Mar 2024 16:22:10 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: AYF541N9KM6PARS0SQRG Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-18 16:22:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49905	18.173.132.107	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:10 UTC	731	OUT	GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=2393ecfc-a9f7-4cbe-bbea-03c6f5980eff HTTP/1.1 Host: sync.intentiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:10 UTC	1031	IN	HTTP/1.1 302 Content-Type: image/gif Content-Length: 43 Connection: close Date: Mon, 18 Mar 2024 16:22:10 GMT Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Wed, 18 Mar 2026 16:22:10 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Location: https://sync1.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=2393ecfc-a9f7-4cbe-bbea-03c6f5980eff&ckls=true&ci=DI2XbXq1hw&nc=false&trid=829089394 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Patent: https://www.almondnet.com/ip Set-Cookie: intentIQ=DI2XbXq1hw; Domain=.intentiq.com; Expires=Wed, 18 Mar 2026 16:22:10 GMT; Path=/; Secure; SameSite=None X-Cache: Miss from cloudfront Via: 1.1 4bcc80622a10d0ee4a55e5fd4f387c84.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: OWexD5uMaExW-Ewt8p8Hx-1rTxis-ietWY_nJjyDOKxH7a1nLL1_iQ==
2024-03-18 16:22:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49906	209.54.182.161	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:10 UTC	653	OUT	GET /ecm3?ex=admedia.com&id=363ffa6c7ef48a007acb27f47e31ee34 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
2024-03-18 16:22:10 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 18 Mar 2024 16:22:10 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: TV32BHMA03MWZ0WP1EVS Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-18 16:22:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49907	209.54.182.161	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:10 UTC	661	OUT	GET /ecm3?id=D1B83109A4A44EA780D9F28ECD179B12&ex=simpli.fi&status=ok HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
2024-03-18 16:22:10 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 18 Mar 2024 16:22:10 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: FN5AG5HBKS8JYB2Y9PVW Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-18 16:22:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49909	54.144.102.188	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:10 UTC	678	OUT	GET /cookie-sync/amzn?r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dbeeswax.com%26id%3D%24UID&_bee_ppp=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: checkForPermission=ok
2024-03-18 16:22:10 UTC	632	IN	HTTP/1.1 303 See Other Date: Mon, 18 Mar 2024 16:22:10 GMT location: https://s.amazon-adsystem.com/ecm3?id=AAARQ07L8NQAABPzJYe3uw&ex=beeswax.com Server: gunicorn set-cookie: bito=AAARQ07L8NQAABPzJYe3uw; Domain=bidr.io; expires=Thu, 17 Apr 2025 12:22:10 GMT; Path=/; SameSite=None; Secure set-cookie: bitoIsSecure=ok; Domain=bidr.io; expires=Thu, 17 Apr 2025 12:22:10 GMT; Path=/; SameSite=None; Secure set-cookie: checkForPermission=""; Domain=bidr.io; expires=Thu, 01 May 2008 00:00:00 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49910	209.54.182.161	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:10 UTC	651	OUT	GET /ecm3?ex=baidu.com&id=22210ca7211caf792c9xmt00ltx5lqro HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
2024-03-18 16:22:10 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 18 Mar 2024 16:22:10 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: Y5SMM98153J1E175S5RN Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-18 16:22:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49912	35.71.139.29	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:10 UTC	794	OUT	GET /getuid?redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3D3lift.com%26id%3D%24UID HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; tluid=3712186363653833678472
2024-03-18 16:22:10 UTC	674	IN	HTTP/1.1 302 Found Date: Mon, 18 Mar 2024 16:22:10 GMT Content-Length: 0 Connection: close Location: https://s.amazon-adsystem.com/ecm3?ex=3lift.com&id=3712186363653833678472 Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3712186363653833678472; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Sun, 16 Jun 2024 16:22:10 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3712186363653833678472; Max-Age=7776000; Expires=Sun, 16 Jun 2024 16:22:10 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49913	142.250.65.162	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:10 UTC	1183	OUT	GET /pcs/view?xai=AKAOjsv6jmsRCojlbkN682r2XITg2fmg8pT12__nUiP792DJDQ2y6ttJ2KWuCkATeqVFZ8JjbUaah4Jgbk5zXp35WXvemlmYAAL1PGt5uOkbNxsHZv7HtOXPRejXKVLar5-L1wSbvaLFyChJDBvkfjFBMtbfMMU--YwAg5KlKDwdS3TctluaXKc02jnGKygWh3MaId4MgbDD_JTVjmkVglNaPMoT-JHn0esBNOjOQRBLN-YVS8D3h1IAkkEnmjTPCqZY9Ala-UaeHSXw1nIXtq7bayhEUVjl_AO3NxNQCSN9B2TcdXLAx9erlaezwmCkAl96CMmhnW3ZBC5Zdhmre4RJqWfg74GEsYpaj7BXBmLOaAOYRO8FvUGkYv5OCfuCyyJ2tC2I_vKUkqUEdteMSp-Srj59-QM&sai=AMfl-YRsFIwyPpKiEyF-gUBZCpZPceKWZ-wYwGvwudJpk_jk_w46BYOwoy2yf1ZHk0IvgiScQ2bx_O1VMvK2JL7HvvkN3igGk3U35Gz4c0zcwCleOpOjfc6JXLxwoJHZHRUwLWmC0OwYBkT-na52r5MGScwY&sig=Cg0ArKJSzJjgNueLoiPPEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUl9ekYwss4eOcdLFF--Kr3rabI98v2UDLVCiR4sFsYeX-RuozpQeBbD-r3Dbgs
2024-03-18 16:22:10 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 18 Mar 2024 16:22:10 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49914	142.250.65.162	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:10 UTC	1183	OUT	GET /pcs/view?xai=AKAOjstm4CtLRJCVxa-gUCbNLYVuHIr7Ohfy1frk2cE3O1LthHOrMlqkSKb0OoJSJuk39-jOg-sEUZdDlT2TEL9nOiKxYPgIqI7QgSpqmBHobGLMILxSdWX05PyfCLaOm5GgzFM567x5UP3PGn4o15DQ6FJgE2bS6kqyCoVoMFDvC06r2kvVIJcp01jPbesvqyL-ZNc6dU00R1tXxZIjJnEwq3__tqtq__by0RbrqDatpA5j6KmDEhFaLPZl0tLQH9mrBasQUR7CHKhHO3tCAasKF6Ru-kkfXfKY2zahCYviIb5L16T2gqYT_I3idLjJYdkoXidcJSB1HUROW7DcLGfpHbLBlChOvKhBx5didi6MRPtFr4pdHupt1X_40XE_y6k77kvmkc9nQi4_w7j3PVwEhftq8A4&sai=AMfl-YSMIgkC2KRs8axSIj7Tic2S6pY_Fr-kOqsTR-c1bLVd3-HdJqDYgQcI4nxwQi1kUVvqUUqu1lgGfhAMlNQL_X16dvATca_Oi0d5Z1ier9YgppnIY1K-M1VYea75CzCfztSUMOgb0sUDrCs6t39vlryW&sig=Cg0ArKJSzJIZnHDrpwSgEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUl9ekYwss4eOcdLFF--Kr3rabI98v2UDLVCiR4sFsYeX-RuozpQeBbD-r3Dbgs
2024-03-18 16:22:10 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 18 Mar 2024 16:22:10 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49908	50.31.142.191	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:10 UTC	683	OUT	GET /usersync/amazon_tam/?cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__&s=2 HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=pjBc0Ie5PlrpUmpLY0ML
2024-03-18 16:22:10 UTC	596	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 101 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://s.amazon-adsystem.com/ecm3?ex=outbrain.com&id=pjBc0Ie5PlrpUmpLY0ML P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=pjBc0Ie5PlrpUmpLY0ML; Path=/; Domain=zemanta.com; Expires=Tue, 18 Mar 2025 16:22:10 GMT; Max-Age=31536000; Secure; SameSite=None Date: Mon, 18 Mar 2024 16:22:10 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-03-18 16:22:10 UTC	101	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 65 63 6d 33 3f 65 78 3d 6f 75 74 62 72 61 69 6e 2e 63 6f 6d 26 61 6d 70 3b 69 64 3d 70 6a 42 63 30 49 65 35 50 6c 72 70 55 6d 70 4c 59 30 4d 4c 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://s.amazon-adsystem.com/ecm3?ex=outbrain.com&id=pjBc0Ie5PlrpUmpLY0ML">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49911	35.211.178.172	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:10 UTC	731	OUT	GET /ul_cb/check_uuid/https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dmediagrid.com%26id%3D%24%7BBSW_UUID%7D HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=2b28c092-dd0b-42bb-b143-c15d16fc69ab; c=1710778930; tuuid_lu=1710778930
2024-03-18 16:22:10 UTC	554	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 18 Mar 2024 16:22:10 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://s.amazon-adsystem.com/ecm3?ex=mediagrid.com&id=2b28c092-dd0b-42bb-b143-c15d16fc69ab Set-Cookie: tuuid=2b28c092-dd0b-42bb-b143-c15d16fc69ab; path=/; expires=Tue, 18-Mar-2025 16:22:10 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1710778930; path=/; expires=Tue, 18-Mar-2025 16:22:10 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49916	104.36.115.113	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:10 UTC	673	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=1205808&p=156011&s=165626&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:10 UTC	867	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=1; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=156011:2; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1711929600%3A201_263%7C1710806400%3A248%7C1711324800%3A265; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1711929600%3A13_54_250_71_220_21; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Mon, 18 Mar 2024 16:22:09 GMT Content-Length: 1736 Connection: close
2024-03-18 16:22:10 UTC	1736	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 70 6d 65 62 26 67 6f 6f 67 6c 65 5f 73 63 3d 31 26 67 6f 6f 67 6c 65 5f 68 6d 3d 4a 76 78 62 78 4d 44 71 53 42 36 73 62 53 6c 2d 39 4a 4d 4f 4e 51 25 33 44 25 33 44 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 33 33 37 31 26 70 61 72 74 6e 65 72 5f 64 65 76 69 Data Ascii: PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=JvxbxMDqSB6sbSl-9JMONQ%3D%3D&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner_devi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49920	52.86.98.54	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:10 UTC	757	OUT	GET /beacon/amazon?url=https://s.amazon-adsystem.com/ecm3?id=$UID&ex=sovrn.com HTTP/1.1 Host: ce.lijit.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv
2024-03-18 16:22:10 UTC	709	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:10 GMT Content-Type: text/html Content-Length: 1259 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: ljtrtbexp=eJyrVrIwULIyNDc0tLSwMDU20FEysUTlW5ih8o0gfAMLIyNDMN8cIm9sYWxubFALAJvzEE8%3D; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:10 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:10 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Vary: Accept-Encoding, User-Agent
2024-03-18 16:22:10 UTC	1259	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 0a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 73 6f 76 72 6e 20 42 65 61 63 6f 6e 20 28 36 20 53 65 6e 74 20 2f 20 35 20 4d 61 78 29 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 63 6c 61 73 73 3d 27 73 6f 76 72 6e 2d 62 65 61 63 6f 6e 2d 70 69 78 65 6c 27 20 73 74 79 6c 65 3d 27 77 69 64 74 68 3a 30 70 78 3b 20 68 65 69 67 68 74 3a 30 70 78 3b 27 20 77 69 64 74 68 3d 27 30 27 20 68 65 69 67 68 74 3d 27 30 27 20 73 72 63 3d 27 68 74 74 70 73 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""https://www.w3.org/TR/html4/strict.dtd"><html><head><title>sovrn Beacon (6 Sent / 5 Max)</title></head><body><img class='sovrn-beacon-pixel' style='width:0px; height:0px;' width='0' height='0' src='https

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49919	35.207.24.140	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:10 UTC	819	OUT	GET /sync?ssp=google&no_redirect=1&google_gid=CAESEI8maQdry5oQlan8onqO4PA&google_cver=1 HTTP/1.1 Host: rtb.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1710778929; tuuid=2393ecfc-a9f7-4cbe-bbea-03c6f5980eff; tuuid_lu=1710778930; ssh=!intentiq,1710778930
2024-03-18 16:22:11 UTC	246	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Date: Mon, 18 Mar 2024 16:22:10 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49918	162.19.138.120	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:10 UTC	760	OUT	GET /i/495/0.gif?gdpr_consent=&gdpr=&callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dinmobi.com%26id%3D%7BID5UID%7D HTTP/1.1 Host: id5-sync.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:11 UTC	1469	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: id5=8c82d760-97a6-7b38-a656-a04ba9b9cc68#1710778931072#1; Max-Age=300; Expires=Mon, 18-Mar-2024 16:27:11 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dinmobi.com%26id%3D%7BID5UID%7D; Max-Age=300; Expires=Mon, 18-Mar-2024 16:27:11 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://id5-sync.com/c/495/0/0/1.gif?gdpr=0&gdpr_consent=&us_privacy= transfer-encoding: chunked date: Mon, 18 Mar 2024 16:22:10 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-03-18 16:22:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49921	209.54.182.161	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:10 UTC	744	OUT	GET /ecm3?ex=3lift.com&id=3712186363653833678472 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
2024-03-18 16:22:11 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 18 Mar 2024 16:22:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 9SHCEJ7WBT57AN3YB0HA Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-18 16:22:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49923	209.54.182.161	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:10 UTC	853	OUT	GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&redir=true&gdpr=0&gdpr_consent= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
2024-03-18 16:22:11 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 18 Mar 2024 16:22:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: QF5R71E706DTFXEY3F1T Set-Cookie: ad-id=AylOXD6udEkArigs61cOqe8; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 16:22:11 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Apr-2029 16:22:11 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-18 16:22:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49924	209.54.182.161	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:10 UTC	803	OUT	GET /ecm3?ex=pubmatic.com&id=PM_UID26FC5BC4-C0EA-481E-AC6D-297EF4930E35 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
2024-03-18 16:22:11 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 18 Mar 2024 16:22:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: E8TE2FEEBSYCRD8B5CSX Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-18 16:22:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49926	209.54.182.161	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:10 UTC	686	OUT	GET /ecm3?ex=openx.com&id=b9b79b8b-5e72-86b6-b423-c9f3a5e7acad HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
2024-03-18 16:22:11 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 18 Mar 2024 16:22:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: GV999TPBT5FQYGDV02X8 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-18 16:22:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49922	18.173.132.107	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	820	OUT	GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=2393ecfc-a9f7-4cbe-bbea-03c6f5980eff&ckls=true&ci=DI2XbXq1hw&nc=false&trid=829089394 HTTP/1.1 Host: sync1.intentiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IQver=1.9; intentIQ=DI2XbXq1hw
2024-03-18 16:22:11 UTC	1334	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Date: Mon, 18 Mar 2024 16:22:11 GMT Set-Cookie: CSDT=UEQ6MTUzNThfMCZVN09JMzN2; Domain=.intentiq.com; Expires=Wed, 18 Mar 2026 16:22:11 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: IQPData=3210798018#1710778931073#0#1710778931073; Domain=.intentiq.com; Expires=Wed, 18 Mar 2026 16:22:11 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Wed, 18 Mar 2026 16:22:11 GMT; Path=/; Secure; SameSite=None Set-Cookie: intentIQCDate=1710778931075; Domain=.intentiq.com; Expires=Wed, 18 Mar 2026 16:22:11 GMT; Path=/; Secure; SameSite=None Set-Cookie: ASDT=0; Domain=.intentiq.com; Expires=Wed, 18 Mar 2026 16:22:11 GMT; Path=/; Secure; SameSite=None Set-Cookie: intentIQ=DI2XbXq1hw; Domain=.intentiq.com; Expires=Wed, 18 Mar 2026 16:22:11 GMT; Path=/; Secure; SameSite=None Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Cache: Miss from cloudfront Via: 1.1 ec677b911dc73d5d7f845b909fe23e68.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: WnkKK53dOO8SC0qwsYR9M1jQjuSjC8YdiWX36ex7gX27d-qI5ZoT1Q==
2024-03-18 16:22:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49925	209.54.182.161	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	713	OUT	GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=b9b79b8b-5e72-86b6-b423-c9f3a5e7acad HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
2024-03-18 16:22:11 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 18 Mar 2024 16:22:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 6QNMANQCW5YKKHDPF1TX Set-Cookie: ad-id=AylOXD6udEkArigs61cOqe8; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 16:22:11 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Apr-2029 16:22:11 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-18 16:22:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49927	209.54.182.161	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	642	OUT	GET /ecm3?ex=outbrain.com&id=pjBc0Ie5PlrpUmpLY0ML HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
2024-03-18 16:22:11 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 18 Mar 2024 16:22:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 2QE6ABMZHK6MVF339K9A Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-18 16:22:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49928	142.250.176.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	834	OUT	GET /pixel?google_nid=openx&google_hm=Y2QwZTM0M2MtOGJhZi02M2U4LTYxY2QtMTFkZDA3MzZhOTJk HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:11 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 18 Mar 2024 16:22:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:11 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49935	142.250.176.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	795	OUT	GET /pixel?google_nid=openx&google_cm&google_sc HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:11 UTC	660	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESEE-eUtltZUO8fva0a6Jtqjs&google_cver=1 Date: Mon, 18 Mar 2024 16:22:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 295 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:11 UTC	295	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 39 31 26 61 6d 70 3b 76 61 6c 3d 43 41 45 53 45 45 2d 65 55 74 6c 74 5a 55 4f 38 66 76 61 30 61 36 4a 74 71 6a 73 26 61 6d 70 3b 67 6f Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESEE-eUtltZUO8fva0a6Jtqjs&go

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49939	35.236.220.17	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	770	OUT	GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=D1B83109A4A44EA780D9F28ECD179B12
2024-03-18 16:22:11 UTC	693	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Mon, 18 Mar 2024 16:22:11 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:D1B83109A4A44EA780D9F28ECD179B12 Expires: Sun, 17 Mar 2024 16:22:11 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-03-18 16:22:11 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49929	142.250.176.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	851	OUT	GET /pixel?google_nid=pmeb&google_sc=1&google_hm=JvxbxMDqSB6sbSl-9JMONQ%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:11 UTC	662	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&gdpr_consent= Date: Mon, 18 Mar 2024 16:22:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 301 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:11 UTC	301	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 6a 73 2f 75 73 65 72 5f 73 79 6e 63 2e 68 74 6d 6c 3f 70 3d 31 35 36 35 37 38 26 61 6d 70 3b 70 72 65 64 69 72 65 63 74 3d 26 61 6d 70 3b 67 64 70 72 3d 30 26 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49931	52.46.155.104	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	461	OUT	GET /ecm3?id=D1B83109A4A44EA780D9F28ECD179B12&ex=simpli.fi&status=ok HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
2024-03-18 16:22:11 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 18 Mar 2024 16:22:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: QJ6NHSDCB2VDEJW45BPY Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-18 16:22:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49937	142.250.176.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	863	OUT	GET /pixel?google_nid=pubmatic&google_hm=MjZGQzVCQzQtQzBFQS00ODFFLUFDNkQtMjk3RUY0OTMwRTM1&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:11 UTC	678	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= Date: Mon, 18 Mar 2024 16:22:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 313 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:11 UTC	313	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4d 6a 49 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	49933	34.200.142.234	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	628	OUT	GET /sync/openx/75a681b2-d274-af05-45fa-5d913283aa04?gdpr=0 HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:11 UTC	778	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBDNq-GUCEG-AEIJP2mcrBVrLy_f3KDkFEgEBAQG7-WUCZgAAAAAA_eMAAA&S=AQAAAq-5NfuhHGhMR3ujrZ1pQ6Q; Expires=Tue, 18 Mar 2025 22:22:11 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-18 16:22:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	49932	52.46.155.104	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	453	OUT	GET /ecm3?ex=admedia.com&id=363ffa6c7ef48a007acb27f47e31ee34 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
2024-03-18 16:22:11 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 18 Mar 2024 16:22:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 14QJ12BBX36VC71Y3SQD Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-18 16:22:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	49934	15.197.193.217	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	635	OUT	GET /track/cmf/openx?oxid=e161e7f6-42d8-3d4c-742d-4b64cdd4674d&gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:11 UTC	500	IN	HTTP/1.1 302 Found Date: Mon, 18 Mar 2024 16:22:11 GMT Content-Length: 209 Connection: close server: Kestrel location: https://match.adsrvr.org/track/cmb/openx?oxid=e161e7f6-42d8-3d4c-742d-4b64cdd4674d&gdpr=0 set-cookie: TDID=9892abd7-2a3a-4a40-95c8-94f2d71ac262; expires=Tue, 18 Mar 2025 16:22:11 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSgCMgsIyIDtu8nc4zwQBTgB; expires=Tue, 18 Mar 2025 16:22:11 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-18 16:22:11 UTC	209	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 6f 70 65 6e 78 3f 6f 78 69 64 3d 65 31 36 31 65 37 66 36 2d 34 32 64 38 2d 33 64 34 63 2d 37 34 32 64 2d 34 62 36 34 63 64 64 34 36 37 34 64 26 67 64 70 72 3d 30 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 6f 70 65 6e 78 3f 6f 78 69 64 3d 65 31 36 31 65 37 66 36 2d 34 32 64 38 2d 33 64 34 63 2d 37 34 32 64 2d 34 62 36 34 63 64 64 34 36 37 34 64 26 67 64 70 72 3d 30 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://match.adsrvr.org/track/cmb/openx?oxid=e161e7f6-42d8-3d4c-742d-4b64cdd4674d&gdpr=0">https://match.adsrvr.org/track/cmb/openx?oxid=e161e7f6-42d8-3d4c-742d-4b64cdd4674d&gdpr=0</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	49936	35.71.139.29	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	760	OUT	GET /xuid?mid=7976&xuid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; tluid=3712186363653833678472; tluidp=3712186363653833678472
2024-03-18 16:22:11 UTC	612	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:11 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3712186363653833678472; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Sun, 16 Jun 2024 16:22:11 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3712186363653833678472; Max-Age=7776000; Expires=Sun, 16 Jun 2024 16:22:11 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-03-18 16:22:11 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	49943	74.119.118.149	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	612	OUT	OPTIONS /sid/json?origin=prebid&topUrl=https%3A%2F%2Fbrowser-update.org%2F&domain=browser-update.org&cw=1&pbt=1&lsw=1 HTTP/1.1 Host: gum.criteo.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://browser-update.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:11 UTC	525	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Mon, 18 Mar 2024 16:22:11 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-headers: content-type access-control-allow-methods: GET access-control-allow-origin: https://browser-update.org cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 497593 strict-transport-security: max-age=31536000; preload; connection: close
2024-03-18 16:22:11 UTC	12	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2{}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	49941	34.200.142.234	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	650	OUT	GET /sync/pubmatic/26FC5BC4-C0EA-481E-AC6D-297EF4930E35?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:11 UTC	778	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBDNq-GUCENUobzGQ--2jA6azyBcFBNoFEgEBAQG7-WUCZgAAAAAA_eMAAA&S=AQAAAuXkNxtEOJumYMc0aVwelMY; Expires=Tue, 18 Mar 2025 22:22:11 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-18 16:22:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	49938	142.250.176.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	824	OUT	GET /pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:11 UTC	736	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEJj1o7j5msW-un8qiMIIebo&google_cver=1 Date: Mon, 18 Mar 2024 16:22:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 379 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:11 UTC	379	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 49 78 4e 7a 63 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	49930	52.46.155.104	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	451	OUT	GET /ecm3?ex=baidu.com&id=22210ca7211caf792c9xmt00ltx5lqro HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
2024-03-18 16:22:11 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 18 Mar 2024 16:22:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 7GRNA5GK7FZRWSX2A9RH Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-18 16:22:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	49940	15.197.193.217	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	641	OUT	GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:11 UTC	501	IN	HTTP/1.1 302 Found Date: Mon, 18 Mar 2024 16:22:11 GMT Content-Length: 211 Connection: close server: Kestrel location: https://match.adsrvr.org/track/cmb/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= set-cookie: TDID=476a305c-888e-468c-8d57-ea927e6c6f82; expires=Tue, 18 Mar 2025 16:22:11 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSgCMgsIrp3AvMnc4zwQBTgB; expires=Tue, 18 Mar 2025 16:22:11 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-18 16:22:11 UTC	211	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 70 75 62 6d 61 74 69 63 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 70 75 62 6d 61 74 69 63 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://match.adsrvr.org/track/cmb/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent=">https://match.adsrvr.org/track/cmb/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	49944	141.95.98.65	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	611	OUT	POST /api/config/prebid HTTP/1.1 Host: id5-sync.com Connection: keep-alive Content-Length: 122 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://browser-update.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:11 UTC	122	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 69 64 35 49 64 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 70 61 72 74 6e 65 72 22 3a 31 31 38 39 7d 2c 22 73 74 6f 72 61 67 65 22 3a 7b 22 74 79 70 65 22 3a 22 68 74 6d 6c 35 22 2c 22 6e 61 6d 65 22 3a 22 69 64 35 69 64 22 2c 22 65 78 70 69 72 65 73 22 3a 39 30 2c 22 72 65 66 72 65 73 68 49 6e 53 65 63 6f 6e 64 73 22 3a 32 38 38 30 30 7d 7d Data Ascii: {"name":"id5Id","params":{"partner":1189},"storage":{"type":"html5","name":"id5id","expires":90,"refreshInSeconds":28800}}
2024-03-18 16:22:11 UTC	420	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers access-control-allow-origin: https://browser-update.org vary: Origin access-control-allow-credentials: true content-type: application/json;charset=UTF-8 transfer-encoding: chunked date: Mon, 18 Mar 2024 16:22:11 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-03-18 16:22:11 UTC	147	IN	Data Raw: 38 38 0d 0a 7b 22 66 65 74 63 68 43 61 6c 6c 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 67 2f 76 32 2f 31 31 38 39 2e 6a 73 6f 6e 22 7d 2c 22 65 78 74 65 6e 73 69 6f 6e 73 43 61 6c 6c 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6c 62 2e 65 75 2d 31 2d 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 6c 62 2f 76 31 22 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 7d 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 88{"fetchCall":{"url":"https://id5-sync.com/g/v2/1189.json"},"extensionsCall":{"url":"https://lb.eu-1-id5-sync.com/lb/v1","method":"GET"}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	49945	34.111.113.62	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	663	OUT	GET /idsync/ex/receive?partner_id=3371&partner_device_id=26FC5BC4-C0EA-481E-AC6D-297EF4930E35 HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:11 UTC	1087	IN	HTTP/1.1 302 Found Date: Mon, 18 Mar 2024 16:22:11 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1710778931516;Expires=Fri, 17 May 2024 16:22:11 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=da9fa8fc-3c38-47c1-bced-e79257211d8c;Expires=Fri, 17 May 2024 16:22:11 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://pixel.tapad.com/idsync/ex/receive/check?partner_id=3371&partner_device_id=26FC5BC4-C0EA-481E-AC6D-297EF4930E35 Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	49949	209.54.182.161	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	643	OUT	GET /ecm3?id=AAARQ07L8NQAABPzJYe3uw&ex=beeswax.com HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
2024-03-18 16:22:11 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 18 Mar 2024 16:22:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: SNGTTR05K6T2RD4BADX5 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-18 16:22:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	49948	35.211.178.172	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	703	OUT	GET /sync?ssp=fmx&us_privacy=&gdpr=0&gdpr_consent= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=2b28c092-dd0b-42bb-b143-c15d16fc69ab; c=1710778930; tuuid_lu=1710778930
2024-03-18 16:22:11 UTC	303	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 18 Mar 2024 16:22:11 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //pool.admedo.com/sync?ssp=bidswitch&bidswitch_ssp_id=fmx&bsw_custom_parameter=2b28c092-dd0b-42bb-b143-c15d16fc69ab

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	49947	40.76.134.238	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	832	OUT	GET /l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx%2026FC5BC4-C0EA-481E-AC6D-297EF4930E35&rnd=RND HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:11 UTC	176	IN	HTTP/1.1 403 Forbidden Server: Microsoft-Azure-Application-Gateway/v2 Date: Mon, 18 Mar 2024 16:22:11 GMT Content-Type: text/html Content-Length: 581 Connection: close
2024-03-18 16:22:11 UTC	581	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 4d 69 63 72 6f 73 6f 66 74 2d 41 7a 75 72 65 2d 41 70 70 6c 69 63 61 74 69 6f 6e 2d 47 61 74 65 77 61 79 2f 76 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>Microsoft-Azure-Application-Gateway/v2</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a pa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	49955	35.207.24.140	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	535	OUT	GET /sync?ssp=google&no_redirect=1&google_gid=CAESEI8maQdry5oQlan8onqO4PA&google_cver=1 HTTP/1.1 Host: rtb.mfadsrvr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1710778929; tuuid=2393ecfc-a9f7-4cbe-bbea-03c6f5980eff; tuuid_lu=1710778930; ssh=!intentiq,1710778930
2024-03-18 16:22:11 UTC	246	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Date: Mon, 18 Mar 2024 16:22:11 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	49960	52.46.155.104	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	482	OUT	GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=b9b79b8b-5e72-86b6-b423-c9f3a5e7acad HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
2024-03-18 16:22:11 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 18 Mar 2024 16:22:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 1N8F9ZWB499X16EN8835 Set-Cookie: ad-id=AylOXD6udEkArigs61cOqe8; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 16:22:11 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Apr-2029 16:22:11 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-18 16:22:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	49954	209.54.182.161	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	659	OUT	GET /ecm3?ex=mediagrid.com&id=2b28c092-dd0b-42bb-b143-c15d16fc69ab HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
2024-03-18 16:22:11 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 18 Mar 2024 16:22:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: RSMDVEBHW2K2ZH54WR87 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-18 16:22:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	49959	52.46.155.104	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	442	OUT	GET /ecm3?ex=outbrain.com&id=pjBc0Ie5PlrpUmpLY0ML HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
2024-03-18 16:22:11 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 18 Mar 2024 16:22:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: ZNAYFQGMM9X37CJFB5DZ Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-18 16:22:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	49950	198.148.27.131	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	678	OUT	GET /bh/rtset?pid=558511&ev=1&rurl=https%3A%2F%2Fce.lijit.com/merge?pid=49&3pid=%%VGUID%%&gdpr=0&gdpr_consent= HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:11 UTC	981	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-cd74fc47c-vb6w9 Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: V=x5v74EUGBRIZ;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Thu, 13-Mar-2025 16:22:11 GMT;Max-Age=31104000;SameSite=None Set-Cookie: pb_rtb_ev=3-1qaz\|7dW.0.1;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Tue, 18-Mar-2025 16:22:11 GMT;Max-Age=31536000;SameSite=None Location: https://ce.lijit.com/merge?pid=49&3pid=x5v74EUGBRIZ&ev=1&pid=558511&gdpr_consent=&gdpr=0 Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000 Set-Cookie: INGRESSCOOKIE=d91942d279e46aae; path=/; HttpOnly; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	49951	185.184.8.90	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	610	OUT	GET /cm-notify?pi=sovrn&gdpr=0&gdpr_consent= HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:11 UTC	762	IN	HTTP/1.1 302 Found date: Mon, 18 Mar 2024 16:22:11 GMT vary: Accept-Encoding set-cookie: g=m6imPN51sdhz90c02QSX_1710778931757;Path=/;Domain=.creativecdn.com;Expires=Tue, 18-Mar-2025 16:22:11 GMT;Max-Age=31536000;Secure;SameSite=None set-cookie: ts=1710778931;Path=/;Domain=.creativecdn.com;Expires=Tue, 18-Mar-2025 16:22:11 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" location: https://creativecdn.com/cm-notify?pi=sovrn&gdpr=0&gdpr_consent=&tc=1 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Mon, 18 Mar 2024 16:22:11 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	49956	209.54.182.161	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	696	OUT	GET /ecm3?id=IV6WABZHUuoYlIO2Qzydeftv&ex=sovrn.com&gdpr=0&gdpr_consent= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
2024-03-18 16:22:11 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 18 Mar 2024 16:22:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 0YSKP8DKFH22VBQQ07XN Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-18 16:22:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	49963	18.173.132.13	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	654	OUT	GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=2393ecfc-a9f7-4cbe-bbea-03c6f5980eff&ckls=true&ci=DI2XbXq1hw&nc=false&trid=829089394 HTTP/1.1 Host: sync1.intentiq.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IQver=1.9; intentIQ=DI2XbXq1hw; CSDT=UEQ6MTUzNThfMCZVN09JMzN2; IQPData=3210798018#1710778931073#0#1710778931073; intentIQCDate=1710778931075; ASDT=0
2024-03-18 16:22:11 UTC	675	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Date: Mon, 18 Mar 2024 16:22:11 GMT Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Wed, 18 Mar 2026 16:22:11 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Cache: Miss from cloudfront Via: 1.1 43504ac56caa49011c8a16d1cb156142.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: da9C1GTlgBzQz7k2yGEgJ_T5zPRzm1LniWz3pmLPt3C0IMxrsZinDA==
2024-03-18 16:22:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	49965	8.28.7.83	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	895	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:D1B83109A4A44EA780D9F28ECD179B12 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; chkChromeAb67Sec=1; pi=156011:2; DPSync3=1711929600%3A201_263%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_54_250_71_220_21
2024-03-18 16:22:11 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Mar 2024 16:22:11 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 16:22:11 GMT; path=/ Set-Cookie: PugT=1710778931; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 16:22:11 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-18 16:22:11 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	49961	52.46.155.104	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	455	OUT	GET /ecm3?ex=openx.com&id=b9b79b8b-5e72-86b6-b423-c9f3a5e7acad HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
2024-03-18 16:22:11 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 18 Mar 2024 16:22:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 9T0W0H4V8DHQNNY6SQ1J Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-18 16:22:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	49952	3.33.220.150	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	632	OUT	GET /track/cmf/generic?ttd_pid=federatedmedia&gdpr=0&gdpr_consent= HTTP/1.1 Host: data.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:11 UTC	497	IN	HTTP/1.1 302 Found Date: Mon, 18 Mar 2024 16:22:11 GMT Content-Length: 203 Connection: close server: Kestrel location: https://match.adsrvr.org/track/cmb/generic?ttd_pid=federatedmedia&gdpr=0&gdpr_consent= set-cookie: TDID=bbb7c0a8-9303-4b39-93f6-f187e79feaa0; expires=Tue, 18 Mar 2025 16:22:11 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSgCMgsI8seNv8nc4zwQBTgB; expires=Tue, 18 Mar 2025 16:22:11 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-18 16:22:11 UTC	203	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 66 65 64 65 72 61 74 65 64 6d 65 64 69 61 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 66 65 64 65 72 61 74 65 64 6d 65 64 69 61 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://match.adsrvr.org/track/cmb/generic?ttd_pid=federatedmedia&gdpr=0&gdpr_consent=">https://match.adsrvr.org/track/cmb/generic?ttd_pid=federatedmedia&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	49962	35.244.159.8	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	724	OUT	GET /w/1.0/sd?id=537072991&val=CAESEE-eUtltZUO8fva0a6Jtqjs&google_cver=1 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=32cdd8af-eb5f-02bb-2efb-838ca9f354b0\|1710778930; pd=v2\|1710778930\|vMgavPkWgy
2024-03-18 16:22:11 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Mon, 18 Mar 2024 16:22:11 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	49957	162.19.138.120	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	844	OUT	GET /c/495/0/0/1.gif?gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: id5-sync.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=8c82d760-97a6-7b38-a656-a04ba9b9cc68#1710778931072#1; callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dinmobi.com%26id%3D%7BID5UID%7D
2024-03-18 16:22:11 UTC	1546	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: id5=8c82d760-97a6-7b38-a656-a04ba9b9cc68#1710778931072#2; Max-Age=7776000; Expires=Sun, 16-Jun-2024 16:22:11 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: 3pi=; Max-Age=7776000; Expires=Sun, 16-Jun-2024 16:22:11 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://s.amazon-adsystem.com/ecm3?ex=inmobi.com&id=ID5-0668S2WwnJRQs2p4sNhVUM2uqkSgyt678tMIQz3xpw transfer-encoding: chunked date: Mon, 18 Mar 2024 16:22:11 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-03-18 16:22:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	49966	8.28.7.83	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	863	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; chkChromeAb67Sec=1; pi=156011:2; DPSync3=1711929600%3A201_263%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_54_250_71_220_21
2024-03-18 16:22:11 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Mar 2024 16:22:10 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-18 16:22:11 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	49968	8.28.7.83	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	921	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEJj1o7j5msW-un8qiMIIebo&google_cver=1 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; chkChromeAb67Sec=1; pi=156011:2; DPSync3=1711929600%3A201_263%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_54_250_71_220_21
2024-03-18 16:22:11 UTC	669	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Mar 2024 16:22:10 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 16-Jun-2024 16:22:10 GMT; path=/ Set-Cookie: PugT=1710778930; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 16:22:10 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-18 16:22:11 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	49974	34.111.113.62	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	749	OUT	GET /idsync/ex/receive/check?partner_id=3371&partner_device_id=26FC5BC4-C0EA-481E-AC6D-297EF4930E35 HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1710778931516; TapAd_DID=da9fa8fc-3c38-47c1-bced-e79257211d8c
2024-03-18 16:22:11 UTC	1227	IN	HTTP/1.1 302 Found Date: Mon, 18 Mar 2024 16:22:11 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1710778931516;Expires=Fri, 17 May 2024 16:22:11 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=da9fa8fc-3c38-47c1-bced-e79257211d8c;Expires=Fri, 17 May 2024 16:22:11 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Fri, 17 May 2024 16:22:11 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=da9fa8fc-3c38-47c1-bced-e79257211d8c%252C%252C&gdpr=0&gdpr_consent= Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	49967	15.197.193.217	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	722	OUT	GET /track/cmb/openx?oxid=e161e7f6-42d8-3d4c-742d-4b64cdd4674d&gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=9892abd7-2a3a-4a40-95c8-94f2d71ac262; TDCPM=CAEYBSgCMgsIyIDtu8nc4zwQBTgB
2024-03-18 16:22:11 UTC	567	IN	HTTP/1.1 302 Found Date: Mon, 18 Mar 2024 16:22:11 GMT Content-Length: 335 Connection: close server: Kestrel location: https://us-u.openx.net/w/1.0/sd?id=537072971&val=9892abd7-2a3a-4a40-95c8-94f2d71ac262&ttd_puid=e161e7f6-42d8-3d4c-742d-4b64cdd4674d&gdpr=0&gdpr_consent= set-cookie: TDID=9892abd7-2a3a-4a40-95c8-94f2d71ac262; expires=Tue, 18 Mar 2025 16:22:11 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSABKAIyCwjIgO27ydzjPBAFOAE.; expires=Tue, 18 Mar 2025 16:22:11 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-18 16:22:11 UTC	335	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 37 31 26 76 61 6c 3d 39 38 39 32 61 62 64 37 2d 32 61 33 61 2d 34 61 34 30 2d 39 35 63 38 2d 39 34 66 32 64 37 31 61 63 32 36 32 26 74 74 64 5f 70 75 69 64 3d 65 31 36 31 65 37 66 36 2d 34 32 64 38 2d 33 64 34 63 2d 37 34 32 64 2d 34 62 36 34 63 64 64 34 36 37 34 64 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 37 31 26 76 61 6c 3d 39 38 39 32 61 62 64 37 2d 32 61 33 61 2d 34 61 34 30 2d 39 35 63 38 2d 39 34 66 Data Ascii: Redirecting to: <a href="https://us-u.openx.net/w/1.0/sd?id=537072971&val=9892abd7-2a3a-4a40-95c8-94f2d71ac262&ttd_puid=e161e7f6-42d8-3d4c-742d-4b64cdd4674d&gdpr=0&gdpr_consent=">https://us-u.openx.net/w/1.0/sd?id=537072971&val=9892abd7-2a3a-4a40-95c8-94f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	49973	52.223.22.214	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	493	OUT	GET /xuid?mid=7976&xuid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3712186363653833678472; receive-cookie-deprecation=1
2024-03-18 16:22:11 UTC	612	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:11 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3712186363653833678472; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Sun, 16 Jun 2024 16:22:11 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3712186363653833678472; Max-Age=7776000; Expires=Sun, 16 Jun 2024 16:22:11 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-03-18 16:22:11 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	49969	74.119.118.149	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	688	OUT	GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fbrowser-update.org%2F&domain=browser-update.org&cw=1&pbt=1&lsw=1 HTTP/1.1 Host: gum.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://browser-update.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:12 UTC	481	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Mon, 18 Mar 2024 16:22:11 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-methods: GET access-control-allow-origin: https://browser-update.org cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 690975 strict-transport-security: max-age=31536000; preload; connection: close
2024-03-18 16:22:12 UTC	372	IN	Data Raw: 31 36 38 0d 0a 7b 22 62 75 6e 64 6c 65 22 3a 22 64 54 51 77 58 46 38 77 52 6b 56 77 52 57 77 77 4d 45 4e 33 62 45 39 54 61 6e 4e 4d 4d 55 34 7a 4d 32 35 35 54 44 5a 74 65 6e 4a 46 4d 6d 39 36 5a 54 46 4e 5a 33 46 4f 5a 7a 42 58 61 45 4e 54 54 54 67 33 63 45 31 51 56 33 52 6c 61 31 51 77 4a 54 4a 47 54 48 68 77 5a 45 4e 55 51 56 5a 50 55 30 4a 30 55 44 4d 6c 4d 6b 4a 6a 61 58 56 43 64 55 39 52 5a 56 4e 79 62 56 64 7a 52 47 55 35 61 32 6c 68 52 6d 52 4c 53 55 4e 32 56 69 55 79 51 6a 64 49 56 31 6c 4d 65 46 4e 44 64 45 49 32 62 48 4a 46 52 6e 68 50 57 57 52 58 55 30 52 6b 63 45 31 74 63 30 31 55 63 77 22 2c 22 62 69 64 49 64 22 3a 22 67 4a 4b 71 78 6c 38 34 61 32 64 44 4d 6e 42 7a 56 56 64 4d 4d 47 52 44 61 45 63 35 54 47 70 59 4d 55 52 61 65 44 56 33 4d 33 Data Ascii: 168{"bundle":"dTQwXF8wRkVwRWwwMEN3bE9TanNMMU4zM255TDZtenJFMm96ZTFNZ3FOZzBXaENTTTg3cE1QV3Rla1QwJTJGTHhwZENUQVZPU0J0UDMlMkJjaXVCdU9RZVNybVdzRGU5a2lhRmRLSUN2ViUyQjdIV1lMeFNDdEI2bHJFRnhPWWRXU0RkcE1tc01Ucw","bidId":"gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	49970	3.234.96.174	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	504	OUT	GET /sync/openx/75a681b2-d274-af05-45fa-5d913283aa04?gdpr=0 HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBDNq-GUCEG-AEIJP2mcrBVrLy_f3KDkFEgEBAQG7-WUCZgAAAAAA_eMAAA&S=AQAAAq-5NfuhHGhMR3ujrZ1pQ6Q
2024-03-18 16:22:11 UTC	778	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBDNq-GUCEG-AEIJP2mcrBVrLy_f3KDkFEgEBAQG7-WUCZgAAAAAA_eMAAA&S=AQAAAq-5NfuhHGhMR3ujrZ1pQ6Q; Expires=Tue, 18 Mar 2025 22:22:11 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-18 16:22:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	49972	15.197.193.217	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	728	OUT	GET /track/cmb/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=476a305c-888e-468c-8d57-ea927e6c6f82; TDCPM=CAEYBSgCMgsIrp3AvMnc4zwQBTgB
2024-03-18 16:22:11 UTC	609	IN	HTTP/1.1 302 Found Date: Mon, 18 Mar 2024 16:22:11 GMT Content-Length: 355 Connection: close server: Kestrel location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=476a305c-888e-468c-8d57-ea927e6c6f82&gdpr=0&gdpr_consent= set-cookie: TDID=476a305c-888e-468c-8d57-ea927e6c6f82; expires=Tue, 18 Mar 2025 16:22:11 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwjEv8CUs9zjPBAFGAUgASgCMgsIrp3AvMnc4zwQBTgB; expires=Tue, 18 Mar 2025 16:22:11 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-18 16:22:11 UTC	355	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 49 34 4e 44 6b 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 34 37 36 61 33 30 35 63 2d 38 38 38 65 2d 34 36 38 63 2d 38 64 35 37 2d 65 61 39 32 37 65 36 63 36 66 38 32 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 Data Ascii: Redirecting to: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=476a305c-888e-468c-8d57-ea927e6c6f82&gdpr=0&gdpr_consent=">https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	49971	3.234.96.174	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	521	OUT	GET /sync/pubmatic/26FC5BC4-C0EA-481E-AC6D-297EF4930E35?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBDNq-GUCENUobzGQ--2jA6azyBcFBNoFEgEBAQG7-WUCZgAAAAAA_eMAAA&S=AQAAAuXkNxtEOJumYMc0aVwelMY
2024-03-18 16:22:11 UTC	778	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBDNq-GUCENUobzGQ--2jA6azyBcFBNoFEgEBAQG7-WUCZgAAAAAA_eMAAA&S=AQAAAuXkNxtEOJumYMc0aVwelMY; Expires=Tue, 18 Mar 2025 22:22:11 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-18 16:22:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	49976	52.86.98.54	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	739	OUT	GET /merge?pid=80&3pid=LTX5LRW4-V-IXJ1&gdpr=0 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv; ljtrtbexp=eJyrVrIwULIyNDc0tLSwMDU20FEysUTlW5ih8o0gfAMLIyNDMN8cIm9sYWxubFALAJvzEE8%3D
2024-03-18 16:22:12 UTC	817	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_80=LTX5LRW4-V-IXJ1; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:12 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:12 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJyrVrIwULIyNDc0tLSwMDU20FEysUTlW5ih8o0gfAMLIyNDMN8cIm9sYWxubFALAJvzEE8%3D; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:12 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-03-18 16:22:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	49977	52.86.98.54	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	766	OUT	GET /merge?pid=49&3pid=x5v74EUGBRIZ&ev=1&pid=558511&gdpr_consent=&gdpr=0 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv; ljtrtbexp=eJyrVrIwULIyNDc0tLSwMDU20FEysUTlW5ih8o0gfAMLIyNDMN8cIm9sYWxubFALAJvzEE8%3D
2024-03-18 16:22:12 UTC	814	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_49=x5v74EUGBRIZ; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:12 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJyrVrIwULIyNDc0tLSwMDU20FEysUTlW5ih8o0gfAMLIyNDMN8cIm9sYWxubFALAJvzEE8%3D; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:12 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:12 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-03-18 16:22:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	49980	52.46.155.104	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:11 UTC	443	OUT	GET /ecm3?id=AAARQ07L8NQAABPzJYe3uw&ex=beeswax.com HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
2024-03-18 16:22:12 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 18 Mar 2024 16:22:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: JWDM5V440DV9H0Z33AP2 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-18 16:22:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	49978	15.197.193.217	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:12 UTC	720	OUT	GET /track/cmb/generic?ttd_pid=federatedmedia&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=bbb7c0a8-9303-4b39-93f6-f187e79feaa0; TDCPM=CAEYBSgCMgsI8seNv8nc4zwQBTgB
2024-03-18 16:22:12 UTC	511	IN	HTTP/1.1 302 Found Date: Mon, 18 Mar 2024 16:22:12 GMT Content-Length: 223 Connection: close server: Kestrel location: https://ce.lijit.com/merge?pid=27&3pid=bbb7c0a8-9303-4b39-93f6-f187e79feaa0&gdpr=0&gdpr_consent= set-cookie: TDID=bbb7c0a8-9303-4b39-93f6-f187e79feaa0; expires=Tue, 18 Mar 2025 16:22:12 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSABKAIyCwjyx42_ydzjPBAFOAE.; expires=Tue, 18 Mar 2025 16:22:12 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-18 16:22:12 UTC	223	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2e 6c 69 6a 69 74 2e 63 6f 6d 2f 6d 65 72 67 65 3f 70 69 64 3d 32 37 26 33 70 69 64 3d 62 62 62 37 63 30 61 38 2d 39 33 30 33 2d 34 62 33 39 2d 39 33 66 36 2d 66 31 38 37 65 37 39 66 65 61 61 30 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 63 65 2e 6c 69 6a 69 74 2e 63 6f 6d 2f 6d 65 72 67 65 3f 70 69 64 3d 32 37 26 33 70 69 64 3d 62 62 62 37 63 30 61 38 2d 39 33 30 33 2d 34 62 33 39 2d 39 33 66 36 2d 66 31 38 37 65 37 39 66 65 61 61 30 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://ce.lijit.com/merge?pid=27&3pid=bbb7c0a8-9303-4b39-93f6-f187e79feaa0&gdpr=0&gdpr_consent=">https://ce.lijit.com/merge?pid=27&3pid=bbb7c0a8-9303-4b39-93f6-f187e79feaa0&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	49985	52.46.155.104	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:12 UTC	459	OUT	GET /ecm3?ex=mediagrid.com&id=2b28c092-dd0b-42bb-b143-c15d16fc69ab HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
2024-03-18 16:22:12 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 18 Mar 2024 16:22:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 1HSTXNDSBQ9B0EAAPSY7 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-18 16:22:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	49982	52.46.155.104	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:12 UTC	464	OUT	GET /ecm3?id=IV6WABZHUuoYlIO2Qzydeftv&ex=sovrn.com&gdpr=0&gdpr_consent= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
2024-03-18 16:22:12 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 18 Mar 2024 16:22:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: V1XSJ9RDYXPG9MSN4H73 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-18 16:22:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	49979	162.19.138.119	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:12 UTC	585	OUT	GET /lb/v1 HTTP/1.1 Host: lb.eu-1-id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://browser-update.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:12 UTC	380	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers access-control-allow-origin: https://browser-update.org vary: Origin content-type: application/json;charset=UTF-8 transfer-encoding: chunked date: Mon, 18 Mar 2024 16:22:11 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-03-18 16:22:12 UTC	39	IN	Data Raw: 32 31 0d 0a 7b 22 6c 62 22 3a 22 38 79 4a 31 78 76 66 51 44 75 33 6c 6d 77 44 61 71 49 55 45 53 51 3d 3d 22 7d 0d 0a Data Ascii: 21{"lb":"8yJ1xvfQDu3lmwDaqIUESQ=="}
2024-03-18 16:22:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	49975	35.210.53.219	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:12 UTC	668	OUT	GET /sync?ssp=bidswitch&bidswitch_ssp_id=fmx&bsw_custom_parameter=2b28c092-dd0b-42bb-b143-c15d16fc69ab HTTP/1.1 Host: pool.admedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:12 UTC	687	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Mon, 18 Mar 2024 16:22:12 GMT Location: https://pool.admedo.com/ul_cb/sync?ssp=bidswitch&bidswitch_ssp_id=fmx&bsw_custom_parameter=2b28c092-dd0b-42bb-b143-c15d16fc69ab Set-Cookie: tuuid=eacb20b5-1654-4907-a3bb-abb94dd9e72c; path=/; expires=Tue, 18-Mar-2025 16:22:12 GMT; samesite=none; secure Set-Cookie: c=1710778932; path=/; expires=Tue, 18-Mar-2025 16:22:12 GMT; samesite=none; secure Set-Cookie: tuuid_lu=1710778932; path=/; expires=Tue, 18-Mar-2025 16:22:12 GMT; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	49986	35.244.159.8	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:12 UTC	786	OUT	GET /w/1.0/sd?id=537072971&val=9892abd7-2a3a-4a40-95c8-94f2d71ac262&ttd_puid=e161e7f6-42d8-3d4c-742d-4b64cdd4674d&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=32cdd8af-eb5f-02bb-2efb-838ca9f354b0\|1710778930; pd=v2\|1710778930\|vMgavPkWgy
2024-03-18 16:22:12 UTC	568	IN	HTTP/1.1 200 OK Vary: Accept Set-Cookie: univ_id=537072971\|9892abd7-2a3a-4a40-95c8-94f2d71ac262\|1710778932299885; Version=1; Expires=Tue, 02-Apr-2024 16:22:12 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Mon, 18 Mar 2024 16:22:12 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	49983	141.95.33.120	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:12 UTC	510	OUT	GET /api/config/prebid HTTP/1.1 Host: id5-sync.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=8c82d760-97a6-7b38-a656-a04ba9b9cc68#1710778931072#1; callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dinmobi.com%26id%3D%7BID5UID%7D
2024-03-18 16:22:12 UTC	304	IN	HTTP/1.1 400 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding content-type: text/html;charset=utf-8 transfer-encoding: chunked date: Mon, 18 Mar 2024 16:22:11 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-03-18 16:22:12 UTC	40	IN	Data Raw: 32 32 0d 0a 70 61 72 74 6e 65 72 20 70 61 72 61 6d 65 74 65 72 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 0d 0a Data Ascii: 22partner parameter must not be null
2024-03-18 16:22:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	49984	185.184.8.90	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:12 UTC	676	OUT	GET /cm-notify?pi=sovrn&gdpr=0&gdpr_consent=&tc=1 HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=m6imPN51sdhz90c02QSX_1710778931757; ts=1710778931
2024-03-18 16:22:12 UTC	416	IN	HTTP/1.1 302 Found date: Mon, 18 Mar 2024 16:22:12 GMT vary: Accept-Encoding location: https://ce.lijit.com/merge?pid=86&3pid=o2HIxaEGHLyIlgWmC9QyNMFpZi0f4iDXPjTtqxL-O6g&pi=sovrn&gdpr=0&gdpr_consent=&tc=1 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Mon, 18 Mar 2024 16:22:12 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	49987	8.28.7.83	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:12 UTC	879	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:D1B83109A4A44EA780D9F28ECD179B12 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; chkChromeAb67Sec=1; pi=156011:2; DPSync3=1711929600%3A201_263%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_54_250_71_220_21; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; PugT=1710778931
2024-03-18 16:22:12 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Mar 2024 16:22:12 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 16:22:12 GMT; path=/ Set-Cookie: PugT=1710778932; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 16:22:12 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-18 16:22:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	49988	8.28.7.83	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:12 UTC	974	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; chkChromeAb67Sec=1; pi=156011:2; DPSync3=1711929600%3A201_263%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_54_250_71_220_21; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; PugT=1710778930
2024-03-18 16:22:12 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Mar 2024 02:30:49 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-18 16:22:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	49991	34.98.64.218	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:12 UTC	493	OUT	GET /w/1.0/sd?id=537072991&val=CAESEE-eUtltZUO8fva0a6Jtqjs&google_cver=1 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=32cdd8af-eb5f-02bb-2efb-838ca9f354b0\|1710778930; pd=v2\|1710778930\|vMgavPkWgy
2024-03-18 16:22:12 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Mon, 18 Mar 2024 16:22:12 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	49989	8.28.7.83	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:12 UTC	1032	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEJj1o7j5msW-un8qiMIIebo&google_cver=1 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; chkChromeAb67Sec=1; pi=156011:2; DPSync3=1711929600%3A201_263%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_54_250_71_220_21; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; PugT=1710778930
2024-03-18 16:22:12 UTC	669	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Mar 2024 16:22:11 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 16-Jun-2024 16:22:11 GMT; path=/ Set-Cookie: PugT=1710778931; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 16:22:11 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-18 16:22:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	49992	209.54.182.161	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:12 UTC	769	OUT	GET /ecm3?ex=inmobi.com&id=ID5-0668S2WwnJRQs2p4sNhVUM2uqkSgyt678tMIQz3xpw HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
2024-03-18 16:22:12 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 18 Mar 2024 16:22:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: NKJFWNYHFRY6H8CNJWFB Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-18 16:22:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	49994	8.28.7.83	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:12 UTC	1264	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=476a305c-888e-468c-8d57-ea927e6c6f82&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; chkChromeAb67Sec=1; pi=156011:2; DPSync3=1711929600%3A201_263%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_54_250_71_220_21; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; PugT=1710778930
2024-03-18 16:22:12 UTC	744	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Mar 2024 13:42:19 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 16-Jun-2024 13:42:19 GMT; path=/ Set-Cookie: PugT=1710769339; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 13:42:19 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-18 16:22:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	49993	15.197.193.217	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:12 UTC	817	OUT	GET /track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=da9fa8fc-3c38-47c1-bced-e79257211d8c%252C%252C&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=476a305c-888e-468c-8d57-ea927e6c6f82; TDCPM=CAESFwoIcHVibWF0aWMSCwjEv8CUs9zjPBAFGAUgASgCMgsIrp3AvMnc4zwQBTgB
2024-03-18 16:22:12 UTC	655	IN	HTTP/1.1 302 Found Date: Mon, 18 Mar 2024 16:22:12 GMT Content-Length: 359 Connection: close server: Kestrel location: https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=476a305c-888e-468c-8d57-ea927e6c6f82&ttd_puid=da9fa8fc-3c38-47c1-bced-e79257211d8c%2C%2C set-cookie: TDID=476a305c-888e-468c-8d57-ea927e6c6f82; expires=Tue, 18 Mar 2025 16:22:12 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwjEv8CUs9zjPBAFEhQKBXRhcGFkEgsIzOz3mLPc4zwQBRgBIAEoAjILCIzj-sXJ3OM8EAU4AVoFdGFwYWRgAg..; expires=Tue, 18 Mar 2025 16:22:12 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-18 16:22:12 UTC	359	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 31 38 33 30 26 70 61 72 74 6e 65 72 5f 64 65 76 69 63 65 5f 69 64 3d 34 37 36 61 33 30 35 63 2d 38 38 38 65 2d 34 36 38 63 2d 38 64 35 37 2d 65 61 39 32 37 65 36 63 36 66 38 32 26 74 74 64 5f 70 75 69 64 3d 64 61 39 66 61 38 66 63 2d 33 63 33 38 2d 34 37 63 31 2d 62 63 65 64 2d 65 37 39 32 35 37 32 31 31 64 38 63 25 32 43 25 32 43 22 3e 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 31 38 33 30 26 70 61 72 74 6e 65 Data Ascii: Redirecting to: <a href="https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=476a305c-888e-468c-8d57-ea927e6c6f82&ttd_puid=da9fa8fc-3c38-47c1-bced-e79257211d8c%2C%2C">https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	49996	74.119.119.139	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:12 UTC	446	OUT	GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fbrowser-update.org%2F&domain=browser-update.org&cw=1&pbt=1&lsw=1 HTTP/1.1 Host: gum.criteo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:12 UTC	349	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Mon, 18 Mar 2024 16:22:12 GMT server: Kestrel cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 607260 strict-transport-security: max-age=31536000; preload; connection: close
2024-03-18 16:22:12 UTC	363	IN	Data Raw: 31 35 46 0d 0a 7b 22 62 75 6e 64 6c 65 22 3a 22 50 54 4a 53 62 46 39 35 63 6b 45 78 4e 6a 64 48 4e 6e 46 52 65 55 49 35 62 31 56 45 55 47 70 6c 61 55 78 61 52 32 4d 6c 4d 6b 49 35 63 45 74 69 5a 32 4a 44 64 32 4a 73 4e 6a 56 56 52 46 52 42 51 32 4a 4c 52 6a 4a 6a 65 6b 4e 52 51 6c 70 32 55 57 56 79 51 32 4e 57 55 46 49 31 63 55 38 33 51 58 64 50 64 30 5a 59 55 46 4e 32 5a 45 5a 35 52 31 56 42 54 6c 68 6a 55 6c 6c 70 4e 48 6c 77 53 58 67 31 5a 46 42 35 56 7a 64 75 57 54 63 7a 4d 6d 78 6f 57 58 52 50 61 53 55 79 51 6b 52 47 51 57 38 34 61 57 34 31 4d 44 68 7a 56 6a 64 4e 4e 6e 46 4a 52 30 73 22 2c 22 62 69 64 49 64 22 3a 22 53 6f 66 77 65 6c 39 79 61 32 74 74 65 45 39 6b 59 7a 51 32 63 56 59 7a 55 58 52 53 61 54 63 33 4e 6c 52 4c 62 47 5a 36 51 57 4e 7a 55 Data Ascii: 15F{"bundle":"PTJSbF95ckExNjdHNnFReUI5b1VEUGplaUxaR2MlMkI5cEtiZ2JDd2JsNjVVRFRBQ2JLRjJjekNRQlp2UWVyQ2NWUFI1cU83QXdPd0ZYUFN2ZEZ5R1VBTlhjUllpNHlwSXg1ZFB5VzduWTczMmxoWXRPaSUyQkRGQW84aW41MDhzVjdNNnFJR0s","bidId":"Sofwel9ya2tteE9kYzQ2cVYzUXRSaTc3NlRLbGZ6QWNzU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	49997	52.86.98.54	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:12 UTC	827	OUT	GET /merge?pid=27&3pid=bbb7c0a8-9303-4b39-93f6-f187e79feaa0&gdpr=0&gdpr_consent= HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv; ljtrtbexp=eJyrVrIwULIyNDc0tLSwMDU20FEysUTlW5ih8o0gfAMLIyNDMN8cIm9sYWxubFALAJvzEE8%3D; _ljtrtb_80=LTX5LRW4-V-IXJ1; _ljtrtb_49=x5v74EUGBRIZ
2024-03-18 16:22:12 UTC	1251	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_49=x5v74EUGBRIZ; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_80=LTX5LRW4-V-IXJ1; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJyrVjKxVLJSqjAtMzdxDXV3CvKMUtJRsjAAivmERJj6BIWb6IbpekZ4GSrVAgD7LgtG; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:12 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_27=bbb7c0a8-9303-4b39-93f6-f187e79feaa0; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:12 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:12 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJyrVrIwULIyNDc0tLSwMDU20FEysUTlW5ih8o0gfAMLIyNDMN8cIm9sYWxubFALAJvzEE8%3D; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:12 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-03-18 16:22:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	49998	34.236.106.57	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:12 UTC	560	OUT	GET /merge?pid=80&3pid=LTX5LRW4-V-IXJ1&gdpr=0 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv; ljtrtbexp=eJyrVrIwULIyNDc0tLSwMDU20FEysUTlW5ih8o0gfAMLIyNDMN8cIm9sYWxubFALAJvzEE8%3D; _ljtrtb_80=LTX5LRW4-V-IXJ1; _ljtrtb_49=x5v74EUGBRIZ
2024-03-18 16:22:12 UTC	1230	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_49=x5v74EUGBRIZ; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_80=LTX5LRW4-V-IXJ1; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJyrVjKxVLJSqjAtMzdxDXV3CvKMUtJRsjAAivmERJj6BIWb6IbpekZ4GSrVAgD7LgtG; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:12 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_80=LTX5LRW4-V-IXJ1; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:12 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:12 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJyrVrIwULIyNDc0tLSwMDU20FEysUTlW5ih8o0gfAMLIyNDMN8cIm9sYWxubFALAJvzEE8%3D; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:12 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-03-18 16:22:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	49999	34.236.106.57	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:12 UTC	587	OUT	GET /merge?pid=49&3pid=x5v74EUGBRIZ&ev=1&pid=558511&gdpr_consent=&gdpr=0 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv; ljtrtbexp=eJyrVrIwULIyNDc0tLSwMDU20FEysUTlW5ih8o0gfAMLIyNDMN8cIm9sYWxubFALAJvzEE8%3D; _ljtrtb_80=LTX5LRW4-V-IXJ1; _ljtrtb_49=x5v74EUGBRIZ
2024-03-18 16:22:12 UTC	1227	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_49=x5v74EUGBRIZ; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_80=LTX5LRW4-V-IXJ1; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJyrVjKxVLJSqjAtMzdxDXV3CvKMUtJRsjAAivmERJj6BIWb6IbpekZ4GSrVAgD7LgtG; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:12 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_49=x5v74EUGBRIZ; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:12 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJyrVrIwULIyNDc0tLSwMDU20FEysUTlW5ih8o0gfAMLIyNDMN8cIm9sYWxubFALAJvzEE8%3D; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:12 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:12 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-03-18 16:22:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	50000	34.98.64.218	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:12 UTC	628	OUT	GET /w/1.0/sd?id=537072971&val=9892abd7-2a3a-4a40-95c8-94f2d71ac262&ttd_puid=e161e7f6-42d8-3d4c-742d-4b64cdd4674d&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=32cdd8af-eb5f-02bb-2efb-838ca9f354b0\|1710778930; pd=v2\|1710778930\|vMgavPkWgy; univ_id=537072971\|9892abd7-2a3a-4a40-95c8-94f2d71ac262\|1710778932299885
2024-03-18 16:22:12 UTC	568	IN	HTTP/1.1 200 OK Vary: Accept Set-Cookie: univ_id=537072971\|9892abd7-2a3a-4a40-95c8-94f2d71ac262\|1710778932718470; Version=1; Expires=Tue, 02-Apr-2024 16:22:12 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Mon, 18 Mar 2024 16:22:12 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	50003	34.111.113.62	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:12 UTC	814	OUT	GET /idsync/ex/receive?partner_id=1830&partner_device_id=476a305c-888e-468c-8d57-ea927e6c6f82&ttd_puid=da9fa8fc-3c38-47c1-bced-e79257211d8c%2C%2C HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1710778931516; TapAd_DID=da9fa8fc-3c38-47c1-bced-e79257211d8c; TapAd_3WAY_SYNCS=
2024-03-18 16:22:12 UTC	1101	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:12 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1710778931516;Expires=Fri, 17 May 2024 16:22:12 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=da9fa8fc-3c38-47c1-bced-e79257211d8c;Expires=Fri, 17 May 2024 16:22:12 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!1888;Expires=Fri, 17 May 2024 16:22:12 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:12 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	50001	141.95.98.65	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:12 UTC	680	OUT	POST /g/v2/1189.json HTTP/1.1 Host: id5-sync.com Connection: keep-alive Content-Length: 382 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://browser-update.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=8c82d760-97a6-7b38-a656-a04ba9b9cc68#1710778931072#2; 3pi=
2024-03-18 16:22:12 UTC	382	OUT	Data Raw: 7b 22 70 61 72 74 6e 65 72 22 3a 31 31 38 39 2c 22 67 64 70 72 22 3a 30 2c 22 6e 62 50 61 67 65 22 3a 31 2c 22 6f 22 3a 22 70 62 6a 73 22 2c 22 74 6d 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 62 72 6f 77 73 65 72 2d 75 70 64 61 74 65 2e 6f 72 67 2f 75 70 64 61 74 65 2d 62 72 6f 77 73 65 72 2e 68 74 6d 6c 23 33 2e 33 2e 35 31 3a 69 77 75 2e 6d 61 72 6b 65 74 69 6e 67 22 2c 22 72 65 66 22 3a 6e 75 6c 6c 2c 22 63 75 22 3a 6e 75 6c 6c 2c 22 74 6f 70 22 3a 31 2c 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 62 72 6f 77 73 65 72 2d 75 70 64 61 74 65 2e 6f 72 67 2f 75 70 64 61 74 65 2d 62 72 6f 77 73 65 72 2e 68 74 6d 6c 23 33 2e 33 2e 35 31 3a 69 77 75 2e 6d 61 72 6b 65 74 69 6e 67 22 2c 22 76 22 3a 22 38 2e 35 2e 30 22 2c 22 73 74 6f 72 61 67 65 22 3a 7b 22 74 79 70 65 22 Data Ascii: {"partner":1189,"gdpr":0,"nbPage":1,"o":"pbjs","tml":"https://browser-update.org/update-browser.html#3.3.51:iwu.marketing","ref":null,"cu":null,"top":1,"u":"https://browser-update.org/update-browser.html#3.3.51:iwu.marketing","v":"8.5.0","storage":{"type"
2024-03-18 16:22:13 UTC	518	IN	HTTP/1.1 200 p3p: CP="CAO PSA OUR" set-cookie: id5=8c82d760-97a6-7b38-a656-a04ba9b9cc68#1710778931072#3; Max-Age=7776000; Expires=Sun, 16 Jun 2024 16:22:13 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure access-control-allow-origin: https://browser-update.org vary: Origin access-control-allow-credentials: true content-type: application/json transfer-encoding: chunked date: Mon, 18 Mar 2024 16:22:12 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-03-18 16:22:13 UTC	631	IN	Data Raw: 32 37 30 0d 0a 7b 22 73 69 67 6e 61 74 75 72 65 22 3a 22 49 44 35 5f 41 6c 6f 41 49 4b 65 77 61 32 32 48 65 56 4f 6f 37 79 71 72 31 55 69 35 75 55 74 36 4d 64 49 4e 68 73 6f 47 6b 71 53 6d 57 56 50 33 6f 53 37 53 4a 61 5a 75 4d 6b 6f 51 42 49 61 31 2d 68 2d 56 46 36 34 56 4e 58 44 4f 52 52 4b 77 66 38 57 42 33 72 70 38 38 32 75 57 63 5a 57 45 6c 44 49 74 47 44 5f 39 34 45 64 6b 73 73 48 6b 73 57 4e 72 70 50 36 64 53 6a 5a 69 6e 77 2d 70 36 4a 72 56 6f 6d 41 74 76 65 75 36 48 67 33 33 4f 44 76 42 54 6a 59 22 2c 22 63 72 65 61 74 65 64 5f 61 74 22 3a 22 32 30 32 34 2d 30 33 2d 31 38 54 31 36 3a 32 32 3a 31 31 2e 30 37 32 5a 22 2c 22 69 64 35 5f 63 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 6f 72 69 67 69 6e 61 6c 5f 75 69 64 22 3a 22 49 44 35 2a 6c 6c 43 4f Data Ascii: 270{"signature":"ID5_AloAIKewa22HeVOo7yqr1Ui5uUt6MdINhsoGkqSmWVP3oS7SJaZuMkoQBIa1-h-VF64VNXDORRKwf8WB3rp882uWcZWElDItGD_94EdkssHksWNrpP6dSjZinw-p6JrVomAtveu6Hg33ODvBTjY","created_at":"2024-03-18T16:22:11.072Z","id5_consent":true,"original_uid":"ID5*llCO
2024-03-18 16:22:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	50006	52.86.98.54	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:12 UTC	974	OUT	GET /merge?pid=86&3pid=o2HIxaEGHLyIlgWmC9QyNMFpZi0f4iDXPjTtqxL-O6g&pi=sovrn&gdpr=0&gdpr_consent=&tc=1 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv; ljtrtbexp=eJyrVrIwULIyNDc0tLSwMDU20FEysUTlW5ih8o0gfAMLIyNDMN8cIm9sYWxubFALAJvzEE8%3D; _ljtrtb_80=LTX5LRW4-V-IXJ1; _ljtrtb_49=x5v74EUGBRIZ; ljtrtb=eJyrVjKxVLJSqjAtMzdxDXV3CvKMUtJRsjAAivmERJj6BIWb6IbpekZ4GSrVAgD7LgtG; _ljtrtb_27=bbb7c0a8-9303-4b39-93f6-f187e79feaa0
2024-03-18 16:22:12 UTC	1450	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_49=x5v74EUGBRIZ; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_27=bbb7c0a8-9303-4b39-93f6-f187e79feaa0; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_80=LTX5LRW4-V-IXJ1; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJyrVjKxVLJSqjAtMzdxDXV3CvKMUtJRMjIHiiUlJZknGyRa6FoaGxjrmiQZWwJZaWa6aYYW5qnmlmmpiYkGQLUWBkC1PiERpj5B4Sa6YbqeEV6GSrUA2pQWSw%3D%3D; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:12 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_86=o2HIxaEGHLyIlgWmC9QyNMFpZi0f4iDXPjTtqxL-O6g; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:12 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJyrVrIwULIyNDc0tLSwMDU20FEysUTlW5ih8o0gfAMLIyNDMN8cIm9sYWxubFALAJvzEE8%3D; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:12 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:12 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-03-18 16:22:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	50007	8.28.7.83	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:12 UTC	1230	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=476a305c-888e-468c-8d57-ea927e6c6f82&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; chkChromeAb67Sec=1; pi=156011:2; DPSync3=1711929600%3A201_263%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_54_250_71_220_21; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; PugT=1710769339
2024-03-18 16:22:12 UTC	744	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Mar 2024 16:22:11 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 16-Jun-2024 16:22:11 GMT; path=/ Set-Cookie: PugT=1710778931; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 16:22:11 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-18 16:22:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	50002	35.210.53.219	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:12 UTC	761	OUT	GET /ul_cb/sync?ssp=bidswitch&bidswitch_ssp_id=fmx&bsw_custom_parameter=2b28c092-dd0b-42bb-b143-c15d16fc69ab HTTP/1.1 Host: pool.admedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=eacb20b5-1654-4907-a3bb-abb94dd9e72c; c=1710778932; tuuid_lu=1710778932
2024-03-18 16:22:13 UTC	620	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Mon, 18 Mar 2024 16:22:13 GMT Location: //x.bidswitch.net/sync?dsp_id=23&expires=14&user_id=eacb20b5-1654-4907-a3bb-abb94dd9e72c&user_group=1&ssp=fmx&bsw_param=2b28c092-dd0b-42bb-b143-c15d16fc69ab Set-Cookie: tuuid=eacb20b5-1654-4907-a3bb-abb94dd9e72c; path=/; expires=Tue, 18-Mar-2025 16:22:13 GMT; samesite=none; secure Set-Cookie: tuuid_lu=1710778933; path=/; expires=Tue, 18-Mar-2025 16:22:13 GMT; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	50008	34.236.106.57	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:12 UTC	721	OUT	GET /merge?pid=27&3pid=bbb7c0a8-9303-4b39-93f6-f187e79feaa0&gdpr=0&gdpr_consent= HTTP/1.1 Host: ce.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv; ljtrtbexp=eJyrVrIwULIyNDc0tLSwMDU20FEysUTlW5ih8o0gfAMLIyNDMN8cIm9sYWxubFALAJvzEE8%3D; _ljtrtb_80=LTX5LRW4-V-IXJ1; _ljtrtb_49=x5v74EUGBRIZ; ljtrtb=eJyrVjKxVLJSqjAtMzdxDXV3CvKMUtJRsjAAivmERJj6BIWb6IbpekZ4GSrVAgD7LgtG; _ljtrtb_27=bbb7c0a8-9303-4b39-93f6-f187e79feaa0
2024-03-18 16:22:13 UTC	1443	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_49=x5v74EUGBRIZ; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_27=bbb7c0a8-9303-4b39-93f6-f187e79feaa0; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_80=LTX5LRW4-V-IXJ1; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJyrVjKxVLJSqjAtMzdxDXV3CvKMUtJRMjIHiiUlJZknGyRa6FoaGxjrmiQZWwJZaWa6aYYW5qnmlmmpiYkGQLUWBkC1PiERpj5B4Sa6YbqeEV6GSrUA2pQWSw%3D%3D; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:12 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_27=bbb7c0a8-9303-4b39-93f6-f187e79feaa0; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:12 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJyrVrIwULIyNDc0tLSwMDU20FEysUTlW5ih8o0gfAMLIyNDMN8cIm9sYWxubFALAJvzEE8%3D; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:12 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:12 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-03-18 16:22:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	50005	162.19.138.118	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:12 UTC	349	OUT	GET /lb/v1 HTTP/1.1 Host: lb.eu-1-id5-sync.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:13 UTC	309	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers content-type: application/json;charset=UTF-8 transfer-encoding: chunked date: Mon, 18 Mar 2024 16:22:12 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-03-18 16:22:13 UTC	39	IN	Data Raw: 32 31 0d 0a 7b 22 6c 62 22 3a 22 58 36 65 4a 35 6a 58 33 4a 76 4d 4d 38 54 47 6c 4d 4e 65 53 62 51 3d 3d 22 7d 0d 0a Data Ascii: 21{"lb":"X6eJ5jX3JvMM8TGlMNeSbQ=="}
2024-03-18 16:22:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	50010	34.236.106.57	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:13 UTC	858	OUT	GET /merge?pid=86&3pid=o2HIxaEGHLyIlgWmC9QyNMFpZi0f4iDXPjTtqxL-O6g&pi=sovrn&gdpr=0&gdpr_consent=&tc=1 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv; ljtrtbexp=eJyrVrIwULIyNDc0tLSwMDU20FEysUTlW5ih8o0gfAMLIyNDMN8cIm9sYWxubFALAJvzEE8%3D; _ljtrtb_80=LTX5LRW4-V-IXJ1; _ljtrtb_49=x5v74EUGBRIZ; _ljtrtb_27=bbb7c0a8-9303-4b39-93f6-f187e79feaa0; ljtrtb=eJyrVjKxVLJSqjAtMzdxDXV3CvKMUtJRMjIHiiUlJZknGyRa6FoaGxjrmiQZWwJZaWa6aYYW5qnmlmmpiYkGQLUWBkC1PiERpj5B4Sa6YbqeEV6GSrUA2pQWSw%3D%3D; _ljtrtb_86=o2HIxaEGHLyIlgWmC9QyNMFpZi0f4iDXPjTtqxL-O6g
2024-03-18 16:22:13 UTC	1667	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:13 GMT Content-Type: image/gif Content-Length: 43 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_49=x5v74EUGBRIZ; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_27=bbb7c0a8-9303-4b39-93f6-f187e79feaa0; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_80=LTX5LRW4-V-IXJ1; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_86=o2HIxaEGHLyIlgWmC9QyNMFpZi0f4iDXPjTtqxL-O6g; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJwVylsLgjAYgOH%2Fsus%2BmG7u0GVlulgn0RzebeHEKCqImET%2FvXX38vB%2BEJVojkL25jRvikWlOjRDKY%2FmnONnbAVIgglQR2Qsz8Angvdc%2Bt5aHF%2BB46trk%2BmqpXACZTbJn1nke1qqYPOi1JO6Du1tKY%2FTbrt%2BdCP2dFyZw6V%2BPYOGPRvQ9wfKjSYk; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:13 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_86=o2HIxaEGHLyIlgWmC9QyNMFpZi0f4iDXPjTtqxL-O6g; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:13 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:13 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJyrVrIwULIyNDc0tLSwMDU20FEysUTlW5ih8o0gfAMLIyNDMN8cIm9sYWxubFALAJvzEE8%3D; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:13 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-03-18 16:22:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	50009	35.211.178.172	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:13 UTC	796	OUT	GET /sync?dsp_id=23&expires=14&user_id=eacb20b5-1654-4907-a3bb-abb94dd9e72c&user_group=1&ssp=fmx&bsw_param=2b28c092-dd0b-42bb-b143-c15d16fc69ab HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=2b28c092-dd0b-42bb-b143-c15d16fc69ab; c=1710778930; tuuid_lu=1710778930
2024-03-18 16:22:13 UTC	531	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 18 Mar 2024 16:22:13 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //ce.lijit.com/merge?pid=26&3pid=2b28c092-dd0b-42bb-b143-c15d16fc69ab&gdpr=&gdpr_consent=&us_privacy= Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	50012	8.28.7.84	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:13 UTC	1335	OUT	GET /AdServer/SPug?partnerID=156011&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; chkChromeAb67Sec=1; pi=156011:2; DPSync3=1711929600%3A201_263%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_54_250_71_220_21; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; PugT=1710778931
2024-03-18 16:22:13 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Mar 2024 02:32:33 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1710729153; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 02:32:33 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-18 16:22:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	50013	34.111.113.62	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:13 UTC	584	OUT	GET /idsync/ex/receive?partner_id=1830&partner_device_id=476a305c-888e-468c-8d57-ea927e6c6f82&ttd_puid=da9fa8fc-3c38-47c1-bced-e79257211d8c%2C%2C HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1710778931516; TapAd_DID=da9fa8fc-3c38-47c1-bced-e79257211d8c; TapAd_3WAY_SYNCS=1!1888
2024-03-18 16:22:13 UTC	1101	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:13 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1710778931516;Expires=Fri, 17 May 2024 16:22:13 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=da9fa8fc-3c38-47c1-bced-e79257211d8c;Expires=Fri, 17 May 2024 16:22:13 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!1888;Expires=Fri, 17 May 2024 16:22:13 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:13 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	50011	141.95.33.120	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:13 UTC	422	OUT	GET /g/v2/1189.json HTTP/1.1 Host: id5-sync.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3pi=; id5=8c82d760-97a6-7b38-a656-a04ba9b9cc68#1710778931072#3
2024-03-18 16:22:13 UTC	174	IN	HTTP/1.1 400 transfer-encoding: chunked date: Mon, 18 Mar 2024 16:22:13 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-03-18 16:22:13 UTC	552	IN	Data Raw: 32 31 43 0d 0a 52 65 71 75 69 72 65 64 20 72 65 71 75 65 73 74 20 62 6f 64 79 20 69 73 20 6d 69 73 73 69 6e 67 3a 20 70 75 62 6c 69 63 20 6f 72 67 2e 73 70 72 69 6e 67 66 72 61 6d 65 77 6f 72 6b 2e 68 74 74 70 2e 52 65 73 70 6f 6e 73 65 45 6e 74 69 74 79 3c 69 6f 2e 69 64 35 2e 66 65 74 63 68 2e 72 65 71 75 65 73 74 2e 46 65 74 63 68 52 65 73 70 6f 6e 73 65 44 74 6f 3e 20 69 6f 2e 69 64 35 2e 66 65 74 63 68 2e 46 65 74 63 68 32 43 6f 6e 74 72 6f 6c 6c 65 72 2e 66 65 74 63 68 43 6c 69 65 6e 74 54 6f 53 65 72 76 65 72 28 6a 61 76 61 2e 6c 61 6e 67 2e 4c 6f 6e 67 2c 69 6f 2e 69 64 35 2e 66 65 74 63 68 2e 72 65 71 75 65 73 74 2e 46 65 74 63 68 52 65 71 75 65 73 74 42 6f 64 79 2c 6a 61 76 61 2e 6c 61 6e 67 2e 49 6e 74 65 67 65 72 2c 6a 61 76 61 2e 6c 61 6e 67 Data Ascii: 21CRequired request body is missing: public org.springframework.http.ResponseEntity<io.id5.fetch.request.FetchResponseDto> io.id5.fetch.Fetch2Controller.fetchClientToServer(java.lang.Long,io.id5.fetch.request.FetchRequestBody,java.lang.Integer,java.lang

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	50014	104.36.115.113	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:13 UTC	1414	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=71058137&p=156011&s=165626&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; chkChromeAb67Sec=1; DPSync3=1711929600%3A201_263%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_54_250_71_220_21; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; PugT=1710778931
2024-03-18 16:22:13 UTC	919	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=2; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=156011:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1711929600%3A263_262_261_260_259_201%7C1710806400%3A248%7C1711324800%3A265; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1711929600%3A13_250_166_3_104_165_54_71_220_21%7C1711324800%3A15_223; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Mon, 18 Mar 2024 16:22:13 GMT Content-Length: 1564 Connection: close
2024-03-18 16:22:13 UTC	1564	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 74 68 72 74 6c 65 2e 63 6f 6d 2f 69 6e 73 79 6e 63 3f 76 78 69 69 5f 70 69 64 3d 31 30 30 36 37 26 76 78 69 69 5f 70 64 69 64 3d 32 36 46 43 35 42 43 34 2d 43 30 45 41 2d 34 38 31 45 2d 41 43 36 44 2d 32 39 37 45 46 34 39 33 30 45 33 35 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 34 30 32 34 35 31 39 33 26 76 61 6c 3d 32 36 46 43 35 42 43 34 2d 43 30 45 41 2d 34 38 31 45 2d 41 43 36 44 2d 32 39 37 45 46 34 39 33 30 45 33 Data Ascii: PubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=26FC5BC4-C0EA-481E-AC6D-297EF4930E3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	50015	52.86.98.54	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:13 UTC	1080	OUT	GET /merge?pid=26&3pid=2b28c092-dd0b-42bb-b143-c15d16fc69ab&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv; ljtrtbexp=eJyrVrIwULIyNDc0tLSwMDU20FEysUTlW5ih8o0gfAMLIyNDMN8cIm9sYWxubFALAJvzEE8%3D; _ljtrtb_80=LTX5LRW4-V-IXJ1; _ljtrtb_49=x5v74EUGBRIZ; _ljtrtb_27=bbb7c0a8-9303-4b39-93f6-f187e79feaa0; ljtrtb=eJyrVjKxVLJSqjAtMzdxDXV3CvKMUtJRMjIHiiUlJZknGyRa6FoaGxjrmiQZWwJZaWa6aYYW5qnmlmmpiYkGQLUWBkC1PiERpj5B4Sa6YbqeEV6GSrUA2pQWSw%3D%3D; _ljtrtb_86=o2HIxaEGHLyIlgWmC9QyNMFpZi0f4iDXPjTtqxL-O6g
2024-03-18 16:22:14 UTC	1660	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:13 GMT Content-Type: image/gif Content-Length: 43 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_49=x5v74EUGBRIZ; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_27=bbb7c0a8-9303-4b39-93f6-f187e79feaa0; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_80=LTX5LRW4-V-IXJ1; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_86=o2HIxaEGHLyIlgWmC9QyNMFpZi0f4iDXPjTtqxL-O6g; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJwVylsLgjAYgOH%2Fsus%2BmG7u0GVlulgn0RzebeHEKCqImET%2FvXX38vB%2BEJVojkL25jRvikWlOjRDKY%2FmnONnbAVIgglQR2Qsz8Angvdc%2Bt5aHF%2BB46trk%2BmqpXACZTbJn1nke1qqYPOi1JO6Du1tKY%2FTbrt%2BdCP2dFyZw6V%2BPYOGPRvQ9wfKjSYk; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:13 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_26=2b28c092-dd0b-42bb-b143-c15d16fc69ab; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:13 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:13 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJyrVrIwULIyNDc0tLSwMDU20FEysUTlW5ih8o0gfAMLIyNDMN8cIm9sYWxubFALAJvzEE8%3D; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:13 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-03-18 16:22:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	50016	142.251.35.162	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:14 UTC	2111	OUT	GET /pagead/ads?client=ca-pub-5884294479391638&output=html&h=280&slotname=3654094576&adk=229048865&adf=3493768504&pi=t.ma~as.3654094576&w=336&url=https%3A%2F%2Fbrowser-update.org%2F&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1710778930128&bpp=1199&bdt=1523&idt=2831&shv=r20240313&mjsv=m202403130201&ptt=5&saldr=sd&correlator=4983246607908&frm=24&ife=3&pv=2&ga_vid=1057831115.1710778933&ga_sid=1710778933&ga_hid=1798790202&ga_fc=0&nhd=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=-12245933&bih=-12245933&isw=336&ish=280&ifk=2444235967&scr_x=-12245933&scr_y=-12245933&eid=44759875%2C44759926%2C44759842%2C44795922%2C95322746%2C95327951%2C95327954%2C31081901%2C95322184%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=2513308701797547&tmod=1386792793&uas=0&nvt=1&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C336%2C280&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=1.7nq73craib6t&fsb=1&dtd=2860 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:14 UTC	570	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 18 Mar 2024 16:22:14 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-18 16:22:14 UTC	610	IN	Data Raw: 32 35 62 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 25b<html><body style="background-color:transparent"></body></html>
2024-03-18 16:22:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	50017	142.251.35.162	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:14 UTC	2115	OUT	GET /pagead/ads?client=ca-pub-5884294479391638&output=html&h=90&slotname=3654094576&adk=228266070&adf=3493768505&pi=t.ma~as.3654094576&w=970&url=https%3A%2F%2Fbrowser-update.org%2F&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1710778930134&bpp=1204&bdt=1441&idt=2890&shv=r20240313&mjsv=m202403130201&ptt=5&saldr=sd&correlator=966864692783&frm=24&ife=3&pv=2&ga_vid=751177015.1710778933&ga_sid=1710778933&ga_hid=640648971&ga_fc=0&nhd=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=-12245933&bih=-12245933&isw=970&ish=90&ifk=1017635361&scr_x=-12245933&scr_y=-12245933&eid=44759875%2C44759926%2C44759842%2C31081793%2C95325975%2C95327950%2C95327954%2C31081901%2C95320376%2C95322388%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=862165079531677&tmod=1386792793&uas=0&nvt=1&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C970%2C90&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=1.bp47bps3drp4&fsb=1&dtd=2937 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:14 UTC	599	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 18 Mar 2024 16:22:14 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-18 16:22:14 UTC	653	IN	Data Raw: 37 65 30 62 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 34 30 33 31 33 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 3d 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 6c 65 66 74 4d 61 72 67 69 6e 3d 22 30 22 20 74 6f 70 4d 61 72 67 69 6e 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 64 69 63 6e 66 20 3d 20 7b 65 62 72 70 66 61 3a 20 74 72 75 65 2c 7d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 6a 63 3d 22 Data Ascii: 7e0b<!doctype html><html><head><script>var jscVersion = 'r20240313';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {ebrpfa: true,};</script><script data-jc="
2024-03-18 16:22:14 UTC	1252	IN	Data Raw: 64 2b 2b 29 69 66 28 63 3d 63 5b 62 5b 64 5d 5d 2c 6e 75 6c 6c 3d 3d 63 29 7b 62 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 62 3d 63 7d 61 3d 62 26 26 62 5b 61 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 3f 61 3a 21 31 7d 3b 76 61 72 20 62 61 3d 61 61 28 36 31 30 34 30 31 33 30 31 29 2c 63 61 3d 61 61 28 31 38 38 35 38 38 37 33 36 29 3b 76 61 72 20 74 3b 63 6f 6e 73 74 20 64 61 3d 71 2e 6e 61 76 69 67 61 74 6f 72 3b 74 3d 64 61 3f 64 61 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 65 61 28 61 29 7b 72 65 74 75 72 6e 20 62 61 3f 74 3f 74 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 28 7b 62 72 61 6e 64 3a 62 7d 29 3d 3e 62 26 26 2d 31 21 3d 62 2e 69 6e 64 65 78 4f 66 28 61 29 29 3a 21 31 3a 21 31 7d Data Ascii: d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1};var ba=aa(610401301),ca=aa(188588736);var t;const da=q.navigator;t=da?da.userAgentData\|\|null:null;function ea(a){return ba?t?t.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}
2024-03-18 16:22:14 UTC	1252	IN	Data Raw: 74 22 21 3d 62 3f 62 3a 61 3f 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 3f 22 61 72 72 61 79 22 3a 62 3a 22 6e 75 6c 6c 22 7d 3a 20 24 7b 61 7d 60 29 3b 7d 72 65 74 75 72 6e 20 61 7d 3b 6c 65 74 20 72 61 3b 66 75 6e 63 74 69 6f 6e 20 73 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 74 61 28 62 29 7d 66 75 6e 63 74 69 6f 6e 20 74 61 28 61 29 7b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 61 29 7b 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 61 29 3f 61 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 65 20 22 62 6f 6f 6c 65 61 6e 22 3a 72 65 74 75 72 6e 20 61 3f 31 3a 30 3b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 69 66 28 61 29 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 7b 69 66 28 7a 28 61 2c 76 6f Data Ascii: t"!=b?b:a?Array.isArray(a)?"array":b:"null"}: ${a}`);}return a};let ra;function sa(a,b){return ta(b)}function ta(a){switch(typeof a){case "number":return isFinite(a)?a:String(a);case "boolean":return a?1:0;case "object":if(a)if(Array.isArray(a)){if(z(a,vo
2024-03-18 16:22:14 UTC	1252	IN	Data Raw: 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 2c 63 20 69 6e 20 61 26 26 64 65 6c 65 74 65 20 61 5b 63 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 45 28 61 2c 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 21 3d 63 26 26 22 73 74 72 69 6e 67 22 21 3d 3d 74 79 70 65 6f 66 20 63 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 72 65 74 75 72 6e 20 44 28 61 2c 62 2c 63 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 42 61 28 61 29 7b 6e 61 3d 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 61 2e 74 6f 4a 53 4f 4e 28 29 2c 73 61 29 7d 66 69 6e 61 6c 6c 79 7b 6e 61 3d 21 31 7d 7d 76 61 72 20 46 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 61 3a 7b 76 61 72 20 61 3d 76 6f 69 64 20 30 3b 6e 75 6c 6c 3d 3d 61 26 26 28 61 3d 72 61 29 3b 72 61 3d 76 6f Data Ascii: [a.length-1],c in a&&delete a[c])}function E(a,b,c){if(null!=c&&"string"!==typeof c)throw Error();return D(a,b,c)};function Ba(a){na=!0;try{return JSON.stringify(a.toJSON(),sa)}finally{na=!1}}var F=class{constructor(){a:{var a=void 0;null==a&&(a=ra);ra=vo
2024-03-18 16:22:14 UTC	1252	IN	Data Raw: 74 6f 72 28 61 2c 62 3d 21 31 29 7b 74 68 69 73 2e 6b 65 79 3d 61 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 62 3b 74 68 69 73 2e 76 61 6c 75 65 54 79 70 65 3d 22 62 6f 6f 6c 65 61 6e 22 7d 7d 3b 76 61 72 20 45 61 3d 6e 65 77 20 47 28 22 31 30 30 30 30 30 22 29 2c 46 61 3d 6e 65 77 20 47 28 22 34 35 33 36 38 32 35 39 22 29 2c 47 61 3d 6e 65 77 20 47 28 22 34 35 33 35 37 31 35 36 22 2c 21 30 29 2c 48 61 3d 6e 65 77 20 47 28 22 34 35 33 35 30 38 39 30 22 29 2c 49 61 3d 6e 65 77 20 47 28 22 34 35 34 31 34 38 39 32 22 29 2c 4a 61 3d 6e 65 77 20 47 28 22 34 35 36 32 30 38 33 32 22 29 3b 63 6f 6e 73 74 20 4b 61 3d 52 65 67 45 78 70 28 22 61 64 5c 5c 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 5c 5c 2e 6e 65 74 2f 64 64 6d 2f 74 72 61 63 6b 69 6d 70 22 29 Data Ascii: tor(a,b=!1){this.key=a;this.defaultValue=b;this.valueType="boolean"}};var Ea=new G("100000"),Fa=new G("45368259"),Ga=new G("45357156",!0),Ha=new G("45350890"),Ia=new G("45414892"),Ja=new G("45620832");const Ka=RegExp("ad\\.doubleclick\\.net/ddm/trackimp")
2024-03-18 16:22:14 UTC	1252	IN	Data Raw: 73 2e 63 72 79 70 74 6f 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 61 29 3b 72 65 74 75 72 6e 20 61 5b 30 5d 2f 36 35 35 33 36 2f 36 35 35 33 36 7d 63 61 74 63 68 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 54 61 28 61 2c 62 29 7b 69 66 28 61 29 66 6f 72 28 63 6f 6e 73 74 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 28 61 5b 63 5d 2c 63 2c 61 29 7d 6c 65 74 20 4d 3d 5b 5d 3b 63 6f 6e 73 74 20 55 61 3d 28 29 3d 3e 7b 63 6f 6e 73 74 20 61 3d 4d 3b 4d 3d 5b 5d 3b 66 6f 72 28 63 6f 6e 73 74 20 62 20 6f 66 20 61 29 74 72 79 7b 62 28 29 7d 63 61 74 63 68 7b 7d 7d 3b 20 76 61 72 20 56 61 3d 28 Data Ascii: s.crypto.getRandomValues(a);return a[0]/65536/65536}catch{return Math.random()}}function Ta(a,b){if(a)for(const c in a)Object.prototype.hasOwnProperty.call(a,c)&&b(a[c],c,a)}let M=[];const Ua=()=>{const a=M;M=[];for(const b of a)try{b()}catch{}}; var Va=(
2024-03-18 16:22:14 UTC	1252	IN	Data Raw: 6f 6e 73 74 20 62 3d 65 62 2e 67 5b 61 2e 6b 65 79 5d 3b 69 66 28 22 70 72 6f 74 6f 22 3d 3d 3d 61 2e 76 61 6c 75 65 54 79 70 65 29 7b 74 72 79 7b 63 6f 6e 73 74 20 63 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 62 29 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 63 29 29 72 65 74 75 72 6e 20 63 7d 63 61 74 63 68 28 63 29 7b 7d 72 65 74 75 72 6e 20 61 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 7d 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 62 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3f 62 3a 61 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 7d 76 61 72 20 67 62 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 67 3d 7b 7d 7d 7d 3b 76 61 72 20 66 62 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 67 62 7b 63 6f 6e Data Ascii: onst b=eb.g[a.key];if("proto"===a.valueType){try{const c=JSON.parse(b);if(Array.isArray(c))return c}catch(c){}return a.defaultValue}return typeof b===typeof a.defaultValue?b:a.defaultValue}var gb=class{constructor(){this.g={}}};var fb=class extends gb{con
2024-03-18 16:22:14 UTC	1252	IN	Data Raw: 72 66 6f 72 6d 61 6e 63 65 2c 6f 62 3d 21 21 28 52 26 26 52 2e 6d 61 72 6b 26 26 52 2e 6d 65 61 73 75 72 65 26 26 52 2e 63 6c 65 61 72 4d 61 72 6b 73 29 2c 53 3d 4c 61 28 28 29 3d 3e 7b 76 61 72 20 61 3b 69 66 28 61 3d 6f 62 29 7b 76 61 72 20 62 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 51 29 7b 51 3d 22 22 3b 74 72 79 7b 61 3d 22 22 3b 74 72 79 7b 61 3d 71 2e 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 7d 63 61 74 63 68 28 63 29 7b 61 3d 71 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 7d 61 26 26 28 51 3d 28 62 3d 61 2e 6d 61 74 63 68 28 2f 5c 62 64 65 69 64 3d 28 5b 5c 64 2c 5d 2b 29 2f 29 29 3f 62 5b 31 5d 3a 22 22 29 7d 63 61 74 63 68 28 63 29 7b 7d 7d 62 3d 51 3b 61 3d 21 21 62 2e 69 6e 64 65 78 4f 66 26 26 30 3c 3d 62 2e 69 6e 64 65 78 4f 66 28 22 31 33 Data Ascii: rformance,ob=!!(R&&R.mark&&R.measure&&R.clearMarks),S=La(()=>{var a;if(a=ob){var b;if(null===Q){Q="";try{a="";try{a=q.top.location.hash}catch(c){a=q.location.hash}a&&(Q=(b=a.match(/\bdeid=([\d,]+)/))?b[1]:"")}catch(c){}}b=Q;a=!!b.indexOf&&0<=b.indexOf("13
2024-03-18 16:22:14 UTC	1252	IN	Data Raw: 74 20 67 3d 30 3b 67 3c 61 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 66 2e 70 75 73 68 28 73 62 28 61 5b 67 5d 2c 62 2c 63 2c 64 2b 31 2c 65 29 29 3b 72 65 74 75 72 6e 20 66 2e 6a 6f 69 6e 28 63 5b 64 5d 29 7d 7d 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 29 72 65 74 75 72 6e 20 65 3d 65 7c 7c 30 2c 32 3e 65 3f 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 72 62 28 61 2c 62 2c 63 2c 64 2c 65 2b 31 29 29 3a 22 2e 2e 2e 22 3b 72 65 74 75 72 6e 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 53 74 72 69 6e 67 28 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 74 62 28 61 29 7b 6c 65 74 20 62 3d 31 3b 66 6f 72 28 63 6f 6e 73 74 20 63 20 69 6e 20 61 2e 68 29 62 3d 63 2e 6c 65 6e 67 74 68 3e 62 3f 63 2e 6c 65 6e 67 74 Data Ascii: t g=0;g<a.length;g++)f.push(sb(a[g],b,c,d+1,e));return f.join(c[d])}}else if("object"==typeof a)return e=e\|\|0,2>e?encodeURIComponent(rb(a,b,c,d,e+1)):"...";return encodeURIComponent(String(a))}function tb(a){let b=1;for(const c in a.h)b=c.length>b?c.lengt
2024-03-18 16:22:14 UTC	1252	IN	Data Raw: 67 29 7d 29 2c 76 6f 69 64 20 30 2c 64 29 7d 63 61 74 63 68 28 68 29 7b 61 2e 6a 28 32 31 37 2c 68 29 7d 69 66 28 63 29 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 3f 2e 65 72 72 6f 72 3f 2e 28 67 29 3b 65 6c 73 65 20 74 68 72 6f 77 20 67 3b 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 56 3b 72 65 74 75 72 6e 28 2e 2e 2e 66 29 3d 3e 78 62 28 65 2c 61 2c 28 29 3d 3e 62 2e 61 70 70 6c 79 28 63 2c 66 29 2c 64 29 7d 20 76 61 72 20 7a 62 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 3d 6e 75 6c 6c 29 7b 74 68 69 73 2e 6d 3d 57 3b 74 68 69 73 2e 67 3d 61 3b 74 68 69 73 2e 68 3d 6e 75 6c 6c 3b 74 68 69 73 2e 69 3d 21 31 3b 74 68 69 73 2e 6f 3d 74 68 69 73 2e 6a 7d 6a 28 61 2c 62 2c 63 2c Data Ascii: g)}),void 0,d)}catch(h){a.j(217,h)}if(c)window.console?.error?.(g);else throw g;}return e}function U(a,b,c,d){var e=V;return(...f)=>xb(e,a,()=>b.apply(c,f),d)} var zb=class{constructor(a=null){this.m=W;this.g=a;this.h=null;this.i=!1;this.o=this.j}j(a,b,c,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	50018	54.144.102.188	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:14 UTC	770	OUT	GET /cookie-sync/pm?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAARQ07L8NQAABPzJYe3uw; bitoIsSecure=ok
2024-03-18 16:22:14 UTC	559	IN	HTTP/1.1 303 See Other Date: Mon, 18 Mar 2024 16:22:14 GMT location: https://cm.g.doubleclick.net/pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFBUlEwN0w4TlFBQUJQekpZZTN1dw&gdpr=0&gdpr_consent=&bee_sync_partners=sas%2Cpp%2Csyn%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 Server: gunicorn set-cookie: bito=AAARQ07L8NQAABPzJYe3uw; Domain=bidr.io; expires=Thu, 17 Apr 2025 12:22:14 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.4	50019	68.67.181.211	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:14 UTC	1053	OUT	GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=sc-qkOWOy4X_p3mD-LWUzAd-XDCZQmscLkmizNrfavkuQbEqumPcpRbLQP5MYfuaYQ8bCCHdAwNtUmwS86qSDkNpL-Zwzckxzo46gNxy6nM.; icu=ChgIs8t_EAoYASABKAEwr9ThrwY4AUABSAEQr9ThrwYYAA..; receive-cookie-deprecation=1; uuid2=9164480480629189644
2024-03-18 16:22:14 UTC	1514	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Mon, 18 Mar 2024 16:22:14 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=9164480480629189644&gdpr=0&gdpr_consent= AN-X-Request-Uuid: 49c13a0d-f398-4eef-b66d-8a057363396d Set-Cookie: XANDR_PANID=sc-qkOWOy4X_p3mD-LWUzAd-XDCZQmscLkmizNrfavkuQbEqumPcpRbLQP5MYfuaYQ8bCCHdAwNtUmwS86qSDkNpL-Zwzckxzo46gNxy6nM.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 16-Jun-2024 16:22:14 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 06-Mar-2034 16:22:14 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=9164480480629189644; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 16-Jun-2024 16:22:14 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 191.96.227.194; 191.96.227.194; 584.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	50021	35.244.159.8	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:14 UTC	818	OUT	GET /w/1.0/sd?id=540245193&val=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=32cdd8af-eb5f-02bb-2efb-838ca9f354b0\|1710778930; pd=v2\|1710778930\|vMgavPkWgy; univ_id=537072971\|9892abd7-2a3a-4a40-95c8-94f2d71ac262\|1710778932718470
2024-03-18 16:22:14 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Mon, 18 Mar 2024 16:22:14 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	50022	209.54.182.161	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:14 UTC	803	OUT	GET /ecm3?ex=pubmatic.com&id=PM_UID26FC5BC4-C0EA-481E-AC6D-297EF4930E35 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
2024-03-18 16:22:14 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 18 Mar 2024 16:22:14 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 8FRFNH1TRDA3Y2819JS6 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-18 16:22:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	50023	34.236.106.57	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:14 UTC	975	OUT	GET /merge?pid=26&3pid=2b28c092-dd0b-42bb-b143-c15d16fc69ab&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1 Host: ce.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv; ljtrtbexp=eJyrVrIwULIyNDc0tLSwMDU20FEysUTlW5ih8o0gfAMLIyNDMN8cIm9sYWxubFALAJvzEE8%3D; _ljtrtb_80=LTX5LRW4-V-IXJ1; _ljtrtb_49=x5v74EUGBRIZ; _ljtrtb_27=bbb7c0a8-9303-4b39-93f6-f187e79feaa0; _ljtrtb_86=o2HIxaEGHLyIlgWmC9QyNMFpZi0f4iDXPjTtqxL-O6g; ljtrtb=eJwVylsLgjAYgOH%2Fsus%2BmG7u0GVlulgn0RzebeHEKCqImET%2FvXX38vB%2BEJVojkL25jRvikWlOjRDKY%2FmnONnbAVIgglQR2Qsz8Angvdc%2Bt5aHF%2BB46trk%2BmqpXACZTbJn1nke1qqYPOi1JO6Du1tKY%2FTbrt%2BdCP2dFyZw6V%2BPYOGPRvQ9wfKjSYk; _ljtrtb_26=2b28c092-dd0b-42bb-b143-c15d16fc69ab
2024-03-18 16:22:14 UTC	1822	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:14 GMT Content-Type: image/gif Content-Length: 43 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_26=2b28c092-dd0b-42bb-b143-c15d16fc69ab; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_49=x5v74EUGBRIZ; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_27=bbb7c0a8-9303-4b39-93f6-f187e79feaa0; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_80=LTX5LRW4-V-IXJ1; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_86=o2HIxaEGHLyIlgWmC9QyNMFpZi0f4iDXPjTtqxL-O6g; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJwVzl0LgjAYhuH%2FsuNe2ObcXIeVqbG%2BpFI826tOjKKCCCX6782zh4v74PkSLsmccORRTTWHpqEIgiMCMhFAzcKGSVdLbZHMiNC%2BHcKPEvE5WeRZ5Y0rb4ioamoj0AENQGCg%2FXISHItUq7RrraW%2BjahvzakMTV4IuEBWbtjE04UHT7PBxklqxuzWFfelPo677fpZ9dSJflUerqf3azCwlx35%2FQHGQTE3; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:14 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_26=2b28c092-dd0b-42bb-b143-c15d16fc69ab; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:14 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJyrVrIwULIyNDc0tLSwMDU20FEysUTlW5ih8o0gfAMLIyNDMN8cIm9sYWxubFALAJvzEE8%3D; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:14 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv; Path=/; Domain=.lijit.com; Expires=Tue, 18-Mar-2025 16:22:14 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-03-18 16:22:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	50028	3.225.218.10	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:14 UTC	787	OUT	GET /ups/58292/sync?_origin=1&uid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&redir=true&gdpr=0&gdpr_consent= HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBDNq-GUCENUobzGQ--2jA6azyBcFBNoFEgEBAQG7-WUCZgAAAAAA_eMAAA&S=AQAAAuXkNxtEOJumYMc0aVwelMY
2024-03-18 16:22:14 UTC	741	IN	HTTP/1.1 302 Found Date: Mon, 18 Mar 2024 16:22:14 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC=18z8~2hd4;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Tue, 18-Mar-2025 16:22:14 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://image4.pubmatic.com/AdServer/SPug?partnerID=156078&xid=y-17tUrjJE2uUN58rhQTKtQw5Aw2CG9jI-~A&gdpr=0 Age: 0 Connection: close Server: ATS/9.1.10.106 Set-Cookie: A3=d=AQABBDNq-GUCENUobzGQ--2jA6azyBcFBNoFEgEBAQG7-WUCZgAAAAAA_eMAAA&S=AQAAAuXkNxtEOJumYMc0aVwelMY; Expires=Tue, 18 Mar 2025 22:22:14 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	50030	142.250.176.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:14 UTC	973	OUT	GET /pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFBUlEwN0w4TlFBQUJQekpZZTN1dw&gdpr=0&gdpr_consent=&bee_sync_partners=sas%2Cpp%2Csyn%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:14 UTC	743	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://match.prod.bidr.io/cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partners=sas%2Cpp%2Csyn%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 Date: Mon, 18 Mar 2024 16:22:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 390 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:14 UTC	390	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 70 72 6f 64 2e 62 69 64 72 2e 69 6f 2f 63 6f 6f 6b 69 65 2d 73 79 6e 63 2f 61 64 78 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 62 65 65 5f 73 79 6e 63 5f 70 61 72 74 6e 65 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://match.prod.bidr.io/cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	50024	52.204.113.215	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:14 UTC	659	OUT	GET /insync?vxii_pid=10067&vxii_pdid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent= HTTP/1.1 Host: thrtle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:14 UTC	570	IN	HTTP/1.1 302 Found Date: Mon, 18 Mar 2024 16:22:14 GMT Content-Type: text/html; charset=utf-8 Content-Length: 211 Connection: close Location: https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&vxii_pid=12&vxii_pid1=10067&vxii_rcid=cdd5ca24-47b1-4f3e-8cc1-d0019f951b2e P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6ImNkZDVjYTI0LTQ3YjEtNGYzZS04Y2MxLWQwMDE5Zjk1MWIyZSIsImwiOjE3MTA3Nzg5MzQ2NjIsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Mon, 18 Mar 2024 16:22:14 GMT; Max-Age=17280000; Secure; SameSite=None
2024-03-18 16:22:14 UTC	211	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 68 72 74 6c 65 2e 63 6f 6d 2f 69 6e 73 79 6e 63 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 76 78 69 69 5f 70 64 69 64 3d 32 36 46 43 35 42 43 34 2d 43 30 45 41 2d 34 38 31 45 2d 41 43 36 44 2d 32 39 37 45 46 34 39 33 30 45 33 35 26 61 6d 70 3b 76 78 69 69 5f 70 69 64 3d 31 32 26 61 6d 70 3b 76 78 69 69 5f 70 69 64 31 3d 31 30 30 36 37 26 61 6d 70 3b 76 78 69 69 5f 72 63 69 64 3d 63 64 64 35 63 61 32 34 2d 34 37 62 31 2d 34 66 33 65 2d 38 63 63 31 2d 64 30 30 31 39 66 39 35 31 62 32 65 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&vxii_pid=12&vxii_pid1=10067&vxii_rcid=cdd5ca24-47b1-4f3e-8cc1-d0019f951b2e">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	50025	34.196.130.100	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:14 UTC	655	OUT	GET /api/v1/dsync/Martin?exid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent= HTTP/1.1 Host: crb.kargo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:14 UTC	456	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:14 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=ac33492d-ca38-0673-52a3-85410777d329; Path=/; Domain=kargo.com; Expires=Tue, 18 Mar 2025 16:22:14 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2024-03-18 16:22:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	50026	52.22.88.168	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:14 UTC	648	OUT	GET /sync?pid=187&uid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.bfmio.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:14 UTC	420	IN	HTTP/1.1 204 Date: Mon, 18 Mar 2024 16:22:14 GMT Set-Cookie: __187_cid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; Domain=.bfmio.com; Max-Age=31536000; Expires=Tue, 18-Mar-2025 12:22:14 GMT-0400; Path=/; SameSite=None; Secure Set-Cookie: __io_cid=51212911e33aa8c49a1200ffe2b1dbbd89608586; Domain=.bfmio.com; Max-Age=31536000; Expires=Tue, 18-Mar-2025 12:22:14 GMT-0400; Path=/; SameSite=None; Secure Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.4	50031	8.28.7.83	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:14 UTC	1622	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=9164480480629189644&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; PugT=1710778931; SPugT=1710729153; chkChromeAb67Sec=2; pi=156011:4; DPSync3=1711929600%3A263_262_261_260_259_201%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_250_166_3_104_165_54_71_220_21%7C1711324800%3A15_223
2024-03-18 16:22:14 UTC	614	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Mar 2024 16:22:13 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 16-Jun-2024 16:22:13 GMT; path=/ Set-Cookie: PugT=1710778933; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 16:22:13 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-18 16:22:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.4	50027	52.2.85.165	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:14 UTC	752	OUT	GET /d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:14 UTC	549	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Mon, 18 Mar 2024 16:22:14 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=2b5667c9-681a-4026-b198-22bfa86cb93f&gdpr=0&gdpr_consent= Set-Cookie: cu=2b5667c9-681a-4026-b198-22bfa86cb93f\|1710778934758; Path=/; Domain=ipredictive.com; Expires=Tue, 18 Mar 2025 16:22:14 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: ccf1a2d4-43cf-4f5b-aed5-2cc6ea978898 Content-Length: 205 Connection: Close
2024-03-18 16:22:14 UTC	205	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 71 63 7a 30 78 4a 6d 4e 76 5a 47 55 39 4d 7a 49 31 4d 43 5a 30 62 44 30 78 4d 6a 6b 32 4d 44 41 3d 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 32 62 35 36 36 37 63 39 2d 36 38 31 61 2d 34 30 32 36 2d 62 31 39 38 2d 32 32 62 66 61 38 36 63 62 39 33 66 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=2b5667c9-681a-4026-b198-22bfa86cb93f&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.4	50035	34.98.64.218	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:14 UTC	582	OUT	GET /w/1.0/sd?id=540245193&val=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=32cdd8af-eb5f-02bb-2efb-838ca9f354b0\|1710778930; pd=v2\|1710778930\|vMgavPkWgy; univ_id=537072971\|9892abd7-2a3a-4a40-95c8-94f2d71ac262\|1710778932718470
2024-03-18 16:22:15 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Mon, 18 Mar 2024 16:22:15 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.4	50036	52.204.113.215	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:14 UTC	824	OUT	GET /insync?gdpr=0&gdpr_consent=&vxii_pdid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&vxii_pid=12&vxii_pid1=10067&vxii_rcid=cdd5ca24-47b1-4f3e-8cc1-d0019f951b2e HTTP/1.1 Host: thrtle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=eyJpZCI6ImNkZDVjYTI0LTQ3YjEtNGYzZS04Y2MxLWQwMDE5Zjk1MWIyZSIsImwiOjE3MTA3Nzg5MzQ2NjIsInQiOjF9
2024-03-18 16:22:15 UTC	353	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:15 GMT Content-Type: image/gif Content-Length: 43 Connection: close P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6ImNkZDVjYTI0LTQ3YjEtNGYzZS04Y2MxLWQwMDE5Zjk1MWIyZSIsImwiOjE3MTA3Nzg5MzUwNDgsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Fri, 04 Oct 2024 16:22:15 GMT; Secure; SameSite=None
2024-03-18 16:22:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.4	50033	142.251.40.226	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:14 UTC	1574	OUT	GET /pcs/view?xai=AKAOjsvgATh2nFLFTfxuA-Mg0ekaVvnQPG0p7BrqgOy6ed_6SfglkqoU-z69fs__aSdCe4LJChSZpnJMLIiA42k2EnU0HIUsrAK3_xZhVFyjvXm2vBa2vz767u-d9IWsftf332Cvp1zYcC9o1FZgyGPY-WE5uwHrLZ_TUu_59W4IDRPwmuU0O84LZYbbjS1Q-ZXaxZroess3QRM8xxe5IjdB_MBYU-jRJadYMM_prxH_2c-TLkkP1GwJCewJU32FqpudTRtxdzpWwLQM53DV3g0C8gOfanERMZGzLD9DCjYLnYDo7yrFqNxr1Tz_odNErrqIyCFfVt77M8soObqlkRtnUOQdriYuYXmKfwlFKxG3dL6erm5BNT98gHbVccZ7t4CnELVyrszjC6WG_xSz6nydvt-C-SSGfQ&sai=AMfl-YQi4KNVWDgMvKUem5u6y-h6U3l3I8pwfkD1PehlICl36Z-2YvWyTA5iJ2-tJblfYa44X5BrjmPuKYBLBVaQO-1-tZz5d0pCP7K_5fZC3CF3ae63Z8WJjzSoTipstui5s-f6s8NXtuAvEJiOozJpj1J9&sig=Cg0ArKJSzKU_qg5PlfFjEAE&uach_m=%5BUACH%5D&urlfix=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:15 UTC	981	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 18 Mar 2024 16:22:15 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Mon, 18-Mar-2024 16:37:15 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 18 Mar 2024 16:22:15 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.4	50041	54.144.102.188	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:15 UTC	881	OUT	GET /cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partners=sas%2Cpp%2Csyn%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAARQ07L8NQAABPzJYe3uw; bitoIsSecure=ok
2024-03-18 16:22:15 UTC	637	IN	HTTP/1.1 303 See Other Date: Mon, 18 Mar 2024 16:22:15 GMT location: https://rtb-csync.smartadserver.com/redir?partneruserid=AAARQ07L8NQAABPzJYe3uw&partnerid=127&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dpp%252Csyn%252Cpm%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2%26userid%3DSMART_USER_ID&gdpr=0 Server: gunicorn set-cookie: bito=AAARQ07L8NQAABPzJYe3uw; Domain=bidr.io; expires=Thu, 17 Apr 2025 12:22:15 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.4	50044	34.196.130.100	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:15 UTC	471	OUT	GET /api/v1/dsync/Martin?exid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent= HTTP/1.1 Host: crb.kargo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=ac33492d-ca38-0673-52a3-85410777d329
2024-03-18 16:22:15 UTC	456	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:15 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=ac33492d-ca38-0673-52a3-85410777d329; Path=/; Domain=kargo.com; Expires=Tue, 18 Mar 2025 16:22:15 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2024-03-18 16:22:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.4	50046	172.67.161.117	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:15 UTC	4527	OUT	GET /rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%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%3D%3D%253Bdurl155%3D::scm0=bid_~CM.64180~SZ.970~TS.pdx~dv.3~BI.110886972959~DI.~ST.25_::exch=pdx::bS=49a8ccc8-4e10-415f-b3cc-85fda009ccda::bamt=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q::ppid=::btm=1710778934359::mid=CAESEO4xid7o8uR9EnVbRe87Nek::cl=::geo=USA::ref0=https%3A%2F%2Fbrowser-update.org::pageID=937680203::dT=OA::mode=ifrme::devid=3::r1=100::label=default::as=4::winprice=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q::bt=1::ul15= HTTP/1.1 Host: rtgcloudsql.2trk.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:15 UTC	1355	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:15 GMT Content-Type: text/html;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Set-Cookie: JSESSIONID=CFD70E8592F61CF5BADAFFC24B51DAB1; Path=/; HttpOnly Set-Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; Secure; HttpOnly; SameSite=none; Path=/; Domain=.2trk.info; Expires=Sun, 16-Jun-2024 16:22:15 GMT Set-Cookie: 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org; Secure; HttpOnly; SameSite=none; Path=/; Domain=.2trk.info; Expires=Fri, 17-May-2024 16:22:15 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: 0 Referrer-Policy: unsafe-url Via: 1.1 google CF-Cache-Status: DYNAMIC
2024-03-18 16:22:15 UTC	419	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 64 6e 43 35 6b 36 61 36 43 67 62 62 4d 65 53 34 42 4b 32 30 25 32 42 77 6c 47 43 38 54 5a 48 69 4a 36 70 6a 50 33 56 79 44 56 73 56 64 64 59 6f 58 76 4c 55 62 49 6d 57 4e 44 54 33 78 42 38 4e 69 44 6e 64 4a 38 68 63 68 6c 64 69 48 6e 4d 70 67 25 32 46 6e 4a 37 6a 6f 64 39 25 32 46 30 71 50 54 62 56 58 66 54 48 35 66 79 61 51 44 71 78 77 6c 63 62 38 25 32 46 77 71 56 55 47 51 6c 55 79 65 46 52 78 6e 32 50 4f 4f 65 62 4b 4c 63 4f 36 25 32 46 55 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dnC5k6a6CgbbMeS4BK20%2BwlGC8TZHiJ6pjP3VyDVsVddYoXvLUbImWNDT3xB8NiDndJ8hchldiHnMpg%2FnJ7jod9%2F0qPTbVXfTH5fyaQDqxwlcb8%2FwqVUGQlUyeFRxn2POOebKLcO6%2FU%3D"}],"group":"cf-nel","max
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 37 66 66 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 54 4c 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 3c 74 69 74 6c 65 Data Ascii: 7ff2<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; chaTLet=utf-8" /><title
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 0a 64 69 76 5b 63 6c 61 73 73 5e 3d 27 62 74 6e 2d 27 5d 20 7b 0a 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 0a 7d 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 61 6e 6e 65 72 2d 39 37 30 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 6c 69 64 65 72 22 3e 0a 0a 3c 21 2d 2d 20 63 6f 75 70 6f 6e 20 73 74 61 72 74 20 2d 2d 3e 0a 3c 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 27 62 61 6e 6e 65 72 2d 39 37 30 27 3e 3c 61 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 61 64 63 6c 69 63 6b 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 6c 6b 3f 73 61 3d 4c 26 61 69 3d 43 6e 43 50 34 4e 6d 72 34 5a 5a 32 47 44 70 4c 62 6f 50 4d 50 35 34 75 4e 2d 41 7a 44 36 Data Ascii: div[class^='btn-'] { border-radius:3px;}</style></head><body><div class="banner-970"><div class="slider">... coupon start --><div> <div class='banner-970'><a href='https://adclick.g.doubleclick.net/aclk?sa=L&ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 35 63 47 55 69 4f 69 4a 6e 5a 57 35 6c 63 6d 6c 6a 49 69 77 69 61 47 56 70 5a 32 68 30 49 6a 6f 69 4f 54 41 69 4c 43 4a 6c 59 33 42 68 49 6a 6f 69 4d 43 49 73 49 6d 4e 30 63 69 49 36 49 6a 49 75 4e 6a 55 34 4d 54 59 77 4e 55 55 74 4e 43 49 73 49 6e 4a 6c 62 55 46 6e 51 6e 56 6b 51 32 46 77 49 6a 6f 69 4e 6a 49 79 4f 53 34 33 4e 44 63 30 49 69 77 69 59 6d 74 49 62 33 56 79 63 79 49 36 49 6a 41 69 4c 43 4a 69 61 57 78 73 61 57 35 6e 61 57 51 69 4f 69 49 78 4d 54 41 34 4f 44 59 35 4e 7a 49 35 4e 54 6b 69 4c 43 4a 32 61 58 4e 70 59 6d 6c 73 61 58 52 35 49 6a 6f 69 51 6b 56 4d 54 31 64 66 56 45 68 46 58 30 5a 50 54 45 51 69 4c 43 4a 70 62 6e 52 6c 63 6e 4e 30 61 58 52 70 59 57 77 69 4f 69 4a 6d 59 57 78 7a 5a 53 49 73 49 6b 52 68 61 57 78 35 51 6e 56 6b 5a 32 Data Ascii: 5cGUiOiJnZW5lcmljIiwiaGVpZ2h0IjoiOTAiLCJlY3BhIjoiMCIsImN0ciI6IjIuNjU4MTYwNUUtNCIsInJlbUFnQnVkQ2FwIjoiNjIyOS43NDc0IiwiYmtIb3VycyI6IjAiLCJiaWxsaW5naWQiOiIxMTA4ODY5NzI5NTkiLCJ2aXNpYmlsaXR5IjoiQkVMT1dfVEhFX0ZPTEQiLCJpbnRlcnN0aXRpYWwiOiJmYWxzZSIsIkRhaWx5QnVkZ2
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 62 53 49 36 49 6a 45 33 4d 54 41 33 4e 7a 67 35 4d 7a 51 7a 4e 54 6b 69 4c 43 4a 68 64 57 4e 30 61 57 39 75 56 48 6c 77 5a 53 49 36 49 6b 5a 4a 55 6c 4e 55 58 31 42 53 53 55 4e 46 49 69 77 69 59 6d 6c 6b 52 6d 78 76 62 33 49 69 4f 69 49 77 4c 6a 41 78 49 69 77 69 59 32 4d 69 4f 69 49 77 49 69 77 69 5a 6d 6c 79 63 33 52 44 62 32 39 72 61 57 55 69 4f 69 49 69 4c 43 4a 69 59 57 35 6b 64 32 6c 6b 64 47 67 69 4f 69 4a 75 64 57 78 73 49 69 77 69 5a 47 56 68 62 45 6c 45 49 6a 6f 69 4d 43 49 73 49 6d 46 6e 5a 57 35 6a 65 57 6c 6b 49 6a 6f 69 4d 54 41 79 4f 44 67 32 49 69 77 69 63 6d 46 75 61 7a 5a 44 49 6a 6f 69 4d 43 34 77 49 69 77 69 59 32 46 74 63 47 46 70 5a 32 35 54 5a 58 52 30 61 57 35 6e 63 79 49 36 49 6e 74 63 49 6d 4e 30 65 56 77 69 4f 6c 77 69 4d 56 77 Data Ascii: bSI6IjE3MTA3Nzg5MzQzNTkiLCJhdWN0aW9uVHlwZSI6IkZJUlNUX1BSSUNFIiwiYmlkRmxvb3IiOiIwLjAxIiwiY2MiOiIwIiwiZmlyc3RDb29raWUiOiIiLCJiYW5kd2lkdGgiOiJudWxsIiwiZGVhbElEIjoiMCIsImFnZW5jeWlkIjoiMTAyODg2IiwicmFuazZDIjoiMC4wIiwiY2FtcGFpZ25TZXR0aW5ncyI6IntcImN0eVwiOlwiMVw
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 6f 75 72 63 65 25 32 35 33 44 70 72 65 63 69 73 6f 25 32 35 32 36 75 74 6d 5f 6d 65 64 69 75 6d 25 32 35 33 44 63 70 63 25 32 35 32 36 75 74 6d 5f 63 61 6d 70 61 69 67 6e 25 32 35 33 44 27 20 20 74 61 72 67 65 74 3d 27 5f 62 6c 61 6e 6b 27 20 3e 3c 69 6d 67 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 32 74 72 6b 2e 69 6e 66 6f 2f 72 74 67 62 61 6e 6e 65 72 69 6d 61 67 65 2f 32 30 32 34 2d 30 33 2d 31 31 2d 30 37 32 33 31 36 32 39 30 31 30 32 34 2e 70 6e 67 27 20 73 74 79 6c 65 3d 27 77 69 64 74 68 3a 20 31 30 30 25 3b 68 65 69 67 68 74 3a 20 31 30 30 25 3b 27 20 2f 3e 3c 2f 61 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 0a 3c 21 2d 2d 20 63 6f 75 70 6f 6e 20 65 6e 64 20 2d 2d 3e 0a 0a 3c 21 2d 2d 20 62 61 6e 6e 65 72 20 73 6c 69 64 65 20 73 74 61 72 Data Ascii: ource%253Dpreciso%2526utm_medium%253Dcpc%2526utm_campaign%253D' target='_blank' ><img src='https://cdn.2trk.info/rtgbannerimage/2024-03-11-0723162901024.png' style='width: 100%;height: 100%;' /></a></div></div>... coupon end -->... banner slide star
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 55 35 68 62 57 55 69 4f 69 4a 69 63 6d 39 33 63 32 56 79 4c 58 56 77 5a 47 46 30 5a 53 35 76 63 6d 63 69 4c 43 4a 69 59 57 35 75 5a 58 4a 56 63 47 52 68 64 47 56 50 62 69 49 36 49 6a 45 34 4c 7a 41 7a 4c 7a 49 77 4d 6a 51 67 4d 54 59 36 4d 44 49 36 4d 54 51 69 4c 43 4a 6b 59 58 6b 69 4f 69 49 79 4d 44 49 30 4c 54 41 7a 4c 54 45 34 49 69 77 69 55 47 46 6e 5a 56 52 35 63 47 55 69 4f 69 4a 6e 5a 57 35 6c 63 6d 6c 6a 49 69 77 69 61 47 56 70 5a 32 68 30 49 6a 6f 69 4f 54 41 69 4c 43 4a 6c 59 33 42 68 49 6a 6f 69 4d 43 49 73 49 6d 4e 30 63 69 49 36 49 6a 49 75 4e 6a 55 34 4d 54 59 77 4e 55 55 74 4e 43 49 73 49 6e 4a 6c 62 55 46 6e 51 6e 56 6b 51 32 46 77 49 6a 6f 69 4e 6a 49 79 4f 53 34 33 4e 44 63 30 49 69 77 69 59 6d 74 49 62 33 56 79 63 79 49 36 49 6a 41 69 Data Ascii: U5hbWUiOiJicm93c2VyLXVwZGF0ZS5vcmciLCJiYW5uZXJVcGRhdGVPbiI6IjE4LzAzLzIwMjQgMTY6MDI6MTQiLCJkYXkiOiIyMDI0LTAzLTE4IiwiUGFnZVR5cGUiOiJnZW5lcmljIiwiaGVpZ2h0IjoiOTAiLCJlY3BhIjoiMCIsImN0ciI6IjIuNjU4MTYwNUUtNCIsInJlbUFnQnVkQ2FwIjoiNjIyOS43NDc0IiwiYmtIb3VycyI6IjAi
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 49 73 49 6d 4a 70 5a 46 4e 70 5a 32 35 68 64 48 56 79 5a 53 49 36 49 6a 51 35 59 54 68 6a 59 32 4d 34 4c 54 52 6c 4d 54 41 74 4e 44 45 31 5a 69 31 69 4d 32 4e 6a 4c 54 67 31 5a 6d 52 68 4d 44 41 35 59 32 4e 6b 59 53 49 73 49 6d 4e 74 63 45 4e 30 63 69 49 36 49 6a 41 75 4d 43 49 73 49 6e 4e 30 63 6d 46 30 5a 57 64 35 53 57 51 69 4f 69 49 79 4e 53 49 73 49 6d 4a 30 62 53 49 36 49 6a 45 33 4d 54 41 33 4e 7a 67 35 4d 7a 51 7a 4e 54 6b 69 4c 43 4a 68 64 57 4e 30 61 57 39 75 56 48 6c 77 5a 53 49 36 49 6b 5a 4a 55 6c 4e 55 58 31 42 53 53 55 4e 46 49 69 77 69 59 6d 6c 6b 52 6d 78 76 62 33 49 69 4f 69 49 77 4c 6a 41 78 49 69 77 69 59 32 4d 69 4f 69 49 77 49 69 77 69 5a 6d 6c 79 63 33 52 44 62 32 39 72 61 57 55 69 4f 69 49 69 4c 43 4a 69 59 57 35 6b 64 32 6c 6b 64 Data Ascii: IsImJpZFNpZ25hdHVyZSI6IjQ5YThjY2M4LTRlMTAtNDE1Zi1iM2NjLTg1ZmRhMDA5Y2NkYSIsImNtcEN0ciI6IjAuMCIsInN0cmF0ZWd5SWQiOiIyNSIsImJ0bSI6IjE3MTA3Nzg5MzQzNTkiLCJhdWN0aW9uVHlwZSI6IkZJUlNUX1BSSUNFIiwiYmlkRmxvb3IiOiIwLjAxIiwiY2MiOiIwIiwiZmlyc3RDb29raWUiOiIiLCJiYW5kd2lkd
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 69 73 6f 25 33 41 63 72 65 61 74 69 76 65 69 64 25 33 44 31 38 33 32 37 37 25 33 41 61 73 25 33 44 34 25 33 41 63 61 74 65 67 6f 72 79 25 33 44 53 74 61 6e 64 61 6c 6f 6e 65 25 33 41 70 72 6f 69 64 25 33 44 36 36 37 34 30 33 32 31 33 32 31 36 39 25 33 41 70 75 72 6c 31 30 31 25 33 44 68 74 74 70 73 25 32 35 33 41 25 32 35 32 46 25 32 35 32 46 75 73 2e 65 63 6f 66 6c 6f 77 2e 63 6f 6d 25 32 35 32 46 63 6f 6c 6c 65 63 74 69 6f 6e 73 25 32 35 32 46 70 6f 72 74 61 62 6c 65 2d 70 6f 77 65 72 2d 73 74 61 74 69 6f 6e 73 25 32 35 33 46 75 74 6d 5f 73 6f 75 72 63 65 25 32 35 33 44 70 72 65 63 69 73 6f 25 32 35 32 36 75 74 6d 5f 6d 65 64 69 75 6d 25 32 35 33 44 63 70 63 25 32 35 32 36 75 74 6d 5f 63 61 6d 70 61 69 67 6e 25 32 35 33 44 75 73 5f 70 72 65 63 69 73 6f Data Ascii: iso%3Acreativeid%3D183277%3Aas%3D4%3Acategory%3DStandalone%3Aproid%3D6674032132169%3Apurl101%3Dhttps%253A%252F%252Fus.ecoflow.com%252Fcollections%252Fportable-power-stations%253Futm_source%253Dpreciso%2526utm_medium%253Dcpc%2526utm_campaign%253Dus_preciso
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 54 51 30 4e 7a 6b 7a 4f 54 45 32 4d 7a 67 69 4c 43 4a 6f 62 33 4e 30 49 6a 6f 69 63 48 4a 6c 59 32 6c 7a 62 79 49 73 49 6e 4a 68 62 6d 73 32 55 79 49 36 49 6a 41 75 4d 43 49 73 49 6e 42 73 59 57 4e 6c 62 57 56 75 64 45 4a 31 62 6d 52 73 5a 55 35 68 62 57 55 69 4f 69 4a 69 63 6d 39 33 63 32 56 79 4c 58 56 77 5a 47 46 30 5a 53 35 76 63 6d 63 69 4c 43 4a 69 59 57 35 75 5a 58 4a 56 63 47 52 68 64 47 56 50 62 69 49 36 49 6a 45 34 4c 7a 41 7a 4c 7a 49 77 4d 6a 51 67 4d 54 59 36 4d 44 49 36 4d 54 51 69 4c 43 4a 6b 59 58 6b 69 4f 69 49 79 4d 44 49 30 4c 54 41 7a 4c 54 45 34 49 69 77 69 55 47 46 6e 5a 56 52 35 63 47 55 69 4f 69 4a 6e 5a 57 35 6c 63 6d 6c 6a 49 69 77 69 61 47 56 70 5a 32 68 30 49 6a 6f 69 4f 54 41 69 4c 43 4a 6c 59 33 42 68 49 6a 6f 69 4d 43 49 73 Data Ascii: TQ0NzkzOTE2MzgiLCJob3N0IjoicHJlY2lzbyIsInJhbms2UyI6IjAuMCIsInBsYWNlbWVudEJ1bmRsZU5hbWUiOiJicm93c2VyLXVwZGF0ZS5vcmciLCJiYW5uZXJVcGRhdGVPbiI6IjE4LzAzLzIwMjQgMTY6MDI6MTQiLCJkYXkiOiIyMDI0LTAzLTE4IiwiUGFnZVR5cGUiOiJnZW5lcmljIiwiaGVpZ2h0IjoiOTAiLCJlY3BhIjoiMCIs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.4	50045	8.28.7.83	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:15 UTC	1690	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=ae5763be-e543-11ee-a76c-71e45aeeda27 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; SPugT=1710729153; chkChromeAb67Sec=2; pi=156011:4; DPSync3=1711929600%3A263_262_261_260_259_201%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_250_166_3_104_165_54_71_220_21%7C1711324800%3A15_223; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; PugT=1710778933
2024-03-18 16:22:15 UTC	650	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Mar 2024 16:22:14 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 16-Jun-2024 16:22:14 GMT; path=/ Set-Cookie: PugT=1710778934; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 16:22:14 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-18 16:22:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.4	50047	142.250.81.228	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:15 UTC	993	OUT	GET /ads/measurement/l?ebcid=ALh7CaRAjDi2mZf5UapnLsaTbVfpKyj7ikAJSDKkjulwTtMQqZgC_QY2SxxinCwzmatuOv-whbS-9a5omzc_Z5KmKFPv6Tqd4Q HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-18 16:22:15 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 18 Mar 2024 16:22:15 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.4	50042	8.28.7.84	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:15 UTC	1480	OUT	GET /AdServer/SPug?partnerID=156078&xid=y-17tUrjJE2uUN58rhQTKtQw5Aw2CG9jI-~A&gdpr=0 HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; PugT=1710778931; SPugT=1710729153; chkChromeAb67Sec=2; pi=156011:4; DPSync3=1711929600%3A263_262_261_260_259_201%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_250_166_3_104_165_54_71_220_21%7C1711324800%3A15_223
2024-03-18 16:22:15 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Mar 2024 16:22:15 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1710778935; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 16:22:15 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-18 16:22:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.4	50048	8.28.7.83	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:15 UTC	1544	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=2b5667c9-681a-4026-b198-22bfa86cb93f&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; PugT=1710778931; SPugT=1710729153; chkChromeAb67Sec=2; pi=156011:4; DPSync3=1711929600%3A263_262_261_260_259_201%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_250_166_3_104_165_54_71_220_21%7C1711324800%3A15_223
2024-03-18 16:22:15 UTC	696	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Mar 2024 16:22:13 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 16:22:13 GMT; path=/ Set-Cookie: PugT=1710778933; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 16:22:13 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-18 16:22:15 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.4	50049	52.204.113.215	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:15 UTC	588	OUT	GET /insync?gdpr=0&gdpr_consent=&vxii_pdid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&vxii_pid=12&vxii_pid1=10067&vxii_rcid=cdd5ca24-47b1-4f3e-8cc1-d0019f951b2e HTTP/1.1 Host: thrtle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=eyJpZCI6ImNkZDVjYTI0LTQ3YjEtNGYzZS04Y2MxLWQwMDE5Zjk1MWIyZSIsImwiOjE3MTA3Nzg5MzUwNDgsInQiOjF9
2024-03-18 16:22:15 UTC	353	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:15 GMT Content-Type: image/gif Content-Length: 43 Connection: close P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6ImNkZDVjYTI0LTQ3YjEtNGYzZS04Y2MxLWQwMDE5Zjk1MWIyZSIsImwiOjE3MTA3Nzg5MzU1MjcsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Fri, 04 Oct 2024 16:22:15 GMT; Secure; SameSite=None
2024-03-18 16:22:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.4	50050	216.22.16.8	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:15 UTC	1003	OUT	GET /redir?partneruserid=AAARQ07L8NQAABPzJYe3uw&partnerid=127&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dpp%252Csyn%252Cpm%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2%26userid%3DSMART_USER_ID&gdpr=0 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=8457389007004702379
2024-03-18 16:22:15 UTC	556	IN	HTTP/1.1 302 Found content-length: 0 date: Mon, 18 Mar 2024 16:22:15 GMT cache-control: no-cache,no-store location: https://match.prod.bidr.io/cookie-sync?gdpr=0&bee_sync_partners=pp%2Csyn%2Cpm&bee_sync_current_partner=sas&bee_sync_initiator=adx&bee_sync_hop_count=2&userid=8457389007004702379&gdpr=0&gdpr_consent= pragma: no-cache set-cookie: csync=127:AAARQ07L8NQAABPzJYe3uw; expires=Tue, 18 Mar 2025 16:22:15 GMT; domain=smartadserver.com; path=/; SameSite=None; secure p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.4	50056	172.67.161.117	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:15 UTC	4918	OUT	GET /rtgstat/50version/css/logico-three.css HTTP/1.1 Host: cdn.2trk.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://rtgcloudsql.2trk.info/rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%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%3D%3D%253Bdurl155%3D::scm0=bid_~CM.64180~SZ.970~TS.pdx~dv.3~BI.110886972959~DI.~ST.25_::exch=pdx::bS=49a8ccc8-4e10-415f-b3cc-85fda009ccda::bamt=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q::ppid=::btm=1710778934359::mid=CAESEO4xid7o8uR9EnVbRe87Nek::cl=::geo=USA::ref0=https%3A%2F%2Fbrowser-update.org::pageID=937680203::dT=OA::mode=ifrme::devid=3::r1=100::label=default::as=4::winprice=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q::bt=1::ul15= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
2024-03-18 16:22:15 UTC	1209	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:15 GMT Content-Type: text/css Content-Length: 4772 Connection: close Age: 43939 Cache-Control: public, max-age=172800 Cf-Bgj: minify Cf-Polished: origSize=7058 Content-Language: en ETag: "631f2b9bb97d482a52a68d4f2af0198c" Expires: Mon, 18 Mar 2024 05:09:48 GMT Last-Modified: Mon, 08 Mar 2021 15:27:21 GMT X-GUploader-UploadID: ABPtcPr1g5ivbys2UkMO7ESXSVJPvWlTr29uMDaI1MsDTD3iPcAqymF5-nJIlVk4dchX5I7xaHRhJPZnug x-goog-generation: 1615217241628066 x-goog-hash: crc32c=M5Nhtw== x-goog-hash: md5=Yx8rm7l9SCpSpo1PKvAZjA== x-goog-meta-goog-reserved-file-mtime: 1614573307 x-goog-metageneration: 1 x-goog-storage-class: STANDARD x-goog-stored-content-encoding: identity x-goog-stored-content-length: 7058 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sSttTpYWL5hj9AloMENU22TXdP7XjewuS2KjrGTl17QS4eknJ85XW3LbC%2FqG2feZNPw25HEV6qn%2FLxHisvnLaKL2c9Zk9Ab0rPf45ztaGpUBbm0IaPxbXFhOsVQLh5pn"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f7cdc5942e5-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:22:15 UTC	160	IN	Data Raw: 40 69 6d 70 6f 72 74 20 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4d 75 6c 69 27 3b 2a 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6d 75 6c 69 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 7d 2a 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 61 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 62 6f 64 79 Data Ascii: @import 'https://fonts.googleapis.com/css?family=Muli';{font-family:muli,sans-serif;font-size:12px;font-weight:500}{box-sizing:border-box}a{color:inherit}body
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 64 69 76 5b 63 6c 61 73 73 5e 3d 62 61 6e 6e 65 72 2d 5d 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 64 69 76 5b 63 6c 61 73 73 5e 3d 63 6f 6c 2d 5d 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 70 61 64 64 69 6e 67 3a 32 70 78 7d 64 69 76 5b 63 6c 61 73 73 5e 3d 6c 6f 67 6f 2d 5d 20 69 6d 67 7b 77 69 64 74 68 3a 61 75 74 6f 3b 6d 61 78 2d 68 65 69 67 68 74 Data Ascii: {text-align:center;padding:0;margin:0 auto;text-transform:none;background-color:#fff}div[class^=banner-]{position:relative;overflow:hidden}div[class^=col-]{position:relative;float:left;cursor:pointer;padding:2px}div[class^=logo-] img{width:auto;max-height
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 3a 32 32 39 70 78 7d 2e 69 6d 67 2d 36 30 30 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 36 35 70 78 29 7d 2e 6c 6f 67 6f 2d 34 38 30 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 38 30 70 78 7d 2e 63 6f 6c 2d 34 38 30 7b 77 69 64 74 68 3a 35 30 25 3b 68 65 69 67 68 74 3a 31 39 39 70 78 7d 2e 69 6d 67 2d 34 38 30 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 36 35 70 78 29 7d 2e 6c 6f 67 6f 2d 32 34 30 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 38 30 70 78 7d 2e 63 6f 6c 2d 32 34 30 7b 77 69 64 74 68 3a 35 30 25 3b 68 65 69 67 68 74 3a 31 35 39 70 78 7d 2e 69 6d 67 2d 32 34 30 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 36 35 70 78 29 7d 2e 6c 6f 67 6f 2d 31 36 30 7b Data Ascii: height:229px}.img-600{height:calc(100% - 65px)}.logo-480{width:100%;height:80px}.col-480{width:50%;height:199px}.img-480{height:calc(100% - 65px)}.logo-240{width:100%;height:80px}.col-240{width:50%;height:159px}.img-240{height:calc(100% - 65px)}.logo-160{
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 74 3a 32 34 38 70 78 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 6c 6f 67 6f 2d 39 32 35 20 69 6d 67 7b 77 69 64 74 68 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 3b 68 65 69 67 68 74 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 35 30 70 78 7d 2e 63 6f 6c 2d 39 32 35 7b 77 69 64 74 68 3a 63 61 6c 63 28 32 35 25 20 2d 20 35 30 70 78 29 3b 68 65 69 67 68 74 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 30 70 78 29 7d 2e 69 6d 67 2d 39 32 35 7b 68 65 69 67 68 74 3a 31 39 30 70 78 7d 2e 6c 6f 67 6f 2d 34 36 38 7b 77 69 64 74 68 3a 31 31 38 70 78 3b 68 65 69 67 68 74 3a 35 38 70 78 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 63 6f 6c 2d 34 36 38 7b 77 69 64 74 68 3a 63 61 6c 63 28 35 30 25 20 2d 20 35 39 70 78 29 3b 68 65 69 67 68 74 3a Data Ascii: t:248px;float:left}.logo-925 img{width:100%!important;height:auto!important;padding-top:50px}.col-925{width:calc(25% - 50px);height:calc(100% - 0px)}.img-925{height:190px}.logo-468{width:118px;height:58px;float:left}.col-468{width:calc(50% - 59px);height:
2024-03-18 16:22:15 UTC	505	IN	Data Raw: 70 78 7d 2e 62 61 6e 6e 65 72 2d 37 32 38 2c 2e 73 6c 69 64 65 77 72 61 70 37 32 38 7b 77 69 64 74 68 3a 37 32 38 70 78 3b 68 65 69 67 68 74 3a 39 30 70 78 7d 2e 62 61 6e 6e 65 72 2d 34 36 38 2c 2e 73 6c 69 64 65 77 72 61 70 34 36 38 7b 77 69 64 74 68 3a 34 36 38 70 78 3b 68 65 69 67 68 74 3a 36 30 70 78 7d 2e 62 61 6e 6e 65 72 2d 39 37 30 2c 2e 73 6c 69 64 65 77 72 61 70 39 37 30 7b 77 69 64 74 68 3a 39 37 30 70 78 3b 68 65 69 67 68 74 3a 39 30 70 78 7d 2e 62 61 6e 6e 65 72 2d 39 38 30 2c 2e 73 6c 69 64 65 77 72 61 70 39 38 30 7b 77 69 64 74 68 3a 39 38 30 70 78 3b 68 65 69 67 68 74 3a 39 30 70 78 7d 2e 62 61 6e 6e 65 72 2d 39 35 30 2c 2e 73 6c 69 64 65 77 72 61 70 39 35 30 7b 77 69 64 74 68 3a 39 35 30 70 78 3b 68 65 69 67 68 74 3a 39 30 70 78 7d 2e 62 Data Ascii: px}.banner-728,.slidewrap728{width:728px;height:90px}.banner-468,.slidewrap468{width:468px;height:60px}.banner-970,.slidewrap970{width:970px;height:90px}.banner-980,.slidewrap980{width:980px;height:90px}.banner-950,.slidewrap950{width:950px;height:90px}.b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.4	50055	172.67.161.117	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:15 UTC	4912	OUT	GET /rtgstat/50version/css/slider.css HTTP/1.1 Host: cdn.2trk.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://rtgcloudsql.2trk.info/rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%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%3D%3D%253Bdurl155%3D::scm0=bid_~CM.64180~SZ.970~TS.pdx~dv.3~BI.110886972959~DI.~ST.25_::exch=pdx::bS=49a8ccc8-4e10-415f-b3cc-85fda009ccda::bamt=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q::ppid=::btm=1710778934359::mid=CAESEO4xid7o8uR9EnVbRe87Nek::cl=::geo=USA::ref0=https%3A%2F%2Fbrowser-update.org::pageID=937680203::dT=OA::mode=ifrme::devid=3::r1=100::label=default::as=4::winprice=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q::bt=1::ul15= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
2024-03-18 16:22:15 UTC	1174	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:15 GMT Content-Type: text/css Content-Length: 2791 Connection: close Age: 43939 Cache-Control: public, max-age=172800 Cf-Bgj: minify Content-Language: en ETag: "ebfdb99e8e4dcfde3349e6f196d2f103" Expires: Mon, 18 Mar 2024 05:09:48 GMT Last-Modified: Mon, 22 Mar 2021 07:54:19 GMT X-GUploader-UploadID: ABPtcPqRpCZd2h74L1E3hWhCZ83XY-_HdQbZeFTrSbhRdc1X4UNVSJGyq4CE8X0yPkaqmwo2xUg x-goog-generation: 1616399659219770 x-goog-hash: crc32c=caigCg== x-goog-hash: md5=6/25no5Nz94zSebxltLxAw== x-goog-meta-goog-reserved-file-mtime: 1616399347 x-goog-metageneration: 1 x-goog-storage-class: STANDARD x-goog-stored-content-encoding: identity x-goog-stored-content-length: 2791 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YzEG2H8EODy7yCyru%2BwwRTBZx6O6ZEl8wHQFOdE3J82ZGKZI4GmNPhYHtGJ5T6es61MOdLgTcIsCMQx5eIU3xiFNiz2acN7fZQ0c4n0k6Wt%2BgIVX5t9kibqLb9Nl4T7c"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f7d096f42fe-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:22:15 UTC	195	IN	Data Raw: 2e 6d 61 69 6e 61 64 2d 77 72 61 70 70 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 70 61 64 64 69 6e 67 3a 30 3b 2a 7a 6f 6f 6d 3a 31 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 70 61 6e 2d 79 3b 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 70 61 6e 2d 79 7d 2e 6d 61 69 6e 61 64 2d 77 72 61 70 70 65 72 20 69 6d 67 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 62 78 73 6c 69 64 65 72 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 75 6c 2e 62 78 73 6c 69 64 65 72 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f Data Ascii: .mainad-wrapper{position:relative;padding:0;*zoom:1;height:100%;-ms-touch-action:pan-y;touch-action:pan-y}.mainad-wrapper img{max-width:100%}.bxslider{margin:0;padding:0}ul.bxslider{list-style:no
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 6e 65 7d 2e 6d 61 69 6e 61 64 2d 76 69 65 77 70 6f 72 74 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 7a 28 30 29 7d 2e 6d 61 69 6e 61 64 2d 77 72 61 70 70 65 72 7b 62 6f 72 64 65 72 3a 30 20 73 6f 6c 69 64 20 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 7d 2e 6d 61 69 6e 61 64 2d 77 72 61 70 70 65 72 20 2e 6d 61 69 6e 61 64 2d 70 61 67 65 72 2c 2e 6d 61 69 6e 61 64 2d 77 72 61 70 70 65 72 20 2e 6d 61 69 6e 61 64 2d 63 6f 6e 74 72 6f 6c 73 2d 61 75 74 6f 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 74 74 6f 6d 3a 2d 33 30 70 78 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 61 64 2d 77 72 61 70 70 65 72 20 2e 6d 61 69 6e 61 64 2d 70 61 67 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 Data Ascii: ne}.mainad-viewport{-webkit-transform:translatez(0)}.mainad-wrapper{border:0 solid #fff;background:0 0}.mainad-wrapper .mainad-pager,.mainad-wrapper .mainad-controls-auto{position:absolute;bottom:-30px;width:100%}.mainad-wrapper .mainad-pager{text-align:c
2024-03-18 16:22:15 UTC	1227	IN	Data Raw: 61 64 2d 77 72 61 70 70 65 72 20 2e 6d 61 69 6e 61 64 2d 63 6f 6e 74 72 6f 6c 73 2d 64 69 72 65 63 74 69 6f 6e 20 61 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 36 70 78 3b 6f 75 74 6c 69 6e 65 3a 30 3b 77 69 64 74 68 3a 33 32 70 78 3b 68 65 69 67 68 74 3a 33 32 70 78 3b 74 65 78 74 2d 69 6e 64 65 6e 74 3a 2d 39 39 39 39 70 78 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 39 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 61 69 6e 61 64 2d 77 72 61 70 70 65 72 20 2e 6d 61 69 6e 61 64 2d 63 6f 6e 74 72 6f 6c 73 2d 64 69 72 65 63 74 69 6f 6e 20 61 2e 64 69 73 61 62 6c 65 64 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6d 61 69 6e 61 64 2d 63 6f 6e 74 72 6f 6c 73 Data Ascii: ad-wrapper .mainad-controls-direction a{position:absolute;top:50%;margin-top:-16px;outline:0;width:32px;height:32px;text-indent:-9999px;z-index:9999;display:none!important}.mainad-wrapper .mainad-controls-direction a.disabled{display:none}.mainad-controls

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.4	50054	172.67.161.117	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:15 UTC	4911	OUT	GET /rtgstat/50version/css/promo.css HTTP/1.1 Host: cdn.2trk.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://rtgcloudsql.2trk.info/rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%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%3D%3D%253Bdurl155%3D::scm0=bid_~CM.64180~SZ.970~TS.pdx~dv.3~BI.110886972959~DI.~ST.25_::exch=pdx::bS=49a8ccc8-4e10-415f-b3cc-85fda009ccda::bamt=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q::ppid=::btm=1710778934359::mid=CAESEO4xid7o8uR9EnVbRe87Nek::cl=::geo=USA::ref0=https%3A%2F%2Fbrowser-update.org::pageID=937680203::dT=OA::mode=ifrme::devid=3::r1=100::label=default::as=4::winprice=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q::bt=1::ul15= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
2024-03-18 16:22:15 UTC	1186	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:15 GMT Content-Type: text/css Content-Length: 16686 Connection: close Age: 43939 Cache-Control: public, max-age=172800 Cf-Bgj: minify Content-Language: en ETag: "2e1efbc903a08ca509c496f6995ef991" Expires: Mon, 18 Mar 2024 05:09:48 GMT Last-Modified: Mon, 08 Mar 2021 15:27:21 GMT X-GUploader-UploadID: ABPtcPovcWrv36tAl4pDNaMwiKFm4OGzYb7w7tA8xhY3PBR-OnsNuu0SM9AhwSfiDN98VoBKi4Q x-goog-generation: 1615217241660981 x-goog-hash: crc32c=pf8SrA== x-goog-hash: md5=Lh77yQOgjKUJxJb2mV75kQ== x-goog-meta-goog-reserved-file-mtime: 1614573308 x-goog-metageneration: 1 x-goog-storage-class: STANDARD x-goog-stored-content-encoding: identity x-goog-stored-content-length: 16686 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ThL3KtL%2FRoLCCikw3X%2Bz2iMrDx4XAAhxR%2B1g8c259eTtga99x%2BFvmkNd4lo5LO1W3trQk7xf6IRCZwmmreLrjeVM6%2BDZb5Qwgi%2F7A0Jd%2FQSmLwZrGljt79guF26cm0zC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f7d188b4381-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:22:15 UTC	183	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 63 6f 6e 73 75 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 64 32 68 7a 69 70 30 72 6d 32 6a 6a 68 67 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 63 6f 6e 73 75 6c 2f 66 6f 6e 74 73 2f 63 6f 6e 73 75 6c 63 6f 68 65 61 64 6c 69 6e 65 5f 73 74 64 5f 6c 74 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 29 2c 75 72 6c 28 68 74 74 70 73 3a 2f 2f 64 32 68 7a 69 70 30 72 6d 32 6a Data Ascii: @font-face{font-family:consul;font-style:normal;font-weight:300;src:url(https://d2hzip0rm2jjhg.cloudfront.net/consul/fonts/consulcoheadline_std_lt-webfont.eot),url(https://d2hzip0rm2j
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 6a 68 67 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 63 6f 6e 73 75 6c 2f 66 6f 6e 74 73 2f 63 6f 6e 73 75 6c 63 6f 68 65 61 64 6c 69 6e 65 5f 73 74 64 5f 6c 74 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 75 72 6c 28 68 74 74 70 73 3a 2f 2f 64 32 68 7a 69 70 30 72 6d 32 6a 6a 68 67 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 63 6f 6e 73 75 6c 2f 66 6f 6e 74 73 2f 63 6f 6e 73 75 6c 63 6f 68 65 61 64 6c 69 6e 65 5f 73 74 64 5f 6c 74 2d 77 65 62 66 6f 6e 74 2e 73 76 67 23 63 6f 6e 73 75 6c 29 20 66 6f 72 6d 61 74 28 22 73 76 67 22 29 2c 75 72 6c 28 68 74 74 70 73 3a 2f 2f 64 32 68 7a 69 70 30 72 6d 32 6a 6a 68 67 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e Data Ascii: jhg.cloudfront.net/consul/fonts/consulcoheadline_std_lt-webfont.eot#iefix) format("embedded-opentype"),url(https://d2hzip0rm2jjhg.cloudfront.net/consul/fonts/consulcoheadline_std_lt-webfont.svg#consul) format("svg"),url(https://d2hzip0rm2jjhg.cloudfront.n
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 68 65 72 69 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6e 2d 30 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 70 61 63 69 74 79 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 64 69 76 5b 63 6c 61 73 73 5e 3d 62 61 6e 6e 65 72 2d 5d 2e 70 72 6f 6d 6f 73 6c 69 64 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 66 65 66 65 66 3b 63 6f 6c 6f 72 3a 23 30 32 32 61 33 61 7d 64 69 76 5b 63 6c 61 73 73 5e Data Ascii: herit!important}.n-0{display:none!important;visibility:hidden!important;opacity:0!important}div[class^=banner-].promoslide{box-sizing:border-box;background-image:none!important;padding:0;border:0!important;background-color:#efefef;color:#022a3a}div[class^
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 33 33 36 20 2e 70 72 6f 6d 6f 2d 62 72 61 6e 64 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 21 69 6d 70 6f 72 74 61 6e 74 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 62 61 6e 6e 65 72 2d 33 33 36 20 2e 70 72 6f 6d 6f 2d 63 6f 6c 7b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 30 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 2e 62 61 6e 6e 65 72 2d 33 33 36 20 2e 70 72 6f 6d 6f 2d 66 6c 69 6e 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 62 61 6e 6e 65 72 2d 33 33 36 20 2e 70 72 6f 6d 6f 2d 73 6c 69 6e 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 34 Data Ascii: 336 .promo-brand{text-align:right!important;width:100%}.banner-336 .promo-col{width:100%;padding-top:10px;padding-bottom:10px}.banner-336 .promo-fline{font-size:20px!important}.banner-336 .promo-sline{font-size:48px!important;font-weight:700;line-height:4
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 61 64 64 69 6e 67 2d 74 6f 70 3a 35 30 70 78 7d 2e 62 61 6e 6e 65 72 2d 36 30 30 20 2e 65 78 70 69 72 79 20 73 70 61 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 62 61 6e 6e 65 72 2d 34 38 30 20 2e 70 72 6f 6d 6f 77 72 61 70 7b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 30 70 78 29 3b 68 65 69 67 68 74 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 30 70 78 29 7d 2e 62 61 6e 6e 65 72 2d 34 38 30 20 2e 70 72 6f 6d 6f 2d 62 72 61 6e 64 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 21 69 6d 70 6f 72 74 61 6e 74 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 62 61 6e 6e 65 72 2d 34 38 30 20 2e 70 72 6f 6d 6f 2d 63 6f 6c 7b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 39 30 70 78 3b 70 61 64 64 69 Data Ascii: adding-top:50px}.banner-600 .expiry span{font-size:11px!important}.banner-480 .promowrap{width:calc(100% - 0px);height:calc(100% - 0px)}.banner-480 .promo-brand{text-align:right!important;width:100%}.banner-480 .promo-col{width:100%;padding-top:90px;paddi
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 7d 2e 62 61 6e 6e 65 72 2d 32 34 30 20 2e 63 6f 75 70 6f 6e 2d 73 6c 69 6e 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 34 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 62 61 6e 6e 65 72 2d 32 34 30 20 2e 65 78 70 69 72 79 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 30 70 78 7d 2e 62 61 6e 6e 65 72 2d 32 34 30 20 2e 65 78 70 69 72 79 20 73 70 61 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 62 61 6e 6e 65 72 2d 32 35 30 20 2e 70 72 6f 6d 6f 77 72 61 70 7b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 30 70 78 29 3b Data Ascii: }.banner-240 .coupon-sline{box-sizing:border-box;width:100%;padding:4px;font-size:18px!important}.banner-240 .expiry{font-size:11px!important;padding-top:10px}.banner-240 .expiry span{font-size:11px!important}.banner-250 .promowrap{width:calc(100% - 0px);
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 2d 63 6f 6c 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 35 30 70 78 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 2e 62 61 6e 6e 65 72 2d 32 30 30 20 2e 63 6f 75 70 6f 6e 2d 66 6c 69 6e 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 31 70 78 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 2e 62 61 6e 6e 65 72 2d 32 30 30 20 2e 63 6f 75 70 6f 6e 2d 73 6c 69 6e 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 31 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 62 61 6e 6e 65 72 2d 32 30 30 20 2e 65 78 70 69 Data Ascii: -col{width:100%;max-width:150px;margin:0 auto}.banner-200 .coupon-fline{box-sizing:border-box;width:100%;padding:1px;text-transform:uppercase}.banner-200 .coupon-sline{box-sizing:border-box;width:100%;padding:1px;font-size:12px!important}.banner-200 .expi
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 65 3a 31 36 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 62 61 6e 6e 65 72 2d 31 32 30 20 2e 70 72 6f 6d 6f 2d 73 6c 69 6e 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 34 31 70 78 7d 2e 62 61 6e 6e 65 72 2d 31 32 30 20 2e 70 72 6f 6d 6f 2d 74 6c 69 6e 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 62 61 6e 6e 65 72 2d 31 32 30 20 2e 63 6f 75 70 6f 6e 2d 63 6f 6c 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 33 30 70 78 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 2e 62 61 6e 6e 65 72 2d 31 32 30 20 2e 63 6f 75 70 6f 6e 2d 66 6c 69 6e 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 Data Ascii: e:16px!important}.banner-120 .promo-sline{font-size:38px!important;font-weight:700;line-height:41px}.banner-120 .promo-tline{font-size:14px!important}.banner-120 .coupon-col{width:100%;max-width:130px;margin:0 auto}.banner-120 .coupon-fline{box-sizing:bor
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 2e 65 78 70 69 72 79 20 73 70 61 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 62 61 6e 6e 65 72 2d 39 35 30 20 2e 70 72 6f 6d 6f 77 72 61 70 7b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 30 70 78 29 3b 68 65 69 67 68 74 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 30 70 78 29 7d 2e 62 61 6e 6e 65 72 2d 39 35 30 20 2e 70 72 6f 6d 6f 2d 62 72 61 6e 64 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 21 69 6d 70 6f 72 74 61 6e 74 3b 77 69 64 74 68 3a 31 35 25 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 30 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 35 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 62 61 6e Data Ascii: .expiry span{font-size:11px!important;display:block}.banner-950 .promowrap{width:calc(100% - 0px);height:calc(100% - 0px)}.banner-950 .promo-brand{text-align:left!important;width:15%;float:left;padding-left:10px;padding-top:25px;box-sizing:border-box}.ban
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 2d 39 30 30 20 2e 63 6f 75 70 6f 6e 2d 63 6f 6c 7b 77 69 64 74 68 3a 33 30 25 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 70 61 64 64 69 6e 67 3a 33 70 78 7d 2e 62 61 6e 6e 65 72 2d 39 30 30 20 2e 63 6f 75 70 6f 6e 2d 66 6c 69 6e 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 34 70 78 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 2e 62 61 6e 6e 65 72 2d 39 30 30 20 2e 63 6f 75 70 6f 6e 2d 73 6c 69 6e 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 34 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 62 61 6e 6e 65 72 2d 39 30 30 20 2e Data Ascii: -900 .coupon-col{width:30%;float:left;padding:3px}.banner-900 .coupon-fline{box-sizing:border-box;width:100%;padding:4px;text-transform:uppercase}.banner-900 .coupon-sline{box-sizing:border-box;width:100%;padding:4px;font-size:18px!important}.banner-900 .

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.4	50053	172.67.161.117	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:15 UTC	4894	OUT	GET /rtgstat/script/jquery.min.js HTTP/1.1 Host: cdn.2trk.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://rtgcloudsql.2trk.info/rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%3DeyJyYW5rN0EiOiIwIiwiYmFubmVyVHlwZSI6ImJhbm5lciIsImNyaXRlcmlhSWQiOiIxMDIzMTkxIiwidHkiOiIwIiwiZXh0cmFzS2V5IjoiNDdfNjQxODAtOTcwIiwicGxhdGZvcm1Ccm93c2VyIjoiQ2hyb21lIiwibWluQmlkVG9XaW4iOiIwIiwibWluYmlkIjoiMC4xMiIsIm1heGJpZCI6IjYuMCIsInByb2dyYW1OYW1lIjoicG9zX3VlY191cyIsInB1YklkIjoicHViLTU4ODQyOTQ0NzkzOTE2MzgiLCJob3N0IjoicHJlY2lzbyIsInJhbms2UyI6IjAuMCIsInBsYWNlbWVudEJ1bmRsZU5hbWUiOiJicm93c2VyLXVwZGF0ZS5vcmciLCJiYW5uZXJVcGRhdGVPbiI6IjE4LzAzLzIwMjQgMTY6MDI6MTQiLCJkYXkiOiIyMDI0LTAzLTE4IiwiUGFnZVR5cGUiOiJnZW5lcmljIiwiaGVpZ2h0IjoiOTAiLCJlY3BhIjoiMCIsImN0ciI6IjIuNjU4MTYwNUUtNCIsInJlbUFnQnVkQ2FwIjoiNjIyOS43NDc0IiwiYmtIb3VycyI6IjAiLCJiaWxsaW5naWQiOiIxMTA4ODY5NzI5NTkiLCJ2aXNpYmlsaXR5IjoiQkVMT1dfVEhFX0ZPTEQiLCJpbnRlcnN0aXRpYWwiOiJmYWxzZSIsIkRhaWx5QnVkZ2V0IjoiMzIiLCJkZWFsVHlwZSI6Ik9BIiwiRnJlcXVlbmN5Y2FwIjoiMTAiLCJhciI6Ik5BIiwiY3BtTWljcm9zIjoiMCIsInBsYXRmb3JtT3MiOiJXaW5kb3dzIiwiZXgiOiJwZHgiLCJhZFNsb3RSYW5rNSI6IjE4NTIiLCJkb21haW4iOiJodHRwczovL2Jyb3dzZXItdXBkYXRlK2Qrb3JnIiwibG9nSSI6IiBJMToxLjAsSTI6MS4wLEk1OjEuMCxJNjoxLjAsSTc6MS4wIiwiZ3VpZCI6IkNBRVNFTzR4aWQ3bzh1UjlFblZiUmU4N05layIsIm1haW5hZENvbnNlbnRTdGF0dXMiOiJmYWxzZSIsImxvZ1IiOiIgUjE6MTAwLFIyOjEwMDAsUjU6MTg1MixSNnM6MC4wLFI2YzowLjAsUjZzQjowLjAsUjZjQjowLjAsUjdhOjAiLCJyZWdpb24iOiJ1cy1lYXN0NC1hIiwiZGV2aWNlIjoicGMiLCJkZXZpZCI6IjAiLCJ2aWV3YWJpbGl0eSI6Ii0xIiwiaXNDb25zZW50TmVlZGVkIjoiZmFsc2UiLCJpbkFwcCI6ImZhbHNlIiwiY2FtcGFpZ25pZCI6IjY0MTgwIiwiZW52aXJvbm1lbnRUeXBlIjoiV2ViIiwiYmlkcHJpY2UiOiIwLjEyIiwiYmsiOiIwIiwiVXNlclN0cmF0ZWd5SWQiOiIiLCJiaWRpZCI6IjdhYjFjZGU1LTFiNDItNjVjMy05Y2NmLTk4ZTlmNGY0MTQ3YSIsImdlbyI6IlVTQSIsInN1YmlkIjoiVFMrZCtwZHgrdCtkditkKzMrdCtTVCtkKzI1K3UrK3QrU1orZCs5NzArdCtCSStkKzExMDg4Njk3Mjk1OSt0K0RJK2QrIiwiY2l0eU5hbWUiOiJOZXcgWW9yayIsImhvdXIiOiIxNiIsInppcFBvc3RhbENvZGUiOiJOQSIsImJpZFNpZ25hdHVyZSI6IjQ5YThjY2M4LTRlMTAtNDE1Zi1iM2NjLTg1ZmRhMDA5Y2NkYSIsImNtcEN0ciI6IjAuMCIsInN0cmF0ZWd5SWQiOiIyNSIsImJ0bSI6IjE3MTA3Nzg5MzQzNTkiLCJhdWN0aW9uVHlwZSI6IkZJUlNUX1BSSUNFIiwiYmlkRmxvb3IiOiIwLjAxIiwiY2MiOiIwIiwiZmlyc3RDb29raWUiOiIiLCJiYW5kd2lkdGgiOiJudWxsIiwiZGVhbElEIjoiMCIsImFnZW5jeWlkIjoiMTAyODg2IiwicmFuazZDIjoiMC4wIiwiY2FtcGFpZ25TZXR0aW5ncyI6IntcImN0eVwiOlwiMVwiLFwibGFwXCI6XCIwXCIsXCJpYXNcIjpcIjBcIixcImxycFwiOlwiMFwiLFwicDhcIjpcIjBcIixcInNhXCI6XCIwXCIsXCJzYlwiOlwiMFwiLFwic2NcIjpcIjBcIixcInBiclwiOlwiMFwifSIsInJhbmsxIjoiMTAwIiwidHlIb3VycyI6IjAiLCJwdWJsaXNoZXJJRCI6IjEwMDk2IiwicmFuazIiOiIxMDAwIiwicGQiOiIwIiwiYWRTbG90S2V5IjoiaHR0cHM6Ly9icm93c2VyLXVwZGF0ZStkK29yZyM5NzAjOTAjQkVMT1crdStUSEUrdStGT0xEIiwiYXVkaWVuY2VNYXRjaCI6Im5vY29va2llIiwid2lkdGgiOiI5NzAiLCJjYXRlZ29yeSI6IltdIiwicmFuazUiOiIxLjAiLCJtYWluQWRVc2VySUQiOiJDQUVTRU80eGlkN284dVI5RW5WYlJlODdOZWsifQ%3D%3D%253Bdurl155%3D::scm0=bid_~CM.64180~SZ.970~TS.pdx~dv.3~BI.110886972959~DI.~ST.25_::exch=pdx::bS=49a8ccc8-4e10-415f-b3cc-85fda009ccda::bamt=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q::ppid=::btm=1710778934359::mid=CAESEO4xid7o8uR9EnVbRe87Nek::cl=::geo=USA::ref0=https%3A%2F%2Fbrowser-update.org::pageID=937680203::dT=OA::mode=ifrme::devid=3::r1=100::label=default::as=4::winprice=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q::bt=1::ul15= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
2024-03-18 16:22:15 UTC	1183	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:15 GMT Content-Type: application/javascript Content-Length: 94789 Connection: close X-GUploader-UploadID: ABPtcPqQaDRmQ_138B7I2RGblKBYJj2JrpLxW7e_UslAMU2eCPjhi0TwrpURGH4YzZJ4xmff00FFbF9Jsw x-goog-generation: 1615217265438256 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 94789 x-goog-meta-goog-reserved-file-mtime: 1614362051 Content-Language: en x-goog-hash: crc32c=DanJGA== x-goog-hash: md5=F0dEn1usLAaKUk7jQ9eQ/g== x-goog-storage-class: STANDARD Expires: Mon, 18 Mar 2024 05:09:48 GMT Cache-Control: public, max-age=172800 Age: 43939 Last-Modified: Mon, 08 Mar 2021 15:27:45 GMT ETag: "1747449f5bac2c068a524ee343d790fe" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EPVmwwIJpjxfoBoxmX4ypjUtJxnmRematQzXqisNhizijjRmnZ6o8gNsVXA4L0%2FkfydRz8GOyFwGtxVgGEBHTy%2FWhZgS0RBNmdvyYnQNVENHG4KvKKbCJJ6EPCDCJ%2B3z"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f7d1ce81a0f-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:22:15 UTC	186	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 79 28 61 29 7b 72 65 74 75 72 6e 20 66 2e 69 73 57 69 6e 64 6f 77 28 61 29 3f 61 3a 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 39 3f 61 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 61 2e 70 61 72 65 6e 74 57 69 6e 64 6f 77 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 63 75 28 61 29 7b 69 66 28 21 63 6a 5b 61 5d 29 7b 76 61 72 20 62 3d 63 2e 62 6f 64 79 2c 64 3d 66 28 22 3c 22 2b 61 2b 22 3e 22 29 2e 61 70 70 65 6e 64 54 6f 28 62 29 2c 65 3d 64 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 3b Data Ascii: (function(a,b){function cy(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cu(a){if(!cj[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 64 2e 72 65 6d 6f 76 65 28 29 3b 69 66 28 65 3d 3d 3d 22 6e 6f 6e 65 22 7c 7c 65 3d 3d 3d 22 22 29 7b 63 6b 7c 7c 28 63 6b 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 2c 63 6b 2e 66 72 61 6d 65 42 6f 72 64 65 72 3d 63 6b 2e 77 69 64 74 68 3d 63 6b 2e 68 65 69 67 68 74 3d 30 29 2c 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 6b 29 3b 69 66 28 21 63 6c 7c 7c 21 63 6b 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 63 6c 3d 28 63 6b 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 7c 7c 63 6b 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 29 2e 64 6f 63 75 6d 65 6e 74 2c 63 6c 2e 77 72 69 74 65 28 28 66 2e 73 75 70 70 6f 72 74 2e 62 6f 78 4d 6f 64 65 6c 3f 22 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 22 3a 22 22 29 2b 22 3c 68 74 Data Ascii: d.remove();if(e==="none"\|\|e===""){ck\|\|(ck=c.createElement("iframe"),ck.frameBorder=ck.width=ck.height=0),b.appendChild(ck);if(!cl\|\|!ck.createElement)cl=(ck.contentWindow\|\|ck.contentDocument).document,cl.write((f.support.boxModel?"<!doctype html>":"")+"<ht
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 7c 63 2e 67 65 74 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 28 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 29 29 3b 69 66 28 68 29 66 6f 72 28 69 20 69 6e 20 65 29 69 66 28 65 5b 69 5d 26 26 65 5b 69 5d 2e 74 65 73 74 28 68 29 29 7b 66 2e 75 6e 73 68 69 66 74 28 69 29 3b 62 72 65 61 6b 7d 69 66 28 66 5b 30 5d 69 6e 20 64 29 6a 3d 66 5b 30 5d 3b 65 6c 73 65 7b 66 6f 72 28 69 20 69 6e 20 64 29 7b 69 66 28 21 66 5b 30 5d 7c 7c 61 2e 63 6f 6e 76 65 72 74 65 72 73 5b 69 2b 22 20 22 2b 66 5b 30 5d 5d 29 7b 6a 3d 69 3b 62 72 65 61 6b 7d 6b 7c 7c 28 6b 3d 69 29 7d 6a 3d 6a 7c 7c 6b 7d 69 66 28 6a 29 7b 6a 21 3d 3d 66 5b 30 5d 26 26 66 2e 75 6e 73 68 69 66 74 28 6a 29 3b 72 65 74 75 72 6e 20 64 5b 6a 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 5f 28 61 2c 62 2c 63 2c 64 Data Ascii: \|c.getResponseHeader("content-type"));if(h)for(i in e)if(e[i]&&e[i].test(h)){f.unshift(i);break}if(f[0]in d)j=f[0];else{for(i in d){if(!f[0]\|\|a.converters[i+" "+f[0]]){j=i;break}k\|\|(k=i)}j=j\|\|k}if(j){j!==f[0]&&f.unshift(j);return d[j]}}function b_(a,b,c,d
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 70 78 22 7d 64 3d 62 79 28 61 2c 62 29 3b 69 66 28 64 3c 30 7c 7c 64 3d 3d 6e 75 6c 6c 29 64 3d 61 2e 73 74 79 6c 65 5b 62 5d 3b 69 66 28 62 74 2e 74 65 73 74 28 64 29 29 72 65 74 75 72 6e 20 64 3b 64 3d 70 61 72 73 65 46 6c 6f 61 74 28 64 29 7c 7c 30 3b 69 66 28 63 29 66 6f 72 28 3b 65 3c 67 3b 65 2b 3d 32 29 64 2b 3d 70 61 72 73 65 46 6c 6f 61 74 28 66 2e 63 73 73 28 61 2c 22 70 61 64 64 69 6e 67 22 2b 62 78 5b 65 5d 29 29 7c 7c 30 2c 63 21 3d 3d 22 70 61 64 64 69 6e 67 22 26 26 28 64 2b 3d 70 61 72 73 65 46 6c 6f 61 74 28 66 2e 63 73 73 28 61 2c 22 62 6f 72 64 65 72 22 2b 62 78 5b 65 5d 2b 22 57 69 64 74 68 22 29 29 7c 7c 30 29 2c 63 3d 3d 3d 22 6d 61 72 67 69 6e 22 26 26 28 64 2b 3d 70 61 72 73 65 46 6c 6f 61 74 28 66 2e 63 73 73 28 61 2c 63 2b 62 78 Data Ascii: px"}d=by(a,b);if(d<0\|\|d==null)d=a.style[b];if(bt.test(d))return d;d=parseFloat(d)\|\|0;if(c)for(;e<g;e+=2)d+=parseFloat(f.css(a,"padding"+bx[e]))\|\|0,c!=="padding"&&(d+=parseFloat(f.css(a,"border"+bx[e]+"Width"))\|\|0),c==="margin"&&(d+=parseFloat(f.css(a,c+bx
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 64 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 62 6a 28 61 2c 62 29 7b 69 66 28 62 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 26 26 21 21 66 2e 68 61 73 44 61 74 61 28 61 29 29 7b 76 61 72 20 63 2c 64 2c 65 2c 67 3d 66 2e 5f 64 61 74 61 28 61 29 2c 68 3d 66 2e 5f 64 61 74 61 28 62 2c 67 29 2c 69 3d 67 2e 65 76 65 6e 74 73 3b 69 66 28 69 29 7b 64 65 6c 65 74 65 20 68 2e 68 61 6e 64 6c 65 2c 68 2e 65 76 65 6e 74 73 3d 7b 7d 3b 66 6f 72 28 63 20 69 6e 20 69 29 66 6f 72 28 64 3d 30 2c 65 3d 69 5b 63 5d 2e 6c 65 6e 67 74 68 3b 64 3c 65 3b 64 2b 2b 29 66 2e 65 76 65 6e 74 2e 61 64 64 28 62 2c 63 2c 69 5b 63 5d 5b 64 5d 29 7d 68 2e 64 61 74 61 26 26 28 68 2e 64 61 74 61 3d 66 2e 65 78 74 65 6e 64 28 7b 7d 2c 68 2e 64 61 74 61 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 69 Data Ascii: d"))}function bj(a,b){if(b.nodeType===1&&!!f.hasData(a)){var c,d,e,g=f._data(a),h=f._data(b,g),i=g.events;if(i){delete h.handle,h.events={};for(c in i)for(d=0,e=i[c].length;d<e;d++)f.event.add(b,c,i[c][d])}h.data&&(h.data=f.extend({},h.data))}}function bi
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 74 61 2d 22 2b 63 2e 72 65 70 6c 61 63 65 28 6b 2c 22 2d 24 31 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 64 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 65 29 3b 69 66 28 74 79 70 65 6f 66 20 64 3d 3d 22 73 74 72 69 6e 67 22 29 7b 74 72 79 7b 64 3d 64 3d 3d 3d 22 74 72 75 65 22 3f 21 30 3a 64 3d 3d 3d 22 66 61 6c 73 65 22 3f 21 31 3a 64 3d 3d 3d 22 6e 75 6c 6c 22 3f 6e 75 6c 6c 3a 66 2e 69 73 4e 75 6d 65 72 69 63 28 64 29 3f 2b 64 3a 6a 2e 74 65 73 74 28 64 29 3f 66 2e 70 61 72 73 65 4a 53 4f 4e 28 64 29 3a 64 7d 63 61 74 63 68 28 67 29 7b 7d 66 2e 64 61 74 61 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 64 3d 62 7d 72 65 74 75 72 6e 20 64 7d 66 75 6e 63 74 69 6f 6e 20 68 28 61 29 7b 76 61 72 20 62 3d 67 5b 61 5d 3d 7b 7d 2c 63 2c 64 3b 61 3d 61 2e Data Ascii: ta-"+c.replace(k,"-$1").toLowerCase();d=a.getAttribute(e);if(typeof d=="string"){try{d=d==="true"?!0:d==="false"?!1:d==="null"?null:f.isNumeric(d)?+d:j.test(d)?f.parseJSON(d):d}catch(g){}f.data(a,c,d)}else d=b}return d}function h(a){var b=g[a]={},c,d;a=a.
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 2c 74 68 69 73 5b 30 5d 3d 63 2e 62 6f 64 79 2c 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 3d 61 2c 74 68 69 73 2e 6c 65 6e 67 74 68 3d 31 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 22 73 74 72 69 6e 67 22 29 7b 61 2e 63 68 61 72 41 74 28 30 29 21 3d 3d 22 3c 22 7c 7c 61 2e 63 68 61 72 41 74 28 61 2e 6c 65 6e 67 74 68 2d 31 29 21 3d 3d 22 3e 22 7c 7c 61 2e 6c 65 6e 67 74 68 3c 33 3f 67 3d 69 2e 65 78 65 63 28 61 29 3a 67 3d 5b 6e 75 6c 6c 2c 61 2c 6e 75 6c 6c 5d 3b 69 66 28 67 26 26 28 67 5b 31 5d 7c 7c 21 64 29 29 7b 69 66 28 67 5b 31 5d 29 7b 64 3d 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 3f 64 5b 30 5d 3a 64 2c 6b 3d 64 3f 64 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 64 3a 63 2c 6a 3d 6d 2e 65 78 65 63 28 61 29 2c Data Ascii: ,this[0]=c.body,this.selector=a,this.length=1;return this}if(typeof a=="string"){a.charAt(0)!=="<"\|\|a.charAt(a.length-1)!==">"\|\|a.length<3?g=i.exec(a):g=[null,a,null];if(g&&(g[1]\|\|!d)){if(g[1]){d=d instanceof e?d[0]:d,k=d?d.ownerDocument\|\|d:c,j=m.exec(a),
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 61 3d 3d 3d 2d 31 3f 74 68 69 73 2e 73 6c 69 63 65 28 61 29 3a 74 68 69 73 2e 73 6c 69 63 65 28 61 2c 61 2b 31 29 7d 2c 66 69 72 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 30 29 7d 2c 6c 61 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 2d 31 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 46 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 22 73 6c 69 63 65 22 2c 46 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 2e 6a 6f 69 6e 28 22 2c 22 29 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 65 2e 6d 61 Data Ascii: a===-1?this.slice(a):this.slice(a,a+1)},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},slice:function(){return this.pushStack(F.apply(this,arguments),"slice",F.call(arguments).join(","))},map:function(a){return this.pushStack(e.ma
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 64 79 2c 31 29 3b 69 66 28 63 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 63 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 42 2c 21 31 29 2c 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 65 2e 72 65 61 64 79 2c 21 31 29 3b 65 6c 73 65 20 69 66 28 63 2e 61 74 74 61 63 68 45 76 65 6e 74 29 7b 63 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 42 29 2c 61 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 6c 6f 61 64 22 2c 65 2e 72 65 61 64 79 29 3b 76 61 72 20 62 3d 21 31 3b 74 72 79 7b 62 3d 61 2e 66 72 61 6d 65 45 6c 65 6d 65 6e 74 3d 3d 6e 75 6c 6c 7d 63 61 74 63 68 28 64 29 7b 7d 63 2e 64 6f 63 75 Data Ascii: dy,1);if(c.addEventListener)c.addEventListener("DOMContentLoaded",B,!1),a.addEventListener("load",e.ready,!1);else if(c.attachEvent){c.attachEvent("onreadystatechange",B),a.attachEvent("onload",e.ready);var b=!1;try{b=a.frameElement==null}catch(d){}c.docu
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 6c 73 65 22 2c 64 2e 6c 6f 61 64 58 4d 4c 28 63 29 29 7d 63 61 74 63 68 28 67 29 7b 64 3d 62 7d 28 21 64 7c 7c 21 64 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7c 7c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 70 61 72 73 65 72 65 72 72 6f 72 22 29 2e 6c 65 6e 67 74 68 29 26 26 65 2e 65 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 58 4d 4c 3a 20 22 2b 63 29 3b 72 65 74 75 72 6e 20 64 7d 2c 6e 6f 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 26 26 6a 2e 74 65 73 74 28 62 29 26 26 28 61 2e 65 78 65 63 53 63 72 69 70 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 61 2e 65 76 61 6c 2e 63 61 6c 6c 28 61 2c 62 29 7d 29 28 62 29 7d 2c 63 61 6d 65 6c 43 61 73 65 Data Ascii: lse",d.loadXML(c))}catch(g){d=b}(!d\|\|!d.documentElement\|\|d.getElementsByTagName("parsererror").length)&&e.error("Invalid XML: "+c);return d},noop:function(){},globalEval:function(b){b&&j.test(b)&&(a.execScript\|\|function(b){a.eval.call(a,b)})(b)},camelCase

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.4	50052	172.67.161.117	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:15 UTC	4896	OUT	GET /rtgstat/50version/js/slider.js HTTP/1.1 Host: cdn.2trk.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://rtgcloudsql.2trk.info/rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%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%3D%3D%253Bdurl155%3D::scm0=bid_~CM.64180~SZ.970~TS.pdx~dv.3~BI.110886972959~DI.~ST.25_::exch=pdx::bS=49a8ccc8-4e10-415f-b3cc-85fda009ccda::bamt=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q::ppid=::btm=1710778934359::mid=CAESEO4xid7o8uR9EnVbRe87Nek::cl=::geo=USA::ref0=https%3A%2F%2Fbrowser-update.org::pageID=937680203::dT=OA::mode=ifrme::devid=3::r1=100::label=default::as=4::winprice=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q::bt=1::ul15= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
2024-03-18 16:22:15 UTC	1201	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:15 GMT Content-Type: application/javascript Content-Length: 23523 Connection: close Age: 43939 Cache-Control: public, max-age=172800 Cf-Bgj: minify Content-Language: en ETag: "311ca6022249bba7df100863c8bccba5" Expires: Mon, 18 Mar 2024 05:09:47 GMT Last-Modified: Mon, 08 Mar 2021 15:27:22 GMT X-GUploader-UploadID: ABPtcPqG7LOXI50MlXVgpc65ZsP6xEjfj3B-hd9l5hKG5dbg7acbI8SBBjx03RNpY5_yeodZSmpLy_30KA x-goog-generation: 1615217241983409 x-goog-hash: crc32c=SCRuaw== x-goog-hash: md5=MRymAiJJu6ffEAhjyLzLpQ== x-goog-meta-goog-reserved-file-mtime: 1614573315 x-goog-metageneration: 1 x-goog-storage-class: STANDARD x-goog-stored-content-encoding: identity x-goog-stored-content-length: 23523 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y%2FpyUzIiwPj0ifrdHEGJe9UwStryZexbMLu8qt8eXtMiFKr4PPDlJHiuor7wrqfRQqmNMn6JwXZklgGdse2BPcqHe1B%2Fq0tWUZGaFnxAXTA5eZhyMRRH9%2BILF%2FZanR3g"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f7d3ed00fa1-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:22:15 UTC	168	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 6d 6f 64 65 3a 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 2c 73 6c 69 64 65 53 65 6c 65 63 74 6f 72 3a 22 22 2c 69 6e 66 69 6e 69 74 65 4c 6f 6f 70 3a 21 30 2c 68 69 64 65 43 6f 6e 74 72 6f 6c 4f 6e 45 6e 64 3a 21 31 2c 73 70 65 65 64 3a 35 30 30 2c 65 61 73 69 6e 67 3a 6e 75 6c 6c 2c 73 6c 69 64 65 4d 61 72 67 69 6e 3a 30 2c 73 74 61 72 74 53 6c 69 64 65 3a 30 2c 72 61 6e 64 6f 6d 53 74 61 72 74 3a 21 31 2c 63 61 70 74 69 6f 6e 73 3a 21 31 2c 74 Data Ascii: !function(t){var e={mode:"horizontal",slideSelector:"",infiniteLoop:!0,hideControlOnEnd:!1,speed:500,easing:null,slideMargin:0,startSlide:0,randomStart:!1,captions:!1,t
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 69 63 6b 65 72 3a 21 31 2c 74 69 63 6b 65 72 48 6f 76 65 72 3a 21 31 2c 61 64 61 70 74 69 76 65 48 65 69 67 68 74 3a 21 31 2c 61 64 61 70 74 69 76 65 48 65 69 67 68 74 53 70 65 65 64 3a 35 30 30 2c 76 69 64 65 6f 3a 21 31 2c 75 73 65 43 53 53 3a 21 30 2c 70 72 65 6c 6f 61 64 49 6d 61 67 65 73 3a 22 76 69 73 69 62 6c 65 22 2c 72 65 73 70 6f 6e 73 69 76 65 3a 21 30 2c 73 6c 69 64 65 5a 49 6e 64 65 78 3a 35 30 2c 77 72 61 70 70 65 72 43 6c 61 73 73 3a 22 6d 61 69 6e 61 64 2d 77 72 61 70 70 65 72 22 2c 74 6f 75 63 68 45 6e 61 62 6c 65 64 3a 21 30 2c 73 77 69 70 65 54 68 72 65 73 68 6f 6c 64 3a 35 30 2c 6f 6e 65 54 6f 4f 6e 65 54 6f 75 63 68 3a 21 30 2c 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 53 77 69 70 65 58 3a 21 30 2c 70 72 65 76 65 6e 74 44 65 66 61 75 Data Ascii: icker:!1,tickerHover:!1,adaptiveHeight:!1,adaptiveHeightSpeed:500,video:!1,useCSS:!0,preloadImages:"visible",responsive:!0,slideZIndex:50,wrapperClass:"mainad-wrapper",touchEnabled:!0,swipeThreshold:50,oneToOneTouch:!0,preventDefaultSwipeX:!0,preventDefau
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 2e 73 6c 69 64 65 53 65 6c 65 63 74 6f 72 29 2c 73 2e 63 68 69 6c 64 72 65 6e 2e 6c 65 6e 67 74 68 3c 73 2e 73 65 74 74 69 6e 67 73 2e 6d 69 6e 53 6c 69 64 65 73 26 26 28 73 2e 73 65 74 74 69 6e 67 73 2e 6d 69 6e 53 6c 69 64 65 73 3d 73 2e 63 68 69 6c 64 72 65 6e 2e 6c 65 6e 67 74 68 29 2c 73 2e 63 68 69 6c 64 72 65 6e 2e 6c 65 6e 67 74 68 3c 73 2e 73 65 74 74 69 6e 67 73 2e 6d 61 78 53 6c 69 64 65 73 26 26 28 73 2e 73 65 74 74 69 6e 67 73 2e 6d 61 78 53 6c 69 64 65 73 3d 73 2e 63 68 69 6c 64 72 65 6e 2e 6c 65 6e 67 74 68 29 2c 73 2e 73 65 74 74 69 6e 67 73 2e 72 61 6e 64 6f 6d 53 74 61 72 74 26 26 28 73 2e 73 65 74 74 69 6e 67 73 2e 73 74 61 72 74 53 6c 69 64 65 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 73 2e 63 68 69 Data Ascii: .slideSelector),s.children.length<s.settings.minSlides&&(s.settings.minSlides=s.children.length),s.children.length<s.settings.maxSlides&&(s.settings.maxSlides=s.children.length),s.settings.randomStart&&(s.settings.startSlide=Math.floor(Math.random()*s.chi
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 73 2e 77 72 61 70 70 65 72 43 6c 61 73 73 2b 27 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 61 64 2d 76 69 65 77 70 6f 72 74 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 27 29 2c 73 2e 76 69 65 77 70 6f 72 74 3d 6f 2e 70 61 72 65 6e 74 28 29 2c 73 2e 73 65 74 74 69 6e 67 73 2e 61 72 69 61 4c 69 76 65 26 26 21 73 2e 73 65 74 74 69 6e 67 73 2e 74 69 63 6b 65 72 26 26 73 2e 76 69 65 77 70 6f 72 74 2e 61 74 74 72 28 22 61 72 69 61 2d 6c 69 76 65 22 2c 22 70 6f 6c 69 74 65 22 29 2c 73 2e 6c 6f 61 64 65 72 3d 74 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 61 64 2d 6c 6f 61 64 69 6e 67 22 20 2f 3e 27 29 2c 73 2e 76 69 65 77 70 6f 72 74 2e 70 72 65 70 65 6e 64 28 73 2e 6c 6f 61 64 65 72 29 2c 6f 2e 63 73 73 28 7b 77 69 64 74 68 3a 22 68 6f 72 69 Data Ascii: s.wrapperClass+'"><div class="mainad-viewport"></div></div>'),s.viewport=o.parent(),s.settings.ariaLive&&!s.settings.ticker&&s.viewport.attr("aria-live","polite"),s.loader=t('<div class="mainad-loading" />'),s.viewport.prepend(s.loader),o.css({width:"hori
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 3f 73 2e 73 65 74 74 69 6e 67 73 2e 70 61 67 65 72 3d 21 31 3a 28 73 2e 73 65 74 74 69 6e 67 73 2e 63 6f 6e 74 72 6f 6c 73 26 26 43 28 29 2c 73 2e 73 65 74 74 69 6e 67 73 2e 61 75 74 6f 26 26 73 2e 73 65 74 74 69 6e 67 73 2e 61 75 74 6f 43 6f 6e 74 72 6f 6c 73 26 26 54 28 29 2c 73 2e 73 65 74 74 69 6e 67 73 2e 70 61 67 65 72 26 26 77 28 29 2c 28 73 2e 73 65 74 74 69 6e 67 73 2e 63 6f 6e 74 72 6f 6c 73 7c 7c 73 2e 73 65 74 74 69 6e 67 73 2e 61 75 74 6f 43 6f 6e 74 72 6f 6c 73 7c 7c 73 2e 73 65 74 74 69 6e 67 73 2e 70 61 67 65 72 29 26 26 73 2e 76 69 65 77 70 6f 72 74 2e 61 66 74 65 72 28 73 2e 63 6f 6e 74 72 6f 6c 73 2e 65 6c 29 29 2c 63 28 65 2c 67 29 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 76 61 72 20 6e 3d 65 2e 66 69 6e 64 28 27 69 6d 67 Data Ascii: ?s.settings.pager=!1:(s.settings.controls&&C(),s.settings.auto&&s.settings.autoControls&&T(),s.settings.pager&&w(),(s.settings.controls\|\|s.settings.autoControls\|\|s.settings.pager)&&s.viewport.after(s.controls.el)),c(e,g)},c=function(e,i){var n=e.find('img
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 74 28 64 6f 63 75 6d 65 6e 74 29 2e 6b 65 79 64 6f 77 6e 28 46 29 7d 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 30 2c 6e 3d 74 28 29 3b 69 66 28 22 76 65 72 74 69 63 61 6c 22 3d 3d 3d 73 2e 73 65 74 74 69 6e 67 73 2e 6d 6f 64 65 7c 7c 73 2e 73 65 74 74 69 6e 67 73 2e 61 64 61 70 74 69 76 65 48 65 69 67 68 74 29 69 66 28 73 2e 63 61 72 6f 75 73 65 6c 29 7b 76 61 72 20 6f 3d 31 3d 3d 3d 73 2e 73 65 74 74 69 6e 67 73 2e 6d 6f 76 65 53 6c 69 64 65 73 3f 73 2e 61 63 74 69 76 65 2e 69 6e 64 65 78 3a 73 2e 61 63 74 69 76 65 2e 69 6e 64 65 78 2a 78 28 29 3b 66 6f 72 28 6e 3d 73 2e 63 68 69 6c 64 72 65 6e 2e 65 71 28 6f 29 2c 69 3d 31 3b 69 3c 3d 73 2e 73 65 74 74 69 6e 67 73 2e 6d 61 78 53 6c 69 64 65 73 2d 31 3b 69 2b 2b 29 6e 3d 6f 2b 69 3e 3d Data Ascii: t(document).keydown(F)},p=function(){var e=0,n=t();if("vertical"===s.settings.mode\|\|s.settings.adaptiveHeight)if(s.carousel){var o=1===s.settings.moveSlides?s.active.index:s.active.index*x();for(n=s.children.eq(o),i=1;i<=s.settings.maxSlides-1;i++)n=o+i>=
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 20 69 66 28 73 2e 73 65 74 74 69 6e 67 73 2e 6d 61 78 53 6c 69 64 65 73 3e 31 26 26 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 3d 3d 3d 73 2e 73 65 74 74 69 6e 67 73 2e 6d 6f 64 65 29 7b 69 66 28 65 3e 73 2e 6d 61 78 54 68 72 65 73 68 6f 6c 64 29 72 65 74 75 72 6e 20 74 3b 65 3c 73 2e 6d 69 6e 54 68 72 65 73 68 6f 6c 64 3f 74 3d 28 65 2d 73 2e 73 65 74 74 69 6e 67 73 2e 73 6c 69 64 65 4d 61 72 67 69 6e 2a 28 73 2e 73 65 74 74 69 6e 67 73 2e 6d 69 6e 53 6c 69 64 65 73 2d 31 29 29 2f 73 2e 73 65 74 74 69 6e 67 73 2e 6d 69 6e 53 6c 69 64 65 73 3a 73 2e 73 65 74 74 69 6e 67 73 2e 73 68 72 69 6e 6b 49 74 65 6d 73 26 26 28 74 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 65 2b 73 2e 73 65 74 74 69 6e 67 73 2e 73 6c 69 64 65 4d 61 72 67 69 6e 29 2f 4d 61 74 68 2e 63 65 69 6c Data Ascii: if(s.settings.maxSlides>1&&"horizontal"===s.settings.mode){if(e>s.maxThreshold)return t;e<s.minThreshold?t=(e-s.settings.slideMargin*(s.settings.minSlides-1))/s.settings.minSlides:s.settings.shrinkItems&&(t=Math.floor((e+s.settings.slideMargin)/Math.ceil
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 73 2e 73 65 74 74 69 6e 67 73 2e 6d 69 6e 53 6c 69 64 65 73 2c 74 3d 73 2e 63 68 69 6c 64 72 65 6e 2e 65 71 28 69 29 2e 70 6f 73 69 74 69 6f 6e 28 29 2c 53 28 2d 74 2e 74 6f 70 2c 22 72 65 73 65 74 22 2c 30 29 29 3a 28 74 3d 73 2e 63 68 69 6c 64 72 65 6e 2e 65 71 28 73 2e 61 63 74 69 76 65 2e 69 6e 64 65 78 2a 78 28 29 29 2e 70 6f 73 69 74 69 6f 6e 28 29 2c 73 2e 61 63 74 69 76 65 2e 69 6e 64 65 78 3d 3d 3d 66 28 29 2d 31 26 26 28 73 2e 61 63 74 69 76 65 2e 6c 61 73 74 3d 21 30 29 2c 76 6f 69 64 20 30 21 3d 3d 74 26 26 28 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 3d 3d 3d 73 2e 73 65 74 74 69 6e 67 73 2e 6d 6f 64 65 3f 53 28 2d 74 2e 6c 65 66 74 2c 22 72 65 73 65 74 22 2c 30 29 3a 22 76 65 72 74 69 63 61 6c 22 3d 3d 3d 73 2e 73 65 74 74 69 6e 67 73 2e 6d 6f 64 Data Ascii: s.settings.minSlides,t=s.children.eq(i).position(),S(-t.top,"reset",0)):(t=s.children.eq(s.active.index*x()).position(),s.active.index===f()-1&&(s.active.last=!0),void 0!==t&&("horizontal"===s.settings.mode?S(-t.left,"reset",0):"vertical"===s.settings.mod
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 6f 6e 28 73 2e 73 65 74 74 69 6e 67 73 2e 62 75 69 6c 64 50 61 67 65 72 29 7c 7c 73 2e 73 65 74 74 69 6e 67 73 2e 70 61 67 65 72 43 75 73 74 6f 6d 3f 28 69 3d 73 2e 73 65 74 74 69 6e 67 73 2e 62 75 69 6c 64 50 61 67 65 72 28 6f 29 2c 73 2e 70 61 67 65 72 45 6c 2e 61 64 64 43 6c 61 73 73 28 22 6d 61 69 6e 61 64 2d 63 75 73 74 6f 6d 2d 70 61 67 65 72 22 29 29 3a 28 69 3d 6f 2b 31 2c 73 2e 70 61 67 65 72 45 6c 2e 61 64 64 43 6c 61 73 73 28 22 6d 61 69 6e 61 64 2d 64 65 66 61 75 6c 74 2d 70 61 67 65 72 22 29 29 2c 65 2b 3d 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 61 64 2d 70 61 67 65 72 2d 69 74 65 6d 22 3e 3c 61 20 68 72 65 66 3d 22 22 20 64 61 74 61 2d 73 6c 69 64 65 2d 69 6e 64 65 78 3d 22 27 2b 6f 2b 27 22 20 63 6c 61 73 73 3d 22 6d 61 69 6e 61 Data Ascii: on(s.settings.buildPager)\|\|s.settings.pagerCustom?(i=s.settings.buildPager(o),s.pagerEl.addClass("mainad-custom-pager")):(i=o+1,s.pagerEl.addClass("mainad-default-pager")),e+='<div class="mainad-pager-item"><a href="" data-slide-index="'+o+'" class="maina
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 61 64 2d 73 74 61 72 74 22 20 68 72 65 66 3d 22 22 3e 27 2b 73 2e 73 65 74 74 69 6e 67 73 2e 73 74 61 72 74 54 65 78 74 2b 22 3c 2f 61 3e 3c 2f 64 69 76 3e 22 29 2c 73 2e 63 6f 6e 74 72 6f 6c 73 2e 73 74 6f 70 3d 74 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 61 64 2d 63 6f 6e 74 72 6f 6c 73 2d 61 75 74 6f 2d 69 74 65 6d 22 3e 3c 61 20 63 6c 61 73 73 3d 22 6d 61 69 6e 61 64 2d 73 74 6f 70 22 20 68 72 65 66 3d 22 22 3e 27 2b 73 2e 73 65 74 74 69 6e 67 73 2e 73 74 6f 70 54 65 78 74 2b 22 3c 2f 61 3e 3c 2f 64 69 76 3e 22 29 2c 73 2e 63 6f 6e 74 72 6f 6c 73 2e 61 75 74 6f 45 6c 3d 74 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 61 64 2d 63 6f 6e 74 72 6f 6c 73 2d 61 75 74 6f 22 20 2f 3e 27 29 2c 73 2e 63 6f 6e 74 72 6f 6c 73 2e 61 75 74 6f Data Ascii: ad-start" href="">'+s.settings.startText+"</a></div>"),s.controls.stop=t('<div class="mainad-controls-auto-item"><a class="mainad-stop" href="">'+s.settings.stopText+"</a></div>"),s.controls.autoEl=t('<div class="mainad-controls-auto" />'),s.controls.auto

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.4	50051	172.67.161.117	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:15 UTC	4969	OUT	GET /rtgbannerimage/2024-03-11-0723162901024.png HTTP/1.1 Host: cdn.2trk.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtgcloudsql.2trk.info/rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%3DeyJyYW5rN0EiOiIwIiwiYmFubmVyVHlwZSI6ImJhbm5lciIsImNyaXRlcmlhSWQiOiIxMDIzMTkxIiwidHkiOiIwIiwiZXh0cmFzS2V5IjoiNDdfNjQxODAtOTcwIiwicGxhdGZvcm1Ccm93c2VyIjoiQ2hyb21lIiwibWluQmlkVG9XaW4iOiIwIiwibWluYmlkIjoiMC4xMiIsIm1heGJpZCI6IjYuMCIsInByb2dyYW1OYW1lIjoicG9zX3VlY191cyIsInB1YklkIjoicHViLTU4ODQyOTQ0NzkzOTE2MzgiLCJob3N0IjoicHJlY2lzbyIsInJhbms2UyI6IjAuMCIsInBsYWNlbWVudEJ1bmRsZU5hbWUiOiJicm93c2VyLXVwZGF0ZS5vcmciLCJiYW5uZXJVcGRhdGVPbiI6IjE4LzAzLzIwMjQgMTY6MDI6MTQiLCJkYXkiOiIyMDI0LTAzLTE4IiwiUGFnZVR5cGUiOiJnZW5lcmljIiwiaGVpZ2h0IjoiOTAiLCJlY3BhIjoiMCIsImN0ciI6IjIuNjU4MTYwNUUtNCIsInJlbUFnQnVkQ2FwIjoiNjIyOS43NDc0IiwiYmtIb3VycyI6IjAiLCJiaWxsaW5naWQiOiIxMTA4ODY5NzI5NTkiLCJ2aXNpYmlsaXR5IjoiQkVMT1dfVEhFX0ZPTEQiLCJpbnRlcnN0aXRpYWwiOiJmYWxzZSIsIkRhaWx5QnVkZ2V0IjoiMzIiLCJkZWFsVHlwZSI6Ik9BIiwiRnJlcXVlbmN5Y2FwIjoiMTAiLCJhciI6Ik5BIiwiY3BtTWljcm9zIjoiMCIsInBsYXRmb3JtT3MiOiJXaW5kb3dzIiwiZXgiOiJwZHgiLCJhZFNsb3RSYW5rNSI6IjE4NTIiLCJkb21haW4iOiJodHRwczovL2Jyb3dzZXItdXBkYXRlK2Qrb3JnIiwibG9nSSI6IiBJMToxLjAsSTI6MS4wLEk1OjEuMCxJNjoxLjAsSTc6MS4wIiwiZ3VpZCI6IkNBRVNFTzR4aWQ3bzh1UjlFblZiUmU4N05layIsIm1haW5hZENvbnNlbnRTdGF0dXMiOiJmYWxzZSIsImxvZ1IiOiIgUjE6MTAwLFIyOjEwMDAsUjU6MTg1MixSNnM6MC4wLFI2YzowLjAsUjZzQjowLjAsUjZjQjowLjAsUjdhOjAiLCJyZWdpb24iOiJ1cy1lYXN0NC1hIiwiZGV2aWNlIjoicGMiLCJkZXZpZCI6IjAiLCJ2aWV3YWJpbGl0eSI6Ii0xIiwiaXNDb25zZW50TmVlZGVkIjoiZmFsc2UiLCJpbkFwcCI6ImZhbHNlIiwiY2FtcGFpZ25pZCI6IjY0MTgwIiwiZW52aXJvbm1lbnRUeXBlIjoiV2ViIiwiYmlkcHJpY2UiOiIwLjEyIiwiYmsiOiIwIiwiVXNlclN0cmF0ZWd5SWQiOiIiLCJiaWRpZCI6IjdhYjFjZGU1LTFiNDItNjVjMy05Y2NmLTk4ZTlmNGY0MTQ3YSIsImdlbyI6IlVTQSIsInN1YmlkIjoiVFMrZCtwZHgrdCtkditkKzMrdCtTVCtkKzI1K3UrK3QrU1orZCs5NzArdCtCSStkKzExMDg4Njk3Mjk1OSt0K0RJK2QrIiwiY2l0eU5hbWUiOiJOZXcgWW9yayIsImhvdXIiOiIxNiIsInppcFBvc3RhbENvZGUiOiJOQSIsImJpZFNpZ25hdHVyZSI6IjQ5YThjY2M4LTRlMTAtNDE1Zi1iM2NjLTg1ZmRhMDA5Y2NkYSIsImNtcEN0ciI6IjAuMCIsInN0cmF0ZWd5SWQiOiIyNSIsImJ0bSI6IjE3MTA3Nzg5MzQzNTkiLCJhdWN0aW9uVHlwZSI6IkZJUlNUX1BSSUNFIiwiYmlkRmxvb3IiOiIwLjAxIiwiY2MiOiIwIiwiZmlyc3RDb29raWUiOiIiLCJiYW5kd2lkdGgiOiJudWxsIiwiZGVhbElEIjoiMCIsImFnZW5jeWlkIjoiMTAyODg2IiwicmFuazZDIjoiMC4wIiwiY2FtcGFpZ25TZXR0aW5ncyI6IntcImN0eVwiOlwiMVwiLFwibGFwXCI6XCIwXCIsXCJpYXNcIjpcIjBcIixcImxycFwiOlwiMFwiLFwicDhcIjpcIjBcIixcInNhXCI6XCIwXCIsXCJzYlwiOlwiMFwiLFwic2NcIjpcIjBcIixcInBiclwiOlwiMFwifSIsInJhbmsxIjoiMTAwIiwidHlIb3VycyI6IjAiLCJwdWJsaXNoZXJJRCI6IjEwMDk2IiwicmFuazIiOiIxMDAwIiwicGQiOiIwIiwiYWRTbG90S2V5IjoiaHR0cHM6Ly9icm93c2VyLXVwZGF0ZStkK29yZyM5NzAjOTAjQkVMT1crdStUSEUrdStGT0xEIiwiYXVkaWVuY2VNYXRjaCI6Im5vY29va2llIiwid2lkdGgiOiI5NzAiLCJjYXRlZ29yeSI6IltdIiwicmFuazUiOiIxLjAiLCJtYWluQWRVc2VySUQiOiJDQUVTRU80eGlkN284dVI5RW5WYlJlODdOZWsifQ%3D%3D%253Bdurl155%3D::scm0=bid_~CM.64180~SZ.970~TS.pdx~dv.3~BI.110886972959~DI.~ST.25_::exch=pdx::bS=49a8ccc8-4e10-415f-b3cc-85fda009ccda::bamt=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q::ppid=::btm=1710778934359::mid=CAESEO4xid7o8uR9EnVbRe87Nek::cl=::geo=USA::ref0=https%3A%2F%2Fbrowser-update.org::pageID=937680203::dT=OA::mode=ifrme::devid=3::r1=100::label=default::as=4::winprice=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q::bt=1::ul15= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
2024-03-18 16:22:15 UTC	1100	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:15 GMT Content-Type: image/png Content-Length: 126615 Connection: close X-GUploader-UploadID: ABPtcPqGl3v8dQV-W0M8-hSu5sO6gsS7DFLKgEe67j8S0zuVUdodJaE-1pch5D-NrgVgOx8WT6k_k5Sjmg x-goog-generation: 1710141796366109 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 126615 x-goog-hash: crc32c=9Di5HQ== x-goog-hash: md5=pbrMfHOb6Ddb3yWhj4g90A== x-goog-storage-class: STANDARD Expires: Mon, 18 Mar 2024 05:09:56 GMT Cache-Control: public, max-age=172800 Last-Modified: Mon, 11 Mar 2024 07:23:16 GMT ETag: "a5bacc7c739be8375bdf25a18f883dd0" Age: 43939 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I5et4hvAyVMIVlhdfB273KJWING1n85SR%2F%2FsmLH5ydga7ZI94YKTZwVMWSkc5Ynh0YR9CtcQgIxlCSquZDMrE5mNI%2FxRrN0bCfUjecQGsq0OJpq3tbcukmHZRFNYe0eG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f7d5e8043fd-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:22:15 UTC	269	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 00 00 00 00 5a 08 02 00 00 00 a9 25 b3 56 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 66 33 35 34 65 66 63 37 30 2c 20 32 30 32 33 2f 31 31 2f 30 39 2d 31 32 3a 30 35 3a 35 Data Ascii: PNGIHDRZ%VtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:5
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f Data Ascii: df:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTo
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 15 93 b2 33 88 83 c8 e7 3e eb ef e9 56 0e cf 92 6c d0 0f 65 59 8f b6 52 bf 1b cc ef 5b 74 74 bd fe e2 46 ba 91 c3 d0 d4 ae d0 52 ab aa 59 58 e9 33 d7 dd 7c 75 18 c6 81 6e 9c f1 da 10 46 b1 17 47 f1 82 1f 76 5c 97 f9 30 a0 b2 bc 80 47 7b f0 f2 bd e3 69 55 a4 15 0c 71 ad 9a e1 5a 09 e3 62 e5 e0 a0 bf 37 c8 b3 72 b2 51 5c 71 73 5f 78 f1 89 67 f3 cd 57 47 8e f6 3a 83 68 b0 1c 85 f3 75 59 55 d9 28 28 27 03 25 4d 4f 32 1d 0f 26 10 e6 05 0c 06 a3 c3 61 dc a9 aa a0 69 c1 67 0e 75 30 fa 18 76 3b d7 e3 d0 7b ab 12 a6 18 18 e9 22 ea ba f0 b1 a6 92 4d 0d 3d 1f fa a4 53 e6 2a 9d c2 15 69 cf 63 61 d7 f5 02 57 62 3f 84 26 84 e1 0b 1d 88 b9 0c e7 27 e8 71 d0 93 a0 23 d1 40 c4 77 60 9e 82 7f 6c 57 6f e0 d9 52 6f 17 d0 ed da a1 84 a3 50 d0 c7 f0 2d 85 2f 98 ae 60 14 b3 d9 Data Ascii: 3>VleYR[ttFRYX3\|unFGv\0G{iUqZb7rQ\qs_xgWG:huYU(('%MO2&aigu0v;{"M=S*icaWb?&'q#@w`lWoRoP-/`
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 61 94 c1 c9 c3 5e b8 7a f9 f2 fc d2 c0 d3 02 38 0a 9c 47 08 77 69 79 09 e0 d4 f6 da 64 b2 55 94 59 53 a7 15 34 f2 f2 ea 9c ac d5 64 33 01 ba 05 70 e9 cc 4b 49 96 14 9d 01 2e de 35 90 63 56 a5 13 80 ff 30 0b 78 4d 19 18 ca ab 08 9a c1 13 c5 21 61 a1 16 90 1d 5d 57 08 a1 11 b1 10 2a 84 01 ce 5a 20 0c 9c ae 46 02 a0 fd 80 63 2f 6a 74 03 5c ac 6e 34 75 39 c4 fa 0d 40 52 16 84 40 2a 38 05 20 cc 50 a3 69 46 d1 30 53 8a 60 84 b6 ff 43 b0 03 30 93 ef 70 6c ce da be 47 28 84 1e 03 b1 4e 04 99 88 9f 15 75 59 45 33 9d 23 f1 8f f0 13 e2 1b c3 8e 5b d6 8c f7 a3 f0 78 c2 0e 4f 84 38 88 55 1d a2 c3 38 6d 22 a8 44 d4 84 f1 14 04 4c ba e5 11 cc 8e 1d 9c 12 b1 e7 c0 29 99 99 24 70 ca 14 8e 81 5f 66 aa 40 88 ae 09 3f 6a 64 0d a6 d7 c0 0d 73 17 4e 44 67 67 08 8b 69 70 2a 6c Data Ascii: a^z8GwiydUYS4d3pKI.5cV0xM!a]WZ Fc/jt\n4u9@R@8 PiF0S`C0plG(NuYE3#[xO8U8m"DL)$p_f@?jdsNDggip*l
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 6d 53 69 30 e5 60 97 43 28 2d 09 50 9a 49 50 9b b0 b5 1d 2f d8 99 35 71 01 1a c2 04 07 b5 f9 8c 60 8a c2 f5 74 34 dd 30 03 63 cd f7 6c d0 5d 19 ac 6d 3b 3c c2 66 c2 95 bb 00 0c 71 22 ec 94 76 8a 60 8a c0 31 06 60 4c d8 1b ee 13 fa 0f 81 4f 1c 4e 9a 10 1e a0 62 fc 30 47 1e 8a 60 8a 13 a7 21 5e 42 10 97 be 86 ff e0 28 54 c4 24 a4 a1 3d e6 90 dc d2 12 ca 67 00 00 26 2c 0c e3 84 6b 98 9c 01 2e ba 88 1a f1 21 21 42 b6 71 67 46 01 5d e2 23 c8 b1 35 31 77 2e 75 33 9b 12 b0 4b 18 8e 67 d2 09 06 53 6b 93 ca e0 d4 07 ec 43 33 79 06 fc 1c 97 c2 c3 99 c0 e5 92 11 6d c2 bc 22 f6 2c bc 13 9a 13 88 54 c2 53 47 5e d6 e2 7d 62 6b da 92 a4 19 ac 65 c4 f5 a8 0b e0 73 95 33 88 49 9c 8b 66 d0 19 a4 23 76 aa 11 8b 13 b7 d3 ac 85 af 78 4c e9 cc a2 d6 9a 1b 36 4b cd 4f c7 c2 36 Data Ascii: mSi0`C(-PIP/5q`t40cl]m;<fq"v`1`LONb0G`!^B(T$=g&,k.!!BqgF]#51w.u3KgSkC3ym",TSG^}bkes3If#vxL6KO6
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 92 a3 bc 01 81 72 0c 6d 0b a7 c1 d8 b4 32 72 21 8d 27 82 16 17 2e 0a bd 5c e0 1b 30 8a f1 d4 0e 25 78 08 b1 2a 54 c7 08 92 e3 38 14 ec 57 44 f2 cc a3 a4 2c 13 3d 13 cb 28 94 89 76 73 6a 17 6a 07 c3 fb 14 cd 2c 84 ff b0 23 12 95 23 b9 8e 61 81 28 cc 62 d4 4a 56 29 85 09 12 4a 18 39 94 c2 b2 a8 11 3a 15 5e 3d f6 32 61 02 e7 94 be 41 ae d6 62 71 5d 63 76 c3 a8 7c 34 41 7a c7 10 08 58 48 1d a3 f9 c1 d5 95 78 1c a3 0b b3 7d c2 a0 72 ec e8 d8 de 82 59 16 c4 0c 97 44 35 96 a6 c7 8e 2d 0b b3 0c 3d 15 38 b3 10 04 ed b9 60 56 a7 63 6e 0e bb 31 76 45 8a aa 10 75 21 ba 81 b1 23 41 82 1f ce 6d a7 35 78 7d 16 1e 57 96 59 d2 69 b5 25 bf 8a 44 42 78 b7 12 7f d6 b6 23 90 f4 cb 22 6d 41 17 ea b4 84 d9 1c b9 0d 81 11 77 e0 92 d2 09 26 f6 6f e4 49 76 fe e7 3b b0 be cd 25 3b Data Ascii: rm2r!'.\0%x*T8WD,=(vsjj,##a(bJV)J9:^=2aAbq]cv\|4AzXHx}rYD5-=8`Vcn1vEu!#Am5x}WYi%DBx#"mAw&oIv;%;
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 08 a1 48 a8 43 5d 0d 15 56 a8 5f 53 04 8f 11 7b 4b 64 26 8c 02 00 c8 34 25 6a 53 91 ae b9 b6 76 0b 9f 16 74 66 ac 63 31 cc a3 2d de a0 30 3b e6 d3 34 d5 19 71 49 54 03 e5 6d a6 e4 84 32 4f 84 e7 e1 ff 53 cf e4 36 dd e5 d8 a4 0d 8d 2c 62 11 c4 38 88 2e 51 b5 1f 5e 11 71 14 33 28 e0 5d 61 64 40 a4 df 01 32 83 c7 24 fd 97 29 6e 51 26 72 8f 37 87 b7 45 62 21 c3 68 29 f8 cf 2d e5 d5 6a 26 f2 6c 6b 32 14 b5 0b 51 3b e8 6c c4 57 0c 07 62 36 3f 62 13 c2 6d 71 90 b6 59 b5 9d 64 00 db ad cd b9 40 22 fb 82 80 9c 9d a5 ea b1 25 3f ed 39 fe 87 5f fa 22 ec bf f8 7a 9d 66 00 e6 0f f4 65 51 e0 9a 96 d5 b4 42 3b 58 80 98 4b 59 35 b0 f0 2b 23 93 6c 70 25 26 c4 a6 6b ac 81 44 cc 8f 62 21 0c 89 32 bf 07 18 00 20 38 13 be 00 fc 07 ec 01 3e d5 94 12 a3 22 15 4c 6d a4 da ad 25 Data Ascii: HC]V_S{Kd&4%jSvtfc1-0;4qITm2OS6,b8.Q^q3(]ad@2$)nQ&r7Eb!h)-j&lk2Q;lWb6?bmqYd@"%?9_"zfeQB;XKY5+#lp%&kDb!2 8>"Lm%
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: 00 ce 2d 03 b8 48 05 2e be 5e 2f 04 60 f9 c0 bc d3 d4 54 85 86 ff 49 c0 48 15 ae 35 36 66 84 c6 05 b6 76 13 a3 47 00 53 ea 06 60 3d ce 8b 3e f3 3a 22 58 f4 3b 4b 51 d4 77 bd 18 95 85 40 0e ea b4 f6 98 41 f0 8e 1f ba 61 4f c8 0a 20 85 13 74 3c e6 bb eb eb 69 59 ca c8 c5 1c b4 70 1d 3f 72 23 00 64 1e f7 03 80 6d 0a 65 cd 24 85 c4 75 17 c3 a2 4c 3a ee de 7d f1 f6 76 3a 19 01 21 d1 b2 a8 cb 04 eb 3e 65 89 b9 69 3f f6 34 26 d9 51 36 c0 cd 72 db 28 4a 80 37 92 a9 ee 62 14 c6 fe 78 ab 28 d3 06 b0 11 7c 65 ba 59 02 13 d0 d2 56 35 f9 b1 88 e6 3d 11 08 cf e7 f9 b0 f4 50 aa 0e 60 4b c2 ac 96 17 f9 81 fd 97 7c f4 3d ef e7 de e2 3b ee fe 26 4f e6 e9 68 c8 00 d4 f5 7b 36 59 6f 8d 29 74 ab 9b 3f 0b d7 ee 8e b5 cf 8a ba ce 81 d6 af 95 16 38 5b 17 64 89 01 cc e6 45 3e 7d Data Ascii: -H.^/`TIH56fvGS`=>:"X;KQw@AaO t<iYp?r#dme$uL:}v:!>ei?4&Q6r(J7bx(\|eYV5=P`K\|=;&Oh{6Yo)t?8[dE>}
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: ea a1 ef 7b ff 07 24 9b 7b f7 3b df e6 cb 74 6b 6d 0d 3e 18 f5 fb 9c 96 47 46 0e 79 fa ec 40 f8 f9 21 ff b3 fc 76 ce 2e b7 7d 4d 51 10 3b ab 12 a9 75 cb 43 98 54 24 a3 a7 1e 7d 70 61 69 df de 7d 2b 98 d7 e6 6e 99 0d 47 db a7 a3 28 36 da 4e 0a 29 d9 dc bf 52 36 5e 08 6f 95 45 b6 b6 3e 3c 72 e5 55 8c e9 f3 99 c6 cc 9c 67 37 07 d8 2d fa 37 f1 53 38 4e 5d 95 4f 3e f1 fc 68 5c 3d f8 c8 e3 47 2e 3b c0 6c ad c0 2c 80 ef 18 9b 0c c0 b2 75 2d fd 00 4d 7b 28 a1 ac 01 73 96 25 8a f3 03 4c 5c 38 b3 40 ed 4e c9 01 b3 10 cc 56 30 d0 6d 00 85 50 e8 7a 8a 89 a0 b8 3b 98 eb 2d 01 57 bb f4 c0 65 37 5e 79 cb 68 bc f9 d4 b3 4f 4e 46 a9 6e 74 95 03 0e 72 ba d0 08 8e 93 e7 65 10 06 18 56 cf 9b 3a d7 4e 23 80 d0 16 4d 55 c9 1a 96 d8 c0 85 55 10 7a 58 e0 c1 a1 39 d0 18 51 96 48 Data Ascii: {${;tkm>GFy@!v.}MQ;uCT$}pai}+nG(6N)R6^oE><rUg7-7S8N]O>h\=G.;l,u-M{(s%L\8@NV0mPz;-We7^yhONFntreV:N#MUUzX9QH
2024-03-18 16:22:15 UTC	1369	IN	Data Raw: b6 24 3a df 93 d4 ac 31 c0 cc 4e 9e 59 ab 93 8d c1 60 b4 30 27 c3 30 2c 8b c2 38 fa 69 66 70 9b f5 49 09 e2 30 9d a4 45 59 c4 9d 98 19 8b 43 ed f4 fb dd 8d 8d ad 06 d0 39 4a b7 d9 2e 11 74 2b 47 90 b6 3e c0 1a 21 52 5a 07 a0 67 05 3c ae 28 c3 10 bd 30 9b 12 60 6d de 0b a2 f7 dc f9 2d eb a7 47 9f fd f2 17 30 01 cd 6a 2f 10 a9 0f 44 40 35 ac 62 6e 54 a5 f5 74 58 00 52 0c 7c 96 a5 f0 b0 1b 1e c2 5a e5 39 92 37 85 cc aa 14 a0 97 1f 8a ba ac 55 03 7d 58 e4 49 8a 6a 04 a6 12 60 95 80 a4 95 53 8d 1c 5d 53 65 9e e7 5f 7f e5 a5 f5 28 dd df ef f8 9e 80 8b 19 65 e5 99 51 5a d7 da 77 79 3f 0a e6 3b 91 d4 ee 81 b8 5a 59 ff 72 71 e6 e1 92 2d 84 73 47 56 0e df 92 6c bf d2 d4 db db db 23 e5 4f 30 e2 8e 70 01 06 1b 0c 9c 10 08 c0 68 9c 3c f1 f0 53 d9 56 56 a7 d5 64 73 da Data Ascii: $:1NY`0'0,8ifpI0EYC9J.t+G>!RZg<(0`m-G0j/D@5bnTtXR\|Z97U}XIj`S]Se_(eQZwy?;ZYrq-sGVl#O0ph<SVVds

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.4	50057	142.250.65.162	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:15 UTC	1406	OUT	GET /pcs/view?xai=AKAOjsvgATh2nFLFTfxuA-Mg0ekaVvnQPG0p7BrqgOy6ed_6SfglkqoU-z69fs__aSdCe4LJChSZpnJMLIiA42k2EnU0HIUsrAK3_xZhVFyjvXm2vBa2vz767u-d9IWsftf332Cvp1zYcC9o1FZgyGPY-WE5uwHrLZ_TUu_59W4IDRPwmuU0O84LZYbbjS1Q-ZXaxZroess3QRM8xxe5IjdB_MBYU-jRJadYMM_prxH_2c-TLkkP1GwJCewJU32FqpudTRtxdzpWwLQM53DV3g0C8gOfanERMZGzLD9DCjYLnYDo7yrFqNxr1Tz_odNErrqIyCFfVt77M8soObqlkRtnUOQdriYuYXmKfwlFKxG3dL6erm5BNT98gHbVccZ7t4CnELVyrszjC6WG_xSz6nydvt-C-SSGfQ&sai=AMfl-YQi4KNVWDgMvKUem5u6y-h6U3l3I8pwfkD1PehlICl36Z-2YvWyTA5iJ2-tJblfYa44X5BrjmPuKYBLBVaQO-1-tZz5d0pCP7K_5fZC3CF3ae63Z8WJjzSoTipstui5s-f6s8NXtuAvEJiOozJpj1J9&sig=Cg0ArKJSzKU_qg5PlfFjEAE&uach_m=%5BUACH%5D&urlfix=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:15 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 18 Mar 2024 16:22:15 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.4	50059	8.28.7.83	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:15 UTC	1643	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=2b5667c9-681a-4026-b198-22bfa86cb93f&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; chkChromeAb67Sec=2; pi=156011:4; DPSync3=1711929600%3A263_262_261_260_259_201%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_250_166_3_104_165_54_71_220_21%7C1711324800%3A15_223; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; SPugT=1710778935; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; PugT=1710778933
2024-03-18 16:22:15 UTC	696	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Mar 2024 02:28:35 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 02:28:35 GMT; path=/ Set-Cookie: PugT=1710728915; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 02:28:35 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-18 16:22:15 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.4	50058	8.28.7.83	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:15 UTC	1941	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAGHVotKVdnRwM0DdtRAAAAAAA&expiration=1710865335&nuid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; chkChromeAb67Sec=2; pi=156011:4; DPSync3=1711929600%3A263_262_261_260_259_201%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_250_166_3_104_165_54_71_220_21%7C1711324800%3A15_223; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; SPugT=1710778935; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; PugT=1710778933
2024-03-18 16:22:15 UTC	708	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Mar 2024 16:22:14 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 16-Jun-2024 16:22:14 GMT; path=/ Set-Cookie: PugT=1710778934; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 16:22:14 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-18 16:22:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.4	50061	8.28.7.84	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:15 UTC	1579	OUT	GET /AdServer/SPug?partnerID=156078&xid=y-17tUrjJE2uUN58rhQTKtQw5Aw2CG9jI-~A&gdpr=0 HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; chkChromeAb67Sec=2; pi=156011:4; DPSync3=1711929600%3A263_262_261_260_259_201%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_250_166_3_104_165_54_71_220_21%7C1711324800%3A15_223; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; SPugT=1710778935; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; PugT=1710778933
2024-03-18 16:22:16 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Mar 2024 16:22:15 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1710778935; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 16:22:15 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-18 16:22:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.4	50063	54.144.102.188	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:15 UTC	906	OUT	GET /cookie-sync?gdpr=0&bee_sync_partners=pp%2Csyn%2Cpm&bee_sync_current_partner=sas&bee_sync_initiator=adx&bee_sync_hop_count=2&userid=8457389007004702379&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAARQ07L8NQAABPzJYe3uw; bitoIsSecure=ok
2024-03-18 16:22:16 UTC	646	IN	HTTP/1.1 303 See Other Date: Mon, 18 Mar 2024 16:22:16 GMT location: https://bh.contextweb.com/bh/rtset?ev=AAARQ07L8NQAABPzJYe3uw&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D8457389007004702379%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dsyn%252Cpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3&gdpr=0 Server: gunicorn set-cookie: bito=AAARQ07L8NQAABPzJYe3uw; Domain=bidr.io; expires=Thu, 17 Apr 2025 12:22:16 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.4	50067	8.28.7.83	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:16 UTC	1871	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAGHVotKVdnRwM0DdtRAAAAAAA&expiration=1710865335&nuid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; chkChromeAb67Sec=2; pi=156011:4; DPSync3=1711929600%3A263_262_261_260_259_201%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_250_166_3_104_165_54_71_220_21%7C1711324800%3A15_223; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; SPugT=1710778935; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; PugT=1710778934
2024-03-18 16:22:16 UTC	708	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Mar 2024 16:22:15 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 16-Jun-2024 16:22:15 GMT; path=/ Set-Cookie: PugT=1710778935; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 16:22:15 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-18 16:22:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.4	50068	8.28.7.84	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:16 UTC	1906	OUT	GET /AdServer/SPug?partnerID=156011&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; chkChromeAb67Sec=2; pi=156011:4; DPSync3=1711929600%3A263_262_261_260_259_201%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_250_166_3_104_165_54_71_220_21%7C1711324800%3A15_223; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; SPugT=1710778935; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; PugT=1710778934
2024-03-18 16:22:16 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Mar 2024 02:26:15 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1710728775; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 02:26:15 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-18 16:22:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.4	50071	104.21.82.186	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:16 UTC	897	OUT	GET /rtgbannerimage/2024-03-11-0723162901024.png HTTP/1.1 Host: cdn.2trk.info Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
2024-03-18 16:22:16 UTC	1106	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:16 GMT Content-Type: image/png Content-Length: 126615 Connection: close X-GUploader-UploadID: ABPtcPqGl3v8dQV-W0M8-hSu5sO6gsS7DFLKgEe67j8S0zuVUdodJaE-1pch5D-NrgVgOx8WT6k_k5Sjmg x-goog-generation: 1710141796366109 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 126615 x-goog-hash: crc32c=9Di5HQ== x-goog-hash: md5=pbrMfHOb6Ddb3yWhj4g90A== x-goog-storage-class: STANDARD Expires: Mon, 18 Mar 2024 05:09:56 GMT Cache-Control: public, max-age=172800 Last-Modified: Mon, 11 Mar 2024 07:23:16 GMT ETag: "a5bacc7c739be8375bdf25a18f883dd0" Age: 43940 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6n9Vh%2BAPSt%2B8pRCCURx7hB8tnNW7eSnVuMNrOll7BbJDnD9xI1Dc%2Fwadd%2Fw6JXCJIEjzqkCEUSfKeuke2qxK4sJbolTi1AobcQ2A%2FRR4NpsFcM5q4LYaR5W%2BdljkI6st"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f81ca881986-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:22:16 UTC	263	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 00 00 00 00 5a 08 02 00 00 00 a9 25 b3 56 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 66 33 35 34 65 66 63 37 30 2c 20 32 30 32 33 2f 31 31 2f 30 39 2d 31 32 3a 30 35 3a 35 Data Ascii: PNGIHDRZ%VtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:5
2024-03-18 16:22:16 UTC	1369	IN	Data Raw: 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 Data Ascii: "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:Cre
2024-03-18 16:22:16 UTC	1369	IN	Data Raw: ab 1b 89 4f 43 65 15 93 b2 33 88 83 c8 e7 3e eb ef e9 56 0e cf 92 6c d0 0f 65 59 8f b6 52 bf 1b cc ef 5b 74 74 bd fe e2 46 ba 91 c3 d0 d4 ae d0 52 ab aa 59 58 e9 33 d7 dd 7c 75 18 c6 81 6e 9c f1 da 10 46 b1 17 47 f1 82 1f 76 5c 97 f9 30 a0 b2 bc 80 47 7b f0 f2 bd e3 69 55 a4 15 0c 71 ad 9a e1 5a 09 e3 62 e5 e0 a0 bf 37 c8 b3 72 b2 51 5c 71 73 5f 78 f1 89 67 f3 cd 57 47 8e f6 3a 83 68 b0 1c 85 f3 75 59 55 d9 28 28 27 03 25 4d 4f 32 1d 0f 26 10 e6 05 0c 06 a3 c3 61 dc a9 aa a0 69 c1 67 0e 75 30 fa 18 76 3b d7 e3 d0 7b ab 12 a6 18 18 e9 22 ea ba f0 b1 a6 92 4d 0d 3d 1f fa a4 53 e6 2a 9d c2 15 69 cf 63 61 d7 f5 02 57 62 3f 84 26 84 e1 0b 1d 88 b9 0c e7 27 e8 71 d0 93 a0 23 d1 40 c4 77 60 9e 82 7f 6c 57 6f e0 d9 52 6f 17 d0 ed da a1 84 a3 50 d0 c7 f0 2d 85 2f Data Ascii: OCe3>VleYR[ttFRYX3\|unFGv\0G{iUqZb7rQ\qs_xgWG:huYU(('%MO2&aigu0v;{"M=S*icaWb?&'q#@w`lWoRoP-/
2024-03-18 16:22:16 UTC	1369	IN	Data Raw: 8d 5c 17 55 3e ce 61 94 c1 c9 c3 5e b8 7a f9 f2 fc d2 c0 d3 02 38 0a 9c 47 08 77 69 79 09 e0 d4 f6 da 64 b2 55 94 59 53 a7 15 34 f2 f2 ea 9c ac d5 64 33 01 ba 05 70 e9 cc 4b 49 96 14 9d 01 2e de 35 90 63 56 a5 13 80 ff 30 0b 78 4d 19 18 ca ab 08 9a c1 13 c5 21 61 a1 16 90 1d 5d 57 08 a1 11 b1 10 2a 84 01 ce 5a 20 0c 9c ae 46 02 a0 fd 80 63 2f 6a 74 03 5c ac 6e 34 75 39 c4 fa 0d 40 52 16 84 40 2a 38 05 20 cc 50 a3 69 46 d1 30 53 8a 60 84 b6 ff 43 b0 03 30 93 ef 70 6c ce da be 47 28 84 1e 03 b1 4e 04 99 88 9f 15 75 59 45 33 9d 23 f1 8f f0 13 e2 1b c3 8e 5b d6 8c f7 a3 f0 78 c2 0e 4f 84 38 88 55 1d a2 c3 38 6d 22 a8 44 d4 84 f1 14 04 4c ba e5 11 cc 8e 1d 9c 12 b1 e7 c0 29 99 99 24 70 ca 14 8e 81 5f 66 aa 40 88 ae 09 3f 6a 64 0d a6 d7 c0 0d 73 17 4e 44 67 67 Data Ascii: \U>a^z8GwiydUYS4d3pKI.5cV0xM!a]WZ Fc/jt\n4u9@R@8 PiF0S`C0plG(NuYE3#[xO8U8m"DL)$p_f@?jdsNDgg
2024-03-18 16:22:16 UTC	1369	IN	Data Raw: b4 30 70 e8 aa 1c 6d 53 69 30 e5 60 97 43 28 2d 09 50 9a 49 50 9b b0 b5 1d 2f d8 99 35 71 01 1a c2 04 07 b5 f9 8c 60 8a c2 f5 74 34 dd 30 03 63 cd f7 6c d0 5d 19 ac 6d 3b 3c c2 66 c2 95 bb 00 0c 71 22 ec 94 76 8a 60 8a c0 31 06 60 4c d8 1b ee 13 fa 0f 81 4f 1c 4e 9a 10 1e a0 62 fc 30 47 1e 8a 60 8a 13 a7 21 5e 42 10 97 be 86 ff e0 28 54 c4 24 a4 a1 3d e6 90 dc d2 12 ca 67 00 00 26 2c 0c e3 84 6b 98 9c 01 2e ba 88 1a f1 21 21 42 b6 71 67 46 01 5d e2 23 c8 b1 35 31 77 2e 75 33 9b 12 b0 4b 18 8e 67 d2 09 06 53 6b 93 ca e0 d4 07 ec 43 33 79 06 fc 1c 97 c2 c3 99 c0 e5 92 11 6d c2 bc 22 f6 2c bc 13 9a 13 88 54 c2 53 47 5e d6 e2 7d 62 6b da 92 a4 19 ac 65 c4 f5 a8 0b e0 73 95 33 88 49 9c 8b 66 d0 19 a4 23 76 aa 11 8b 13 b7 d3 ac 85 af 78 4c e9 cc a2 d6 9a 1b 36 Data Ascii: 0pmSi0`C(-PIP/5q`t40cl]m;<fq"v`1`LONb0G`!^B(T$=g&,k.!!BqgF]#51w.u3KgSkC3ym",TSG^}bkes3If#vxL6
2024-03-18 16:22:16 UTC	1369	IN	Data Raw: 06 5f 29 a6 cc 0d 92 a3 bc 01 81 72 0c 6d 0b a7 c1 d8 b4 32 72 21 8d 27 82 16 17 2e 0a bd 5c e0 1b 30 8a f1 d4 0e 25 78 08 b1 2a 54 c7 08 92 e3 38 14 ec 57 44 f2 cc a3 a4 2c 13 3d 13 cb 28 94 89 76 73 6a 17 6a 07 c3 fb 14 cd 2c 84 ff b0 23 12 95 23 b9 8e 61 81 28 cc 62 d4 4a 56 29 85 09 12 4a 18 39 94 c2 b2 a8 11 3a 15 5e 3d f6 32 61 02 e7 94 be 41 ae d6 62 71 5d 63 76 c3 a8 7c 34 41 7a c7 10 08 58 48 1d a3 f9 c1 d5 95 78 1c a3 0b b3 7d c2 a0 72 ec e8 d8 de 82 59 16 c4 0c 97 44 35 96 a6 c7 8e 2d 0b b3 0c 3d 15 38 b3 10 04 ed b9 60 56 a7 63 6e 0e bb 31 76 45 8a aa 10 75 21 ba 81 b1 23 41 82 1f ce 6d a7 35 78 7d 16 1e 57 96 59 d2 69 b5 25 bf 8a 44 42 78 b7 12 7f d6 b6 23 90 f4 cb 22 6d 41 17 ea b4 84 d9 1c b9 0d 81 11 77 e0 92 d2 09 26 f6 6f e4 49 76 fe e7 Data Ascii: _)rm2r!'.\0%x*T8WD,=(vsjj,##a(bJV)J9:^=2aAbq]cv\|4AzXHx}rYD5-=8`Vcn1vEu!#Am5x}WYi%DBx#"mAw&oIv
2024-03-18 16:22:16 UTC	1369	IN	Data Raw: 9e 4a 11 a0 57 54 08 a1 48 a8 43 5d 0d 15 56 a8 5f 53 04 8f 11 7b 4b 64 26 8c 02 00 c8 34 25 6a 53 91 ae b9 b6 76 0b 9f 16 74 66 ac 63 31 cc a3 2d de a0 30 3b e6 d3 34 d5 19 71 49 54 03 e5 6d a6 e4 84 32 4f 84 e7 e1 ff 53 cf e4 36 dd e5 d8 a4 0d 8d 2c 62 11 c4 38 88 2e 51 b5 1f 5e 11 71 14 33 28 e0 5d 61 64 40 a4 df 01 32 83 c7 24 fd 97 29 6e 51 26 72 8f 37 87 b7 45 62 21 c3 68 29 f8 cf 2d e5 d5 6a 26 f2 6c 6b 32 14 b5 0b 51 3b e8 6c c4 57 0c 07 62 36 3f 62 13 c2 6d 71 90 b6 59 b5 9d 64 00 db ad cd b9 40 22 fb 82 80 9c 9d a5 ea b1 25 3f ed 39 fe 87 5f fa 22 ec bf f8 7a 9d 66 00 e6 0f f4 65 51 e0 9a 96 d5 b4 42 3b 58 80 98 4b 59 35 b0 f0 2b 23 93 6c 70 25 26 c4 a6 6b ac 81 44 cc 8f 62 21 0c 89 32 bf 07 18 00 20 38 13 be 00 fc 07 ec 01 3e d5 94 12 a3 22 15 Data Ascii: JWTHC]V_S{Kd&4%jSvtfc1-0;4qITm2OS6,b8.Q^q3(]ad@2$)nQ&r7Eb!h)-j&lk2Q;lWb6?bmqYd@"%?9_"zfeQB;XKY5+#lp%&kDb!2 8>"
2024-03-18 16:22:16 UTC	1369	IN	Data Raw: 2e 20 01 fa bb 65 00 ce 2d 03 b8 48 05 2e be 5e 2f 04 60 f9 c0 bc d3 d4 54 85 86 ff 49 c0 48 15 ae 35 36 66 84 c6 05 b6 76 13 a3 47 00 53 ea 06 60 3d ce 8b 3e f3 3a 22 58 f4 3b 4b 51 d4 77 bd 18 95 85 40 0e ea b4 f6 98 41 f0 8e 1f ba 61 4f c8 0a 20 85 13 74 3c e6 bb eb eb 69 59 ca c8 c5 1c b4 70 1d 3f 72 23 00 64 1e f7 03 80 6d 0a 65 cd 24 85 c4 75 17 c3 a2 4c 3a ee de 7d f1 f6 76 3a 19 01 21 d1 b2 a8 cb 04 eb 3e 65 89 b9 69 3f f6 34 26 d9 51 36 c0 cd 72 db 28 4a 80 37 92 a9 ee 62 14 c6 fe 78 ab 28 d3 06 b0 11 7c 65 ba 59 02 13 d0 d2 56 35 f9 b1 88 e6 3d 11 08 cf e7 f9 b0 f4 50 aa 0e 60 4b c2 ac 96 17 f9 81 fd 97 7c f4 3d ef e7 de e2 3b ee fe 26 4f e6 e9 68 c8 00 d4 f5 7b 36 59 6f 8d 29 74 ab 9b 3f 0b d7 ee 8e b5 cf 8a ba ce 81 d6 af 95 16 38 5b 17 64 89 Data Ascii: . e-H.^/`TIH56fvGS`=>:"X;KQw@AaO t<iYp?r#dme$uL:}v:!>ei?4&Q6r(J7bx(\|eYV5=P`K\|=;&Oh{6Yo)t?8[d
2024-03-18 16:22:16 UTC	1369	IN	Data Raw: ae 4b f6 8e d5 ea ea a1 ef 7b ff 07 24 9b 7b f7 3b df e6 cb 74 6b 6d 0d 3e 18 f5 fb 9c 96 47 46 0e 79 fa ec 40 f8 f9 21 ff b3 fc 76 ce 2e b7 7d 4d 51 10 3b ab 12 a9 75 cb 43 98 54 24 a3 a7 1e 7d 70 61 69 df de 7d 2b 98 d7 e6 6e 99 0d 47 db a7 a3 28 36 da 4e 0a 29 d9 dc bf 52 36 5e 08 6f 95 45 b6 b6 3e 3c 72 e5 55 8c e9 f3 99 c6 cc 9c 67 37 07 d8 2d fa 37 f1 53 38 4e 5d 95 4f 3e f1 fc 68 5c 3d f8 c8 e3 47 2e 3b c0 6c ad c0 2c 80 ef 18 9b 0c c0 b2 75 2d fd 00 4d 7b 28 a1 ac 01 73 96 25 8a f3 03 4c 5c 38 b3 40 ed 4e c9 01 b3 10 cc 56 30 d0 6d 00 85 50 e8 7a 8a 89 a0 b8 3b 98 eb 2d 01 57 bb f4 c0 65 37 5e 79 cb 68 bc f9 d4 b3 4f 4e 46 a9 6e 74 95 03 0e 72 ba d0 08 8e 93 e7 65 10 06 18 56 cf 9b 3a d7 4e 23 80 d0 16 4d 55 c9 1a 96 d8 c0 85 55 10 7a 58 e0 c1 a1 Data Ascii: K{${;tkm>GFy@!v.}MQ;uCT$}pai}+nG(6N)R6^oE><rUg7-7S8N]O>h\=G.;l,u-M{(s%L\8@NV0mPz;-We7^yhONFntreV:N#MUUzX
2024-03-18 16:22:16 UTC	1369	IN	Data Raw: 68 f5 ac ad 00 ce b6 24 3a df 93 d4 ac 31 c0 cc 4e 9e 59 ab 93 8d c1 60 b4 30 27 c3 30 2c 8b c2 38 fa 69 66 70 9b f5 49 09 e2 30 9d a4 45 59 c4 9d 98 19 8b 43 ed f4 fb dd 8d 8d ad 06 d0 39 4a b7 d9 2e 11 74 2b 47 90 b6 3e c0 1a 21 52 5a 07 a0 67 05 3c ae 28 c3 10 bd 30 9b 12 60 6d de 0b a2 f7 dc f9 2d eb a7 47 9f fd f2 17 30 01 cd 6a 2f 10 a9 0f 44 40 35 ac 62 6e 54 a5 f5 74 58 00 52 0c 7c 96 a5 f0 b0 1b 1e c2 5a e5 39 92 37 85 cc aa 14 a0 97 1f 8a ba ac 55 03 7d 58 e4 49 8a 6a 04 a6 12 60 95 80 a4 95 53 8d 1c 5d 53 65 9e e7 5f 7f e5 a5 f5 28 dd df ef f8 9e 80 8b 19 65 e5 99 51 5a d7 da 77 79 3f 0a e6 3b 91 d4 ee 81 b8 5a 59 ff 72 71 e6 e1 92 2d 84 73 47 56 0e df 92 6c bf d2 d4 db db db 23 e5 4f 30 e2 8e 70 01 06 1b 0c 9c 10 08 c0 68 9c 3c f1 f0 53 d9 56 Data Ascii: h$:1NY`0'0,8ifpI0EYC9J.t+G>!RZg<(0`m-G0j/D@5bnTtXR\|Z97U}XIj`S]Se_(eQZwy?;ZYrq-sGVl#O0ph<SV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.4	50069	198.148.27.131	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:16 UTC	1061	OUT	GET /bh/rtset?ev=AAARQ07L8NQAABPzJYe3uw&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D8457389007004702379%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dsyn%252Cpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3&gdpr=0 HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: V=x5v74EUGBRIZ; pb_rtb_ev=3-1qaz\|7dW.0.1; INGRESSCOOKIE=d91942d279e46aae
2024-03-18 16:22:16 UTC	1080	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-cd74fc47c-vb6w9 Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: V=x5v74EUGBRIZ;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Thu, 13-Mar-2025 16:22:16 GMT;Max-Age=31104000;SameSite=None Set-Cookie: pb_rtb_ev=3-1qaz\|7dN.0.AAARQ07L8NQAABPzJYe3uw\|7dW.0.1;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Tue, 18-Mar-2025 16:22:16 GMT;Max-Age=31536000;SameSite=None Location: https://match.prod.bidr.io/cookie-sync?gdpr=0&userid=8457389007004702379&gdpr=0&gdpr_consent=&bee_sync_partners=syn%2Cpm&bee_sync_current_partner=pp&bee_sync_initiator=adx&bee_sync_hop_count=3&ev=AAARQ07L8NQAABPzJYe3uw&pid=558502&do=add&gdpr=0 Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.4	50065	172.67.161.117	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:16 UTC	4972	OUT	GET /rtgbannerimage/2023-11-10-042550749ecoflow.png HTTP/1.1 Host: cdn.2trk.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtgcloudsql.2trk.info/rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%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%3D%3D%253Bdurl155%3D::scm0=bid_~CM.64180~SZ.970~TS.pdx~dv.3~BI.110886972959~DI.~ST.25_::exch=pdx::bS=49a8ccc8-4e10-415f-b3cc-85fda009ccda::bamt=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q::ppid=::btm=1710778934359::mid=CAESEO4xid7o8uR9EnVbRe87Nek::cl=::geo=USA::ref0=https%3A%2F%2Fbrowser-update.org::pageID=937680203::dT=OA::mode=ifrme::devid=3::r1=100::label=default::as=4::winprice=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q::bt=1::ul15= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
2024-03-18 16:22:16 UTC	1096	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:16 GMT Content-Type: image/png Content-Length: 6678 Connection: close X-GUploader-UploadID: ABPtcPoqDNFBw-E2YHlG406wGut3tX8Hvsr-A9y1eiw0PkOrtO5y49sHjCEflm08Dj9TyxlhT9_A4lodYA x-goog-generation: 1699590350836768 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 6678 x-goog-hash: crc32c=AAVxTQ== x-goog-hash: md5=gPAiLHJQzFK5gSqbKd/aNA== x-goog-storage-class: STANDARD Expires: Mon, 18 Mar 2024 05:09:48 GMT Cache-Control: public, max-age=172800 Age: 43940 Last-Modified: Fri, 10 Nov 2023 04:25:50 GMT ETag: "80f0222c7250cc52b9812a9b29dfda34" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XyajeSLPjv6tfg8NuDIrTzskji%2B7nfrII79vVnHScMwRqdSW4SlBSsSvvwDlVFFMmj9TaepVWUP0uBsAp85i8gPBeaDSGBM%2F3wsC0mbeOEMO8CnUpbqB4B3YlDMhoP%2BF"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f81cbb00cae-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:22:16 UTC	273	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 25 00 00 00 4a 08 02 00 00 00 72 d0 d5 1b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 61 38 64 34 37 35 33 34 39 2c 20 32 30 32 33 2f 30 33 2f 32 33 2d 31 33 3a 30 35 3a 34 Data Ascii: PNGIHDR%JrtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:4
2024-03-18 16:22:16 UTC	1369	IN	Data Raw: 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 Data Ascii: DF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="
2024-03-18 16:22:16 UTC	1369	IN	Data Raw: 32 9a 34 9b 18 8a d7 75 75 75 b5 b5 b5 5d bf 7e 7d fe fc f9 e1 11 e1 4b 97 2e 5d be 7c f9 86 9f 6d 88 8d 8d 0d 08 08 70 b2 ea e4 ba c9 45 18 4d bc 02 3f e4 85 eb 10 c9 6f a5 79 9e cd 6f 9e 80 de 68 5e b8 e8 24 3e 6d 36 9b cf 5f 38 7f f2 e4 c9 0b 05 17 6a 6b 6a 07 07 06 b1 8e 63 9f 27 6e 68 e1 1b 66 75 fc fa 68 ca c1 ab 9a da 9a 53 a7 4e e5 9f ce 2f 2a 2a 6a 68 68 b0 69 24 b5 b9 30 34 6e 21 2e e5 37 c7 0f 4f 22 60 6f b2 23 36 26 96 38 2d c4 1e c3 08 36 2b e3 27 7c 9b e2 13 af c7 34 82 de 60 c7 68 3d 8b 94 a3 3d 8d 8d 8d c5 57 8a 8f 1f 3f ae 8d 66 6d 2d a1 d3 60 33 d8 34 17 18 bb 61 7c 00 fb f3 5d 6f 1f ef a0 e0 a0 c4 84 44 e8 b7 69 e3 a6 15 2b 56 84 85 85 4d 4b c3 34 77 b2 59 0d 56 83 93 63 8c c7 37 8f eb 49 a2 8b 27 ac 2f 57 26 3f 8c 47 18 fa c6 f0 1c ff Data Ascii: 24uuu]~}K.]\|mpEM?oyoh^$>m6_8jkjc'nhfuhSN/**jhhi$04n!.7O"`o#6&8-6+'\|4`h==W?fm-`34a\|]oDi+VMK4wYVc7I'/W&?G
2024-03-18 16:22:16 UTC	1369	IN	Data Raw: 55 95 95 15 95 9d 9d 9d a2 67 90 ac 4f 3e f9 24 d5 97 3e 89 aa d7 09 4e b8 37 cd 65 b5 e2 1c bf 79 f5 37 db 77 6c 0f 09 0d 81 6c 7c 85 5c 47 7d 4f 8d 37 b9 a9 ad 87 00 d4 e1 57 4a af f0 93 b8 c9 90 a1 1b 77 3e ba 73 f7 93 bb a9 be 46 47 1c e3 38 a0 0a c8 c8 c8 f8 fd 9b bf 4f 4b 4b 83 84 10 8f 2f 96 97 97 93 fa 30 ac 3e cb 32 19 be 19 3c 9e 1b dd cb 6f 53 9f 02 72 0b 03 03 03 2d 2d 2d 57 af 5e c5 f5 e5 ee 18 9a 08 17 17 17 27 8b 8f d3 32 b5 ed c4 b7 be 1f fa 6a af d6 f6 f4 f6 40 1b bb 9e 37 6c da b4 89 d2 42 54 eb 44 d6 1e c4 4a 7c 00 89 b8 6e ed ba aa ca aa a6 c6 26 3c 83 d8 61 6e 31 53 dd cd 9b 37 8f c2 cf e9 52 1e cd 3f 8e 17 9f c5 44 87 98 24 db 63 07 e2 11 62 72 61 d0 c2 27 76 3d 81 3e 84 42 da 3b 3f da cd 75 23 19 05 2a 67 14 04 e3 42 f0 22 32 f2 61 Data Ascii: UgO>$>N7ey7wll\|\G}O7WJw>sFG8OKK/0>2<oSr---W^'2j@7lBTDJ\|n&<an1S7R?D$cbra'v=>B;?u#*gB"2a
2024-03-18 16:22:16 UTC	1369	IN	Data Raw: 40 86 64 68 6a 6c ba 74 e9 12 21 95 37 dd ba a0 cc 30 f1 dd eb d7 af cb f5 51 aa 9a d1 c2 c2 1f 70 be 99 dc ed a7 e7 60 73 80 9e 6a e0 5b 5c 7c dc 82 c0 05 5a dd 6f b5 95 95 96 15 5e 2e 24 e1 38 6e 72 9b 5e 5f 41 ef 25 27 25 73 47 d9 35 0b f2 f3 f3 8b 8a 8b 7a 7b 7b dd 15 3c e8 a5 73 e7 ce 11 23 64 eb 19 34 0b 5b 14 96 10 9f 30 7a 1b bb d3 16 50 0a 1b d9 14 26 87 88 a7 68 55 c3 4f b7 68 8e b9 fc 38 c1 73 f1 53 ac 1d a0 44 d2 b2 24 99 54 44 ad 74 74 74 1c 3e 72 98 34 45 7f dd ba 1a 64 ab a9 a9 39 73 fa 4c 5d 5d 9d 5c 1c 3f 89 89 89 21 48 4d 7d 0e c6 b5 53 4d d1 d9 bc 1f 28 f6 8f de 9f c5 d8 ac 5e bd ba bc bc bc b1 a1 51 2b 91 07 87 18 21 5f 3f df d7 ff eb f5 c0 c0 40 5d 8b 3a 6f 27 77 69 17 a7 b5 72 a7 88 48 56 49 4b 4d e3 2f d1 b7 b5 a5 15 d6 31 b4 87 fe Data Ascii: @dhjlt!70Qp`sj[\\|Zo^.$8nr^_A%'%sG5z{{<s#d4[0zP&hUOh8sSD$TDttt>r4Ed9sL]]\?!HM}SM(^Q+!_?@]:o'wirHVIKM/1
2024-03-18 16:22:16 UTC	929	IN	Data Raw: ab b3 b5 2d f6 38 b1 97 d1 0b 3f ae ad ae a5 6b 5e de 5e 53 cc 6f b8 e9 96 cd 5b f2 fe 2d cf a9 bf 5a 51 6a ff e7 9e 67 f7 40 a7 11 eb 08 42 7d 70 60 90 4c 25 21 8f 30 4a aa 41 bf e8 cf 0b 12 5f e7 93 da d4 d1 b0 55 24 8c 24 3d 6f 1f ef ad 8f 6c dd 9b b7 f7 91 ad 8f c8 8a 82 6b 39 20 47 10 cd 2d 66 39 01 f0 13 d3 db 1f 43 44 e8 d1 f9 76 fe fc f9 cb 97 2f 6b f1 d7 f0 93 63 af da ae 34 dc cf ae 27 e5 91 53 ae 67 9b a7 c4 b7 ee ae 6e 4f 14 12 f4 10 f5 ac 49 af 71 0e 4d 13 42 50 0b 8f 3f f6 78 d0 c2 a0 ef 4f 7c 7f e1 fc 05 02 a4 3c 2d 50 26 f1 0c 6e 9e 18 c0 88 5c 93 91 96 93 a0 e3 2d 0c 2c 4f 5b 4e ec 4c 4e 4a 3e 73 f6 cc 95 2b 57 08 81 b2 3e 2b cf 2a 1c 7b 9f 94 cd 20 be 32 c7 7f 4e 54 54 d4 da b5 6b 37 6f de 8c 92 84 6c e3 0d 8c bd 80 98 e9 59 6c 52 07 5a Data Ascii: -8?k^^So[-ZQjg@B}p`L%!0JA_U$$=olk9 G-f9CDv/kc4'SgnOIqMBP?xO\|<-P&n\-,O[NLNJ>s+W>+*{ 2NTTk7olYlRZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.4	50070	104.21.82.186	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:16 UTC	5164	OUT	GET /imageresize?url=width=336::height=336::imgurl=https%253A%252F%252Fcdn.shopify.com%252Fs%252Ffiles%252F1%252F1996%252F9707%252Ffiles%252Fecoflow-us-ecoflow-portable-camping-chair-30383581397065.png%253Fv%253D1689747202::campaignId=64180 HTTP/1.1 Host: rtgcdn.2trk.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtgcloudsql.2trk.info/rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%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%3D%3D%253Bdurl155%3D::scm0=bid_~CM.64180~SZ.970~TS.pdx~dv.3~BI.110886972959~DI.~ST.25_::exch=pdx::bS=49a8ccc8-4e10-415f-b3cc-85fda009ccda::bamt=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q::ppid=::btm=1710778934359::mid=CAESEO4xid7o8uR9EnVbRe87Nek::cl=::geo=USA::ref0=https%3A%2F%2Fbrowser-update.org::pageID=937680203::dT=OA::mode=ifrme::devid=3::r1=100::label=default::as=4::winprice=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q::bt=1::ul15= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
2024-03-18 16:22:16 UTC	925	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:16 GMT Content-Type: image/jpeg Transfer-Encoding: chunked Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Cache-Control: max-age=604800, public Expires: 604800 Default-Img: no X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: unsafe-url Via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LLgTecZSYzZFZLnSvSLrcScPw0jfJ%2BFLVq3lH5USOk02YAa3Qz5zamdeqvlLkw9fYQ%2B%2B8L2ofH7jpI20BYxf0Vt5WKKqijP%2BgDK2RGdTQSP3Us%2BQsD1SCTSBJzaO60Q3R7OJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f837ba5443e-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:22:16 UTC	444	IN	Data Raw: 31 66 35 39 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 01 50 01 50 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 1f59JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222PP"}!1AQa"q
2024-03-18 16:22:16 UTC	1369	IN	Data Raw: 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f7 fa 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a Data Ascii: w!1AQaq"2B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?(((((((((((((((((
2024-03-18 16:22:16 UTC	1369	IN	Data Raw: 81 d7 14 92 c3 9c ed 15 0e f2 23 64 7e 0e 38 cd 00 47 1b e1 b2 7a 28 26 bd ff 00 e0 bd 80 b3 f8 77 05 c0 90 b1 be b8 96 e0 8f ee 73 e5 e3 ff 00 21 e7 f1 af 9f 09 d9 14 ac 7b 2d 7d 47 e0 3b 64 b4 f0 0e 83 12 63 06 c6 29 0e 3d 5d 43 1f d5 8d 02 67 45 45 14 53 24 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 2a 3b 8b 88 ad 2d a5 b9 9d c4 70 c4 86 49 1c f4 55 03 24 fe 55 25 72 1f 14 35 17 d3 3e 1e 6a 92 45 32 c7 2c ca b0 2e 71 97 0e c0 32 8c f7 29 bb f5 3d a8 03 e7 19 e7 92 ea 77 9a 57 2f 2c 8c 5d d8 f5 66 3c 93 f9 d4 07 3b b3 8c 10 29 e5 4f 52 78 c7 6a 4f f5 64 73 94 ed 48 b2 68 a4 38 eb 56 52 41 55 31 c6 45 2e e6 1d e8 02 fe d5 23 3f ca Data Ascii: #d~8Gz(&ws!{-}G;dc)=]CgEES$((((((((((((((*;-pIU$U%r5>jE2,.q2)=wW/,]f<;)ORxjOdsHh8VRAU1E.#?
2024-03-18 16:22:16 UTC	1369	IN	Data Raw: 44 58 6f 23 0c d3 46 57 07 2c c4 8e 7f 88 85 c0 ce 4f 00 74 ae be b9 9f 0f 58 78 8e 3d 42 e2 6d 71 74 a8 e0 50 3e ca 96 12 48 ed df 77 98 5d 46 7b 63 02 ba 6a da 0e 56 f7 f7 30 9f 2d fd d0 a2 8a 2a c9 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 ae 03 c7 1f 12 1b c2 ba 97 f6 6d b5 84 77 17 0d 6e b2 89 5e 5c 04 24 b0 00 a8 19 3d 01 ea 3a d0 07 7f 45 7c f1 a9 7c 51 f1 4d f9 90 2d f2 da 44 e3 69 8e da 30 bb 7e 8c 72 c3 f3 ae 42 ee ee e2 fa e9 ae 2e e6 7b 8b 87 c1 69 64 3b 99 b0 38 c9 3c f4 a0 76 3e b6 ae 53 e2 46 aa ba 4f 81 35 29 18 80 67 8f ec e3 72 16 18 7e 18 e0 7a 26 e3 f8 7e 15 f3 c4 9a a6 a5 3a 85 6b db a6 50 31 86 98 91 8f ce b3 a5 47 6c 97 6c 93 eb 40 58 f7 9f 82 3a 5f Data Ascii: DXo#FW,OtXx=BmqtP>Hw]F{cjV0-*(((((((((((mwn^\$=:E\|\|QM-Di0~rB.{id;8<v>SFO5)gr~z&~:kP1Gll@X:_
2024-03-18 16:22:16 UTC	1369	IN	Data Raw: 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 57 cc f6 1a c3 24 3e 34 f1 0b b0 59 ef 22 fb 22 c4 10 b0 26 e5 cb be 3d 30 91 be 32 7a e2 be 88 d7 af 25 d3 fc 3b a9 de c3 8f 36 de d2 59 53 3d 37 2a 12 3f 51 5f 27 d9 da b6 a9 79 6f a5 5a b9 fb 4d e5 da 45 87 62 23 24 90 10 9c 77 05 8f af 06 80 3d cb e1 07 86 20 8f c0 17 13 5f 40 92 1d 65 9f cd 52 0a ee 88 65 02 91 f5 de c0 8e cc 2b 96 d2 26 9f e1 67 8f 6e 6d 2e dc b6 9d 22 83 3c be 51 66 9e db fe 59 c8 00 c1 2d 11 2d bb 01 be 5f 33 fb 8b 5e df 63 67 0e 9d a7 db 58 db 82 20 b6 89 61 8c 13 92 15 40 03 9e fc 0a e6 7e 20 f8 55 fc 49 a1 ac b6 60 0d 56 c4 99 ad 09 c6 18 f1 b9 08 3c 10 c0 0e bc 64 0c f1 9a 00 eb 81 04 64 1c 83 45 79 b7 c2 df 13 c5 35 94 5a 0c cf b4 24 6d 26 9e 24 2c 5f cb 56 21 e0 62 72 0b 44 Data Ascii: QEQEQEQEW$>4Y""&=02z%;6YS=7*?Q_'yoZMEb#$w= _@eRe+&gnm."<QfY--_3^cgX a@~ UI`V<ddEy5Z$m&$,_V!brD
2024-03-18 16:22:16 UTC	1369	IN	Data Raw: e6 be 8f ae 53 e2 4d dc 96 7e 00 d5 1e 29 44 52 48 a9 10 27 b8 67 55 61 f8 a9 6a 00 e3 fe 07 5a c8 2d f5 bb d6 8b 6c 52 49 14 2a de ac 81 b7 0f c9 90 fe 35 63 e3 76 a8 f1 e8 9a 76 8d 11 90 1b c9 cc b2 95 50 cb b2 3c 60 3a 9e c5 dd 0f a7 cb f8 56 af c1 eb 16 b5 f0 14 73 b4 9b cd e5 c4 93 e3 1f 77 04 46 47 e6 84 fe 35 c3 6b c2 3f 1a fc 6a 4b 2f dd cb 6f 6d 2a da 11 f3 46 c1 23 c9 94 67 bf 26 6c 11 e8 3a 75 20 1e a7 e0 3d 1c 68 7e 0c d3 ad 4c 61 25 78 fc e9 7f 77 b1 b7 3f 38 61 d7 20 10 bc ff 00 77 b7 4a e9 28 a2 80 38 bf 1b f8 02 db c5 11 0b ab 46 4b 5d 4e 3e 92 ed f9 65 1e 8d 8f d0 d7 84 78 8b 4c bf b4 d6 a6 8f 50 46 4d 45 5b 6d c0 63 fe b0 11 c3 e7 b9 e8 73 fc 5d 7a e7 3f 55 d7 2f e3 8f 0b 5b f8 8f 42 b8 64 b4 8e 5d 4a 18 8b 5b 3f 46 24 73 b0 36 46 37 63 Data Ascii: SM~)DRH'gUajZ-lRI5cvvP<`:VswFG5k?jK/omF#g&l:u =h~La%xw?8a wJ(8FK]N>exLPFME[mcs]z?U/[Bd]J[?F$s6F7c
2024-03-18 16:22:16 UTC	744	IN	Data Raw: 9b 00 32 71 fe b0 03 90 24 5c b7 2b aa cd ab 78 57 e2 14 be 27 4b 48 08 b9 96 69 b4 e7 b8 1e 64 53 24 84 96 65 68 db 8c 23 8f 5f bd d3 d0 03 a0 f1 7e 7c 5d f1 56 d7 48 88 ef 86 39 12 dd cc 2f b5 c2 2e 4c 84 ee e3 23 32 76 fe 01 d7 bf b6 d7 88 fc 2b 98 5e f8 fa ea 7b f9 12 e6 ef ec 8d 24 2e 8a 25 03 71 52 c4 b8 3c 37 cc c0 e7 9f 99 94 90 46 0f b7 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 06 2f 88 bc 3d 6d ae c3 6e f2 42 8f 75 67 20 9a dd 9a 47 8f 0d dc 6f 42 19 73 81 c8 e8 40 38 38 c1 f0 ef 10 f8 7f c4 be 17 d3 e0 4d 5b 57 cd 8c e8 c6 1d 35 6e 65 64 0e 08 27 7a 81 b0 fc Data Ascii: 2q$\+xW'KHidS$eh#_~\|]VH9/.L#2v+^{$.%qR<7FPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEP/=mnBug GoBs@88M[W5ned'z
2024-03-18 16:22:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.4	50077	192.184.68.134	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:16 UTC	802	OUT	GET /dpixel?a=p-n5vvLvRdjg0ek&eid=0&qc_google_push=&google_gid=CAESEDf-KmwndYmbhC_Ghpb5Gk4&google_cver=1&google_push=AXcoOmS7sTLRMI21elo2udyioFfMgpvvI0jpl8qslBdZHSPKThPWGOxrxMhBej3iCkmZYxmVtIEhZnop-lyx36XbeYfviz-zJTw HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:17 UTC	614	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:17 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: d=EAABCQGzK4EA; expires=Sun, 16-Jun-2024 16:22:17 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Set-Cookie: mc=65f86a39-0bce5-d0ea9-092f1; expires=Fri, 18-Apr-2025 16:22:17 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400
2024-03-18 16:22:17 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 80 ff ff ff 00 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.4	50075	142.250.176.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:16 UTC	864	OUT	GET /pixel/attr?d=AHNF13LsgtITa1ARQP4Bcql4buMGdRN8PjreIfenlTdpv44smHX9eK0UJbBsU7b-uYmyi_yvHD63qobE HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:17 UTC	236	IN	HTTP/1.1 204 No Content Date: Mon, 18 Mar 2024 16:22:17 GMT Content-Type: text/html Server: HTTP server (unknown) Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.4	50073	23.22.53.123	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:16 UTC	1354	OUT	GET /dsp/google/pixelmatch?google_gid=CAESEEJnhmfcEjjoIgTpQqCQJfI&google_cver=1&google_push=AXcoOmRBhOkc4CQBijA_uVLMq63d_Hmzeiv428I6IxmXQKJNWikWpoFRWaBlWqXY3n_XtwSVeBsXHqLVjTbLAzJOf5ElQmIq4Ts HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv; ljtrtbexp=eJyrVrIwULIyNDc0tLSwMDU20FEysUTlW5ih8o0gfAMLIyNDMN8cIm9sYWxubFALAJvzEE8%3D; _ljtrtb_80=LTX5LRW4-V-IXJ1; _ljtrtb_49=x5v74EUGBRIZ; _ljtrtb_27=bbb7c0a8-9303-4b39-93f6-f187e79feaa0; _ljtrtb_86=o2HIxaEGHLyIlgWmC9QyNMFpZi0f4iDXPjTtqxL-O6g; _ljtrtb_26=2b28c092-dd0b-42bb-b143-c15d16fc69ab; ljtrtb=eJwVzl0LgjAYhuH%2FsuNe2ObcXIeVqbG%2BpFI826tOjKKCCCX6782zh4v74PkSLsmccORRTTWHpqEIgiMCMhFAzcKGSVdLbZHMiNC%2BHcKPEvE5WeRZ5Y0rb4ioamoj0AENQGCg%2FXISHItUq7RrraW%2BjahvzakMTV4IuEBWbtjE04UHT7PBxklqxuzWFfelPo677fpZ9dSJflUerqf3azCwlx35%2FQHGQTE3
2024-03-18 16:22:17 UTC	632	IN	HTTP/1.1 307 Temporary Redirect Date: Mon, 18 Mar 2024 16:22:17 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=sovrn&google_push=AXcoOmRBhOkc4CQBijA_uVLMq63d_Hmzeiv428I6IxmXQKJNWikWpoFRWaBlWqXY3n_XtwSVeBsXHqLVjTbLAzJOf5ElQmIq4Ts&google_hm=IV6WABZHUuoYlIO2Qzydeftv Set-Cookie: ljt_reader=IV6WABZHUuoYlIO2Qzydeftv;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.4	50074	185.184.8.90	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:16 UTC	857	OUT	GET /cm-notify?pi=adxab&google_nid=rtb_house_us&google_gid=CAESEIhasK4mZsNIs-PD6FQmJPo&google_cver=1&google_push=AXcoOmTzjEBi1UV2I9JJEaJ5_L5fTT7cQV3wrJO_tEzCFlCuhF1vKxhxfuayF9bBJaxUwoQYS9XXkK9qaut7R7bI6QVgRdtyQnL_ HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=m6imPN51sdhz90c02QSX_1710778931757; ts=1710778931
2024-03-18 16:22:17 UTC	620	IN	HTTP/1.1 302 Found date: Mon, 18 Mar 2024 16:22:17 GMT vary: Accept-Encoding location: https://cm.g.doubleclick.net/pixel?google_ula=5153224&google_hm=o2HIxaEGHLyIlgWmC9QyNMFpZi0f4iDXPjTtqxL-O6g&pi=adx&tdc=ams&pi=adxab&google_nid=rtb_house_us&google_gid=CAESEIhasK4mZsNIs-PD6FQmJPo&google_cver=1&google_push=AXcoOmTzjEBi1UV2I9JJEaJ5_L5fTT7cQV3wrJO_tEzCFlCuhF1vKxhxfuayF9bBJaxUwoQYS9XXkK9qaut7R7bI6QVgRdtyQnL_ cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Mon, 18 Mar 2024 16:22:17 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.4	50090	54.144.102.188	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:16 UTC	951	OUT	GET /cookie-sync?gdpr=0&userid=8457389007004702379&gdpr=0&gdpr_consent=&bee_sync_partners=syn%2Cpm&bee_sync_current_partner=pp&bee_sync_initiator=adx&bee_sync_hop_count=3&ev=AAARQ07L8NQAABPzJYe3uw&pid=558502&do=add&gdpr=0 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAARQ07L8NQAABPzJYe3uw; bitoIsSecure=ok
2024-03-18 16:22:17 UTC	634	IN	HTTP/1.1 303 See Other Date: Mon, 18 Mar 2024 16:22:17 GMT location: https://sync.technoratimedia.com/services?uid=AAARQ07L8NQAABPzJYe3uw&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D8457389007004702379%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&gdpr=0 Server: gunicorn set-cookie: bito=AAARQ07L8NQAABPzJYe3uw; Domain=bidr.io; expires=Thu, 17 Apr 2025 12:22:17 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.4	50081	35.208.249.213	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:16 UTC	819	OUT	GET /ju/cs/google?google_gid=CAESEH-4kttJFK0AGtozBUf4P8w&google_cver=1&google_push=AXcoOmTyRBsK4N-BKKXlOPXZO_jFsWo2S1ruc4RCcqcElEFn8xPp2T2l8ut_W689BpFYMZc2uFI9O_SDZHTE8cv3uV3BMYU4G3sG HTTP/1.1 Host: gtrace.mediago.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __mguid_=22210ca7211caf792c9xmt00ltx5lqro
2024-03-18 16:22:17 UTC	573	IN	HTTP/1.1 302 Found Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, POST, OPTIONS Location: https://cm.g.doubleclick.net/pixel?google_nid=baidu_mediago&google_push=AXcoOmTyRBsK4N-BKKXlOPXZO_jFsWo2S1ruc4RCcqcElEFn8xPp2T2l8ut_W689BpFYMZc2uFI9O_SDZHTE8cv3uV3BMYU4G3sG&google_hm=22210ca7211caf792c9xmt00ltx5lqro Date: Mon, 18 Mar 2024 16:22:17 GMT Content-Length: 8 Content-Type: text/plain; charset=utf-8 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:17 UTC	8	IN	Data Raw: 72 65 64 69 72 65 63 74 Data Ascii: redirect

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.4	50076	174.137.133.49	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:16 UTC	770	OUT	GET /sync?exchange=11&google_gid=CAESENkrspHNyMIhkYNinb2s-6U&google_cver=1&google_push=AXcoOmRHIuYnNYmsy0Z_gNPsNzwlvDtMNyUw7iNTqgOpZI5LrFyBaLnedgfLvobEkvt8An6sNNdFJGFu75PygYHMm5nDFaD-2Ng HTTP/1.1 Host: dsp.adkernel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:17 UTC	534	IN	HTTP/1.1 302 Found Server: nginx Date: Mon, 18 Mar 2024 16:22:17 GMT Content-Length: 0 Connection: close Set-Cookie: ADK_EX_11=1; Max-Age=1209600; Domain=.adkernel.com; Path=/; Secure; SameSite=None Set-Cookie: ADKUID=A6908930106712598961; Max-Age=2592000; Domain=.adkernel.com; Path=/; Secure; SameSite=None Location: https://cm.g.doubleclick.net/pixel?google_nid=adkernel&google_hm=QTY5MDg5MzAxMDY3MTI1OTg5NjE&google_push=AXcoOmRHIuYnNYmsy0Z_gNPsNzwlvDtMNyUw7iNTqgOpZI5LrFyBaLnedgfLvobEkvt8An6sNNdFJGFu75PygYHMm5nDFaD-2Ng

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.4	50072	35.236.220.17	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:16 UTC	805	OUT	GET /gp_match?google_gid=CAESELbKuSc0cZErEiQLazMlx3s&google_cver=1&google_push=AXcoOmTFNla6Hw2h9aKfvF63BybpjLoIszIEu_rWQibVbccfBDwBwo1WW40QV9L5rWgZLFRnkHVGid7aSs69DTzdjTuVRINES1g HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=D1B83109A4A44EA780D9F28ECD179B12
2024-03-18 16:22:17 UTC	762	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Mon, 18 Mar 2024 16:22:17 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=simplifi&google_hm=D1B83109A4A44EA780D9F28ECD179B12&google_push=AXcoOmTFNla6Hw2h9aKfvF63BybpjLoIszIEu_rWQibVbccfBDwBwo1WW40QV9L5rWgZLFRnkHVGid7aSs69DTzdjTuVRINES1g Expires: Sun, 17 Mar 2024 16:22:17 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-03-18 16:22:17 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.4	50079	142.250.81.228	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:16 UTC	1032	OUT	GET /recaptcha/api2/aframe HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-18 16:22:17 UTC	847	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Mon, 18 Mar 2024 16:22:17 GMT Date: Mon, 18 Mar 2024 16:22:17 GMT Cache-Control: private, max-age=300 Content-Security-Policy: script-src 'report-sample' 'nonce-fSbudfdMWGRNOYL-ViLTxQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-18 16:22:17 UTC	405	IN	Data Raw: 33 33 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 66 53 62 75 64 66 64 4d 57 47 52 4e 4f 59 4c 2d 56 69 4c 54 78 51 22 3e 2f 2a 2a 20 41 6e 74 69 2d 66 72 61 75 64 20 61 6e 64 20 61 6e 74 69 2d 61 62 75 73 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 20 6f 6e 6c 79 2e 20 53 65 65 20 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 20 2a 2f 20 74 72 79 7b 76 61 72 20 63 6c 69 65 6e 74 73 3d 7b 27 73 6f 64 61 72 27 3a 27 68 Data Ascii: 33d<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="fSbudfdMWGRNOYL-ViLTxQ">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha */ try{var clients={'sodar':'h
2024-03-18 16:22:17 UTC	431	IN	Data Raw: 2e 64 61 74 61 29 3b 76 61 72 20 63 3d 63 6c 69 65 6e 74 73 5b 62 5b 27 69 64 27 5d 5d 3b 69 66 28 63 29 7b 76 61 72 20 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 64 2e 73 72 63 3d 63 2b 62 5b 27 70 61 72 61 6d 73 27 5d 2b 27 26 72 63 3d 27 2b 28 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 72 63 3a 3a 61 22 29 3f 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 72 63 3a 3a 62 22 29 3a 22 22 29 3b 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 29 3b 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 72 63 3a 3a 65 22 2c 70 61 72 73 65 49 6e 74 28 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 Data Ascii: .data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("rc::a")?sessionStorage.getItem("rc::b"):"");window.document.body.appendChild(d);sessionStorage.setItem("rc::e",parseInt(sessionStorag
2024-03-18 16:22:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.4	50089	172.67.161.117	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:16 UTC	4969	OUT	GET /rtgstat/adchoice-links/nai_smallpreciso.png HTTP/1.1 Host: cdn.2trk.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtgcloudsql.2trk.info/rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%3DeyJyYW5rN0EiOiIwIiwiYmFubmVyVHlwZSI6ImJhbm5lciIsImNyaXRlcmlhSWQiOiIxMDIzMTkxIiwidHkiOiIwIiwiZXh0cmFzS2V5IjoiNDdfNjQxODAtOTcwIiwicGxhdGZvcm1Ccm93c2VyIjoiQ2hyb21lIiwibWluQmlkVG9XaW4iOiIwIiwibWluYmlkIjoiMC4xMiIsIm1heGJpZCI6IjYuMCIsInByb2dyYW1OYW1lIjoicG9zX3VlY191cyIsInB1YklkIjoicHViLTU4ODQyOTQ0NzkzOTE2MzgiLCJob3N0IjoicHJlY2lzbyIsInJhbms2UyI6IjAuMCIsInBsYWNlbWVudEJ1bmRsZU5hbWUiOiJicm93c2VyLXVwZGF0ZS5vcmciLCJiYW5uZXJVcGRhdGVPbiI6IjE4LzAzLzIwMjQgMTY6MDI6MTQiLCJkYXkiOiIyMDI0LTAzLTE4IiwiUGFnZVR5cGUiOiJnZW5lcmljIiwiaGVpZ2h0IjoiOTAiLCJlY3BhIjoiMCIsImN0ciI6IjIuNjU4MTYwNUUtNCIsInJlbUFnQnVkQ2FwIjoiNjIyOS43NDc0IiwiYmtIb3VycyI6IjAiLCJiaWxsaW5naWQiOiIxMTA4ODY5NzI5NTkiLCJ2aXNpYmlsaXR5IjoiQkVMT1dfVEhFX0ZPTEQiLCJpbnRlcnN0aXRpYWwiOiJmYWxzZSIsIkRhaWx5QnVkZ2V0IjoiMzIiLCJkZWFsVHlwZSI6Ik9BIiwiRnJlcXVlbmN5Y2FwIjoiMTAiLCJhciI6Ik5BIiwiY3BtTWljcm9zIjoiMCIsInBsYXRmb3JtT3MiOiJXaW5kb3dzIiwiZXgiOiJwZHgiLCJhZFNsb3RSYW5rNSI6IjE4NTIiLCJkb21haW4iOiJodHRwczovL2Jyb3dzZXItdXBkYXRlK2Qrb3JnIiwibG9nSSI6IiBJMToxLjAsSTI6MS4wLEk1OjEuMCxJNjoxLjAsSTc6MS4wIiwiZ3VpZCI6IkNBRVNFTzR4aWQ3bzh1UjlFblZiUmU4N05layIsIm1haW5hZENvbnNlbnRTdGF0dXMiOiJmYWxzZSIsImxvZ1IiOiIgUjE6MTAwLFIyOjEwMDAsUjU6MTg1MixSNnM6MC4wLFI2YzowLjAsUjZzQjowLjAsUjZjQjowLjAsUjdhOjAiLCJyZWdpb24iOiJ1cy1lYXN0NC1hIiwiZGV2aWNlIjoicGMiLCJkZXZpZCI6IjAiLCJ2aWV3YWJpbGl0eSI6Ii0xIiwiaXNDb25zZW50TmVlZGVkIjoiZmFsc2UiLCJpbkFwcCI6ImZhbHNlIiwiY2FtcGFpZ25pZCI6IjY0MTgwIiwiZW52aXJvbm1lbnRUeXBlIjoiV2ViIiwiYmlkcHJpY2UiOiIwLjEyIiwiYmsiOiIwIiwiVXNlclN0cmF0ZWd5SWQiOiIiLCJiaWRpZCI6IjdhYjFjZGU1LTFiNDItNjVjMy05Y2NmLTk4ZTlmNGY0MTQ3YSIsImdlbyI6IlVTQSIsInN1YmlkIjoiVFMrZCtwZHgrdCtkditkKzMrdCtTVCtkKzI1K3UrK3QrU1orZCs5NzArdCtCSStkKzExMDg4Njk3Mjk1OSt0K0RJK2QrIiwiY2l0eU5hbWUiOiJOZXcgWW9yayIsImhvdXIiOiIxNiIsInppcFBvc3RhbENvZGUiOiJOQSIsImJpZFNpZ25hdHVyZSI6IjQ5YThjY2M4LTRlMTAtNDE1Zi1iM2NjLTg1ZmRhMDA5Y2NkYSIsImNtcEN0ciI6IjAuMCIsInN0cmF0ZWd5SWQiOiIyNSIsImJ0bSI6IjE3MTA3Nzg5MzQzNTkiLCJhdWN0aW9uVHlwZSI6IkZJUlNUX1BSSUNFIiwiYmlkRmxvb3IiOiIwLjAxIiwiY2MiOiIwIiwiZmlyc3RDb29raWUiOiIiLCJiYW5kd2lkdGgiOiJudWxsIiwiZGVhbElEIjoiMCIsImFnZW5jeWlkIjoiMTAyODg2IiwicmFuazZDIjoiMC4wIiwiY2FtcGFpZ25TZXR0aW5ncyI6IntcImN0eVwiOlwiMVwiLFwibGFwXCI6XCIwXCIsXCJpYXNcIjpcIjBcIixcImxycFwiOlwiMFwiLFwicDhcIjpcIjBcIixcInNhXCI6XCIwXCIsXCJzYlwiOlwiMFwiLFwic2NcIjpcIjBcIixcInBiclwiOlwiMFwifSIsInJhbmsxIjoiMTAwIiwidHlIb3VycyI6IjAiLCJwdWJsaXNoZXJJRCI6IjEwMDk2IiwicmFuazIiOiIxMDAwIiwicGQiOiIwIiwiYWRTbG90S2V5IjoiaHR0cHM6Ly9icm93c2VyLXVwZGF0ZStkK29yZyM5NzAjOTAjQkVMT1crdStUSEUrdStGT0xEIiwiYXVkaWVuY2VNYXRjaCI6Im5vY29va2llIiwid2lkdGgiOiI5NzAiLCJjYXRlZ29yeSI6IltdIiwicmFuazUiOiIxLjAiLCJtYWluQWRVc2VySUQiOiJDQUVTRU80eGlkN284dVI5RW5WYlJlODdOZWsifQ%3D%3D%253Bdurl155%3D::scm0=bid_~CM.64180~SZ.970~TS.pdx~dv.3~BI.110886972959~DI.~ST.25_::exch=pdx::bS=49a8ccc8-4e10-415f-b3cc-85fda009ccda::bamt=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q::ppid=::btm=1710778934359::mid=CAESEO4xid7o8uR9EnVbRe87Nek::cl=::geo=USA::ref0=https%3A%2F%2Fbrowser-update.org::pageID=937680203::dT=OA::mode=ifrme::devid=3::r1=100::label=default::as=4::winprice=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q::bt=1::ul15= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
2024-03-18 16:22:17 UTC	1096	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:17 GMT Content-Type: image/png Content-Length: 183 Connection: close X-GUploader-UploadID: ABPtcPpLq5jeleTJCW0zxXlgkelS5Tlk6i2EHkC_ZR1P219PQI2zpbEqxoExw-t0E5VeFsCxIfJYA_DuRA x-goog-generation: 1668158497416006 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 183 x-goog-hash: crc32c=8Q7Kmw== x-goog-hash: md5=/kvfDzFLaHV/LuXGPt1MLQ== x-goog-storage-class: STANDARD Expires: Mon, 18 Mar 2024 05:09:48 GMT Cache-Control: public, max-age=172800 Age: 43942 Last-Modified: Fri, 11 Nov 2022 09:21:37 GMT ETag: "fe4bdf0f314b68757f2ee5c63edd4c2d" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FUiV4htz3%2Bw5904oLZLsIxc%2BJBFIiOIXnJ7ILSJb9kYf4ueqHMwsDrYhcDOZo2lE8powrtI1HRhqrLPVHk%2FMox8CDH%2BYJge9vwvmLfDrujHuSGXMVN6QuvbInEoWlAJ9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f8519a87c87-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:22:17 UTC	183	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 11 00 00 00 0f 08 06 00 00 00 02 b1 24 11 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 59 49 44 41 54 78 da 62 fc ff ff ff 66 06 0a 01 0b 8c 61 96 b6 d1 87 54 cd a7 66 f9 6f 01 d1 4c 0c 54 00 2c b8 4c c7 07 d0 5d 4d d0 25 9f f3 6a 7d 40 18 9f 1a da 78 07 1d f0 4e 6a 26 e8 bd c1 e3 9d 61 66 08 0b a1 84 c4 c0 60 02 a1 f0 64 0b aa b8 84 91 1a b9 18 20 c0 00 65 35 1d 33 de 3a df c0 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR$tEXtSoftwareAdobe ImageReadyqe<YIDATxbfaTfoLT,L]M%j}@xNj&af`d e53:IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.4	50088	172.67.161.117	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:17 UTC	4967	OUT	GET /rtgstat/adchoice-links/nai_bigpreciso.png HTTP/1.1 Host: cdn.2trk.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtgcloudsql.2trk.info/rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%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%3D%3D%253Bdurl155%3D::scm0=bid_~CM.64180~SZ.970~TS.pdx~dv.3~BI.110886972959~DI.~ST.25_::exch=pdx::bS=49a8ccc8-4e10-415f-b3cc-85fda009ccda::bamt=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q::ppid=::btm=1710778934359::mid=CAESEO4xid7o8uR9EnVbRe87Nek::cl=::geo=USA::ref0=https%3A%2F%2Fbrowser-update.org::pageID=937680203::dT=OA::mode=ifrme::devid=3::r1=100::label=default::as=4::winprice=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q::bt=1::ul15= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
2024-03-18 16:22:17 UTC	1096	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:17 GMT Content-Type: image/png Content-Length: 1710 Connection: close X-GUploader-UploadID: ABPtcPqgil-Ar3c2kQ4WdmijRpRrTVdDia8l-Q97yBXor3JZqKpCS1I0SkZ_F4CXZnP9VESi8UnimmwXDA x-goog-generation: 1668158493969522 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 1710 x-goog-hash: crc32c=xZG4mQ== x-goog-hash: md5=pPLcP1uCo83PfVdUKUSRdw== x-goog-storage-class: STANDARD Expires: Mon, 18 Mar 2024 05:09:48 GMT Cache-Control: public, max-age=172800 Age: 43942 Last-Modified: Fri, 11 Nov 2022 09:21:34 GMT ETag: "a4f2dc3f5b82a3cdcf7d575429449177" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L2gtiTof44k59LYW8dowbOGTKYtopYNMoh8TYQWr5RNDfxDVb5s6%2FFF%2B1WUDi41faHdEi%2FqAhkcESoLYGtNHvOn1EEttcdamo7duVfOWTxXxYTNA0o0NhVh0tsH8ZRRS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f856fea4231-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:22:17 UTC	273	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4d 00 00 00 0f 08 06 00 00 00 a1 99 42 d7 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 06 50 49 44 41 54 78 da ec 57 09 6c 14 55 18 7e 73 ed ec d5 3d 3a db dd ed b9 74 b3 f4 a0 14 b1 14 a9 60 b1 0a a2 80 ad 10 01 15 10 bc 02 0a 5a 8a 84 a8 44 40 41 12 09 41 85 60 40 4c 48 41 30 6a 2a 72 14 42 a1 80 2d 47 4b a1 5c 2d 47 4b 2f 7a 6e e9 b6 7b 5f b3 3b 6f 7c 53 a2 21 a5 01 8b 05 25 f2 4f 5e 26 33 ef 7f c7 ff bd ef 3f 1e c6 f3 3c b8 45 c6 a0 96 03 1e c9 1d 85 ec f1 4d ff 9d 41 fb 4e b9 c3 d6 ee 75 c5 d9 3d bc 08 c7 78 40 91 18 37 67 8c a4 f6 8d 71 ca 96 87 c5 f0 27 e6 ec 7e b1 af 63 ca 36 bf 94 df 1b 68 77 95 5f 8f 39 75 1f ff 60 1b Data Ascii: PNGIHDRMBtEXtSoftwareAdobe ImageReadyqe<PIDATxWlU~s=:t`ZD@AA`@LHA0j*rB-GK\-GK/zn{_;o\|S!%O^&3?<EMANu=x@7gq'~c6hw_9u`
2024-03-18 16:22:17 UTC	1369	IN	Data Raw: 86 74 3a 20 bd 68 8a ba ee be 58 19 0c 62 60 cd b7 69 20 3a c2 0a 66 4e bd fa 5f 62 da 5d 65 45 9e 33 39 3b a1 ab ed 03 57 81 0c b8 38 29 20 45 5c aa ef 8c 48 93 32 b1 f9 93 43 fa f8 cc 34 99 39 2e 4a e4 e9 f7 9d 62 18 e8 60 a2 5d 40 a5 f3 86 f5 e3 b4 7f b2 a7 2f ac ec 33 68 24 cf 81 f1 58 35 0e 30 92 07 19 e9 b5 c0 e9 16 81 9a 5a 66 94 ad 42 1a 21 d7 79 0f 94 7b c2 10 68 d7 77 9f 74 69 77 97 b8 a2 6c 2e 8e 8e 0a 97 d8 73 c6 4b 1a 8c d1 92 6e 30 7f 3c e2 08 df 57 e6 8e 74 7a a1 28 79 00 dd 35 67 82 b2 c1 a0 a3 7c 42 9f dd 0d c9 ef f6 d9 0c a7 ae fa c2 28 02 c0 91 89 52 f3 fc 49 aa 26 82 20 f8 6f f0 a7 82 46 92 e6 de 46 7a 05 e5 1e 66 7b a1 3d b6 cb 01 45 8c 06 07 d3 a7 8b 60 9a 56 71 59 85 51 8e 20 c7 63 9b f7 db 63 8a 2a 7d 5a 8e 07 d8 08 93 c8 f2 6e a6 Data Ascii: t: hXb`i :fN_b]eE39;W8) E\H2C49.Jb`]@/3h$X50ZfB!y{hwtiwl.sKn0<Wtz(y5g\|B(RI& oFFzf{=E`VqYQ cc*}Zn
2024-03-18 16:22:17 UTC	68	IN	Data Raw: 24 db 2f 25 63 8f bb 27 83 da 96 7b 71 db 87 4d fe c9 35 aa 27 38 82 cf ff f2 e8 4a de 37 a6 fd e5 85 a8 4d 41 cd f4 7f 60 5d 5f e5 0f 01 06 00 de 85 d3 3a 72 36 eb 96 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: $/%c'{qM5'8J7MA`]_:r6IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.4	50087	104.21.82.186	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:17 UTC	5186	OUT	GET /imageresize?url=width=336::height=336::imgurl=https%253A%252F%252Fcdn.shopify.com%252Fs%252Ffiles%252F1%252F1996%252F9707%252Ffiles%252Fecoflow-ecoflow-double-voltage-hub-power-input-output-delta-pro-30641334714441.png%253Fv%253D1704179963::campaignId=64180 HTTP/1.1 Host: rtgcdn.2trk.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtgcloudsql.2trk.info/rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%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%3D%3D%253Bdurl155%3D::scm0=bid_~CM.64180~SZ.970~TS.pdx~dv.3~BI.110886972959~DI.~ST.25_::exch=pdx::bS=49a8ccc8-4e10-415f-b3cc-85fda009ccda::bamt=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q::ppid=::btm=1710778934359::mid=CAESEO4xid7o8uR9EnVbRe87Nek::cl=::geo=USA::ref0=https%3A%2F%2Fbrowser-update.org::pageID=937680203::dT=OA::mode=ifrme::devid=3::r1=100::label=default::as=4::winprice=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q::bt=1::ul15= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
2024-03-18 16:22:17 UTC	919	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:17 GMT Content-Type: image/jpeg Transfer-Encoding: chunked Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Cache-Control: max-age=604800, public Expires: 604800 Default-Img: no X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: unsafe-url Via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WVGWbzVE6QBKxG7%2BwFOVhKpU0BQ0czPpkZFZCSQemvr4ysBoAklfN9M9lelJAJ4qICHdMXndi3suxAwkkAt4c3Q86AT9Ye4spqFzmrUyhli9BFQNZZ3QIebRTd%2FNiKKzRXNb"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f858f7817ad-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:22:17 UTC	450	IN	Data Raw: 31 36 66 65 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 01 50 01 50 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 16feJFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222PP"}!1AQa"q
2024-03-18 16:22:17 UTC	1369	IN	Data Raw: 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f7 fa 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 Data Ascii: w!1AQaq"2B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?(((((((((((((((((((
2024-03-18 16:22:17 UTC	1369	IN	Data Raw: 03 f8 ae f3 e1 a7 89 ee 74 fd 66 19 ed f4 c9 25 d9 a8 5a 91 b8 da cb 81 89 94 0e aa 46 32 57 ef 2e 08 ce 00 af a4 20 9e 2b 9b 78 ee 2d e5 49 61 95 43 c7 24 6c 19 5d 48 c8 20 8e 08 23 bd 79 ff 00 c5 4f 02 ff 00 c2 4b a5 ff 00 6a d8 47 9d 56 ca 26 fd d8 5c fd aa 2e a6 3e 39 dd d4 af b9 23 f8 b2 39 2f 83 1e 3a 30 5c 47 e1 1d 4a e7 7d bc 8b bb 49 95 97 91 d4 b4 2c df aa e7 dc 67 ee 8a 00 f7 1a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 22 b9 b9 86 ce d6 6b ab 99 16 28 21 46 92 49 18 e0 2a 81 92 4f b0 02 b8 e7 f8 b9 e0 74 42 e7 5b e0 0c f1 69 37 ff 00 11 5b be 2e ff 00 91 2f 5d c7 fd 03 ee 3f f4 5b 57 ce eb fd 9f 25 bc eb a8 cb 2c 50 94 fb c8 0e 7f 91 a0 0f 64 1f 1a 3c 00 46 4e ba 47 d6 Data Ascii: tf%ZF2W. +x-IaC$l]H #yOKjGV&\.>9#9/:0\GJ}I,g(((((((((("k(!FI*OtB[i7[./]?[W%,Pd<FNG
2024-03-18 16:22:17 UTC	1369	IN	Data Raw: 7b 15 7c dd e3 bd 1e e3 c0 5f 10 56 f7 4a 8c 45 0b 48 35 2d 3c 00 42 06 07 f7 b0 f1 8f 97 3d 54 7f 0b 81 40 1f 48 d1 54 f4 9d 4e 0d 67 47 b2 d4 ed 77 79 17 70 24 e8 1b 19 01 80 38 38 ee 33 83 57 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 af 99 fc 30 47 83 7e 34 d9 5a 16 b9 8a da 3b f9 b4 b2 a7 3b a4 8d c9 58 77 0e 32 09 31 b7 a7 00 fa 57 d3 15 f3 6f c6 58 ae 34 3f 88 93 ea 96 b3 e2 e5 92 d7 51 81 b6 83 e5 ba 7e ec 70 78 3c c4 0f e3 40 1f 49 51 48 08 60 08 20 83 c8 22 96 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a f3 6f 8d 7a 54 77 3e 0c 8b 56 f9 16 6d 2e e5 24 dc 57 2c 63 72 23 65 07 b6 4b 23 1f f7 2b d2 6b 0f c6 96 c6 ef c0 da Data Ascii: {\|_VJEH5-<B=T@HTNgGwyp$883W((((0G~4Z;;Xw21WoX4?Q~px<@IQH` "((((((((((((((ozTw>Vm.$W,cr#eK#+k
2024-03-18 16:22:17 UTC	1337	IN	Data Raw: 47 e1 b1 16 d3 1a ea b6 a5 8d b6 cf 2b 3e 6a f5 fe 2c f4 af aa 2b e5 7b 2b ad 62 d3 53 b1 bc 3a 3c d2 0b 6b a8 6e 0a f9 b1 8c 84 91 5c 8c e7 b8 5c 7e 35 ea 7f f0 b8 ef 3f e8 4e bb ff 00 c0 d8 e8 03 d5 68 af 2a ff 00 85 c7 77 ff 00 42 75 df fe 06 c7 47 fc 2e 4b bf fa 13 ae ff 00 f0 32 3a 00 f5 5a 2b ca 7f e1 72 5d ff 00 d0 9d 77 ff 00 81 91 d1 ff 00 0b 96 ef fe 84 eb bf fc 0c 8e 80 3d 5a 8a f2 8f f8 5c d7 5f f4 27 5e 7f e0 64 74 9f f0 b9 ee bf e8 4e bc ff 00 c0 c8 e8 03 d6 2b c0 be 31 49 18 f8 91 6c 77 da ee 5d 2e 25 c4 98 de 3f 7b 29 f9 33 df 04 7e 75 d2 ff 00 c2 e8 ba 1f f3 27 5e 7f e0 5c 7f e1 5e 75 e2 af 10 ea 7e 21 f1 25 c6 ab 16 85 3c 0b 2c 71 46 10 ca 8c 46 d0 73 cf 7c e7 f4 a0 0f 46 f8 21 78 ef 65 ad d8 bb 3e 62 9e 39 f6 ca 00 71 e6 02 3f 87 e5 c7 Data Ascii: G+>j,+{+bS:<kn\\~5?Nh*wBuG.K2:Z+r]w=Z\_'^dtN+1Ilw].%?{)3~u'^\^u~!%<,qFFs\|F!xe>b9q?
2024-03-18 16:22:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.4	50086	104.21.82.186	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:17 UTC	5206	OUT	GET /imageresize?url=width=336::height=336::imgurl=https%253A%252F%252Fcdn.shopify.com%252Fs%252Ffiles%252F1%252F1996%252F9707%252Ffiles%252Fecoflow-us-ecoflow-wave-2-portable-air-conditioner-delta-pro-portable-power-station-30313001386057.png%253Fv%253D1683344965::campaignId=64180 HTTP/1.1 Host: rtgcdn.2trk.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtgcloudsql.2trk.info/rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%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%3D%3D%253Bdurl155%3D::scm0=bid_~CM.64180~SZ.970~TS.pdx~dv.3~BI.110886972959~DI.~ST.25_::exch=pdx::bS=49a8ccc8-4e10-415f-b3cc-85fda009ccda::bamt=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q::ppid=::btm=1710778934359::mid=CAESEO4xid7o8uR9EnVbRe87Nek::cl=::geo=USA::ref0=https%3A%2F%2Fbrowser-update.org::pageID=937680203::dT=OA::mode=ifrme::devid=3::r1=100::label=default::as=4::winprice=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q::bt=1::ul15= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
2024-03-18 16:22:17 UTC	925	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:17 GMT Content-Type: image/jpeg Transfer-Encoding: chunked Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Cache-Control: max-age=604800, public Expires: 604800 Default-Img: no X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: unsafe-url Via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1%2By6SYe%2F3W7F618cT62meDzTlknz7UQ%2FZ1Lltn9Jf5OG6FyW3ciANwy1jXeSYuEWXkoeC26gX3zMHCOvQl3w9yNL6K6ij40g9e79ratqPGb5%2Bmu0Md51XCJQGa0GDV%2BBPiVJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f859b7a5e86-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:22:17 UTC	444	IN	Data Raw: 32 34 38 61 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 01 50 01 50 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 248aJFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222PP"}!1AQa"q
2024-03-18 16:22:17 UTC	1369	IN	Data Raw: 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f7 fa 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a Data Ascii: w!1AQaq"2B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?(((((((((((((((((
2024-03-18 16:22:17 UTC	1369	IN	Data Raw: 75 7a 16 ab 3f fc 26 5a 7d f5 cd d1 62 6e 13 7c ae d9 01 0b 7c df 41 82 6b e8 6a f9 6a 16 f9 22 6c 92 71 82 49 cf 4e 2b ea 5a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 2b 93 f1 64 a5 ae ed e1 07 21 57 76 3d 09 35 d6 57 84 fc 57 b9 b9 b5 f1 1d e3 c3 26 c7 06 3d b9 00 fc be 58 e9 9f 7a 00 ec a1 92 41 13 44 1d 84 6c 30 c8 0f 04 77 04 53 53 4c d3 cc 7e 58 b0 b4 45 3f dc 81 54 fe 60 66 bc 97 49 bc f1 4b 59 41 72 2f a7 29 24 8c 15 71 81 81 8e 70 38 ef 5d 8d 8e b3 e2 28 80 69 85 bc e3 8f 95 d3 6f ea bf e0 68 01 fa cc 31 d9 5e ec b5 67 45 fe ee 77 0f d6 aa a6 a7 74 8b 80 d1 91 fe d4 28 7f 98 a8 f5 0b e6 b9 bd dd 3c 4d 03 bf dd 57 39 07 d7 07 bf f3 f6 a8 28 03 41 b5 8d 42 Data Ascii: uz?&Z}bn\|\|Akjj"lqIN+Z(((((((((((+d!Wv=5WW&=XzADl0wSSL~XE?T`fIKYAr/)$qp8](ioh1^gEwt(<MW9(AB
2024-03-18 16:22:17 UTC	1369	IN	Data Raw: ff 00 62 d3 f8 8d ee 22 98 b4 81 89 62 7c c0 c2 3e ac 7a 91 8f 7e a7 99 d3 35 ef 18 2a c5 fd 8f ae da 6a d0 65 92 1b 50 e0 b3 60 72 7c a3 9c 0c 0e ea 2b 66 c7 e2 d6 a7 a5 48 17 5a d1 24 89 73 fb d9 ed b2 a4 f1 d0 6d ca f5 ff 00 66 8b 00 0f 8d 3e 39 b6 82 59 2e fc 35 10 b7 8f 86 b8 8e dd e4 50 73 8e a1 82 fe be 9d 6a 96 8f f1 63 5c ba d5 0d be af e2 e7 b0 8f 69 2c af a6 44 1d 08 ec 73 b4 0e 33 dc f6 e3 ad 76 56 7e 35 f0 7f 8a 50 9b a8 e0 6b 99 15 4c 8c 50 ac b9 1c 84 59 63 c3 b7 e4 38 ce 7b d5 0d 4f e1 cf 85 b5 fb 51 0e 9b 7e b6 91 c6 f8 90 47 6f 14 fe 57 cc 5b 68 2b b7 6f 24 e7 70 27 b1 e9 45 80 ab 7a 3c 59 a9 39 97 48 f1 d4 57 68 62 56 0a d7 0f 69 23 1c 0c ed 4f b8 72 72 47 cf df 19 1d 4f 33 ac 6a df 12 bc 35 1c cd a8 dd ea d6 f0 a1 54 fb 5b ce 64 81 8b Data Ascii: b"b\|>z~5*jeP`r\|+fHZ$smf>9Y.5Psjc\i,Ds3vV~5PkLPYc8{OQ~GoW[h+o$p'Ez<Y9HWhbVi#OrrGO3j5T[d
2024-03-18 16:22:17 UTC	1369	IN	Data Raw: f7 aa 8d e2 9f 0e 6a c8 23 d6 f4 47 b7 b8 2a b9 96 3c 38 66 27 96 24 6d 65 18 ed f3 f4 ac 7b ab 5f 0e db dd 09 74 9f 10 5c da b0 e9 98 64 ca 9f a8 00 d2 18 eb cd 56 33 76 e3 58 f0 f9 b3 94 92 43 da 86 8d 90 7b 06 27 3f 52 6b 7f 45 d5 ee a1 b5 7b d5 b8 ba 6b 2f 2d a3 b5 69 fe 59 77 f1 8f 2d 81 ce d5 c7 3c 81 db 93 59 d6 56 77 c2 55 b8 bb d6 6f a7 b5 c6 e1 1e 64 8d a5 f4 1f 36 08 5e bf 30 f4 20 73 c8 f5 af 86 5e 0f 6d 5e fd 3c 49 aa 26 db 4b 56 02 ce 20 bb 51 99 7b 81 fd d5 3e 9d 48 f6 20 b0 3a ef 0b 78 7e fd 3c 15 08 d6 ee 67 8e ee 66 69 4f 98 03 cc 8a d8 c2 33 38 24 9f af 23 38 e3 15 76 1d 1a ce 09 99 d5 77 29 e8 85 10 01 f9 28 3f ad 6b dd dc 19 e4 e3 ee 0e 82 ab d5 25 dc 45 68 b4 eb 58 95 d5 63 66 57 39 2b 24 8c e3 f2 24 e0 7b 53 46 95 64 99 30 5b a5 bc Data Ascii: j#G*<8f'$me{_t\dV3vXC{'?RkE{k/-iYw-<YVwUod6^0 s^m^<I&KV Q{>H :x~<gfiO38$#8vw)(?k%EhXcfW9+$${SFd0[
2024-03-18 16:22:17 UTC	1369	IN	Data Raw: 37 13 db 18 02 a3 62 23 93 08 d2 64 4a 8c 49 24 8e 58 02 01 fc 3a 7b d0 06 be de 98 34 00 47 27 15 0b dc 79 60 e1 1d c8 ec b8 fe a4 52 c7 73 1c f1 96 8d b3 86 c1 04 60 83 9e 84 50 06 44 df f1 f7 3f fb e6 95 49 0c 29 b2 64 dd ce 31 fc 66 8d e0 38 4c 36 7d 94 e3 f3 a0 08 ae 17 6d c4 7b 51 40 21 8b 10 3b f1 ff 00 d7 a8 ea 69 e3 d8 c9 8c e3 27 ab 13 fc ea 1a 00 d0 d2 ec 56 f4 ca 0d bd d4 cc a0 6d 10 ed 55 07 9f bc e7 21 47 1e 95 60 c0 a8 6e 27 b5 b4 8d 9d 04 68 b1 07 17 01 77 03 96 38 c8 27 23 1e 80 b0 ef 8a cf b6 b8 86 04 7f 32 d2 39 dc 90 54 c8 cc 02 e3 39 e1 48 ce 69 cd a8 5c 0b a7 b8 85 c5 b3 b0 c6 2d 87 96 00 f4 e2 80 28 eb d3 ea 32 de 79 77 6b 20 91 97 2e ae 9b 09 ce 00 18 e3 03 a5 54 99 63 5b 87 75 00 aa c1 b4 9f f6 9a 1f f1 cd 5d 69 11 6e a1 79 4e 72 Data Ascii: 7b#dJI$X:{4G'y`Rs`PD?I)d1f8L6}m{Q@!;i'VmU!G`n'hw8'#29T9Hi\-(2ywk .Tc[u]inyNr
2024-03-18 16:22:17 UTC	1369	IN	Data Raw: e1 ef 51 a9 2e d8 8d 19 d8 f1 c0 eb 5d 86 8d f0 bb c6 5a d9 56 8f 48 92 d2 12 c0 19 6e ff 00 74 06 7b e1 be 62 3e 80 d0 07 1f 25 b8 bc d9 0b 60 65 b8 e7 bd 45 24 5f e8 b0 26 e3 b8 2b 48 47 b1 54 6f f1 af 61 ba f8 33 75 e1 af 0d 6a 1a e5 e6 ab 04 f7 76 96 d2 38 b7 48 03 c7 d3 04 ee 7e e0 12 47 cb 90 40 20 e4 57 8a 0b 89 23 76 77 39 41 09 8d 73 c7 06 32 a3 ff 00 41 a0 0b 73 0f 3d 1c 83 f3 17 9d b9 f6 c3 0a 62 48 d1 86 59 06 7e 59 db 8f f6 90 54 46 63 03 60 83 8f 2b a9 e7 99 23 06 a5 93 13 12 50 82 19 a2 8c 01 fe d4 7f e2 29 88 77 d9 04 b7 3b 93 94 93 cb 40 3d de 3c 9f e5 4d 11 ed 45 90 f0 30 8f fa ed a7 da cb e5 49 10 e7 6f 9d 13 01 9e c1 48 a5 59 03 5b 88 ca e4 1b 65 cf fd fd ff 00 f5 50 05 5d 4b fd 1e e2 28 54 10 90 ca e7 af 39 dd ff 00 d6 14 f8 39 d3 ff Data Ascii: Q.]ZVHnt{b>%`eE$_&+HGToa3ujv8H~G@ W#vw9As2As=bHY~YTFc`+#P)w;@=<ME0IoHY[eP]K(T99
2024-03-18 16:22:17 UTC	704	IN	Data Raw: a7 3d be 9b 19 24 32 93 e7 48 3d 0e 14 ed c1 ff 00 7a bd ee 18 62 b7 85 21 86 34 8e 24 01 51 11 40 55 03 b0 03 a5 3e 9d 80 f3 fd 1f e0 ff 00 86 74 dd af 76 93 ea 33 0d a4 99 df 6a 06 1d 48 55 c7 07 d1 8b 57 71 65 61 67 a6 c1 e4 58 da 41 6b 0e 49 f2 e0 8c 22 e4 f5 38 03 15 62 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 c7 d6 fc 2b a0 f8 8d 36 ea fa 55 ad d9 c1 01 a4 8c 6e 5c 8c 70 dd 41 fa 57 12 9f 03 7c 33 6d 79 71 25 8d c5 f5 ac 17 08 22 92 04 90 30 da 08 6c 02 c0 e3 2c aa 79 cf 4c 77 af 4e a2 80 39 9d 23 e1 f7 85 f4 5c 35 b6 91 04 92 80 bf bd b8 1e 6b 64 7f 10 dd 90 a7 bf ca 05 74 d4 51 40 05 14 51 40 Data Ascii: =$2H=zb!4$Q@U>tv3jHUWqeagXAkI"8b((((((((((((((((+6Un\pAW\|3myq%"0l,yLwN9#\5kdtQ@Q@
2024-03-18 16:22:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.4	50085	104.21.82.186	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:17 UTC	5198	OUT	GET /imageresize?url=width=336::height=336::imgurl=https%253A%252F%252Fcdn.shopify.com%252Fs%252Ffiles%252F1%252F1996%252F9707%252Ffiles%252Fecoflow-us-ecoflow-delta-mini-portable-power-station-refurbished-standalone-30382791786569.png%253Fv%253D1689584309::campaignId=64180 HTTP/1.1 Host: rtgcdn.2trk.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtgcloudsql.2trk.info/rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%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%3D%3D%253Bdurl155%3D::scm0=bid_~CM.64180~SZ.970~TS.pdx~dv.3~BI.110886972959~DI.~ST.25_::exch=pdx::bS=49a8ccc8-4e10-415f-b3cc-85fda009ccda::bamt=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q::ppid=::btm=1710778934359::mid=CAESEO4xid7o8uR9EnVbRe87Nek::cl=::geo=USA::ref0=https%3A%2F%2Fbrowser-update.org::pageID=937680203::dT=OA::mode=ifrme::devid=3::r1=100::label=default::as=4::winprice=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q::bt=1::ul15= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
2024-03-18 16:22:17 UTC	923	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:17 GMT Content-Type: image/jpeg Transfer-Encoding: chunked Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Cache-Control: max-age=604800, public Expires: 604800 Default-Img: no X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: unsafe-url Via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ovx1CTczoybRZvfDrLDSokhg7RM5F%2FCtwQLuaTZrC5PSfGJ%2Blbcjd5XVDknIC01j9ruv6SM3V8AWXzuBFZGM8CqzGXbnvqaTEe9IMXhblU8LCeRBUvaqUjD%2BqgsCUOmwgS%2Fu"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f85af3c42c8-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:22:17 UTC	446	IN	Data Raw: 31 62 38 65 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 01 50 01 50 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 1b8eJFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222PP"}!1AQa"q
2024-03-18 16:22:17 UTC	1369	IN	Data Raw: 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f7 fa 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 Data Ascii: w!1AQaq"2B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?((((((((((((((((((
2024-03-18 16:22:17 UTC	1369	IN	Data Raw: 54 c6 3a e3 f4 a4 da 05 2b 8c f6 43 f1 5b c3 c0 e0 25 f9 f7 10 0f f1 a0 7c 56 f0 f1 3c c7 7e 3e b0 8f f1 af 1b da 3d 0d 18 1e f4 5c 0f 68 5f 89 fe 1c 73 cc b7 09 fe f4 58 fe b5 30 f8 85 e1 87 1c ea 4a bf 54 3f e1 5e 21 81 4a 14 7a 7e 94 5c 0e eb e2 07 8a f4 7d 52 c6 08 2c 6f 96 63 bc 16 0b 1b 8c 7e 24 62 ba bd 02 6b 79 74 1b 63 6d 3c 73 22 8d a5 a3 60 c0 30 1c 8e 3b d7 8e 46 a8 f2 84 70 cc 09 fb 81 72 58 fa 01 4f b9 b4 d4 34 6b 84 9a 24 bb d3 ef a6 c9 8e 34 6d 8d e5 f5 39 e7 23 a0 e0 f5 fc 28 11 ed 52 f4 35 9b 74 78 35 c4 e9 5e 3b d5 63 02 3d 56 c5 ae 57 fe 7a c4 a1 1f b9 e4 7d d3 d8 0c 6d e9 de bb 19 64 59 a0 49 53 3b 24 50 ea 48 23 20 8c 8e 0d 30 39 ed 57 fd 44 bf ee 9a bf f0 96 da c6 4f 11 db cd 2c 92 25 dc 7e 67 94 b8 62 af 95 20 f4 5c 0e 09 ea 7b 56 Data Ascii: T:+C[%\|V<~>=\h_sX0JT?^!Jz~\}R,oc~$bkytcm<s"`0;FprXO4k$4m9#(R5tx5^;c=VWz}mdYIS;$PH# 09WDO,%~gb \{V
2024-03-18 16:22:17 UTC	1369	IN	Data Raw: 73 8e 83 d6 b7 7c 1d ff 00 2f bf f0 0f fd 9a 84 26 7a bf c3 d3 8d 7a 5f 78 08 fd 45 74 7e 21 3f e9 cd fe e8 fe 55 e7 3a 7e a5 77 a6 4a 67 b2 98 c3 29 f9 0b 05 56 e3 9f 50 47 61 5a 37 7a ce a7 71 14 53 4d 78 cf 23 a6 49 d8 83 a1 23 b2 fb 53 10 fd 50 fe e2 4f f7 4d 74 ff 00 07 2e b5 81 74 f6 d6 f6 91 3e 96 cd ba e6 76 1f 34 67 6b 6d 0a 72 3a 91 e8 7f 0a f2 ed 57 54 be f2 25 ff 00 49 3f 74 ff 00 02 ff 00 85 7b 07 c0 69 9e 7f 0d 5e 3b e0 b1 74 c9 c7 5f bd 48 67 ac d1 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 01 e7 bf 19 7f e4 46 3f f5 dc 7f e8 2d 5f 3e 68 ff 00 f1 ef 1f d2 be 83 f8 cb ff 00 22 31 ff 00 ae e3 ff 00 41 6a f9 eb 48 3f b8 4f a5 31 1b d7 1f f1 e5 ff 00 Data Ascii: s\|/&zz_xEt~!?U:~wJg)VPGaZ7zqSMx#I#SPOMt.t>v4gkmr:WT%I?t{i^;t_HgEQEQEQEQEQEQEQEQEQEQEQEF?-_>h"1AjH?O1
2024-03-18 16:22:17 UTC	1369	IN	Data Raw: de 80 2c 2b ab a8 65 60 ca 7a 10 72 0d 2e 6a 18 83 7e f1 e4 58 d5 e4 72 ec 23 00 2e 4f 53 c0 03 9e bd 3b d4 93 cf 71 2a c2 88 55 12 24 d8 39 ce ef 98 b6 7a 71 d7 18 f6 f7 a0 0b 50 de 18 24 0e 20 b7 70 13 66 d9 23 0c 3e bc f7 f7 fe 94 45 76 22 42 3e cd 6e e7 8f 99 d4 93 c6 3d f1 db d3 d6 b3 63 8e 61 75 e7 4b 20 71 b3 6e 3d 39 ab 72 ce ff 00 67 92 28 30 8a f2 2b e7 3d 00 0c 31 8e 7f bd d7 db de 98 0d a3 35 5f 6d c3 3a 17 9b e5 53 92 07 19 fd 29 d2 86 64 c2 3e d6 04 10 7f 1a 00 97 34 66 9b 6f 75 75 6f 73 14 db e2 6f 2d d5 b0 15 54 9c 1c e3 21 78 fa d1 90 7a 50 ed d0 4a fd 49 14 fc 9f f0 21 fc 8d 58 b8 3f e8 b0 7f b8 7f f4 26 aa aa 7e 43 fe f0 fe 46 ac 5c 9f f4 5b 7f f7 0f fe 84 d4 86 73 da 99 cc 52 7d 0d 7b 97 c0 1f f9 17 2f bf de 8f ff 00 66 af 0a d4 8f ee Data Ascii: ,+e`zr.j~Xr#.OS;q*U$9zqP$ pf#>Ev"B>n=cauK qn=9rg(0+=15_m:S)d>4fouuoso-T!xzPJI!X?&~CF\[sR}{/f
2024-03-18 16:22:17 UTC	1140	IN	Data Raw: f1 ce 81 a8 fd 62 ff 00 d9 eb c5 ee 74 8b 66 43 97 97 a7 f7 87 f8 57 b7 7c 07 84 41 a3 ea 68 a4 ed 0d 16 33 ff 00 03 a0 0f 5c a2 8a 29 0c 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 e1 be 2c d9 cb 75 e0 b2 d1 2e e1 0d c2 48 e7 3d 17 0c b9 fc d8 57 ce 46 f0 c0 e5 19 79 15 f6 0d cd b4 37 96 b2 db 5c 46 24 86 55 28 ea 7b 83 5e 0b e3 3f 85 3a 85 85 d4 97 1a 74 4f 79 66 c7 e5 31 ae e7 51 d7 0c 07 f3 1c 7d 33 8a 62 3c f5 75 54 65 28 78 dc 31 cf 6a 5b 79 03 41 1b 0e 85 68 97 c3 f7 00 9f dd b7 e5 50 25 85 f5 91 3f b8 79 22 27 38 51 c8 a0 0b 63 19 f4 c7 6a 01 c5 57 17 29 81 90 e3 fe 00 68 fb 44 7f ed ff 00 df 07 fc 28 02 c6 78 f6 f4 a3 23 1e f5 5c dc c7 9f e3 ff 00 be 4f f8 51 Data Ascii: btfCW\|Ah3\)(((((((((((,u.H=WFy7\F$U({^?:tOyf1Q}3b<uTe(x1j[yAhP%?y"'8QcjW)hD(x#\OQ
2024-03-18 16:22:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.4	50084	104.21.82.186	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:17 UTC	5155	OUT	GET /imageresize?url=width=336::height=336::imgurl=https%253A%252F%252Fcdn.shopify.com%252Fs%252Ffiles%252F1%252F1996%252F9707%252Fproducts%252Fecoflow-ecoflow-delta-max-bag-30058309091401.png%253Fv%253D1667891976::campaignId=64180 HTTP/1.1 Host: rtgcdn.2trk.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtgcloudsql.2trk.info/rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%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%3D%3D%253Bdurl155%3D::scm0=bid_~CM.64180~SZ.970~TS.pdx~dv.3~BI.110886972959~DI.~ST.25_::exch=pdx::bS=49a8ccc8-4e10-415f-b3cc-85fda009ccda::bamt=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q::ppid=::btm=1710778934359::mid=CAESEO4xid7o8uR9EnVbRe87Nek::cl=::geo=USA::ref0=https%3A%2F%2Fbrowser-update.org::pageID=937680203::dT=OA::mode=ifrme::devid=3::r1=100::label=default::as=4::winprice=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q::bt=1::ul15= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
2024-03-18 16:22:17 UTC	917	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:17 GMT Content-Type: image/jpeg Transfer-Encoding: chunked Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Cache-Control: max-age=604800, public Expires: 604800 Default-Img: no X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: unsafe-url Via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7Uj1dZGCThUbc1iGMUTFLMn5rOlG9wWcoyUofSb1uwsBqjjCx4m3eYyWiKUTGEL9Spsfe1KIdqBNa13x315iGgwXa4kWsrh%2FMDbee5pCYXVylJuMoDxdDIzIrrIaGjllfsHK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f85a81a42d1-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:22:17 UTC	452	IN	Data Raw: 31 34 39 38 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 01 50 01 50 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 1498JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222PP"}!1AQa"q
2024-03-18 16:22:17 UTC	1369	IN	Data Raw: 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f7 fa 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a Data Ascii: w!1AQaq"2B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?(((((((((((((((((((
2024-03-18 16:22:17 UTC	1369	IN	Data Raw: 2e 79 44 fa 86 3f e1 4e 49 64 43 cc 64 8f 62 3f ad 04 8c d0 bc d0 02 b4 88 64 dc 6d 1c 7b 85 07 f9 53 8c d0 e3 1e 4c eb ee 23 22 94 46 ce 32 1c e3 d2 a4 58 e4 5f e2 38 fa d0 04 71 ba 03 90 67 03 dc 35 58 0c 9f f4 d8 9f f7 4d 49 1b 36 0e e2 4f d6 a6 52 7b 50 04 28 63 c8 3b 26 3f f0 12 2a 61 22 ff 00 cf 19 bf 2f fe bd 3c 1f 6a 50 79 f4 a0 08 f7 c5 9c 79 32 fe 22 91 a4 81 5b 69 8c ee f4 c5 4c c4 95 e6 a8 8c be a8 72 7e ec 6a 7f 53 40 12 97 42 df 2d b3 fd 70 3f c6 9e 1a 43 c0 88 0f ab e3 fa 54 ae 79 a4 cd 00 0b e6 f6 08 3e b9 34 ed 92 91 cc a0 7f ba bf e3 4a 0d 3b 39 a0 06 f9 64 f5 91 cf e3 8f e5 47 92 87 ae 5b ea 49 a7 e6 8a 00 45 86 25 e4 46 b9 fa 52 4c 71 0c 84 0e 8a 78 14 fa 6b e4 c6 e3 d4 1a 00 b1 02 91 18 cd 7a c7 c1 69 01 be d5 50 9f 9b ca 42 3e 99 39 Data Ascii: .yD?NIdCdb?dm{SL#"F2X_8qg5XMI6OR{P(c;&?*a"/<jPyy2"[iLr~jS@B-p?CTy>4J;9dG[IE%FRLqxkziPB>9
2024-03-18 16:22:17 UTC	1369	IN	Data Raw: ac f7 e2 36 fa 50 0d 35 98 33 08 f3 d4 f3 ec 28 03 52 d8 7e e1 3e 95 f4 2f c3 9f f9 11 74 ff 00 ac bf fa 31 ab e7 ab 76 e3 1d ab e8 1f 86 72 6f f0 3d af fb 32 cc bf f9 11 a9 01 d7 51 45 14 c0 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 2b e7 2f 8e da f2 6a 5e 2b b7 d2 e1 70 f1 69 b1 61 ff 00 76 41 59 9f 05 86 4f 07 e5 11 9e 3d 4d 7d 1b 5f 30 7c 56 d4 65 bc d4 2d 23 91 b7 15 96 f6 4d d8 e4 ff 00 a6 4d 12 e7 d7 09 0a 2f d1 45 00 79 dd 26 05 2d 07 8a 00 8d e3 56 18 20 55 79 6d 95 03 14 24 6d f9 b8 fa 55 be c6 ae a2 94 b0 ba cf 4c 3d 00 65 c4 4e 54 75 ad 35 27 00 56 75 a0 1f 29 3e 95 a6 a0 01 c5 00 38 0e f4 f5 14 d5 eb 52 63 14 00 bd ab 0d d4 c3 ac 3e ee 8f d2 b7 45 55 b9 b4 4b 82 0e 4a b0 e8 45 Data Ascii: 6P53(R~>/t1vro=2QE(((((((((+/j^+piavAYO=M}_0\|Ve-#MM/Ey&-V Uym$mUL=eNTu5'Vu)>8Rc>EUKJE
2024-03-18 16:22:17 UTC	721	IN	Data Raw: 5f 57 58 78 3f c3 7a 5e c3 65 a1 e9 f1 3a 0c 2c 82 dd 4b 8f f8 11 19 fd 6b 68 00 06 07 02 80 3e 63 d3 7e 11 78 d3 52 2a 64 b2 8e ca 36 19 0f 73 2a af e6 ab 96 1f 95 75 da 6f c0 29 18 2b 6a da e2 8e 7e 68 ad 61 2d 91 ec cc 47 fe 83 5e dd 45 00 79 fe 9d f0 6b c1 f6 1c cb 6b 71 7a dd 41 b9 9c f1 f8 26 d1 f9 d7 63 a7 68 9a 56 8e a5 74 dd 36 d2 d0 11 82 60 85 50 b7 d4 81 cf e3 57 e8 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 a8 df 68 ba 56 a9 ff 00 21 0d 32 ce ef fe be 20 59 3f 98 35 7a 8a 00 c1 5f 04 78 4d 49 23 c3 3a 30 27 fe 9c 62 ff 00 e2 6a ed b6 81 a3 59 0c 5a 69 36 10 0f 48 ad 91 7f 90 ad 1a 28 01 00 0a 00 00 00 3b 0a 5a 28 a0 02 8a 28 Data Ascii: _WXx?z^e:,Kkh>c~xRd6suo)+j~ha-G^EykkqzA&chVt6`PW(((((((((((((hV!2 Y?5z_xMI#:0'bjYZi6H(;Z((
2024-03-18 16:22:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.4	50083	104.21.82.186	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:17 UTC	5191	OUT	GET /imageresize?url=width=336::height=336::imgurl=https%253A%252F%252Fcdn.shopify.com%252Fs%252Ffiles%252F1%252F1996%252F9707%252Ffiles%252Fecoflow-us-ecoflow-blade-robotic-lawn-mower-blade-robotic-lawn-mower-30305163903049.png%253Fv%253D1682662842::campaignId=64180 HTTP/1.1 Host: rtgcdn.2trk.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtgcloudsql.2trk.info/rtgban?bannerparam=size=970::cmpId=64180::bmpclickURL=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_2T_jQbL8g7NwnfERqv7898wKDl9Q%26client%3Dca-pub-5884294479391638%26adurl%3Dhttps%3A%2F%2Fban.2trk.info%2Fclick%3FrequiredParams%3DeyJyYW5rN0EiOiIwIiwiYmFubmVyVHlwZSI6ImJhbm5lciIsImNyaXRlcmlhSWQiOiIxMDIzMTkxIiwidHkiOiIwIiwiZXh0cmFzS2V5IjoiNDdfNjQxODAtOTcwIiwicGxhdGZvcm1Ccm93c2VyIjoiQ2hyb21lIiwibWluQmlkVG9XaW4iOiIwIiwibWluYmlkIjoiMC4xMiIsIm1heGJpZCI6IjYuMCIsInByb2dyYW1OYW1lIjoicG9zX3VlY191cyIsInB1YklkIjoicHViLTU4ODQyOTQ0NzkzOTE2MzgiLCJob3N0IjoicHJlY2lzbyIsInJhbms2UyI6IjAuMCIsInBsYWNlbWVudEJ1bmRsZU5hbWUiOiJicm93c2VyLXVwZGF0ZS5vcmciLCJiYW5uZXJVcGRhdGVPbiI6IjE4LzAzLzIwMjQgMTY6MDI6MTQiLCJkYXkiOiIyMDI0LTAzLTE4IiwiUGFnZVR5cGUiOiJnZW5lcmljIiwiaGVpZ2h0IjoiOTAiLCJlY3BhIjoiMCIsImN0ciI6IjIuNjU4MTYwNUUtNCIsInJlbUFnQnVkQ2FwIjoiNjIyOS43NDc0IiwiYmtIb3VycyI6IjAiLCJiaWxsaW5naWQiOiIxMTA4ODY5NzI5NTkiLCJ2aXNpYmlsaXR5IjoiQkVMT1dfVEhFX0ZPTEQiLCJpbnRlcnN0aXRpYWwiOiJmYWxzZSIsIkRhaWx5QnVkZ2V0IjoiMzIiLCJkZWFsVHlwZSI6Ik9BIiwiRnJlcXVlbmN5Y2FwIjoiMTAiLCJhciI6Ik5BIiwiY3BtTWljcm9zIjoiMCIsInBsYXRmb3JtT3MiOiJXaW5kb3dzIiwiZXgiOiJwZHgiLCJhZFNsb3RSYW5rNSI6IjE4NTIiLCJkb21haW4iOiJodHRwczovL2Jyb3dzZXItdXBkYXRlK2Qrb3JnIiwibG9nSSI6IiBJMToxLjAsSTI6MS4wLEk1OjEuMCxJNjoxLjAsSTc6MS4wIiwiZ3VpZCI6IkNBRVNFTzR4aWQ3bzh1UjlFblZiUmU4N05layIsIm1haW5hZENvbnNlbnRTdGF0dXMiOiJmYWxzZSIsImxvZ1IiOiIgUjE6MTAwLFIyOjEwMDAsUjU6MTg1MixSNnM6MC4wLFI2YzowLjAsUjZzQjowLjAsUjZjQjowLjAsUjdhOjAiLCJyZWdpb24iOiJ1cy1lYXN0NC1hIiwiZGV2aWNlIjoicGMiLCJkZXZpZCI6IjAiLCJ2aWV3YWJpbGl0eSI6Ii0xIiwiaXNDb25zZW50TmVlZGVkIjoiZmFsc2UiLCJpbkFwcCI6ImZhbHNlIiwiY2FtcGFpZ25pZCI6IjY0MTgwIiwiZW52aXJvbm1lbnRUeXBlIjoiV2ViIiwiYmlkcHJpY2UiOiIwLjEyIiwiYmsiOiIwIiwiVXNlclN0cmF0ZWd5SWQiOiIiLCJiaWRpZCI6IjdhYjFjZGU1LTFiNDItNjVjMy05Y2NmLTk4ZTlmNGY0MTQ3YSIsImdlbyI6IlVTQSIsInN1YmlkIjoiVFMrZCtwZHgrdCtkditkKzMrdCtTVCtkKzI1K3UrK3QrU1orZCs5NzArdCtCSStkKzExMDg4Njk3Mjk1OSt0K0RJK2QrIiwiY2l0eU5hbWUiOiJOZXcgWW9yayIsImhvdXIiOiIxNiIsInppcFBvc3RhbENvZGUiOiJOQSIsImJpZFNpZ25hdHVyZSI6IjQ5YThjY2M4LTRlMTAtNDE1Zi1iM2NjLTg1ZmRhMDA5Y2NkYSIsImNtcEN0ciI6IjAuMCIsInN0cmF0ZWd5SWQiOiIyNSIsImJ0bSI6IjE3MTA3Nzg5MzQzNTkiLCJhdWN0aW9uVHlwZSI6IkZJUlNUX1BSSUNFIiwiYmlkRmxvb3IiOiIwLjAxIiwiY2MiOiIwIiwiZmlyc3RDb29raWUiOiIiLCJiYW5kd2lkdGgiOiJudWxsIiwiZGVhbElEIjoiMCIsImFnZW5jeWlkIjoiMTAyODg2IiwicmFuazZDIjoiMC4wIiwiY2FtcGFpZ25TZXR0aW5ncyI6IntcImN0eVwiOlwiMVwiLFwibGFwXCI6XCIwXCIsXCJpYXNcIjpcIjBcIixcImxycFwiOlwiMFwiLFwicDhcIjpcIjBcIixcInNhXCI6XCIwXCIsXCJzYlwiOlwiMFwiLFwic2NcIjpcIjBcIixcInBiclwiOlwiMFwifSIsInJhbmsxIjoiMTAwIiwidHlIb3VycyI6IjAiLCJwdWJsaXNoZXJJRCI6IjEwMDk2IiwicmFuazIiOiIxMDAwIiwicGQiOiIwIiwiYWRTbG90S2V5IjoiaHR0cHM6Ly9icm93c2VyLXVwZGF0ZStkK29yZyM5NzAjOTAjQkVMT1crdStUSEUrdStGT0xEIiwiYXVkaWVuY2VNYXRjaCI6Im5vY29va2llIiwid2lkdGgiOiI5NzAiLCJjYXRlZ29yeSI6IltdIiwicmFuazUiOiIxLjAiLCJtYWluQWRVc2VySUQiOiJDQUVTRU80eGlkN284dVI5RW5WYlJlODdOZWsifQ%3D%3D%253Bdurl155%3D::scm0=bid_~CM.64180~SZ.970~TS.pdx~dv.3~BI.110886972959~DI.~ST.25_::exch=pdx::bS=49a8ccc8-4e10-415f-b3cc-85fda009ccda::bamt=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q::ppid=::btm=1710778934359::mid=CAESEO4xid7o8uR9EnVbRe87Nek::cl=::geo=USA::ref0=https%3A%2F%2Fbrowser-update.org::pageID=937680203::dT=OA::mode=ifrme::devid=3::r1=100::label=default::as=4::winprice=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q::bt=1::ul15= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
2024-03-18 16:22:17 UTC	923	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:17 GMT Content-Type: image/jpeg Transfer-Encoding: chunked Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Cache-Control: max-age=604800, public Expires: 604800 Default-Img: no X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: unsafe-url Via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w52VJ3qqjdurjIiI5EM5%2BlZV%2BQQocD4ifzUrUOxDROJQ2tOP3wbagaP5a0K38oekTJsLEeBQ0CsJgoAmVXtXcz2uPq6dkqN2hvs7vPLKnBJYzGsW3YFCD%2BDCj1%2FqXTR2CPp3"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f86bcee0c9c-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:22:17 UTC	446	IN	Data Raw: 32 63 63 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 01 50 01 50 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 2cc0JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222PP"}!1AQa"q
2024-03-18 16:22:17 UTC	1369	IN	Data Raw: 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f7 fa 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 Data Ascii: w!1AQaq"2B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?((((((((((((((((((
2024-03-18 16:22:17 UTC	1369	IN	Data Raw: 0b 9b 96 b9 37 57 1b ce cf 94 dd c8 a8 36 b0 61 84 2d b7 aa 8e dc 8c 83 90 48 31 9d 22 2b 9b 62 93 5e 49 78 a4 b3 7e fe 38 a4 42 c6 37 8c 92 bb 30 32 ae 01 c6 38 41 ea fb a4 a3 cf af 3e 1b eb 10 2e 6c f5 1b 5b b0 22 25 84 e8 62 62 e3 b0 c6 47 3e a4 8a ac 35 0f 1e 78 6f c9 27 fb 62 18 ad e2 de 8b 0c a6 78 51 47 18 2a 09 50 06 3a 11 d2 bd 1a da c6 f3 4c 78 ed ed 0c 53 d8 96 e5 24 d9 0f d9 97 39 c4 6b 1c 60 30 e4 f0 70 78 ea 73 c6 6d a5 c7 88 6c 2c d9 f5 08 cd c8 8c c2 25 72 8a ee 4e f4 59 9a 35 88 02 53 61 66 40 46 fc 86 dc 31 b4 51 60 39 dd 3f e3 47 89 2d d6 44 92 e6 c6 f5 89 04 1b 98 36 94 f6 1b 0a fe b9 ae b6 c3 e3 85 bb 4a 8b a8 e8 92 c7 1e df 9e 4b 79 c3 9d de ca 40 e3 fe 05 f9 d3 b5 4b 3d 27 51 ba 92 0d 43 4f b7 ba 65 4d a1 e6 44 24 46 7b a9 63 9c 0e Data Ascii: 7W6a-H1"+b^Ix~8B7028A>.l["%bbG>5xo'bxQG*P:LxS$9k`0pxsml,%rNY5Saf@F1Q`9?G-D6JKy@K='QCOeMD$F{c
2024-03-18 16:22:17 UTC	1369	IN	Data Raw: 6b 78 26 0b 16 d6 19 55 6c 0d d9 c1 19 c1 1c fe ab 66 1b a3 8c f0 77 8d 6f 2d 3c 41 a7 59 69 76 eb 6e 6e ae e3 8b 6b 5d 49 e5 b3 3b 04 05 94 1c 1e be 95 f4 f5 73 da 57 81 3c 2d a2 79 66 c7 42 b2 49 22 93 cc 8e 59 23 f3 64 46 f5 0e f9 61 ed cf 15 d0 d5 4e 6e 7b db e4 92 fc 89 85 35 0d af f3 6d fe 61 45 14 12 00 c9 e0 54 16 14 54 53 5d 5b db 15 13 cf 14 45 ce 17 7b 85 cf 41 c6 7e a3 f3 a9 68 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a f2 8f 14 fc 64 8b 4c d5 e7 d2 74 9b 68 1e e6 da 66 86 66 b9 6d df 32 b1 52 02 29 ce 38 07 24 fe 14 01 a9 f1 3b e2 03 f8 5e d5 74 ed 29 d4 ea f3 a1 7c 95 0c 21 4e 9b 86 78 dd 92 08 04 11 80 72 3a 67 c0 6e ee 35 bb 9b 98 e7 92 f6 5b cb c2 b9 b8 7b a2 19 5b 38 0b f3 60 12 42 83 9e 5b b0 e8 48 Data Ascii: kx&Ulfwo-<AYivnnk]I;sW<-yfBI"Y#dFaNn{5maETTS][E{A~h((((((dLthffm2R)8$;^t)\|!Nxr:gn5[{[8`B[H
2024-03-18 16:22:17 UTC	1369	IN	Data Raw: c1 fa f2 c5 6b 24 8b ab 1b 72 d6 b8 46 da 7c c0 ca 01 e4 07 00 80 70 dc 64 2f 71 90 0c ed fc 67 f1 07 4e d0 fc 2a f7 da 5d d4 7a 85 cd c3 1b 7b 5f b1 c8 92 e2 42 18 06 23 3c 80 47 bf 38 1d eb c7 7c 63 e3 9d 47 c5 de 14 d2 a2 6b b9 51 6d d7 6e a0 91 92 a2 e4 f1 89 24 00 05 00 95 04 2f 4c b1 03 24 71 c6 69 ea 2d cc b6 b7 56 a1 95 d4 a3 79 0c 18 f9 80 10 19 57 91 bf 92 38 1c 13 f8 57 77 e1 7f 0f ff 00 64 c3 6f 79 74 23 6b db ab a8 63 85 64 01 d6 dd 9e 45 40 f8 e0 16 52 c0 e7 8e 98 04 75 28 05 6d 27 c6 7e 31 d2 b4 f3 aa 3c d0 a4 4a 62 86 e7 51 b8 48 62 d9 85 38 db b4 48 e4 e1 7e 62 0e 48 ce 6a de a7 a1 78 c3 53 3a 59 4d 5b 4e 4f ec b8 12 0b 53 6d 75 3a 94 da 31 b8 66 31 86 23 a9 07 9e 3d 2b 49 a4 d4 60 d7 2f a0 d5 ee 04 ad 1a 89 3c dd 85 55 40 e1 b9 3d 17 ee Data Ascii: k$rF\|pd/qgN*]z{_B#<G8\|cGkQmn$/L$qi-VyW8Wwdoyt#kcdE@Ru(m'~1<JbQHb8H~bHjxS:YM[NOSmu:1f1#=+I`/<U@=
2024-03-18 16:22:17 UTC	1369	IN	Data Raw: ad e3 6d 3b 4e 1a 6b 32 b3 47 21 2e ca 30 33 d3 8f e7 48 5f 03 24 f1 5c 2c 69 2b a3 a9 69 98 b0 23 74 88 5b 1f 43 eb 5a 5a 7d fc 9a 7c 42 29 cc 8d 6e 49 67 f2 e3 01 b3 8f 71 f4 a7 71 58 e7 6f 84 ba 8e b6 66 0b 98 de 6c 6f 5e 55 80 38 ce 7d f1 5e f7 73 6c da 76 81 a5 59 88 a4 58 ed ed c1 90 84 62 a1 d8 f3 92 06 07 38 e3 de bc 5a ee fe cf 50 5f 2c 86 8a 5d ff 00 7b ef 0c 73 d8 0e bd 3f fa d5 ad a4 78 b7 c5 7e 1f 68 c6 9d a8 7d b2 d1 59 55 60 ba 3b d7 01 70 07 27 28 00 23 85 61 db 34 0c 9f c6 37 6b 75 ae 43 6a b2 07 4b 64 25 95 46 48 63 c9 1e fc 05 ac 6b bb e9 ef 44 4e 6f 04 eb 1a aa 24 73 81 98 c7 2c 15 4e 38 c6 e3 fa d7 71 1f c4 9d 33 55 b2 9c 6a 5a 04 9a 76 b0 60 30 c1 7d 6f f7 43 91 cb 67 1b 90 6f c7 4d dd 46 48 e0 d7 9c 89 1e 75 52 c5 1d 0b 63 38 c6 ec Data Ascii: m;Nk2G!.03H_$\,i+i#t[CZZ}\|B)nIgqqXoflo^U8}^slvYXb8ZP_,]{s?x~h}YU`;p'(#a47kuCjKd%FHckDNo$s,N8q3UjZv`0}oCgoMFHuRc8
2024-03-18 16:22:17 UTC	1369	IN	Data Raw: 63 1c 7a 75 f4 a8 9a 67 5e b2 4b f8 60 d0 07 55 1d d5 98 5c 19 7f f1 d3 fe 15 1d cd cd ab c6 42 c9 9c ff 00 b2 7f c2 b9 a1 24 c7 fe 5a bf d1 a3 3f d2 82 25 3c 95 56 fa 31 5a 00 ba 91 c3 14 fe 61 c9 1e c2 ba 3f 0b e8 f7 1e 20 d6 ed 74 fb 70 a6 5b 87 0a ae d8 f9 54 02 49 e4 8c 80 b9 3b 7b e3 a1 ae 3e 38 99 e4 00 89 13 d4 97 dc 07 bf e1 d7 f0 af a6 be 19 78 0e e7 40 86 cb 59 9a 67 b7 9e 78 1d 26 b2 92 1c 1f 2d b6 14 07 27 2a c3 6e 48 23 f8 b0 40 22 80 3c cf c7 5f 0e 5f c1 da 2c 17 f7 5a f6 9e 67 9d 73 2d a9 5d 8d 24 b8 1b fc b1 d1 d4 12 7b 26 00 51 82 4f 3e 75 e7 f9 8d 16 d2 ac 09 e4 f7 ed e9 8f f2 6b eb 8f 88 16 96 77 be 01 d6 e2 be 48 de 31 68 ee 82 47 0a 3c c5 19 8f 93 d0 ef 0b 8f ca be 3f 6b 83 04 62 35 60 5c 37 23 b0 1e 80 f7 fa d0 07 d0 3a b5 c9 9f c4 Data Ascii: czug^K`U\B$Z?%<V1Za? tp[TI;{>8x@Ygx&-'*nH#@"<__,Zgs-]${&QO>ukwH1hG<?kb5`\7#:
2024-03-18 16:22:17 UTC	1369	IN	Data Raw: 21 aa e8 52 2a 35 cd 8e a0 36 82 64 d3 dd a4 03 92 31 c8 52 48 f6 04 73 59 fb 64 03 e5 95 81 ff 00 74 7f 85 0a 27 fe 2b 82 7e 8a 05 00 32 eb 4b d5 ec e5 82 09 a0 54 92 76 2b 10 0e 18 9e 7b e0 9c 0e 47 26 ab 3c 77 36 93 84 be 76 84 13 c9 0a 18 e3 20 12 07 19 ef dc 74 eb 57 b6 9c 7f ac 7f d3 fc 28 f2 c9 ff 00 96 8f fa 7f 85 00 77 5f 0e 6d be 1d 87 92 5f 15 6b 51 dc de 48 8f 0a 59 35 bc ab 14 60 82 a5 cb 85 19 38 3c 1e 36 f2 79 3b 48 fa 2f 46 d5 74 3b db 74 b6 d1 75 2b 1b a8 ad e3 55 09 6b 70 b2 ec 51 c0 e8 4f 1c 63 f0 af 8e 4a 04 19 79 58 0f 7c 0f e9 4a b2 db 77 96 33 f5 71 40 1f 68 de d8 d9 ea 36 72 5a 5f da c1 75 6c f8 df 0c f1 87 46 c1 c8 c8 3c 1c 10 0f e1 5f 27 7c 45 d1 f4 ed 03 c7 ba 84 5a 6c c8 2d 24 6f 3a 14 84 29 08 1c 06 2a 30 a1 42 82 48 50 33 81 Data Ascii: !R56d1RHsYdt'+~2KTv+{G&<w6v tW(w_m_kQHY5`8<6y;H/Ft;tu+UkpQOcJyX\|Jw3q@h6rZ_ulF<_'\|EZl-$o:)0BHP3
2024-03-18 16:22:17 UTC	1369	IN	Data Raw: dc 99 a4 3f c2 88 19 bf 96 68 03 4a df 47 b5 ea 60 46 23 d5 46 2a ec 7a 6d b4 5d 11 73 e8 a3 02 ab 8f 0d f8 c8 80 c9 a2 6b d8 3c 82 96 93 60 fe 42 ac 59 f8 3f c7 1a 9c a6 de 3d 1b 59 07 fe 9e 62 78 57 fe fa 93 03 f5 a0 08 af ac ec 9e 25 17 6e 50 7f 0b 20 f9 97 a7 23 ff 00 af ef 58 5a d2 5a 47 34 02 cd 96 37 0a 14 46 8a 70 3b 6e 2d dc fb e3 3c 57 5e df 08 bc 76 32 7f b0 0b 1f 6b b8 3f f8 ba bd 63 f0 53 c6 77 9f eb ed ad 6c bf eb e2 e5 4f fe 8b dd 40 1e 71 24 b2 69 da 88 9b 4a 79 d1 d1 46 c9 90 98 d8 71 cf 2b 8a b3 aa 6b da be a9 37 d9 e6 bd d4 ae ac c3 ab 2c 77 b7 32 48 3f 10 49 1f 95 7a 59 f8 09 e2 c0 38 be d1 49 f7 9e 51 ff 00 b4 ab 52 c7 f6 7e bf 92 0c df eb f6 d6 f3 7f 76 0b 76 99 7f 32 53 f9 50 07 98 78 43 c5 9a d7 83 f5 f7 d5 6c a3 b1 79 5a d8 5a 95 Data Ascii: ?hJG`F#F*zm]sk<`BY?=YbxW%nP #XZZG47Fp;n-<W^v2k?cSwlO@q$iJyFq+k7,w2H?IzY8IQR~vv2SPxClyZZ
2024-03-18 16:22:17 UTC	66	IN	Data Raw: 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 7f ff d9 0d 0a Data Ascii: QEQEQEQEQEQEQEQEQEQEQEQEQEQEQE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.4	50092	142.250.176.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:17 UTC	843	OUT	GET /pixel?google_nid=sovrn&google_push=AXcoOmRBhOkc4CQBijA_uVLMq63d_Hmzeiv428I6IxmXQKJNWikWpoFRWaBlWqXY3n_XtwSVeBsXHqLVjTbLAzJOf5ElQmIq4Ts&google_hm=IV6WABZHUuoYlIO2Qzydeftv HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:17 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 18 Mar 2024 16:22:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:17 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.4	50093	142.250.176.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:17 UTC	849	OUT	GET /pixel?google_nid=adkernel&google_hm=QTY5MDg5MzAxMDY3MTI1OTg5NjE&google_push=AXcoOmRHIuYnNYmsy0Z_gNPsNzwlvDtMNyUw7iNTqgOpZI5LrFyBaLnedgfLvobEkvt8An6sNNdFJGFu75PygYHMm5nDFaD-2Ng HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:17 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 18 Mar 2024 16:22:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:17 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.4	50094	142.250.176.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:17 UTC	858	OUT	GET /pixel?google_nid=zeta_interactive&google_push=AXcoOmRYiLIKT1LSQ1dkkpqKwk33oMg7DeXixc2GWjt_kOj9GBU8pmtxtUSmhcXJwPyG5VAPuogsXBZu42ViSe2xiKlxCk9zSM4&google_hm=ODI1OTg1NjcxNTY2ODc4MTc0Ng== HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:17 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 18 Mar 2024 16:22:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:17 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.4	50095	142.250.176.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:17 UTC	854	OUT	GET /pixel?google_nid=simplifi&google_hm=D1B83109A4A44EA780D9F28ECD179B12&google_push=AXcoOmTFNla6Hw2h9aKfvF63BybpjLoIszIEu_rWQibVbccfBDwBwo1WW40QV9L5rWgZLFRnkHVGid7aSs69DTzdjTuVRINES1g HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:17 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 18 Mar 2024 16:22:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:17 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.4	50096	142.250.176.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:17 UTC	966	OUT	GET /pixel?google_ula=5153224&google_hm=o2HIxaEGHLyIlgWmC9QyNMFpZi0f4iDXPjTtqxL-O6g&pi=adx&tdc=ams&pi=adxab&google_nid=rtb_house_us&google_gid=CAESEIhasK4mZsNIs-PD6FQmJPo&google_cver=1&google_push=AXcoOmTzjEBi1UV2I9JJEaJ5_L5fTT7cQV3wrJO_tEzCFlCuhF1vKxhxfuayF9bBJaxUwoQYS9XXkK9qaut7R7bI6QVgRdtyQnL_ HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:17 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 18 Mar 2024 16:22:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:17 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.4	50097	142.250.176.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:17 UTC	860	OUT	GET /pixel?google_nid=baidu_mediago&google_push=AXcoOmTyRBsK4N-BKKXlOPXZO_jFsWo2S1ruc4RCcqcElEFn8xPp2T2l8ut_W689BpFYMZc2uFI9O_SDZHTE8cv3uV3BMYU4G3sG&google_hm=22210ca7211caf792c9xmt00ltx5lqro HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:17 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 18 Mar 2024 16:22:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:17 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.4	50100	142.251.35.162	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:17 UTC	2677	OUT	GET /pagead/adview?ai=CEm6bNmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMQBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0cA14nLNdYNA2tHUPKCzdLObYUZIZ2ZVSPZpS37KSXq2ZP1C4BdGoAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAOACgP6CwIIAYAMAdAVAYAXAbIXHAoaEhRwdWItNTg4NDI5NDQ3OTM5MTYzOBiZ0iE&sigh=1rQ19qL1_fY&uach_m=%5BUACH%5D&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQVGAE&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5884294479391638&output=html&h=90&slotname=3654094576&adk=228266070&adf=3493768505&pi=t.ma~as.3654094576&w=970&url=https%3A%2F%2Fbrowser-update.org%2F&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1710778930134&bpp=1204&bdt=1441&idt=2890&shv=r20240313&mjsv=m202403130201&ptt=5&saldr=sd&correlator=966864692783&frm=24&ife=3&pv=2&ga_vid=751177015.1710778933&ga_sid=1710778933&ga_hid=640648971&ga_fc=0&nhd=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=-12245933&bih=-12245933&isw=970&ish=90&ifk=1017635361&scr_x=-12245933&scr_y=-12245933&eid=44759875%2C44759926%2C44759842%2C31081793%2C95325975%2C95327950%2C95327954%2C31081901%2C95320376%2C95322388%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=862165079531677&tmod=1386792793&uas=0&nvt=1&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C970%2C90&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=1.bp47bps3drp4&fsb=1&dtd=2937 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:17 UTC	628	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 18 Mar 2024 16:22:17 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.4	50101	150.136.25.38	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:17 UTC	967	OUT	GET /services?uid=AAARQ07L8NQAABPzJYe3uw&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D8457389007004702379%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&gdpr=0 HTTP/1.1 Host: sync.technoratimedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:17 UTC	1477	IN	HTTP/1.1 307 Temporary Redirect Server: nginx Date: Mon, 18 Mar 2024 16:22:17 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: close Location: https://ssum-sec.casalemedia.com/usermatchredir?s=191740&cb=https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26nuid%3D33A008D0E14543A2A207D07731F02C5F%26att%3D1%26pid%3D82%26cb%3Dhttps%253A%252F%252Fmatch.prod.bidr.io%252Fcookie-sync%253Fgdpr%253D0%2526userid%253D8457389007004702379%2526gdpr%253D0%2526gdpr%253D0%2526bee_sync_partners%253Dpm%2526bee_sync_current_partner%253Dsyn%2526bee_sync_initiator%253Dadx%2526bee_sync_hop_count%253D4%26uid%3D Set-Cookie: tads_uidp_73=AAARQ07L8NQAABPzJYe3uw; Max-Age=63072000; Expires=Wed, 18 Mar 2026 16:22:17 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid=33A008D0E14543A2A207D07731F02C5F; Max-Age=63072000; Expires=Wed, 18 Mar 2026 16:22:17 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid_cd=20240318162217+0000; Max-Age=63072000; Expires=Wed, 18 Mar 2026 16:22:17 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_zora=2; Max-Age=63072000; Expires=Wed, 18 Mar 2026 16:22:17 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None access-control-allow-origin: https://ads.pubmatic.com/ access-control-allow-credentials: true access-control-allow-methods: POST,GET,HEAD,OPTIONS X-Varnish: 206307242 Age: 0 Via: 1.1 varnish

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.4	50104	104.21.82.186	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:17 UTC	900	OUT	GET /rtgbannerimage/2023-11-10-042550749ecoflow.png HTTP/1.1 Host: cdn.2trk.info Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
2024-03-18 16:22:17 UTC	1092	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:17 GMT Content-Type: image/png Content-Length: 6678 Connection: close X-GUploader-UploadID: ABPtcPoqDNFBw-E2YHlG406wGut3tX8Hvsr-A9y1eiw0PkOrtO5y49sHjCEflm08Dj9TyxlhT9_A4lodYA x-goog-generation: 1699590350836768 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 6678 x-goog-hash: crc32c=AAVxTQ== x-goog-hash: md5=gPAiLHJQzFK5gSqbKd/aNA== x-goog-storage-class: STANDARD Expires: Mon, 18 Mar 2024 05:09:48 GMT Cache-Control: public, max-age=172800 Age: 43941 Last-Modified: Fri, 10 Nov 2023 04:25:50 GMT ETag: "80f0222c7250cc52b9812a9b29dfda34" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E5ZOdy6BLnO9tuldRbaLwjgj0gq2zggJfAgxGKS7IgFn4JZMhBQf23yQIxPegN6lvW3hQjA29MnIPxheV56DMyx4wyhsJ3q7yjDVymbJtne8p8uz74enRNXtqRbcRp%2BD"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f89bd5b78df-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:22:17 UTC	277	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 25 00 00 00 4a 08 02 00 00 00 72 d0 d5 1b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 61 38 64 34 37 35 33 34 39 2c 20 32 30 32 33 2f 30 33 2f 32 33 2d 31 33 3a 30 35 3a 34 Data Ascii: PNGIHDR%JrtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:4
2024-03-18 16:22:17 UTC	1369	IN	Data Raw: 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 Data Ascii: mlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adob
2024-03-18 16:22:17 UTC	1369	IN	Data Raw: 18 8a d7 75 75 75 b5 b5 b5 5d bf 7e 7d fe fc f9 e1 11 e1 4b 97 2e 5d be 7c f9 86 9f 6d 88 8d 8d 0d 08 08 70 b2 ea e4 ba c9 45 18 4d bc 02 3f e4 85 eb 10 c9 6f a5 79 9e cd 6f 9e 80 de 68 5e b8 e8 24 3e 6d 36 9b cf 5f 38 7f f2 e4 c9 0b 05 17 6a 6b 6a 07 07 06 b1 8e 63 9f 27 6e 68 e1 1b 66 75 fc fa 68 ca c1 ab 9a da 9a 53 a7 4e e5 9f ce 2f 2a 2a 6a 68 68 b0 69 24 b5 b9 30 34 6e 21 2e e5 37 c7 0f 4f 22 60 6f b2 23 36 26 96 38 2d c4 1e c3 08 36 2b e3 27 7c 9b e2 13 af c7 34 82 de 60 c7 68 3d 8b 94 a3 3d 8d 8d 8d c5 57 8a 8f 1f 3f ae 8d 66 6d 2d a1 d3 60 33 d8 34 17 18 bb 61 7c 00 fb f3 5d 6f 1f ef a0 e0 a0 c4 84 44 e8 b7 69 e3 a6 15 2b 56 84 85 85 4d 4b c3 34 77 b2 59 0d 56 83 93 63 8c c7 37 8f eb 49 a2 8b 27 ac 2f 57 26 3f 8c 47 18 fa c6 f0 1c ff ee f8 07 7f Data Ascii: uuu]~}K.]\|mpEM?oyoh^$>m6_8jkjc'nhfuhSN/**jhhi$04n!.7O"`o#6&8-6+'\|4`h==W?fm-`34a\|]oDi+VMK4wYVc7I'/W&?G
2024-03-18 16:22:17 UTC	1369	IN	Data Raw: 95 9d 9d 9d a2 67 90 ac 4f 3e f9 24 d5 97 3e 89 aa d7 09 4e b8 37 cd 65 b5 e2 1c bf 79 f5 37 db 77 6c 0f 09 0d 81 6c 7c 85 5c 47 7d 4f 8d 37 b9 a9 ad 87 00 d4 e1 57 4a af f0 93 b8 c9 90 a1 1b 77 3e ba 73 f7 93 bb a9 be 46 47 1c e3 38 a0 0a c8 c8 c8 f8 fd 9b bf 4f 4b 4b 83 84 10 8f 2f 96 97 97 93 fa 30 ac 3e cb 32 19 be 19 3c 9e 1b dd cb 6f 53 9f 02 72 0b 03 03 03 2d 2d 2d 57 af 5e c5 f5 e5 ee 18 9a 08 17 17 17 27 8b 8f d3 32 b5 ed c4 b7 be 1f fa 6a af d6 f6 f4 f6 40 1b bb 9e 37 6c da b4 89 d2 42 54 eb 44 d6 1e c4 4a 7c 00 89 b8 6e ed ba aa ca aa a6 c6 26 3c 83 d8 61 6e 31 53 dd cd 9b 37 8f c2 cf e9 52 1e cd 3f 8e 17 9f c5 44 87 98 24 db 63 07 e2 11 62 72 61 d0 c2 27 76 3d 81 3e 84 42 da 3b 3f da cd 75 23 19 05 2a 67 14 04 e3 42 f0 22 32 f2 61 b3 d9 4c e6 Data Ascii: gO>$>N7ey7wll\|\G}O7WJw>sFG8OKK/0>2<oSr---W^'2j@7lBTDJ\|n&<an1S7R?D$cbra'v=>B;?u#*gB"2aL
2024-03-18 16:22:17 UTC	1369	IN	Data Raw: 6a 6c ba 74 e9 12 21 95 37 dd ba a0 cc 30 f1 dd eb d7 af cb f5 51 aa 9a d1 c2 c2 1f 70 be 99 dc ed a7 e7 60 73 80 9e 6a e0 5b 5c 7c dc 82 c0 05 5a dd 6f b5 95 95 96 15 5e 2e 24 e1 38 6e 72 9b 5e 5f 41 ef 25 27 25 73 47 d9 35 0b f2 f3 f3 8b 8a 8b 7a 7b 7b dd 15 3c e8 a5 73 e7 ce 11 23 64 eb 19 34 0b 5b 14 96 10 9f 30 7a 1b bb d3 16 50 0a 1b d9 14 26 87 88 a7 68 55 c3 4f b7 68 8e b9 fc 38 c1 73 f1 53 ac 1d a0 44 d2 b2 24 99 54 44 ad 74 74 74 1c 3e 72 98 34 45 7f dd ba 1a 64 ab a9 a9 39 73 fa 4c 5d 5d 9d 5c 1c 3f 89 89 89 21 48 4d 7d 0e c6 b5 53 4d d1 d9 bc 1f 28 f6 8f de 9f c5 d8 ac 5e bd ba bc bc bc b1 a1 51 2b 91 07 87 18 21 5f 3f df d7 ff eb f5 c0 c0 40 5d 8b 3a 6f 27 77 69 17 a7 b5 72 a7 88 48 56 49 4b 4d e3 2f d1 b7 b5 a5 15 d6 31 b4 87 fe ef 10 b2 76 Data Ascii: jlt!70Qp`sj[\\|Zo^.$8nr^_A%'%sG5z{{<s#d4[0zP&hUOh8sSD$TDttt>r4Ed9sL]]\?!HM}SM(^Q+!_?@]:o'wirHVIKM/1v
2024-03-18 16:22:17 UTC	925	IN	Data Raw: f6 38 b1 97 d1 0b 3f ae ad ae a5 6b 5e de 5e 53 cc 6f b8 e9 96 cd 5b f2 fe 2d cf a9 bf 5a 51 6a ff e7 9e 67 f7 40 a7 11 eb 08 42 7d 70 60 90 4c 25 21 8f 30 4a aa 41 bf e8 cf 0b 12 5f e7 93 da d4 d1 b0 55 24 8c 24 3d 6f 1f ef ad 8f 6c dd 9b b7 f7 91 ad 8f c8 8a 82 6b 39 20 47 10 cd 2d 66 39 01 f0 13 d3 db 1f 43 44 e8 d1 f9 76 fe fc f9 cb 97 2f 6b f1 d7 f0 93 63 af da ae 34 dc cf ae 27 e5 91 53 ae 67 9b a7 c4 b7 ee ae 6e 4f 14 12 f4 10 f5 ac 49 af 71 0e 4d 13 42 50 0b 8f 3f f6 78 d0 c2 a0 ef 4f 7c 7f e1 fc 05 02 a4 3c 2d 50 26 f1 0c 6e 9e 18 c0 88 5c 93 91 96 93 a0 e3 2d 0c 2c 4f 5b 4e ec 4c 4e 4a 3e 73 f6 cc 95 2b 57 08 81 b2 3e 2b cf 2a 1c 7b 9f 94 cd 20 be 32 c7 7f 4e 54 54 d4 da b5 6b 37 6f de 8c 92 84 6c e3 0d 8c bd 80 98 e9 59 6c 52 07 5a fa 95 97 5f Data Ascii: 8?k^^So[-ZQjg@B}p`L%!0JA_U$$=olk9 G-f9CDv/kc4'SgnOIqMBP?xO\|<-P&n\-,O[NLNJ>s+W>+*{ 2NTTk7olYlRZ_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.4	50105	104.21.82.186	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:17 UTC	897	OUT	GET /rtgstat/adchoice-links/nai_smallpreciso.png HTTP/1.1 Host: cdn.2trk.info Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
2024-03-18 16:22:17 UTC	1092	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:17 GMT Content-Type: image/png Content-Length: 183 Connection: close X-GUploader-UploadID: ABPtcPpLq5jeleTJCW0zxXlgkelS5Tlk6i2EHkC_ZR1P219PQI2zpbEqxoExw-t0E5VeFsCxIfJYA_DuRA x-goog-generation: 1668158497416006 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 183 x-goog-hash: crc32c=8Q7Kmw== x-goog-hash: md5=/kvfDzFLaHV/LuXGPt1MLQ== x-goog-storage-class: STANDARD Expires: Mon, 18 Mar 2024 05:09:48 GMT Cache-Control: public, max-age=172800 Age: 43942 Last-Modified: Fri, 11 Nov 2022 09:21:37 GMT ETag: "fe4bdf0f314b68757f2ee5c63edd4c2d" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=USwSKlwxLI8bEKICARW2x1Ca5%2FvxeYCMW3nXS9AC97dzYfWtUwBXdvAzybz38na5UqOFyFjYVzhj5SYv%2FwW9bJkwVrP1GLozO0FFTvHq4gfEA5OVc7YY0vgs8kPYHnXu"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f89b9f31831-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:22:17 UTC	183	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 11 00 00 00 0f 08 06 00 00 00 02 b1 24 11 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 59 49 44 41 54 78 da 62 fc ff ff ff 66 06 0a 01 0b 8c 61 96 b6 d1 87 54 cd a7 66 f9 6f 01 d1 4c 0c 54 00 2c b8 4c c7 07 d0 5d 4d d0 25 9f f3 6a 7d 40 18 9f 1a da 78 07 1d f0 4e 6a 26 e8 bd c1 e3 9d 61 66 08 0b a1 84 c4 c0 60 02 a1 f0 64 0b aa b8 84 91 1a b9 18 20 c0 00 65 35 1d 33 de 3a df c0 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR$tEXtSoftwareAdobe ImageReadyqe<YIDATxbfaTfoLT,L]M%j}@xNj&af`d e53:IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.4	50106	104.21.82.186	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:17 UTC	2168	OUT	GET /impression?v1ImpParams=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&price=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q&bs=49a8ccc8-4e10-415f-b3cc-85fda009ccda&cbvp=2 HTTP/1.1 Host: bid.2trk.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
2024-03-18 16:22:17 UTC	560	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:17 GMT Content-Type: image/gif Content-Length: 43 Connection: close Via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OaMfHHr3r5HwF3zGLauErB6kgGLvbm2QCmFOdfd44C3wKzN70miQq0LsfNSbVra4EdFgKE64M%2FxgC8DVZB%2BLJqjkMBoUB1fXtbe58ZRsKSm0JiGxpii4Dq30exrFDGoH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f89d9c55e76-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:22:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.4	50108	172.67.161.117	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:17 UTC	1092	OUT	GET /imageresize?url=width=336::height=336::imgurl=https%253A%252F%252Fcdn.shopify.com%252Fs%252Ffiles%252F1%252F1996%252F9707%252Ffiles%252Fecoflow-us-ecoflow-portable-camping-chair-30383581397065.png%253Fv%253D1689747202::campaignId=64180 HTTP/1.1 Host: rtgcdn.2trk.info Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
2024-03-18 16:22:18 UTC	919	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:18 GMT Content-Type: image/jpeg Transfer-Encoding: chunked Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Cache-Control: max-age=604800, public Expires: 604800 Default-Img: no X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: unsafe-url Via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bknyFEDL5kvTIzAA1xw5XOcDqeF%2B8llUeVGfWHJfn4pseWHU1Fso2uVxahYH%2F3al1WPwY5emnMQaRRZgdFbNhgtRj2dq9GZmjd3LiEIRPPMvtVjAHH6xTfoAHTQOElpnvgQh"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f8a98aa435b-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:22:18 UTC	450	IN	Data Raw: 31 66 35 39 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 01 50 01 50 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 1f59JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222PP"}!1AQa"q
2024-03-18 16:22:18 UTC	1369	IN	Data Raw: 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f7 fa 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 Data Ascii: w!1AQaq"2B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?(((((((((((((((((((
2024-03-18 16:22:18 UTC	1369	IN	Data Raw: ed 15 0e f2 23 64 7e 0e 38 cd 00 47 1b e1 b2 7a 28 26 bd ff 00 e0 bd 80 b3 f8 77 05 c0 90 b1 be b8 96 e0 8f ee 73 e5 e3 ff 00 21 e7 f1 af 9f 09 d9 14 ac 7b 2d 7d 47 e0 3b 64 b4 f0 0e 83 12 63 06 c6 29 0e 3d 5d 43 1f d5 8d 02 67 45 45 14 53 24 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 2a 3b 8b 88 ad 2d a5 b9 9d c4 70 c4 86 49 1c f4 55 03 24 fe 55 25 72 1f 14 35 17 d3 3e 1e 6a 92 45 32 c7 2c ca b0 2e 71 97 0e c0 32 8c f7 29 bb f5 3d a8 03 e7 19 e7 92 ea 77 9a 57 2f 2c 8c 5d d8 f5 66 3c 93 f9 d4 07 3b b3 8c 10 29 e5 4f 52 78 c7 6a 4f f5 64 73 94 ed 48 b2 68 a4 38 eb 56 52 41 55 31 c6 45 2e e6 1d e8 02 fe d5 23 3f ca 98 f1 91 f7 4d 42 Data Ascii: #d~8Gz(&ws!{-}G;dc)=]CgEES$((((((((((((((*;-pIU$U%r5>jE2,.q2)=wW/,]f<;)ORxjOdsHh8VRAU1E.#?MB
2024-03-18 16:22:18 UTC	1369	IN	Data Raw: 46 57 07 2c c4 8e 7f 88 85 c0 ce 4f 00 74 ae be b9 9f 0f 58 78 8e 3d 42 e2 6d 71 74 a8 e0 50 3e ca 96 12 48 ed df 77 98 5d 46 7b 63 02 ba 6a da 0e 56 f7 f7 30 9f 2d fd d0 a2 8a 2a c9 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 ae 03 c7 1f 12 1b c2 ba 97 f6 6d b5 84 77 17 0d 6e b2 89 5e 5c 04 24 b0 00 a8 19 3d 01 ea 3a d0 07 7f 45 7c f1 a9 7c 51 f1 4d f9 90 2d f2 da 44 e3 69 8e da 30 bb 7e 8c 72 c3 f3 ae 42 ee ee e2 fa e9 ae 2e e6 7b 8b 87 c1 69 64 3b 99 b0 38 c9 3c f4 a0 76 3e b6 ae 53 e2 46 aa ba 4f 81 35 29 18 80 67 8f ec e3 72 16 18 7e 18 e0 7a 26 e3 f8 7e 15 f3 c4 9a a6 a5 3a 85 6b db a6 50 31 86 98 91 8f ce b3 a5 47 6c 97 6c 93 eb 40 58 f7 9f 82 3a 5f d9 3c 0a da a4 ab Data Ascii: FW,OtXx=BmqtP>Hw]F{cjV0-*(((((((((((mwn^\$=:E\|\|QM-Di0~rB.{id;8<v>SFO5)gr~z&~:kP1Gll@X:_<
2024-03-18 16:22:18 UTC	1369	IN	Data Raw: 45 14 00 51 45 14 00 51 45 14 00 57 cc f6 1a c3 24 3e 34 f1 0b b0 59 ef 22 fb 22 c4 10 b0 26 e5 cb be 3d 30 91 be 32 7a e2 be 88 d7 af 25 d3 fc 3b a9 de c3 8f 36 de d2 59 53 3d 37 2a 12 3f 51 5f 27 d9 da b6 a9 79 6f a5 5a b9 fb 4d e5 da 45 87 62 23 24 90 10 9c 77 05 8f af 06 80 3d cb e1 07 86 20 8f c0 17 13 5f 40 92 1d 65 9f cd 52 0a ee 88 65 02 91 f5 de c0 8e cc 2b 96 d2 26 9f e1 67 8f 6e 6d 2e dc b6 9d 22 83 3c be 51 66 9e db fe 59 c8 00 c1 2d 11 2d bb 01 be 5f 33 fb 8b 5e df 63 67 0e 9d a7 db 58 db 82 20 b6 89 61 8c 13 92 15 40 03 9e fc 0a e6 7e 20 f8 55 fc 49 a1 ac b6 60 0d 56 c4 99 ad 09 c6 18 f1 b9 08 3c 10 c0 0e bc 64 0c f1 9a 00 eb 81 04 64 1c 83 45 79 b7 c2 df 13 c5 35 94 5a 0c cf b4 24 6d 26 9e 24 2c 5f cb 56 21 e0 62 72 0b 44 76 e3 9c 98 de 33 Data Ascii: EQEQEW$>4Y""&=02z%;6YS=7*?Q_'yoZMEb#$w= _@eRe+&gnm."<QfY--_3^cgX a@~ UI`V<ddEy5Z$m&$,_V!brDv3
2024-03-18 16:22:18 UTC	1369	IN	Data Raw: 4d dc 96 7e 00 d5 1e 29 44 52 48 a9 10 27 b8 67 55 61 f8 a9 6a 00 e3 fe 07 5a c8 2d f5 bb d6 8b 6c 52 49 14 2a de ac 81 b7 0f c9 90 fe 35 63 e3 76 a8 f1 e8 9a 76 8d 11 90 1b c9 cc b2 95 50 cb b2 3c 60 3a 9e c5 dd 0f a7 cb f8 56 af c1 eb 16 b5 f0 14 73 b4 9b cd e5 c4 93 e3 1f 77 04 46 47 e6 84 fe 35 c3 6b c2 3f 1a fc 6a 4b 2f dd cb 6f 6d 2a da 11 f3 46 c1 23 c9 94 67 bf 26 6c 11 e8 3a 75 20 1e a7 e0 3d 1c 68 7e 0c d3 ad 4c 61 25 78 fc e9 7f 77 b1 b7 3f 38 61 d7 20 10 bc ff 00 77 b7 4a e9 28 a2 80 38 bf 1b f8 02 db c5 11 0b ab 46 4b 5d 4e 3e 92 ed f9 65 1e 8d 8f d0 d7 84 78 8b 4c bf b4 d6 a6 8f 50 46 4d 45 5b 6d c0 63 fe b0 11 c3 e7 b9 e8 73 fc 5d 7a e7 3f 55 d7 2f e3 8f 0b 5b f8 8f 42 b8 64 b4 8e 5d 4a 18 8b 5b 3f 46 24 73 b0 36 46 37 63 19 39 00 9c e0 f4 Data Ascii: M~)DRH'gUajZ-lRI5cvvP<`:VswFG5k?jK/omF#g&l:u =h~La%xw?8a wJ(8FK]N>exLPFME[mcs]z?U/[Bd]J[?F$s6F7c9
2024-03-18 16:22:18 UTC	738	IN	Data Raw: 03 90 24 5c b7 2b aa cd ab 78 57 e2 14 be 27 4b 48 08 b9 96 69 b4 e7 b8 1e 64 53 24 84 96 65 68 db 8c 23 8f 5f bd d3 d0 03 a0 f1 7e 7c 5d f1 56 d7 48 88 ef 86 39 12 dd cc 2f b5 c2 2e 4c 84 ee e3 23 32 76 fe 01 d7 bf b6 d7 88 fc 2b 98 5e f8 fa ea 7b f9 12 e6 ef ec 8d 24 2e 8a 25 03 71 52 c4 b8 3c 37 cc c0 e7 9f 99 94 90 46 0f b7 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 06 2f 88 bc 3d 6d ae c3 6e f2 42 8f 75 67 20 9a dd 9a 47 8f 0d dc 6f 42 19 73 81 c8 e8 40 38 38 c1 f0 ef 10 f8 7f c4 be 17 d3 e0 4d 5b 57 cd 8c e8 c6 1d 35 6e 65 64 0e 08 27 7a 81 b0 fc cc bd cf 27 23 b9 Data Ascii: $\+xW'KHidS$eh#_~\|]VH9/.L#2v+^{$.%qR<7FPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEP/=mnBug GoBs@88M[W5ned'z'#
2024-03-18 16:22:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.4	50111	172.67.161.117	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:17 UTC	1126	OUT	GET /imageresize?url=width=336::height=336::imgurl=https%253A%252F%252Fcdn.shopify.com%252Fs%252Ffiles%252F1%252F1996%252F9707%252Ffiles%252Fecoflow-us-ecoflow-delta-mini-portable-power-station-refurbished-standalone-30382791786569.png%253Fv%253D1689584309::campaignId=64180 HTTP/1.1 Host: rtgcdn.2trk.info Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
2024-03-18 16:22:18 UTC	917	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:18 GMT Content-Type: image/jpeg Transfer-Encoding: chunked Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Cache-Control: max-age=604800, public Expires: 604800 Default-Img: no X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: unsafe-url Via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tXb7XrQdWd56tnTraN90dihh5WQbWxAMrubEsQmAiEZbo9kR7WqoeLKGviOoNVsEK96DIGR6tkNeYdFrIMPNzS7F2UOYSMkEJNNiRyx1%2BzyB5ObZshScrhbKGaY8yl2oFg4y"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f8aa9a48cd7-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:22:18 UTC	452	IN	Data Raw: 31 62 38 65 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 01 50 01 50 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 1b8eJFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222PP"}!1AQa"q
2024-03-18 16:22:18 UTC	1369	IN	Data Raw: 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f7 fa 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a Data Ascii: w!1AQaq"2B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?(((((((((((((((((((
2024-03-18 16:22:18 UTC	1369	IN	Data Raw: da 05 2b 8c f6 43 f1 5b c3 c0 e0 25 f9 f7 10 0f f1 a0 7c 56 f0 f1 3c c7 7e 3e b0 8f f1 af 1b da 3d 0d 18 1e f4 5c 0f 68 5f 89 fe 1c 73 cc b7 09 fe f4 58 fe b5 30 f8 85 e1 87 1c ea 4a bf 54 3f e1 5e 21 81 4a 14 7a 7e 94 5c 0e eb e2 07 8a f4 7d 52 c6 08 2c 6f 96 63 bc 16 0b 1b 8c 7e 24 62 ba bd 02 6b 79 74 1b 63 6d 3c 73 22 8d a5 a3 60 c0 30 1c 8e 3b d7 8e 46 a8 f2 84 70 cc 09 fb 81 72 58 fa 01 4f b9 b4 d4 34 6b 84 9a 24 bb d3 ef a6 c9 8e 34 6d 8d e5 f5 39 e7 23 a0 e0 f5 fc 28 11 ed 52 f4 35 9b 74 78 35 c4 e9 5e 3b d5 63 02 3d 56 c5 ae 57 fe 7a c4 a1 1f b9 e4 7d d3 d8 0c 6d e9 de bb 19 64 59 a0 49 53 3b 24 50 ea 48 23 20 8c 8e 0d 30 39 ed 57 fd 44 bf ee 9a bf f0 96 da c6 4f 11 db cd 2c 92 25 dc 7e 67 94 b8 62 af 95 20 f4 5c 0e 09 ea 7b 56 76 aa 73 6f 2f fb Data Ascii: +C[%\|V<~>=\h_sX0JT?^!Jz~\}R,oc~$bkytcm<s"`0;FprXO4k$4m9#(R5tx5^;c=VWz}mdYIS;$PH# 09WDO,%~gb \{Vvso/
2024-03-18 16:22:18 UTC	1369	IN	Data Raw: 1d ff 00 2f bf f0 0f fd 9a 84 26 7a bf c3 d3 8d 7a 5f 78 08 fd 45 74 7e 21 3f e9 cd fe e8 fe 55 e7 3a 7e a5 77 a6 4a 67 b2 98 c3 29 f9 0b 05 56 e3 9f 50 47 61 5a 37 7a ce a7 71 14 53 4d 78 cf 23 a6 49 d8 83 a1 23 b2 fb 53 10 fd 50 fe e2 4f f7 4d 74 ff 00 07 2e b5 81 74 f6 d6 f6 91 3e 96 cd ba e6 76 1f 34 67 6b 6d 0a 72 3a 91 e8 7f 0a f2 ed 57 54 be f2 25 ff 00 49 3f 74 ff 00 02 ff 00 85 7b 07 c0 69 9e 7f 0d 5e 3b e0 b1 74 c9 c7 5f bd 48 67 ac d1 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 01 e7 bf 19 7f e4 46 3f f5 dc 7f e8 2d 5f 3e 68 ff 00 f1 ef 1f d2 be 83 f8 cb ff 00 22 31 ff 00 ae e3 ff 00 41 6a f9 eb 48 3f b8 4f a5 31 1b d7 1f f1 e5 ff 00 03 4f fd 08 53 4f Data Ascii: /&zz_xEt~!?U:~wJg)VPGaZ7zqSMx#I#SPOMt.t>v4gkmr:WT%I?t{i^;t_HgEQEQEQEQEQEQEQEQEQEQEQEF?-_>h"1AjH?O1OSO
2024-03-18 16:22:18 UTC	1369	IN	Data Raw: 65 60 ca 7a 10 72 0d 2e 6a 18 83 7e f1 e4 58 d5 e4 72 ec 23 00 2e 4f 53 c0 03 9e bd 3b d4 93 cf 71 2a c2 88 55 12 24 d8 39 ce ef 98 b6 7a 71 d7 18 f6 f7 a0 0b 50 de 18 24 0e 20 b7 70 13 66 d9 23 0c 3e bc f7 f7 fe 94 45 76 22 42 3e cd 6e e7 8f 99 d4 93 c6 3d f1 db d3 d6 b3 63 8e 61 75 e7 4b 20 71 b3 6e 3d 39 ab 72 ce ff 00 67 92 28 30 8a f2 2b e7 3d 00 0c 31 8e 7f bd d7 db de 98 0d a3 35 5f 6d c3 3a 17 9b e5 53 92 07 19 fd 29 d2 86 64 c2 3e d6 04 10 7f 1a 00 97 34 66 9b 6f 75 75 6f 73 14 db e2 6f 2d d5 b0 15 54 9c 1c e3 21 78 fa d1 90 7a 50 ed d0 4a fd 49 14 fc 9f f0 21 fc 8d 58 b8 3f e8 b0 7f b8 7f f4 26 aa aa 7e 43 fe f0 fe 46 ac 5c 9f f4 5b 7f f7 0f fe 84 d4 86 73 da 99 cc 52 7d 0d 7b 97 c0 1f f9 17 2f bf de 8f ff 00 66 af 0a d4 8f ee 9f fd d3 5e e9 f0 Data Ascii: e`zr.j~Xr#.OS;q*U$9zqP$ pf#>Ev"B>n=cauK qn=9rg(0+=15_m:S)d>4fouuoso-T!xzPJI!X?&~CF\[sR}{/f^
2024-03-18 16:22:18 UTC	1134	IN	Data Raw: ff 00 d9 eb c5 ee 74 8b 66 43 97 97 a7 f7 87 f8 57 b7 7c 07 84 41 a3 ea 68 a4 ed 0d 16 33 ff 00 03 a0 0f 5c a2 8a 29 0c 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 e1 be 2c d9 cb 75 e0 b2 d1 2e e1 0d c2 48 e7 3d 17 0c b9 fc d8 57 ce 46 f0 c0 e5 19 79 15 f6 0d cd b4 37 96 b2 db 5c 46 24 86 55 28 ea 7b 83 5e 0b e3 3f 85 3a 85 85 d4 97 1a 74 4f 79 66 c7 e5 31 ae e7 51 d7 0c 07 f3 1c 7d 33 8a 62 3c f5 75 54 65 28 78 dc 31 cf 6a 5b 79 03 41 1b 0e 85 68 97 c3 f7 00 9f dd b7 e5 50 25 85 f5 91 3f b8 79 22 27 38 51 c8 a0 0b 63 19 f4 c7 6a 01 c5 57 17 29 81 90 e3 fe 00 68 fb 44 7f ed ff 00 df 07 fc 28 02 c6 78 f6 f4 a3 23 1e f5 5c dc c7 9f e3 ff 00 be 4f f8 51 f6 98 f2 7e ff 00 Data Ascii: tfCW\|Ah3\)(((((((((((,u.H=WFy7\F$U({^?:tOyf1Q}3b<uTe(x1j[yAhP%?y"'8QcjW)hD(x#\OQ~
2024-03-18 16:22:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.4	50109	172.67.161.117	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:17 UTC	1083	OUT	GET /imageresize?url=width=336::height=336::imgurl=https%253A%252F%252Fcdn.shopify.com%252Fs%252Ffiles%252F1%252F1996%252F9707%252Fproducts%252Fecoflow-ecoflow-delta-max-bag-30058309091401.png%253Fv%253D1667891976::campaignId=64180 HTTP/1.1 Host: rtgcdn.2trk.info Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
2024-03-18 16:22:18 UTC	921	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:18 GMT Content-Type: image/jpeg Transfer-Encoding: chunked Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Cache-Control: max-age=604800, public Expires: 604800 Default-Img: no X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: unsafe-url Via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YXEm65UrdtjNTJMfqYRKjVwXcp6Q3DCQAm%2BGMzj3V7gn8hfm7%2FvHrNuakw4sDjgCrgOYE9KW7QQjviR6md26AO6cYUPXul6UWjhwnXIsUv5r6aFLuk%2Bk0Z1UplUv11gSrqmz"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f8aaad24310-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:22:18 UTC	448	IN	Data Raw: 31 34 39 38 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 01 50 01 50 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 1498JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222PP"}!1AQa"q
2024-03-18 16:22:18 UTC	1369	IN	Data Raw: 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f7 fa 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a Data Ascii: w!1AQaq"2B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?((((((((((((((((((
2024-03-18 16:22:18 UTC	1369	IN	Data Raw: e6 80 33 33 2e 79 44 fa 86 3f e1 4e 49 64 43 cc 64 8f 62 3f ad 04 8c d0 bc d0 02 b4 88 64 dc 6d 1c 7b 85 07 f9 53 8c d0 e3 1e 4c eb ee 23 22 94 46 ce 32 1c e3 d2 a4 58 e4 5f e2 38 fa d0 04 71 ba 03 90 67 03 dc 35 58 0c 9f f4 d8 9f f7 4d 49 1b 36 0e e2 4f d6 a6 52 7b 50 04 28 63 c8 3b 26 3f f0 12 2a 61 22 ff 00 cf 19 bf 2f fe bd 3c 1f 6a 50 79 f4 a0 08 f7 c5 9c 79 32 fe 22 91 a4 81 5b 69 8c ee f4 c5 4c c4 95 e6 a8 8c be a8 72 7e ec 6a 7f 53 40 12 97 42 df 2d b3 fd 70 3f c6 9e 1a 43 c0 88 0f ab e3 fa 54 ae 79 a4 cd 00 0b e6 f6 08 3e b9 34 ed 92 91 cc a0 7f ba bf e3 4a 0d 3b 39 a0 06 f9 64 f5 91 cf e3 8f e5 47 92 87 ae 5b ea 49 a7 e6 8a 00 45 86 25 e4 46 b9 fa 52 4c 71 0c 84 0e 8a 78 14 fa 6b e4 c6 e3 d4 1a 00 b1 02 91 18 cd 7a c7 c1 69 01 be d5 50 9f 9b ca Data Ascii: 33.yD?NIdCdb?dm{SL#"F2X_8qg5XMI6OR{P(c;&?*a"/<jPyy2"[iLr~jS@B-p?CTy>4J;9dG[IE%FRLqxkziP
2024-03-18 16:22:18 UTC	1369	IN	Data Raw: 23 a8 1f de ac f7 e2 36 fa 50 0d 35 98 33 08 f3 d4 f3 ec 28 03 52 d8 7e e1 3e 95 f4 2f c3 9f f9 11 74 ff 00 ac bf fa 31 ab e7 ab 76 e3 1d ab e8 1f 86 72 6f f0 3d af fb 32 cc bf f9 11 a9 01 d7 51 45 14 c0 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 2b e7 2f 8e da f2 6a 5e 2b b7 d2 e1 70 f1 69 b1 61 ff 00 76 41 59 9f 05 86 4f 07 e5 11 9e 3d 4d 7d 1b 5f 30 7c 56 d4 65 bc d4 2d 23 91 b7 15 96 f6 4d d8 e4 ff 00 a6 4d 12 e7 d7 09 0a 2f d1 45 00 79 dd 26 05 2d 07 8a 00 8d e3 56 18 20 55 79 6d 95 03 14 24 6d f9 b8 fa 55 be c6 ae a2 94 b0 ba cf 4c 3d 00 65 c4 4e 54 75 ad 35 27 00 56 75 a0 1f 29 3e 95 a6 a0 01 c5 00 38 0e f4 f5 14 d5 eb 52 63 14 00 bd ab 0d d4 c3 ac 3e ee 8f d2 b7 45 55 b9 b4 4b 82 0e Data Ascii: #6P53(R~>/t1vro=2QE(((((((((+/j^+piavAYO=M}_0\|Ve-#MM/Ey&-V Uym$mUL=eNTu5'Vu)>8Rc>EUK
2024-03-18 16:22:18 UTC	725	IN	Data Raw: f2 63 eb 81 5f 57 58 78 3f c3 7a 5e c3 65 a1 e9 f1 3a 0c 2c 82 dd 4b 8f f8 11 19 fd 6b 68 00 06 07 02 80 3e 63 d3 7e 11 78 d3 52 2a 64 b2 8e ca 36 19 0f 73 2a af e6 ab 96 1f 95 75 da 6f c0 29 18 2b 6a da e2 8e 7e 68 ad 61 2d 91 ec cc 47 fe 83 5e dd 45 00 79 fe 9d f0 6b c1 f6 1c cb 6b 71 7a dd 41 b9 9c f1 f8 26 d1 f9 d7 63 a7 68 9a 56 8e a5 74 dd 36 d2 d0 11 82 60 85 50 b7 d4 81 cf e3 57 e8 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 a8 df 68 ba 56 a9 ff 00 21 0d 32 ce ef fe be 20 59 3f 98 35 7a 8a 00 c1 5f 04 78 4d 49 23 c3 3a 30 27 fe 9c 62 ff 00 e2 6a ed b6 81 a3 59 0c 5a 69 36 10 0f 48 ad 91 7f 90 ad 1a 28 01 00 0a 00 00 00 3b 0a 5a 28 Data Ascii: c_WXx?z^e:,Kkh>c~xRd6suo)+j~ha-G^EykkqzA&chVt6`PW(((((((((((((hV!2 Y?5z_xMI#:0'bjYZi6H(;Z(
2024-03-18 16:22:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.4	50112	172.67.161.117	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:17 UTC	1134	OUT	GET /imageresize?url=width=336::height=336::imgurl=https%253A%252F%252Fcdn.shopify.com%252Fs%252Ffiles%252F1%252F1996%252F9707%252Ffiles%252Fecoflow-us-ecoflow-wave-2-portable-air-conditioner-delta-pro-portable-power-station-30313001386057.png%253Fv%253D1683344965::campaignId=64180 HTTP/1.1 Host: rtgcdn.2trk.info Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
2024-03-18 16:22:18 UTC	917	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:18 GMT Content-Type: image/jpeg Transfer-Encoding: chunked Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Cache-Control: max-age=604800, public Expires: 604800 Default-Img: no X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: unsafe-url Via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Pghh72OJPrM9NYov8vbQ29QPCGrVnFkRDo8sylZyjP37XrXyzdrbx4JmgZlR9cvdUsjwmbi6oZx3HDIFnsAx9s1UNtQnCBVqQ23q%2BsjJ02cm3lOGGjgcdXbON4Oe2851MGsG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f8aca7a1768-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:22:18 UTC	452	IN	Data Raw: 32 34 38 61 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 01 50 01 50 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 248aJFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222PP"}!1AQa"q
2024-03-18 16:22:18 UTC	1369	IN	Data Raw: 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f7 fa 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a Data Ascii: w!1AQaq"2B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?(((((((((((((((((((
2024-03-18 16:22:18 UTC	1369	IN	Data Raw: 7d f5 cd d1 62 6e 13 7c ae d9 01 0b 7c df 41 82 6b e8 6a f9 6a 16 f9 22 6c 92 71 82 49 cf 4e 2b ea 5a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 2b 93 f1 64 a5 ae ed e1 07 21 57 76 3d 09 35 d6 57 84 fc 57 b9 b9 b5 f1 1d e3 c3 26 c7 06 3d b9 00 fc be 58 e9 9f 7a 00 ec a1 92 41 13 44 1d 84 6c 30 c8 0f 04 77 04 53 53 4c d3 cc 7e 58 b0 b4 45 3f dc 81 54 fe 60 66 bc 97 49 bc f1 4b 59 41 72 2f a7 29 24 8c 15 71 81 81 8e 70 38 ef 5d 8d 8e b3 e2 28 80 69 85 bc e3 8f 95 d3 6f ea bf e0 68 01 fa cc 31 d9 5e ec b5 67 45 fe ee 77 0f d6 aa a6 a7 74 8b 80 d1 91 fe d4 28 7f 98 a8 f5 0b e6 b9 bd dd 3c 4d 03 bf dd 57 39 07 d7 07 bf f3 f6 a8 28 03 41 b5 8d 42 55 54 37 52 2a af 41 1e Data Ascii: }bn\|\|Akjj"lqIN+Z(((((((((((+d!Wv=5WW&=XzADl0wSSL~XE?T`fIKYAr/)$qp8](ioh1^gEwt(<MW9(ABUT7R*A
2024-03-18 16:22:18 UTC	1369	IN	Data Raw: 98 b4 81 89 62 7c c0 c2 3e ac 7a 91 8f 7e a7 99 d3 35 ef 18 2a c5 fd 8f ae da 6a d0 65 92 1b 50 e0 b3 60 72 7c a3 9c 0c 0e ea 2b 66 c7 e2 d6 a7 a5 48 17 5a d1 24 89 73 fb d9 ed b2 a4 f1 d0 6d ca f5 ff 00 66 8b 00 0f 8d 3e 39 b6 82 59 2e fc 35 10 b7 8f 86 b8 8e dd e4 50 73 8e a1 82 fe be 9d 6a 96 8f f1 63 5c ba d5 0d be af e2 e7 b0 8f 69 2c af a6 44 1d 08 ec 73 b4 0e 33 dc f6 e3 ad 76 56 7e 35 f0 7f 8a 50 9b a8 e0 6b 99 15 4c 8c 50 ac b9 1c 84 59 63 c3 b7 e4 38 ce 7b d5 0d 4f e1 cf 85 b5 fb 51 0e 9b 7e b6 91 c6 f8 90 47 6f 14 fe 57 cc 5b 68 2b b7 6f 24 e7 70 27 b1 e9 45 80 ab 7a 3c 59 a9 39 97 48 f1 d4 57 68 62 56 0a d7 0f 69 23 1c 0c ed 4f b8 72 72 47 cf df 19 1d 4f 33 ac 6a df 12 bc 35 1c cd a8 dd ea d6 f0 a1 54 fb 5b ce 64 81 8b 67 18 7c 91 ce 0f 7e 38 Data Ascii: b\|>z~5*jeP`r\|+fHZ$smf>9Y.5Psjc\i,Ds3vV~5PkLPYc8{OQ~GoW[h+o$p'Ez<Y9HWhbVi#OrrGO3j5T[dg\|~8
2024-03-18 16:22:18 UTC	1369	IN	Data Raw: 23 d6 f4 47 b7 b8 2a b9 96 3c 38 66 27 96 24 6d 65 18 ed f3 f4 ac 7b ab 5f 0e db dd 09 74 9f 10 5c da b0 e9 98 64 ca 9f a8 00 d2 18 eb cd 56 33 76 e3 58 f0 f9 b3 94 92 43 da 86 8d 90 7b 06 27 3f 52 6b 7f 45 d5 ee a1 b5 7b d5 b8 ba 6b 2f 2d a3 b5 69 fe 59 77 f1 8f 2d 81 ce d5 c7 3c 81 db 93 59 d6 56 77 c2 55 b8 bb d6 6f a7 b5 c6 e1 1e 64 8d a5 f4 1f 36 08 5e bf 30 f4 20 73 c8 f5 af 86 5e 0f 6d 5e fd 3c 49 aa 26 db 4b 56 02 ce 20 bb 51 99 7b 81 fd d5 3e 9d 48 f6 20 b0 3a ef 0b 78 7e fd 3c 15 08 d6 ee 67 8e ee 66 69 4f 98 03 cc 8a d8 c2 33 38 24 9f af 23 38 e3 15 76 1d 1a ce 09 99 d5 77 29 e8 85 10 01 f9 28 3f ad 6b dd dc 19 e4 e3 ee 0e 82 ab d5 25 dc 45 68 b4 eb 58 95 d5 63 66 57 39 2b 24 8c e3 f2 24 e0 7b 53 46 95 64 99 30 5b a5 bc 87 f8 e1 50 a7 a1 1c f1 Data Ascii: #G*<8f'$me{_t\dV3vXC{'?RkE{k/-iYw-<YVwUod6^0 s^m^<I&KV Q{>H :x~<gfiO38$#8vw)(?k%EhXcfW9+$${SFd0[P
2024-03-18 16:22:18 UTC	1369	IN	Data Raw: 93 08 d2 64 4a 8c 49 24 8e 58 02 01 fc 3a 7b d0 06 be de 98 34 00 47 27 15 0b dc 79 60 e1 1d c8 ec b8 fe a4 52 c7 73 1c f1 96 8d b3 86 c1 04 60 83 9e 84 50 06 44 df f1 f7 3f fb e6 95 49 0c 29 b2 64 dd ce 31 fc 66 8d e0 38 4c 36 7d 94 e3 f3 a0 08 ae 17 6d c4 7b 51 40 21 8b 10 3b f1 ff 00 d7 a8 ea 69 e3 d8 c9 8c e3 27 ab 13 fc ea 1a 00 d0 d2 ec 56 f4 ca 0d bd d4 cc a0 6d 10 ed 55 07 9f bc e7 21 47 1e 95 60 c0 a8 6e 27 b5 b4 8d 9d 04 68 b1 07 17 01 77 03 96 38 c8 27 23 1e 80 b0 ef 8a cf b6 b8 86 04 7f 32 d2 39 dc 90 54 c8 cc 02 e3 39 e1 48 ce 69 cd a8 5c 0b a7 b8 85 c5 b3 b0 c6 2d 87 96 00 f4 e2 80 28 eb d3 ea 32 de 79 77 6b 20 91 97 2e ae 9b 09 ce 00 18 e3 03 a5 54 99 63 5b 87 75 00 aa c1 b4 9f f6 9a 1f f1 cd 5d 69 11 6e a1 79 4e 72 7b 9e bf 3c 67 9f d6 aa Data Ascii: dJI$X:{4G'y`Rs`PD?I)d1f8L6}m{Q@!;i'VmU!G`n'hw8'#29T9Hi\-(2ywk .Tc[u]inyNr{<g
2024-03-18 16:22:18 UTC	1369	IN	Data Raw: d8 f1 c0 eb 5d 86 8d f0 bb c6 5a d9 56 8f 48 92 d2 12 c0 19 6e ff 00 74 06 7b e1 be 62 3e 80 d0 07 1f 25 b8 bc d9 0b 60 65 b8 e7 bd 45 24 5f e8 b0 26 e3 b8 2b 48 47 b1 54 6f f1 af 61 ba f8 33 75 e1 af 0d 6a 1a e5 e6 ab 04 f7 76 96 d2 38 b7 48 03 c7 d3 04 ee 7e e0 12 47 cb 90 40 20 e4 57 8a 0b 89 23 76 77 39 41 09 8d 73 c7 06 32 a3 ff 00 41 a0 0b 73 0f 3d 1c 83 f3 17 9d b9 f6 c3 0a 62 48 d1 86 59 06 7e 59 db 8f f6 90 54 46 63 03 60 83 8f 2b a9 e7 99 23 06 a5 93 13 12 50 82 19 a2 8c 01 fe d4 7f e2 29 88 77 d9 04 b7 3b 93 94 93 cb 40 3d de 3c 9f e5 4d 11 ed 45 90 f0 30 8f fa ed a7 da cb e5 49 10 e7 6f 9d 13 01 9e c1 48 a5 59 03 5b 88 ca e4 1b 65 cf fd fd ff 00 f5 50 05 5d 4b fd 1e e2 28 54 10 90 ca e7 af 39 dd ff 00 d6 14 f8 39 d3 ff 00 e0 2d fc cd 2e a6 be Data Ascii: ]ZVHnt{b>%`eE$_&+HGToa3ujv8H~G@ W#vw9As2As=bHY~YTFc`+#P)w;@=<ME0IoHY[eP]K(T99-.
2024-03-18 16:22:18 UTC	696	IN	Data Raw: e7 48 3d 0e 14 ed c1 ff 00 7a bd ee 18 62 b7 85 21 86 34 8e 24 01 51 11 40 55 03 b0 03 a5 3e 9d 80 f3 fd 1f e0 ff 00 86 74 dd af 76 93 ea 33 0d a4 99 df 6a 06 1d 48 55 c7 07 d1 8b 57 71 65 61 67 a6 c1 e4 58 da 41 6b 0e 49 f2 e0 8c 22 e4 f5 38 03 15 62 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 c7 d6 fc 2b a0 f8 8d 36 ea fa 55 ad d9 c1 01 a4 8c 6e 5c 8c 70 dd 41 fa 57 12 9f 03 7c 33 6d 79 71 25 8d c5 f5 ac 17 08 22 92 04 90 30 da 08 6c 02 c0 e3 2c aa 79 cf 4c 77 af 4e a2 80 39 9d 23 e1 f7 85 f4 5c 35 b6 91 04 92 80 bf bd b8 1e 6b 64 7f 10 dd 90 a7 bf ca 05 74 d4 51 40 05 14 51 40 05 14 51 40 05 14 51 40 Data Ascii: H=zb!4$Q@U>tv3jHUWqeagXAkI"8b((((((((((((((((+6Un\pAW\|3myq%"0l,yLwN9#\5kdtQ@Q@Q@Q@
2024-03-18 16:22:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.4	50113	172.67.161.117	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:17 UTC	1114	OUT	GET /imageresize?url=width=336::height=336::imgurl=https%253A%252F%252Fcdn.shopify.com%252Fs%252Ffiles%252F1%252F1996%252F9707%252Ffiles%252Fecoflow-ecoflow-double-voltage-hub-power-input-output-delta-pro-30641334714441.png%253Fv%253D1704179963::campaignId=64180 HTTP/1.1 Host: rtgcdn.2trk.info Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
2024-03-18 16:22:18 UTC	925	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:18 GMT Content-Type: image/jpeg Transfer-Encoding: chunked Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Cache-Control: max-age=604800, public Expires: 604800 Default-Img: no X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: unsafe-url Via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LVm%2BmXn5b9DE787t%2FpARjzK5%2FinytHiae4WkA4aukXZEpsxTcZOFJdXxnkC1xaKdkUaQjd6HwMohXOzayymvJSM8o9%2F9ud1HNRVVHGpJvRvXcj08112isn7Tah%2BF9cYMO6gy"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f8abf9a4387-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:22:18 UTC	444	IN	Data Raw: 31 36 66 65 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 01 50 01 50 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 16feJFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222PP"}!1AQa"q
2024-03-18 16:22:18 UTC	1369	IN	Data Raw: 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f7 fa 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a Data Ascii: w!1AQaq"2B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?(((((((((((((((((
2024-03-18 16:22:18 UTC	1369	IN	Data Raw: 7a ea 28 03 e6 bf 03 f8 ae f3 e1 a7 89 ee 74 fd 66 19 ed f4 c9 25 d9 a8 5a 91 b8 da cb 81 89 94 0e aa 46 32 57 ef 2e 08 ce 00 af a4 20 9e 2b 9b 78 ee 2d e5 49 61 95 43 c7 24 6c 19 5d 48 c8 20 8e 08 23 bd 79 ff 00 c5 4f 02 ff 00 c2 4b a5 ff 00 6a d8 47 9d 56 ca 26 fd d8 5c fd aa 2e a6 3e 39 dd d4 af b9 23 f8 b2 39 2f 83 1e 3a 30 5c 47 e1 1d 4a e7 7d bc 8b bb 49 95 97 91 d4 b4 2c df aa e7 dc 67 ee 8a 00 f7 1a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 22 b9 b9 86 ce d6 6b ab 99 16 28 21 46 92 49 18 e0 2a 81 92 4f b0 02 b8 e7 f8 b9 e0 74 42 e7 5b e0 0c f1 69 37 ff 00 11 5b be 2e ff 00 91 2f 5d c7 fd 03 ee 3f f4 5b 57 ce eb fd 9f 25 bc eb a8 cb 2c 50 94 fb c8 0e 7f 91 a0 0f 64 1f 1a 3c Data Ascii: z(tf%ZF2W. +x-IaC$l]H #yOKjGV&\.>9#9/:0\GJ}I,g(((((((((("k(!FI*OtB[i7[./]?[W%,Pd<
2024-03-18 16:22:18 UTC	1369	IN	Data Raw: 81 cf cb 9e 81 45 7b 15 7c dd e3 bd 1e e3 c0 5f 10 56 f7 4a 8c 45 0b 48 35 2d 3c 00 42 06 07 f7 b0 f1 8f 97 3d 54 7f 0b 81 40 1f 48 d1 54 f4 9d 4e 0d 67 47 b2 d4 ed 77 79 17 70 24 e8 1b 19 01 80 38 38 ee 33 83 57 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 af 99 fc 30 47 83 7e 34 d9 5a 16 b9 8a da 3b f9 b4 b2 a7 3b a4 8d c9 58 77 0e 32 09 31 b7 a7 00 fa 57 d3 15 f3 6f c6 58 ae 34 3f 88 93 ea 96 b3 e2 e5 92 d7 51 81 b6 83 e5 ba 7e ec 70 78 3c c4 0f e3 40 1f 49 51 48 08 60 08 20 83 c8 22 96 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a f3 6f 8d 7a 54 77 3e 0c 8b 56 f9 16 6d 2e e5 24 dc 57 2c 63 72 23 65 07 b6 4b 23 1f f7 2b d2 6b 0f Data Ascii: E{\|_VJEH5-<B=T@HTNgGwyp$883W((((0G~4Z;;Xw21WoX4?Q~px<@IQH` "((((((((((((((ozTw>Vm.$W,cr#eK#+k
2024-03-18 16:22:18 UTC	1343	IN	Data Raw: 00 70 7e 1f f9 fc 47 e1 b1 16 d3 1a ea b6 a5 8d b6 cf 2b 3e 6a f5 fe 2c f4 af aa 2b e5 7b 2b ad 62 d3 53 b1 bc 3a 3c d2 0b 6b a8 6e 0a f9 b1 8c 84 91 5c 8c e7 b8 5c 7e 35 ea 7f f0 b8 ef 3f e8 4e bb ff 00 c0 d8 e8 03 d5 68 af 2a ff 00 85 c7 77 ff 00 42 75 df fe 06 c7 47 fc 2e 4b bf fa 13 ae ff 00 f0 32 3a 00 f5 5a 2b ca 7f e1 72 5d ff 00 d0 9d 77 ff 00 81 91 d1 ff 00 0b 96 ef fe 84 eb bf fc 0c 8e 80 3d 5a 8a f2 8f f8 5c d7 5f f4 27 5e 7f e0 64 74 9f f0 b9 ee bf e8 4e bc ff 00 c0 c8 e8 03 d6 2b c0 be 31 49 18 f8 91 6c 77 da ee 5d 2e 25 c4 98 de 3f 7b 29 f9 33 df 04 7e 75 d2 ff 00 c2 e8 ba 1f f3 27 5e 7f e0 5c 7f e1 5e 75 e2 af 10 ea 7e 21 f1 25 c6 ab 16 85 3c 0b 2c 71 46 10 ca 8c 46 d0 73 cf 7c e7 f4 a0 0f 46 f8 21 78 ef 65 ad d8 bb 3e 62 9e 39 f6 ca 00 71 Data Ascii: p~G+>j,+{+bS:<kn\\~5?Nh*wBuG.K2:Z+r]w=Z\_'^dtN+1Ilw].%?{)3~u'^\^u~!%<,qFFs\|F!xe>b9q
2024-03-18 16:22:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.4	50107	192.184.68.228	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:17 UTC	608	OUT	GET /dpixel?a=p-n5vvLvRdjg0ek&eid=0&qc_google_push=&google_gid=CAESEDf-KmwndYmbhC_Ghpb5Gk4&google_cver=1&google_push=AXcoOmS7sTLRMI21elo2udyioFfMgpvvI0jpl8qslBdZHSPKThPWGOxrxMhBej3iCkmZYxmVtIEhZnop-lyx36XbeYfviz-zJTw HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: d=EAABCQGzK4EA; mc=65f86a39-0bce5-d0ea9-092f1
2024-03-18 16:22:18 UTC	555	IN	HTTP/1.1 302 Found Date: Mon, 18 Mar 2024 16:22:17 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://cm.g.doubleclick.net/pixel?gdpr=0&google_nid=B765081F39B1F7&google_push=AXcoOmS7sTLRMI21elo2udyioFfMgpvvI0jpl8qslBdZHSPKThPWGOxrxMhBej3iCkmZYxmVtIEhZnop-lyx36XbeYfviz-zJTw&google_hm=Hc_dAMssvnOxAMlS_ZSeTA Pragma: no-cache Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.4	50110	172.67.161.117	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:17 UTC	1119	OUT	GET /imageresize?url=width=336::height=336::imgurl=https%253A%252F%252Fcdn.shopify.com%252Fs%252Ffiles%252F1%252F1996%252F9707%252Ffiles%252Fecoflow-us-ecoflow-blade-robotic-lawn-mower-blade-robotic-lawn-mower-30305163903049.png%253Fv%253D1682662842::campaignId=64180 HTTP/1.1 Host: rtgcdn.2trk.info Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
2024-03-18 16:22:18 UTC	927	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:18 GMT Content-Type: image/jpeg Transfer-Encoding: chunked Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Cache-Control: max-age=604800, public Expires: 604800 Default-Img: no X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: unsafe-url Via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1Z7v1VoQ1Ug119Wkv9bHUKJF2b2dkGK2LQ%2BUNvVx1Gf%2BKLAi50ADk%2Fi3GgVkenQtpx31P%2B0%2F8MwzNTszqmEvDbOyJXuHMR3n2dt4OkztJxplsaWaHVgFUixP%2B0AgSMxZrTEM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f8aeb2c0cac-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:22:18 UTC	442	IN	Data Raw: 32 63 63 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 01 50 01 50 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 2cc0JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222PP"}!1AQa"q
2024-03-18 16:22:18 UTC	1369	IN	Data Raw: 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f7 fa 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 Data Ascii: w!1AQaq"2B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?(((((((((((((((((
2024-03-18 16:22:18 UTC	1369	IN	Data Raw: 7a ea 5e 1b 0b 9b 96 b9 37 57 1b ce cf 94 dd c8 a8 36 b0 61 84 2d b7 aa 8e dc 8c 83 90 48 31 9d 22 2b 9b 62 93 5e 49 78 a4 b3 7e fe 38 a4 42 c6 37 8c 92 bb 30 32 ae 01 c6 38 41 ea fb a4 a3 cf af 3e 1b eb 10 2e 6c f5 1b 5b b0 22 25 84 e8 62 62 e3 b0 c6 47 3e a4 8a ac 35 0f 1e 78 6f c9 27 fb 62 18 ad e2 de 8b 0c a6 78 51 47 18 2a 09 50 06 3a 11 d2 bd 1a da c6 f3 4c 78 ed ed 0c 53 d8 96 e5 24 d9 0f d9 97 39 c4 6b 1c 60 30 e4 f0 70 78 ea 73 c6 6d a5 c7 88 6c 2c d9 f5 08 cd c8 8c c2 25 72 8a ee 4e f4 59 9a 35 88 02 53 61 66 40 46 fc 86 dc 31 b4 51 60 39 dd 3f e3 47 89 2d d6 44 92 e6 c6 f5 89 04 1b 98 36 94 f6 1b 0a fe b9 ae b6 c3 e3 85 bb 4a 8b a8 e8 92 c7 1e df 9e 4b 79 c3 9d de ca 40 e3 fe 05 f9 d3 b5 4b 3d 27 51 ba 92 0d 43 4f b7 ba 65 4d a1 e6 44 24 46 7b Data Ascii: z^7W6a-H1"+b^Ix~8B7028A>.l["%bbG>5xo'bxQG*P:LxS$9k`0pxsml,%rNY5Saf@F1Q`9?G-D6JKy@K='QCOeMD$F{
2024-03-18 16:22:18 UTC	1369	IN	Data Raw: 53 5c 46 27 6b 78 26 0b 16 d6 19 55 6c 0d d9 c1 19 c1 1c fe ab 66 1b a3 8c f0 77 8d 6f 2d 3c 41 a7 59 69 76 eb 6e 6e ae e3 8b 6b 5d 49 e5 b3 3b 04 05 94 1c 1e be 95 f4 f5 73 da 57 81 3c 2d a2 79 66 c7 42 b2 49 22 93 cc 8e 59 23 f3 64 46 f5 0e f9 61 ed cf 15 d0 d5 4e 6e 7b db e4 92 fc 89 85 35 0d af f3 6d fe 61 45 14 12 00 c9 e0 54 16 14 54 53 5d 5b db 15 13 cf 14 45 ce 17 7b 85 cf 41 c6 7e a3 f3 a9 68 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a f2 8f 14 fc 64 8b 4c d5 e7 d2 74 9b 68 1e e6 da 66 86 66 b9 6d df 32 b1 52 02 29 ce 38 07 24 fe 14 01 a9 f1 3b e2 03 f8 5e d5 74 ed 29 d4 ea f3 a1 7c 95 0c 21 4e 9b 86 78 dd 92 08 04 11 80 72 3a 67 c0 6e ee 35 bb 9b 98 e7 92 f6 5b cb c2 b9 b8 7b a2 19 5b 38 0b f3 60 12 42 83 9e Data Ascii: S\F'kx&Ulfwo-<AYivnnk]I;sW<-yfBI"Y#dFaNn{5maETTS][E{A~h((((((dLthffm2R)8$;^t)\|!Nxr:gn5[{[8`B
2024-03-18 16:22:18 UTC	1369	IN	Data Raw: 15 78 9e d7 c1 fa f2 c5 6b 24 8b ab 1b 72 d6 b8 46 da 7c c0 ca 01 e4 07 00 80 70 dc 64 2f 71 90 0c ed fc 67 f1 07 4e d0 fc 2a f7 da 5d d4 7a 85 cd c3 1b 7b 5f b1 c8 92 e2 42 18 06 23 3c 80 47 bf 38 1d eb c7 7c 63 e3 9d 47 c5 de 14 d2 a2 6b b9 51 6d d7 6e a0 91 92 a2 e4 f1 89 24 00 05 00 95 04 2f 4c b1 03 24 71 c6 69 ea 2d cc b6 b7 56 a1 95 d4 a3 79 0c 18 f9 80 10 19 57 91 bf 92 38 1c 13 f8 57 77 e1 7f 0f ff 00 64 c3 6f 79 74 23 6b db ab a8 63 85 64 01 d6 dd 9e 45 40 f8 e0 16 52 c0 e7 8e 98 04 75 28 05 6d 27 c6 7e 31 d2 b4 f3 aa 3c d0 a4 4a 62 86 e7 51 b8 48 62 d9 85 38 db b4 48 e4 e1 7e 62 0e 48 ce 6a de a7 a1 78 c3 53 3a 59 4d 5b 4e 4f ec b8 12 0b 53 6d 75 3a 94 da 31 b8 66 31 86 23 a9 07 9e 3d 2b 49 a4 d4 60 d7 2f a0 d5 ee 04 ad 1a 89 3c dd 85 55 40 e1 Data Ascii: xk$rF\|pd/qgN*]z{_B#<G8\|cGkQmn$/L$qi-VyW8Wwdoyt#kcdE@Ru(m'~1<JbQHb8H~bHjxS:YM[NOSmu:1f1#=+I`/<U@
2024-03-18 16:22:18 UTC	1369	IN	Data Raw: da 68 03 d0 ad e3 6d 3b 4e 1a 6b 32 b3 47 21 2e ca 30 33 d3 8f e7 48 5f 03 24 f1 5c 2c 69 2b a3 a9 69 98 b0 23 74 88 5b 1f 43 eb 5a 5a 7d fc 9a 7c 42 29 cc 8d 6e 49 67 f2 e3 01 b3 8f 71 f4 a7 71 58 e7 6f 84 ba 8e b6 66 0b 98 de 6c 6f 5e 55 80 38 ce 7d f1 5e f7 73 6c da 76 81 a5 59 88 a4 58 ed ed c1 90 84 62 a1 d8 f3 92 06 07 38 e3 de bc 5a ee fe cf 50 5f 2c 86 8a 5d ff 00 7b ef 0c 73 d8 0e bd 3f fa d5 ad a4 78 b7 c5 7e 1f 68 c6 9d a8 7d b2 d1 59 55 60 ba 3b d7 01 70 07 27 28 00 23 85 61 db 34 0c 9f c6 37 6b 75 ae 43 6a b2 07 4b 64 25 95 46 48 63 c9 1e fc 05 ac 6b bb e9 ef 44 4e 6f 04 eb 1a aa 24 73 81 98 c7 2c 15 4e 38 c6 e3 fa d7 71 1f c4 9d 33 55 b2 9c 6a 5a 04 9a 76 b0 60 30 c1 7d 6f f7 43 91 cb 67 1b 90 6f c7 4d dd 46 48 e0 d7 9c 89 1e 75 52 c5 1d 0b Data Ascii: hm;Nk2G!.03H_$\,i+i#t[CZZ}\|B)nIgqqXoflo^U8}^slvYXb8ZP_,]{s?x~h}YU`;p'(#a47kuCjKd%FHckDNo$s,N8q3UjZv`0}oCgoMFHuR
2024-03-18 16:22:18 UTC	1369	IN	Data Raw: 20 92 71 f8 63 1c 7a 75 f4 a8 9a 67 5e b2 4b f8 60 d0 07 55 1d d5 98 5c 19 7f f1 d3 fe 15 1d cd cd ab c6 42 c9 9c ff 00 b2 7f c2 b9 a1 24 c7 fe 5a bf d1 a3 3f d2 82 25 3c 95 56 fa 31 5a 00 ba 91 c3 14 fe 61 c9 1e c2 ba 3f 0b e8 f7 1e 20 d6 ed 74 fb 70 a6 5b 87 0a ae d8 f9 54 02 49 e4 8c 80 b9 3b 7b e3 a1 ae 3e 38 99 e4 00 89 13 d4 97 dc 07 bf e1 d7 f0 af a6 be 19 78 0e e7 40 86 cb 59 9a 67 b7 9e 78 1d 26 b2 92 1c 1f 2d b6 14 07 27 2a c3 6e 48 23 f8 b0 40 22 80 3c cf c7 5f 0e 5f c1 da 2c 17 f7 5a f6 9e 67 9d 73 2d a9 5d 8d 24 b8 1b fc b1 d1 d4 12 7b 26 00 51 82 4f 3e 75 e7 f9 8d 16 d2 ac 09 e4 f7 ed e9 8f f2 6b eb 8f 88 16 96 77 be 01 d6 e2 be 48 de 31 68 ee 82 47 0a 3c c5 19 8f 93 d0 ef 0b 8f ca be 3f 6b 83 04 62 35 60 5c 37 23 b0 1e 80 f7 fa d0 07 d0 3a Data Ascii: qczug^K`U\B$Z?%<V1Za? tp[TI;{>8x@Ygx&-'*nH#@"<__,Zgs-]${&QO>ukwH1hG<?kb5`\7#:
2024-03-18 16:22:18 UTC	1369	IN	Data Raw: 5c ef 88 3c 21 aa e8 52 2a 35 cd 8e a0 36 82 64 d3 dd a4 03 92 31 c8 52 48 f6 04 73 59 fb 64 03 e5 95 81 ff 00 74 7f 85 0a 27 fe 2b 82 7e 8a 05 00 32 eb 4b d5 ec e5 82 09 a0 54 92 76 2b 10 0e 18 9e 7b e0 9c 0e 47 26 ab 3c 77 36 93 84 be 76 84 13 c9 0a 18 e3 20 12 07 19 ef dc 74 eb 57 b6 9c 7f ac 7f d3 fc 28 f2 c9 ff 00 96 8f fa 7f 85 00 77 5f 0e 6d be 1d 87 92 5f 15 6b 51 dc de 48 8f 0a 59 35 bc ab 14 60 82 a5 cb 85 19 38 3c 1e 36 f2 79 3b 48 fa 2f 46 d5 74 3b db 74 b6 d1 75 2b 1b a8 ad e3 55 09 6b 70 b2 ec 51 c0 e8 4f 1c 63 f0 af 8e 4a 04 19 79 58 0f 7c 0f e9 4a b2 db 77 96 33 f5 71 40 1f 68 de d8 d9 ea 36 72 5a 5f da c1 75 6c f8 df 0c f1 87 46 c1 c8 c8 3c 1c 10 0f e1 5f 27 7c 45 d1 f4 ed 03 c7 ba 84 5a 6c c8 2d 24 6f 3a 14 84 29 08 1c 06 2a 30 a1 42 82 Data Ascii: \<!R56d1RHsYdt'+~2KTv+{G&<w6v tW(w_m_kQHY5`8<6y;H/Ft;tu+UkpQOcJyX\|Jw3q@h6rZ_ulF<_'\|EZl-$o:)0B
2024-03-18 16:22:18 UTC	1369	IN	Data Raw: f2 e6 5f 2a dc 99 a4 3f c2 88 19 bf 96 68 03 4a df 47 b5 ea 60 46 23 d5 46 2a ec 7a 6d b4 5d 11 73 e8 a3 02 ab 8f 0d f8 c8 80 c9 a2 6b d8 3c 82 96 93 60 fe 42 ac 59 f8 3f c7 1a 9c a6 de 3d 1b 59 07 fe 9e 62 78 57 fe fa 93 03 f5 a0 08 af ac ec 9e 25 17 6e 50 7f 0b 20 f9 97 a7 23 ff 00 af ef 58 5a d2 5a 47 34 02 cd 96 37 0a 14 46 8a 70 3b 6e 2d dc fb e3 3c 57 5e df 08 bc 76 32 7f b0 0b 1f 6b b8 3f f8 ba bd 63 f0 53 c6 77 9f eb ed ad 6c bf eb e2 e5 4f fe 8b dd 40 1e 71 24 b2 69 da 88 9b 4a 79 d1 d1 46 c9 90 98 d8 71 cf 2b 8a b3 aa 6b da be a9 37 d9 e6 bd d4 ae ac c3 ab 2c 77 b7 32 48 3f 10 49 1f 95 7a 59 f8 09 e2 c0 38 be d1 49 f7 9e 51 ff 00 b4 ab 52 c7 f6 7e bf 92 0c df eb f6 d6 f3 7f 76 0b 76 99 7f 32 53 f9 50 07 98 78 43 c5 9a d7 83 f5 f7 d5 6c a3 b1 79 Data Ascii: _?hJG`F#Fzm]sk<`BY?=YbxW%nP #XZZG47Fp;n-<W^v2k?cSwlO@q$iJyFq+k7,w2H?IzY8IQR~vv2SPxCly
2024-03-18 16:22:18 UTC	70	IN	Data Raw: 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 7f ff d9 0d 0a Data Ascii: QEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.4	50103	104.21.82.186	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:17 UTC	895	OUT	GET /rtgstat/adchoice-links/nai_bigpreciso.png HTTP/1.1 Host: cdn.2trk.info Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
2024-03-18 16:22:18 UTC	1098	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:18 GMT Content-Type: image/png Content-Length: 1710 Connection: close X-GUploader-UploadID: ABPtcPqgil-Ar3c2kQ4WdmijRpRrTVdDia8l-Q97yBXor3JZqKpCS1I0SkZ_F4CXZnP9VESi8UnimmwXDA x-goog-generation: 1668158493969522 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 1710 x-goog-hash: crc32c=xZG4mQ== x-goog-hash: md5=pPLcP1uCo83PfVdUKUSRdw== x-goog-storage-class: STANDARD Expires: Mon, 18 Mar 2024 05:09:48 GMT Cache-Control: public, max-age=172800 Age: 43943 Last-Modified: Fri, 11 Nov 2022 09:21:34 GMT ETag: "a4f2dc3f5b82a3cdcf7d575429449177" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YAx%2Bi4cfgilfhZ7xL8g%2BmTDjVJMfMDVQVUYmri1%2Bo1wy7aXIAVCWVodjS6zCpHNUX%2BJqBiF5KeGzU7x4bITAczvA57CT25n1oOXNKk8jsXLMKgWgMgUbG9PGqRNkhua3"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f8b49fc0f99-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:22:18 UTC	271	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4d 00 00 00 0f 08 06 00 00 00 a1 99 42 d7 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 06 50 49 44 41 54 78 da ec 57 09 6c 14 55 18 7e 73 ed ec d5 3d 3a db dd ed b9 74 b3 f4 a0 14 b1 14 a9 60 b1 0a a2 80 ad 10 01 15 10 bc 02 0a 5a 8a 84 a8 44 40 41 12 09 41 85 60 40 4c 48 41 30 6a 2a 72 14 42 a1 80 2d 47 4b a1 5c 2d 47 4b 2f 7a 6e e9 b6 7b 5f b3 3b 6f 7c 53 a2 21 a5 01 8b 05 25 f2 4f 5e 26 33 ef 7f c7 ff bd ef 3f 1e c6 f3 3c b8 45 c6 a0 96 03 1e c9 1d 85 ec f1 4d ff 9d 41 fb 4e b9 c3 d6 ee 75 c5 d9 3d bc 08 c7 78 40 91 18 37 67 8c a4 f6 8d 71 ca 96 87 c5 f0 27 e6 ec 7e b1 af 63 ca 36 bf 94 df 1b 68 77 95 5f 8f 39 75 1f ff 60 1b Data Ascii: PNGIHDRMBtEXtSoftwareAdobe ImageReadyqe<PIDATxWlU~s=:t`ZD@AA`@LHA0j*rB-GK\-GK/zn{_;o\|S!%O^&3?<EMANu=x@7gq'~c6hw_9u`
2024-03-18 16:22:18 UTC	1369	IN	Data Raw: e6 e9 86 74 3a 20 bd 68 8a ba ee be 58 19 0c 62 60 cd b7 69 20 3a c2 0a 66 4e bd fa 5f 62 da 5d 65 45 9e 33 39 3b a1 ab ed 03 57 81 0c b8 38 29 20 45 5c aa ef 8c 48 93 32 b1 f9 93 43 fa f8 cc 34 99 39 2e 4a e4 e9 f7 9d 62 18 e8 60 a2 5d 40 a5 f3 86 f5 e3 b4 7f b2 a7 2f ac ec 33 68 24 cf 81 f1 58 35 0e 30 92 07 19 e9 b5 c0 e9 16 81 9a 5a 66 94 ad 42 1a 21 d7 79 0f 94 7b c2 10 68 d7 77 9f 74 69 77 97 b8 a2 6c 2e 8e 8e 0a 97 d8 73 c6 4b 1a 8c d1 92 6e 30 7f 3c e2 08 df 57 e6 8e 74 7a a1 28 79 00 dd 35 67 82 b2 c1 a0 a3 7c 42 9f dd 0d c9 ef f6 d9 0c a7 ae fa c2 28 02 c0 91 89 52 f3 fc 49 aa 26 82 20 f8 6f f0 a7 82 46 92 e6 de 46 7a 05 e5 1e 66 7b a1 3d b6 cb 01 45 8c 06 07 d3 a7 8b 60 9a 56 71 59 85 51 8e 20 c7 63 9b f7 db 63 8a 2a 7d 5a 8e 07 d8 08 93 c8 f2 Data Ascii: t: hXb`i :fN_b]eE39;W8) E\H2C49.Jb`]@/3h$X50ZfB!y{hwtiwl.sKn0<Wtz(y5g\|B(RI& oFFzf{=E`VqYQ cc*}Z
2024-03-18 16:22:18 UTC	70	IN	Data Raw: e9 d5 24 db 2f 25 63 8f bb 27 83 da 96 7b 71 db 87 4d fe c9 35 aa 27 38 82 cf ff f2 e8 4a de 37 a6 fd e5 85 a8 4d 41 cd f4 7f 60 5d 5f e5 0f 01 06 00 de 85 d3 3a 72 36 eb 96 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: $/%c'{qM5'8J7MA`]_:r6IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.4	50121	142.251.40.226	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:18 UTC	1574	OUT	GET /pcs/view?xai=AKAOjssqF0Xg6pTIfNQoxZkHZSQmUSslTInJ7DOTTaYQvu2bu2f8dWcPScqJ8zKbS2kol-r8d5GY7NvjuURbXz9PqKDxlPQVkxqCP61C2fi_r7Upz9oeV9JMY-BF4ZFKgCD1OgQaXuYGs-Vg8o2uqK3GI9E-9b4aGGQj202Oi5wujsrW9Bx6vLiJnb_w_xLEBDuWgg86P2PTi3P_5V6_kJ_5Qta15B2EUW78mZbuV9IfDoJTgzl_aEKW_lYJ4ORsSisHYNuEfXRR7hgRI3uTpVyH1lEPG0zXWt3v4Xgh96yZLHPJUKbkBXUab1Aahg_lhVs8xJr5xh6mszxq44RF9gxi8rn1-IE92R2u1xGtTuKwnhVArTzXyTkKDyCk36Yuv2NyG9ExKRf2kbdE2w4ho-oCjhbIjcMhuA&sai=AMfl-YQ1f6_kTUqVUUo3HlNhmzKom8QZbQFb9UHZ7v4qX2xeXRQc0no59o4F0WJAPt94ldRzih_Ar3UP6Lv0p6mjLVV6zSu47Ayuvqvcw1ZGGdjsiCcjlVv0ml5VY0MqUKx4yuUgwPhHcCmyZGyg0lJM3KlJ&sig=Cg0ArKJSzPcrrzx6pW8mEAE&uach_m=%5BUACH%5D&urlfix=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:18 UTC	981	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 18 Mar 2024 16:22:18 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Mon, 18-Mar-2024 16:37:18 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 18 Mar 2024 16:22:18 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.4	50124	172.67.161.117	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:18 UTC	1921	OUT	GET /impression?v1ImpParams=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&price=ZfhqNgADgx0IaC2SAANF52JO3Lfum6SO_Xb30Q&bs=49a8ccc8-4e10-415f-b3cc-85fda009ccda&cbvp=2 HTTP/1.1 Host: bid.2trk.info Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fingerprint=cokdate%3D03%2F18%2F2024+16%3A22%3A15%26userid%3Dab593042-cce3-4413-a855-3f528fbc501d%26rank%3D100%26icrank%3D1000%26icount%3D1%26ccount%3D0%26csranka%3D0%26csrankb%3D0%26vsranka%3D0%26vsrankb%3D0%26ip%3D191.96.227.194%26p%3D%26ty%3D0; 64180_viewnew=date%3D03%2F18%2F2024+16%3A22%3A15%26subid%3Dbid_%7ECM.64180%7ESZ.970%7ETS.pdx%7Edv.3%7EBI.110886972959%7EDI.%7EST.25_%26size%3D183277%26campaignid%3D64180%26impressionid%3D171077893525031688606276467698294451418166%26refURL%3Dbrowser-update.org
2024-03-18 16:22:18 UTC	562	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:18 GMT Content-Type: image/gif Content-Length: 43 Connection: close Via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5VSBM7k2QCtGYxvq9nAE9t9EYPPPCDGwh5jXZ60slR%2FllBsOW4IAxgx1sExNFfmdzmy2cLRjPxVlgk8bbvLQWDxaHbywOihqnLTNM8xlvfHY%2BVGyO%2BO67z4rm1OwJdpo"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668f8d3d2a7cb4-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:22:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.4	50123	142.251.40.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:18 UTC	1230	OUT	GET /pagead/adview?ai=CEm6bNmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMQBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0cA14nLNdYNA2tHUPKCzdLObYUZIZ2ZVSPZpS37KSXq2ZP1C4BdGoAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAOACgP6CwIIAYAMAdAVAYAXAbIXHAoaEhRwdWItNTg4NDI5NDQ3OTM5MTYzOBiZ0iE&sigh=1rQ19qL1_fY&uach_m=%5BUACH%5D&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQVGAE&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:18 UTC	628	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 18 Mar 2024 16:22:18 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.4	50120	104.18.36.155	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:18 UTC	1114	OUT	GET /usermatchredir?s=191740&cb=https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26nuid%3D33A008D0E14543A2A207D07731F02C5F%26att%3D1%26pid%3D82%26cb%3Dhttps%253A%252F%252Fmatch.prod.bidr.io%252Fcookie-sync%253Fgdpr%253D0%2526userid%253D8457389007004702379%2526gdpr%253D0%2526gdpr%253D0%2526bee_sync_partners%253Dpm%2526bee_sync_current_partner%253Dsyn%2526bee_sync_initiator%253Dadx%2526bee_sync_hop_count%253D4%26uid%3D HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:18 UTC	1145	IN	HTTP/1.1 302 Found Date: Mon, 18 Mar 2024 16:22:18 GMT Content-Length: 0 Connection: close Location: /usermatchredir?cb=https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26nuid%3D33A008D0E14543A2A207D07731F02C5F%26att%3D1%26pid%3D82%26cb%3Dhttps%253A%252F%252Fmatch.prod.bidr.io%252Fcookie-sync%253Fgdpr%253D0%2526userid%253D8457389007004702379%2526gdpr%253D0%2526gdpr%253D0%2526bee_sync_partners%253Dpm%2526bee_sync_current_partner%253Dsyn%2526bee_sync_initiator%253Dadx%2526bee_sync_hop_count%253D4%26uid%3D&s=191740&C=1 CF-Ray: 86668f8e4fc64352-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZfhqOtHM5zQAAHHFALRbLAAA; Path=/; Domain=casalemedia.com; Expires=Tue, 18 Mar 2025 16:22:18 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPS=1361; Path=/; Domain=casalemedia.com; Expires=Sun, 16 Jun 2024 16:22:18 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=1361; Path=/; Domain=casalemedia.com; Expires=Sun, 16 Jun 2024 16:22:18 GMT; Max-Age=7776000; Secure; SameSite=None
2024-03-18 16:22:18 UTC	402	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 76 64 51 45 67 37 6e 45 49 45 6a 31 38 33 49 31 48 67 57 78 79 54 6f 53 62 4d 31 62 69 6b 57 25 32 42 4a 6f 79 49 36 5a 6a 4d 4b 46 25 32 46 68 6f 31 31 4f 62 71 4e 44 4f 5a 51 66 48 66 52 34 25 32 46 47 6f 25 32 46 53 54 42 52 77 73 75 55 25 32 42 33 41 41 70 69 34 6a 71 6f 52 6c 71 70 57 63 68 4c 36 38 38 61 75 70 6f 48 46 73 72 48 5a 49 78 4f 56 61 49 45 64 71 49 69 71 4e 5a 77 63 76 66 34 77 6e 71 71 25 32 46 62 38 4e 36 77 69 55 65 70 79 49 25 32 42 32 6b 67 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vdQEg7nEIEj183I1HgWxyToSbM1bikW%2BJoyI6ZjMKF%2Fho11ObqNDOZQfHfR4%2FGo%2FSTBRwsuU%2B3AApi4jqoRlqpWchL688aupoHFsrHZIxOVaIEdqIiqNZwcvf4wnqq%2Fb8N6wiUepyI%2B2kg%3D%3D"}],"group":"cf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.4	50128	104.18.36.155	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:18 UTC	1180	OUT	GET /usermatchredir?cb=https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26nuid%3D33A008D0E14543A2A207D07731F02C5F%26att%3D1%26pid%3D82%26cb%3Dhttps%253A%252F%252Fmatch.prod.bidr.io%252Fcookie-sync%253Fgdpr%253D0%2526userid%253D8457389007004702379%2526gdpr%253D0%2526gdpr%253D0%2526bee_sync_partners%253Dpm%2526bee_sync_current_partner%253Dsyn%2526bee_sync_initiator%253Dadx%2526bee_sync_hop_count%253D4%26uid%3D&s=191740&C=1 HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZfhqOtHM5zQAAHHFALRbLAAA; CMPS=1361; CMPRO=1361
2024-03-18 16:22:19 UTC	1334	IN	HTTP/1.1 302 Found Date: Mon, 18 Mar 2024 16:22:19 GMT Content-Length: 0 Connection: close Location: https://sync.technoratimedia.com/services?srv=cs&nuid=33A008D0E14543A2A207D07731F02C5F&att=1&pid=82&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D8457389007004702379%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&uid=ZfhqOtHM5zQAAHHFALRbLAAA%261361 CF-Ray: 86668f912a0e43cb-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZfhqOtHM5zQAAHHFALRbLAAA; Path=/; Domain=casalemedia.com; Expires=Tue, 18 Mar 2025 16:22:19 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1361; Path=/; Domain=casalemedia.com; Expires=Sun, 16 Jun 2024 16:22:19 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2jmEqvG7dKkdn6UbK7%2BSg6Kb5Fi0vOryxwtgDpXkgs0V0cRuLDvffvAY4boQ1koWjpJC%2F1nkDJZQf5wXSIjaRBuyxP3xaID7FvWK47jRb5%2BhcnTh3qBjt4iFUtrH7kRPu%2BHKNh2dQ4Ec4Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.4	50133	142.250.65.162	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:19 UTC	1406	OUT	GET /pcs/view?xai=AKAOjssqF0Xg6pTIfNQoxZkHZSQmUSslTInJ7DOTTaYQvu2bu2f8dWcPScqJ8zKbS2kol-r8d5GY7NvjuURbXz9PqKDxlPQVkxqCP61C2fi_r7Upz9oeV9JMY-BF4ZFKgCD1OgQaXuYGs-Vg8o2uqK3GI9E-9b4aGGQj202Oi5wujsrW9Bx6vLiJnb_w_xLEBDuWgg86P2PTi3P_5V6_kJ_5Qta15B2EUW78mZbuV9IfDoJTgzl_aEKW_lYJ4ORsSisHYNuEfXRR7hgRI3uTpVyH1lEPG0zXWt3v4Xgh96yZLHPJUKbkBXUab1Aahg_lhVs8xJr5xh6mszxq44RF9gxi8rn1-IE92R2u1xGtTuKwnhVArTzXyTkKDyCk36Yuv2NyG9ExKRf2kbdE2w4ho-oCjhbIjcMhuA&sai=AMfl-YQ1f6_kTUqVUUo3HlNhmzKom8QZbQFb9UHZ7v4qX2xeXRQc0no59o4F0WJAPt94ldRzih_Ar3UP6Lv0p6mjLVV6zSu47Ayuvqvcw1ZGGdjsiCcjlVv0ml5VY0MqUKx4yuUgwPhHcCmyZGyg0lJM3KlJ&sig=Cg0ArKJSzPcrrzx6pW8mEAE&uach_m=%5BUACH%5D&urlfix=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:19 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 18 Mar 2024 16:22:19 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.4	50134	150.136.25.38	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:19 UTC	1147	OUT	GET /services?srv=cs&nuid=33A008D0E14543A2A207D07731F02C5F&att=1&pid=82&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D8457389007004702379%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&uid=ZfhqOtHM5zQAAHHFALRbLAAA%261361 HTTP/1.1 Host: sync.technoratimedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tads_uidp_73=AAARQ07L8NQAABPzJYe3uw; tads_uid=33A008D0E14543A2A207D07731F02C5F; tads_uid_cd=20240318162217+0000; tads_zora=2
2024-03-18 16:22:19 UTC	1202	IN	HTTP/1.1 307 Temporary Redirect Server: nginx Date: Mon, 18 Mar 2024 16:22:19 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: close Location: https://match.prod.bidr.io/cookie-sync?gdpr=0&userid=8457389007004702379&gdpr=0&gdpr=0&bee_sync_partners=pm&bee_sync_current_partner=syn&bee_sync_initiator=adx&bee_sync_hop_count=4 Set-Cookie: tads_uidp_82=ZfhqOtHM5zQAAHHFALRbLAAA&1361; Max-Age=259200; Expires=Thu, 21 Mar 2024 16:22:19 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid=33A008D0E14543A2A207D07731F02C5F; Max-Age=63072000; Expires=Wed, 18 Mar 2026 16:22:19 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid_cd=20240318162217+0000; Max-Age=63072000; Expires=Wed, 18 Mar 2026 16:22:19 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_zora=2; Max-Age=63072000; Expires=Wed, 18 Mar 2026 16:22:19 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None access-control-allow-origin: https://ads.pubmatic.com/ access-control-allow-credentials: true access-control-allow-methods: POST,GET,HEAD,OPTIONS X-Varnish: 212379254 Age: 0 Via: 1.1 varnish

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.4	50136	35.190.80.1	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:19 UTC	561	OUT	OPTIONS /report/v4?s=2jmEqvG7dKkdn6UbK7%2BSg6Kb5Fi0vOryxwtgDpXkgs0V0cRuLDvffvAY4boQ1koWjpJC%2F1nkDJZQf5wXSIjaRBuyxP3xaID7FvWK47jRb5%2BhcnTh3qBjt4iFUtrH7kRPu%2BHKNh2dQ4Ec4Q%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://ssum-sec.casalemedia.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:19 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Mon, 18 Mar 2024 16:22:19 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.4	50137	54.144.102.188	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:19 UTC	888	OUT	GET /cookie-sync?gdpr=0&userid=8457389007004702379&gdpr=0&gdpr=0&bee_sync_partners=pm&bee_sync_current_partner=syn&bee_sync_initiator=adx&bee_sync_hop_count=4 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAARQ07L8NQAABPzJYe3uw; bitoIsSecure=ok
2024-03-18 16:22:19 UTC	454	IN	HTTP/1.1 303 See Other Date: Mon, 18 Mar 2024 16:22:19 GMT location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AAARQ07L8NQAABPzJYe3uw&gdpr=0 Server: gunicorn set-cookie: bito=AAARQ07L8NQAABPzJYe3uw; Domain=bidr.io; expires=Thu, 17 Apr 2025 12:22:19 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.4	50139	35.190.80.1	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:19 UTC	494	OUT	POST /report/v4?s=2jmEqvG7dKkdn6UbK7%2BSg6Kb5Fi0vOryxwtgDpXkgs0V0cRuLDvffvAY4boQ1koWjpJC%2F1nkDJZQf5wXSIjaRBuyxP3xaID7FvWK47jRb5%2BhcnTh3qBjt4iFUtrH7kRPu%2BHKNh2dQ4Ec4Q%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 843 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:19 UTC	843	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 34 32 36 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 31 38 2e 33 36 2e 31 35 35 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 33 30 32 2c 22 74 79 70 65 22 3a 22 6f 6b 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a Data Ascii: [{"age":0,"body":{"elapsed_time":426,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://ads.pubmatic.com/","sampling_fraction":0.01,"server_ip":"104.18.36.155","status_code":302,"type":"ok"},"type":"network-error","url":"https:
2024-03-18 16:22:20 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Mon, 18 Mar 2024 16:22:19 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.4	50140	8.28.7.83	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:20 UTC	2111	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AAARQ07L8NQAABPzJYe3uw&gdpr=0 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; chkChromeAb67Sec=2; pi=156011:4; DPSync3=1711929600%3A263_262_261_260_259_201%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_250_166_3_104_165_54_71_220_21%7C1711324800%3A15_223; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; SPugT=1710728775; PugT=1710778935
2024-03-18 16:22:20 UTC	587	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Mar 2024 16:22:19 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 16-Jun-2024 16:22:19 GMT; path=/ Set-Cookie: PugT=1710778939; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 16:22:19 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-18 16:22:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.4	50143	74.119.119.139	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:20 UTC	734	OUT	GET /syncframe?origin=publishertag&topUrl=browser-update.org HTTP/1.1 Host: gum.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:20 UTC	642	IN	HTTP/1.1 200 OK content-type: text/html; charset=utf-8 date: Mon, 18 Mar 2024 16:22:20 GMT server: Kestrel cache-control: private, max-age=3600 set-cookie: optout=0; expires=Thu, 01 Jan 1970 00:00:00 GMT; domain=.criteo.com; path=/ set-cookie: uid=093ace46-161d-4e4e-95d2-1bedb200f6ec; expires=Sat, 12 Apr 2025 16:22:20 GMT; domain=.criteo.com; path=/; secure; samesite=none transfer-encoding: chunked x-robots-tag: noindex cross-origin-resource-policy: cross-origin cross-origin-embedder-policy: require-corp server-processing-duration-in-ticks: 617516 strict-transport-security: max-age=31536000; preload; connection: close
2024-03-18 16:22:20 UTC	14625	IN	Data Raw: 33 39 31 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 43 4f 4e 46 49 47 5f 43 53 4d 5f 44 4f 4d 41 49 4e 5f 4e 41 4d 45 20 3d 20 22 63 73 6d 2e 76 61 2e 75 73 2e 63 72 69 74 65 6f 2e 6e 65 74 22 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 43 4f 4e 46 49 47 5f 43 53 4d 5f 52 41 54 49 4f 20 3d 20 31 30 30 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 47 55 4d 5f 44 4f 4d 41 49 4e 20 3d 20 22 67 75 6d 2e 63 72 69 74 65 6f 2e 63 6f 6d 22 3b 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 Data Ascii: 3914<!DOCTYPE html><html><head> <script type="text/javascript"> window.CONFIG_CSM_DOMAIN_NAME = "csm.va.us.criteo.net"; window.CONFIG_CSM_RATIO = 100; window.GUM_DOMAIN = "gum.criteo.com"; </script> <script type="te

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.4	50144	74.119.119.139	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:21 UTC	951	OUT	GET /sid/json?origin=publishertag&domain=browser-update.org&sn=ChromeSyncframe&so=3&topUrl=browser-update.org&bundle=dTQwXF8wRkVwRWwwMEN3bE9TanNMMU4zM255TDZtenJFMm96ZTFNZ3FOZzBXaENTTTg3cE1QV3Rla1QwJTJGTHhwZENUQVZPU0J0UDMlMkJjaXVCdU9RZVNybVdzRGU5a2lhRmRLSUN2ViUyQjdIV1lMeFNDdEI2bHJFRnhPWWRXU0RkcE1tc01Ucw&cw=1&lsw=1&topicsavail=1&fledgeavail=1 HTTP/1.1 Host: gum.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gum.criteo.com/syncframe?origin=publishertag&topUrl=browser-update.org Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=093ace46-161d-4e4e-95d2-1bedb200f6ec
2024-03-18 16:22:21 UTC	350	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Mon, 18 Mar 2024 16:22:21 GMT server: Kestrel cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 1445544 strict-transport-security: max-age=31536000; preload; connection: close
2024-03-18 16:22:21 UTC	474	IN	Data Raw: 31 43 45 0d 0a 7b 22 73 69 64 22 3a 6e 75 6c 6c 2c 22 72 65 6d 6f 76 65 53 69 64 22 3a 66 61 6c 73 65 2c 22 62 75 6e 64 6c 65 22 3a 22 56 65 4e 49 38 31 38 77 52 6b 56 77 52 57 77 77 4d 45 4e 33 62 45 39 54 61 6e 4e 4d 4d 55 34 7a 4d 32 34 6c 4d 6b 4a 6e 55 55 46 75 53 55 35 6e 52 6a 52 53 4e 33 56 57 54 32 64 74 56 47 31 49 4e 6e 46 42 4d 47 5a 6f 4f 56 4e 33 4a 54 4a 43 52 6d 78 33 61 69 55 79 52 6c 5a 77 61 6b 70 4f 52 46 41 6c 4d 6b 4a 49 65 47 78 7a 53 58 4a 36 53 6e 4d 31 63 32 6c 46 56 47 73 79 54 56 5a 74 57 44 4a 4c 5a 6d 4e 51 63 6d 6c 77 4d 33 70 4e 52 53 55 79 51 6b 46 78 51 58 6f 78 55 6d 6c 6d 53 55 55 30 55 6b 56 59 62 57 5a 6f 61 31 4a 57 4d 56 70 76 5a 6e 4a 79 51 6a 64 69 55 56 46 53 4d 33 63 78 56 33 5a 42 4e 33 56 75 4a 54 4a 43 63 45 Data Ascii: 1CE{"sid":null,"removeSid":false,"bundle":"VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.4	50145	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:21 UTC	1511	OUT	GET /static/img/favicon.png HTTP/1.1 Host: browser-update.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://browser-update.org/update-browser.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bundle=dTQwXF8wRkVwRWwwMEN3bE9TanNMMU4zM255TDZtenJFMm96ZTFNZ3FOZzBXaENTTTg3cE1QV3Rla1QwJTJGTHhwZENUQVZPU0J0UDMlMkJjaXVCdU9RZVNybVdzRGU5a2lhRmRLSUN2ViUyQjdIV1lMeFNDdEI2bHJFRnhPWWRXU0RkcE1tc01Ucw; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA
2024-03-18 16:22:21 UTC	690	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:21 GMT Content-Type: image/png Content-Length: 8993 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=favicon.png last-modified: Sun, 21 Mar 2021 12:19:12 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gG%2FwBS1OZEVwy46ctFbUqXfyFZLCvSi3i3yKZvdcrWmphII99mFxZEgkohZWURWrSxE2Fv%2BkJlirCpn1a0zCzi8%2BdsdfMaeeSO6Dhmfja3tbcIRJLpl%2BYoEjQGPGt%2B%2BDfev%2BcA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668fa1fb670c8a-EWR
2024-03-18 16:22:21 UTC	679	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 c8 08 06 00 00 00 ad 58 ae 9e 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 3d 84 00 00 3d 84 01 d5 ac af 74 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ed 9d 79 7c 24 55 b5 c7 bf e7 76 a7 ab 93 74 f7 64 60 66 c0 c1 0d 65 11 10 44 5c 40 16 57 40 11 c5 0d 50 1e a8 a0 4f 11 87 c9 06 08 3c 45 a3 cf 85 35 1b 33 22 b8 80 f2 14 17 50 16 17 74 44 7c 3e 10 15 c6 0d 44 04 05 45 04 d9 66 92 ae 4e 7a 49 77 9d f7 47 32 30 4b 96 ee 74 d5 ad ee a4 be 9f 8f 9f cf 4c ba ea 9c df 48 ff 72 eb de ba e7 5c 88 88 88 98 11 09 5b c0 42 26 bb 26 bd 7d dc 93 5d 4d 59 97 6b 8c 65 a2 2c Data Ascii: PNGIHDRXsBIT\|dpHYs==ttEXtSoftwarewww.inkscape.org< IDATxy\|$Uvtd`feD\@W@PO<E53"PtD\|>DEfNzIwG20KtLHr\[B&&}]MYke,
2024-03-18 16:22:21 UTC	1369	IN	Data Raw: 12 04 0b ce 20 da 47 a2 d8 91 59 05 fa 11 60 c7 b0 f5 2c 16 04 6e f3 d0 b3 5a bb 73 bf 08 5b 8b 9f 2c 28 83 14 06 da 0f 45 cc 10 b0 67 d8 5a 16 2d 22 3f 35 52 fe 48 a2 73 fc 77 61 4b f1 83 05 61 90 e2 70 6a 4f ad 30 80 c8 e1 61 6b 89 00 c0 13 f8 86 a7 b1 73 5a 7b 46 fe 1e b6 98 7a 68 6a 83 e8 e7 97 2c 2d 96 bc 33 81 1e b6 dd 15 1b 11 3e 79 55 39 3f 39 9a fd ac f4 51 0a 5b cc 7c 68 5a 83 e4 07 32 c7 1b d1 21 7b 3b 66 23 e6 8f fc de 78 f2 81 44 ef e8 1d 61 2b a9 95 a6 33 88 0e 74 74 14 4c 79 8d a8 1c 1f b6 96 88 9a f0 50 be e4 94 9c d3 9b 69 bf 57 53 19 a4 d0 9f 7e 33 86 cb 88 56 a7 9a 99 bf 23 72 4a b2 2b 7b 63 d8 42 aa a1 29 0c a2 c3 db 65 8a 95 89 0b 10 3e 18 b6 96 08 5f 50 d0 8b 9d 91 dc 19 8d 3e 37 69 78 83 e4 87 d2 07 8b 72 25 f0 dc b0 b5 44 f8 8b c0 Data Ascii: GY`,nZs[,(EgZ-"?5RHswaKapjO0aksZ{Fzhj,-3>yU9?9Q[\|hZ2!{;f#xDa+3ttLyPiWS~3V#rJ+{cB)e>_P>7ixr%D
2024-03-18 16:22:21 UTC	1369	IN	Data Raw: 26 7b dc 0b 42 ca 5f 13 7a 29 2d f9 b1 d6 15 f1 58 62 47 cf d3 1d d5 e8 0a a3 ac 40 34 a1 2a 5b ec 36 10 74 5c 31 1b 44 d8 a0 b0 c1 53 36 aa 96 1f 6c ef 19 7f 24 30 7d 17 ec d0 5e 6c 19 bb 06 78 7d 50 39 6c a0 b0 7d bc 64 be 00 bc b5 9e 38 75 8f 20 f9 81 f4 fb 44 f8 72 bd 71 e6 89 87 70 4a b2 cb bd 2c a4 fc b3 92 1b 6c df 21 ae b1 fd 44 74 1f 0f dd 47 90 7d 98 9c a3 d5 bb ad dc 05 ee 55 e4 3e e0 5e a3 de 9d 15 ad dc d6 d6 9b ff 57 3d 41 b3 17 a6 97 39 71 be af e0 eb 4a 50 98 08 7a 6c 3d 75 ed 75 19 c4 1d 4e 2d 8f 7b 72 4f 48 8f 56 13 a2 f2 5e a7 27 7b 55 08 b9 a7 45 2f d8 a1 bd 18 cf bf 12 a3 87 a2 1c 0a ec 8d cd 92 02 e5 1f 2a 7a ab 60 6e 33 5a b9 a5 65 a7 b1 3b ab 2d 01 2e 0d 2c d9 cf 13 ef 1a 9a 62 39 b7 26 1e 76 4c cb 1e f3 5d d5 aa eb 3f 5e 71 30 fd Data Ascii: &{B_z)-XbG@4[6t\1DS6l$0}^lx}P9l}d8u DrqpJ,l!DtG}U>^W=A9qJPzl=uuN-{rOHV^'{UE/z`n3Ze;-.,b9&vL]?^q0
2024-03-18 16:22:21 UTC	1369	IN	Data Raw: 82 b6 45 8e 56 dd f2 dd e0 16 06 f1 8c ce b9 79 cb 47 bc 8a 57 fe 1f bf 83 96 06 33 2f 13 0d bb 89 76 c4 d6 88 ea 29 f3 ed 93 ab 88 25 83 e8 b3 26 06 b7 5c cd 7a ca 20 da 47 42 54 8e b4 23 04 40 d7 b5 9d 96 ff a7 df 51 3d f4 3c c2 68 47 14 31 23 02 57 38 3d b9 ab e7 7b 7f b2 2b 7b 1f c2 9d 7e 6a 9a 09 15 f3 c6 cd ff fe 94 41 8a 4b 33 af c5 62 03 34 51 f3 55 bf 63 16 06 32 47 30 8f de 47 11 81 f2 68 c2 93 d3 ea 0d a2 ca 0f fc 10 33 67 1e 98 de 20 78 fa 3a 1b 02 a6 c8 26 34 7b ad 9f 01 b5 0f 83 d1 f3 fc 8c 19 51 3f a2 d2 23 bd d9 0d 75 c7 f1 f8 a5 1f 7a aa e0 00 ed cf 3c d5 6b fa 69 83 08 2f b5 24 00 45 7f e0 f7 91 bd a5 8e d4 db 50 f6 f6 33 66 44 dd dc e8 57 73 f1 92 c7 6d d8 59 ee 8d 95 44 5f b9 e9 2f 06 a6 7e fb c2 7e 16 92 6f 4a ea fb d2 2e d4 3f 8c 47 Data Ascii: EVyGW3/v)%&\z GBT#@Q=<hG1#W8={+{~jAK3b4QUc2G0Gh3g x:&4{Q?#uz<ki/$EP3fDWsmYD_/~~oJ.?G
2024-03-18 16:22:21 UTC	1369	IN	Data Raw: 40 02 1f 41 80 dd 2d e4 98 95 a2 a9 1c 8b c5 c3 49 23 36 47 3f 38 7e 51 eb b3 fc 8a 26 82 bd 11 84 f8 44 f0 23 88 7a bb 05 9e 63 4e 0d bc 27 6c 09 8b 98 b8 31 31 1f 47 6f b5 65 10 5d 14 23 48 69 30 f3 32 36 6b 69 1f 11 0a be 95 48 7b 96 e6 20 02 1b 8c e7 19 0b 2f 5d e4 59 7a e9 ca b6 e0 f3 4c 8f a7 fa d1 b0 72 47 4c 22 88 8f c7 fb d9 99 83 a8 f0 b0 f1 bc b2 8d 7d fd 32 51 1c 0d a5 c9 42 b1 bf 7d 6f 84 68 72 1e 32 9e 88 e3 57 2c c1 d2 1c 44 f5 df a6 55 9c e0 76 11 6e 91 4b 42 79 cc f2 26 7b 36 45 2f 3f 42 46 54 1f f4 2f 9a fa 66 b6 d9 10 e4 11 c3 e8 88 ad ca 30 eb 06 29 0c 65 76 15 e4 58 db 79 23 a6 c1 a8 6f 35 3b 2a 2c f5 2b d6 6c 78 c2 bf cc d4 5b ce 62 d0 c9 54 c5 da 21 a1 4f e7 f4 3e 09 d8 28 29 8e 98 03 ad c8 9f fc 8a 25 1e cb fd 8a 35 2b 2a f7 4c 9d Data Ascii: @A-I#6G?8~Q&D#zcN'l11Goe]#Hi026kiH{ /]YzLrGL"}2QB}ohr2W,DUvnKBy&{6E/?BFT/f0)evXy#o5;,+lx[bT!O>()%5+L
2024-03-18 16:22:21 UTC	1369	IN	Data Raw: 8a 48 98 96 4b b0 79 b6 a0 70 46 71 20 75 34 4c 8e 1c f9 a1 f4 67 41 ba ad e5 8f a8 02 e9 72 ba 73 d7 04 15 bd 30 90 39 12 e5 c8 a0 e2 6f 8d a0 43 b3 7f 3e 07 f9 81 4c 9f 88 7e c2 3f 49 73 e2 81 de 04 f2 6c 1a e0 e0 9d 88 a7 11 e1 4c a7 cb 3d 3f a8 f8 3a bc 5d a6 e8 95 ef 02 f5 ed b0 9d 39 32 3e e8 8c e4 9e 3f db 19 8a 73 0e 63 49 65 18 ac 34 96 db 84 01 39 8c c8 1c 0d 85 c0 47 83 34 07 40 d1 2b 9f 67 cf 1c 00 b2 66 ae 03 46 e7 34 88 f4 66 37 a0 5c e2 9f a8 88 26 c3 03 59 ed 74 bb 81 f6 1a cb f7 a7 0f 01 fd 60 90 39 b6 62 cc f1 e4 cb 73 5d 54 d5 44 a8 2c 5e 3f 90 af 5b 52 44 b3 51 12 d1 e3 93 dd d9 35 41 26 d1 61 1c 31 5c 8a bd 89 39 28 97 4c f7 e6 7c 6b aa 12 94 ea 1e 7b 14 55 5f 0b f0 23 1a 9e c7 14 3d cc e9 ca 7d 33 e8 44 45 4d 7f 16 d8 23 e8 3c 9b 91 Data Ascii: HKypFq u4LgArs09oC>L~?IslL=?:]92>?scIe49G4@+gfF4f7\&Yt`9bs]TD,^?[RDQ5A&a1\9(L\|k{U_#=}3DEM#<
2024-03-18 16:22:21 UTC	1369	IN	Data Raw: 48 71 20 73 9c 8a 7e dd 46 ae 5a 11 d1 8f 3b 5d b9 ff 0e 5b 47 a3 a2 e7 2e 5d 52 70 2a 3d 22 da 03 64 c2 d6 b3 35 aa bc bf b5 c7 9d b1 f1 b4 1f 58 f9 d2 16 06 d3 67 00 81 76 e5 9b 2f 8a 5e 55 69 d1 de b0 b6 81 37 22 ba 76 79 aa 54 2a ac f6 84 d3 1b f5 c0 22 45 3e dd da 9d 3d 27 e8 3c d6 7e ab 17 06 53 43 20 55 1f b7 66 15 61 14 e4 13 4e 25 7b 99 8d 86 05 8d 8a f6 d3 5a 34 99 0f 81 9e 85 fd 9d c8 55 a3 a2 5f 4f 76 e6 de 1d c4 a4 7c 6b ac 19 64 6a 53 e3 b7 81 77 d8 ca 59 2b 02 4f 2a 7c 49 25 fe f9 d6 ae 8d 0f 86 ad c7 16 b9 b5 ed 3b c6 26 62 a7 08 fa 21 1a d8 18 53 fc c8 19 71 df 3a d3 81 37 7e 63 75 5e a0 97 93 2c 8e a6 ae 9f 6a 4e dd c8 54 80 1f 89 c8 55 89 52 eb 75 72 c6 a3 63 61 0b 0a 82 f1 e1 cc 01 31 4f 4f 51 78 17 21 54 fa cd 83 9f 39 9e fb 26 9b a3 Data Ascii: Hq s~FZ;][G.]Rp="d5Xgv/^Ui7"vyT"E>='<~SC UfaN%{Z4U_Ov\|kdjSwY+O*\|I%;&b!Sq:7~cu^,jNTURurca1OOQx!T9&
2024-03-18 16:22:21 UTC	100	IN	Data Raw: 41 ef 53 8f 7b 35 56 b9 b7 ad 33 ff 50 80 b9 17 3c 91 41 2c a0 fd b4 e6 e3 ad db c7 2b 66 59 c5 98 94 78 5e 12 31 6d 82 3a 9e 48 9b 80 83 4a bb a0 5b 94 15 2b 94 11 5c 00 f5 64 4c 44 5d 15 75 63 c4 b2 9e 30 e2 c4 d9 10 46 bf da c5 c4 ff 03 f3 f6 fe 2b fb a2 f8 0f 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: AS{5V3P<A,+fYx^1m:HJ[+\dLD]uc0F+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.4	50148	74.119.119.139	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:21 UTC	725	OUT	GET /sid/json?origin=publishertag&domain=browser-update.org&sn=ChromeSyncframe&so=3&topUrl=browser-update.org&bundle=dTQwXF8wRkVwRWwwMEN3bE9TanNMMU4zM255TDZtenJFMm96ZTFNZ3FOZzBXaENTTTg3cE1QV3Rla1QwJTJGTHhwZENUQVZPU0J0UDMlMkJjaXVCdU9RZVNybVdzRGU5a2lhRmRLSUN2ViUyQjdIV1lMeFNDdEI2bHJFRnhPWWRXU0RkcE1tc01Ucw&cw=1&lsw=1&topicsavail=1&fledgeavail=1 HTTP/1.1 Host: gum.criteo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=093ace46-161d-4e4e-95d2-1bedb200f6ec
2024-03-18 16:22:21 UTC	350	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Mon, 18 Mar 2024 16:22:20 GMT server: Kestrel cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 2251380 strict-transport-security: max-age=31536000; preload; connection: close
2024-03-18 16:22:21 UTC	471	IN	Data Raw: 31 43 42 0d 0a 7b 22 73 69 64 22 3a 6e 75 6c 6c 2c 22 72 65 6d 6f 76 65 53 69 64 22 3a 66 61 6c 73 65 2c 22 62 75 6e 64 6c 65 22 3a 22 48 64 79 65 72 46 38 77 52 6b 56 77 52 57 77 77 4d 45 4e 33 62 45 39 54 61 6e 4e 4d 4d 55 34 7a 4d 32 34 6c 4d 6b 4a 46 4f 56 42 6f 53 45 70 43 63 6d 45 77 64 45 31 42 4d 30 6c 32 64 6b 49 33 62 33 64 4f 5a 6b 31 54 52 47 39 49 4d 57 64 44 5a 45 6f 33 57 6c 68 77 57 6d 35 5a 52 6c 63 30 63 56 68 4d 4d 33 42 68 64 58 46 57 51 55 35 73 5a 31 46 75 65 6e 63 6c 4d 6b 49 77 63 31 63 6c 4d 6b 4a 4a 63 6a 4a 4c 55 45 68 45 53 57 68 31 65 6a 51 6c 4d 6b 4a 44 4d 6d 5a 43 5a 30 46 36 55 6a 46 6f 59 56 6c 31 55 31 4a 58 64 44 5a 52 64 31 6b 6c 4d 6b 4a 55 56 55 34 34 4e 47 64 32 4a 54 4a 47 4d 43 55 79 51 6b 34 79 64 31 6b 6c 4d 6b Data Ascii: 1CB{"sid":null,"removeSid":false,"bundle":"HdyerF8wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJFOVBoSEpCcmEwdE1BM0l2dkI3b3dOZk1TRG9IMWdDZEo3WlhwWm5ZRlc0cVhMM3BhdXFWQU5sZ1FuenclMkIwc1clMkJJcjJLUEhESWh1ejQlMkJDMmZCZ0F6UjFoYVl1U1JXdDZRd1klMkJUVU44NGd2JTJGMCUyQk4yd1klMk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.4	50149	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:22 UTC	1322	OUT	GET /static/img/favicon.png HTTP/1.1 Host: browser-update.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA; cto_bundle=VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE5DeE1QUDZrQ1p1REU2QzUzMm9iS3pISWVKOFREZG8lM0Q
2024-03-18 16:22:22 UTC	678	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:22 GMT Content-Type: image/png Content-Length: 8993 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=favicon.png last-modified: Sun, 21 Mar 2021 12:19:12 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PZfxb1zSWEmpUGd9qfcuOHaPpmrymMYfj3KfjNtf0QxZJGBgqOvhPjHz5Iv8zPPQXbBc6ji1Ywl8xNidrWqMeLDtJGERxc9ghh9gcRjaRi8%2FDS77tq6H37zcUSnkY9eziGxZyQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668fa50815c445-EWR
2024-03-18 16:22:22 UTC	691	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 c8 08 06 00 00 00 ad 58 ae 9e 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 3d 84 00 00 3d 84 01 d5 ac af 74 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ed 9d 79 7c 24 55 b5 c7 bf e7 76 a7 ab 93 74 f7 64 60 66 c0 c1 0d 65 11 10 44 5c 40 16 57 40 11 c5 0d 50 1e a8 a0 4f 11 87 c9 06 08 3c 45 a3 cf 85 35 1b 33 22 b8 80 f2 14 17 50 16 17 74 44 7c 3e 10 15 c6 0d 44 04 05 45 04 d9 66 92 ae 4e 7a 49 77 9d f7 47 32 30 4b 96 ee 74 d5 ad ee a4 be 9f 8f 9f cf 4c ba ea 9c df 48 ff 72 eb de ba e7 5c 88 88 88 98 11 09 5b c0 42 26 bb 26 bd 7d dc 93 5d 4d 59 97 6b 8c 65 a2 2c Data Ascii: PNGIHDRXsBIT\|dpHYs==ttEXtSoftwarewww.inkscape.org< IDATxy\|$Uvtd`feD\@W@PO<E53"PtD\|>DEfNzIwG20KtLHr\[B&&}]MYke,
2024-03-18 16:22:22 UTC	1369	IN	Data Raw: fa 11 60 c7 b0 f5 2c 16 04 6e f3 d0 b3 5a bb 73 bf 08 5b 8b 9f 2c 28 83 14 06 da 0f 45 cc 10 b0 67 d8 5a 16 2d 22 3f 35 52 fe 48 a2 73 fc 77 61 4b f1 83 05 61 90 e2 70 6a 4f ad 30 80 c8 e1 61 6b 89 00 c0 13 f8 86 a7 b1 73 5a 7b 46 fe 1e b6 98 7a 68 6a 83 e8 e7 97 2c 2d 96 bc 33 81 1e b6 dd 15 1b 11 3e 79 55 39 3f 39 9a fd ac f4 51 0a 5b cc 7c 68 5a 83 e4 07 32 c7 1b d1 21 7b 3b 66 23 e6 8f fc de 78 f2 81 44 ef e8 1d 61 2b a9 95 a6 33 88 0e 74 74 14 4c 79 8d a8 1c 1f b6 96 88 9a f0 50 be e4 94 9c d3 9b 69 bf 57 53 19 a4 d0 9f 7e 33 86 cb 88 56 a7 9a 99 bf 23 72 4a b2 2b 7b 63 d8 42 aa a1 29 0c a2 c3 db 65 8a 95 89 0b 10 3e 18 b6 96 08 5f 50 d0 8b 9d 91 dc 19 8d 3e 37 69 78 83 e4 87 d2 07 8b 72 25 f0 dc b0 b5 44 f8 8b c0 af 3d 8d bd ab 91 57 ba 1a 7a 4b 77 Data Ascii: `,nZs[,(EgZ-"?5RHswaKapjO0aksZ{Fzhj,-3>yU9?9Q[\|hZ2!{;f#xDa+3ttLyPiWS~3V#rJ+{cB)e>_P>7ixr%D=WzKw
2024-03-18 16:22:22 UTC	1369	IN	Data Raw: b1 d6 15 f1 58 62 47 cf d3 1d d5 e8 0a a3 ac 40 34 a1 2a 5b ec 36 10 74 5c 31 1b 44 d8 a0 b0 c1 53 36 aa 96 1f 6c ef 19 7f 24 30 7d 17 ec d0 5e 6c 19 bb 06 78 7d 50 39 6c a0 b0 7d bc 64 be 00 bc b5 9e 38 75 8f 20 f9 81 f4 fb 44 f8 72 bd 71 e6 89 87 70 4a b2 cb bd 2c a4 fc b3 92 1b 6c df 21 ae b1 fd 44 74 1f 0f dd 47 90 7d 98 9c a3 d5 bb ad dc 05 ee 55 e4 3e e0 5e a3 de 9d 15 ad dc d6 d6 9b ff 57 3d 41 b3 17 a6 97 39 71 be af e0 eb 4a 50 98 08 7a 6c 3d 75 ed 75 19 c4 1d 4e 2d 8f 7b 72 4f 48 8f 56 13 a2 f2 5e a7 27 7b 55 08 b9 a7 45 2f d8 a1 bd 18 cf bf 12 a3 87 a2 1c 0a ec 8d cd 92 02 e5 1f 2a 7a ab 60 6e 33 5a b9 a5 65 a7 b1 3b ab 2d 01 2e 0d 2c d9 cf 13 ef 1a 9a 62 39 b7 26 1e 76 4c cb 1e f3 5d d5 aa eb 3f 5e 71 30 fd 55 85 f7 d4 13 63 9e 54 44 f4 04 a7 Data Ascii: XbG@4[6t\1DS6l$0}^lx}P9l}d8u DrqpJ,l!DtG}U>^W=A9qJPzl=uuN-{rOHV^'{UE/z`n3Ze;-.,b9&vL]?^q0UcTD
2024-03-18 16:22:22 UTC	1369	IN	Data Raw: 8c ce b9 79 cb 47 bc 8a 57 fe 1f bf 83 96 06 33 2f 13 0d bb 89 76 c4 d6 88 ea 29 f3 ed 93 ab 88 25 83 e8 b3 26 06 b7 5c cd 7a ca 20 da 47 42 54 8e b4 23 04 40 d7 b5 9d 96 ff a7 df 51 3d f4 3c c2 68 47 14 31 23 02 57 38 3d b9 ab e7 7b 7f b2 2b 7b 1f c2 9d 7e 6a 9a 09 15 f3 c6 cd ff fe 94 41 8a 4b 33 af c5 62 03 34 51 f3 55 bf 63 16 06 32 47 30 8f de 47 11 81 f2 68 c2 93 d3 ea 0d a2 ca 0f fc 10 33 67 1e 98 de 20 78 fa 3a 1b 02 a6 c8 26 34 7b ad 9f 01 b5 0f 83 d1 f3 fc 8c 19 51 3f a2 d2 23 bd d9 0d 75 c7 f1 f8 a5 1f 7a aa e0 00 ed cf 3c d5 6b fa 69 83 08 2f b5 24 00 45 7f e0 f7 91 bd a5 8e d4 db 50 f6 f6 33 66 44 dd dc e8 57 73 f1 92 c7 6d d8 59 ee 8d 95 44 5f b9 e9 2f 06 a6 7e fb c2 7e 16 92 6f 4a ea fb d2 2e d4 3f 8c 47 f8 89 8e a3 66 95 5f d1 32 a7 bb 4f Data Ascii: yGW3/v)%&\z GBT#@Q=<hG1#W8={+{~jAK3b4QUc2G0Gh3g x:&4{Q?#uz<ki/$EP3fDWsmYD_/~~oJ.?Gf_2O
2024-03-18 16:22:22 UTC	1369	IN	Data Raw: 1c 8b c5 c3 49 23 36 47 3f 38 7e 51 eb b3 fc 8a 26 82 bd 11 84 f8 44 f0 23 88 7a bb 05 9e 63 4e 0d bc 27 6c 09 8b 98 b8 31 31 1f 47 6f b5 65 10 5d 14 23 48 69 30 f3 32 36 6b 69 1f 11 0a be 95 48 7b 96 e6 20 02 1b 8c e7 19 0b 2f 5d e4 59 7a e9 ca b6 e0 f3 4c 8f a7 fa d1 b0 72 47 4c 22 88 8f c7 fb d9 99 83 a8 f0 b0 f1 bc b2 8d 7d fd 32 51 1c 0d a5 c9 42 b1 bf 7d 6f 84 68 72 1e 32 9e 88 e3 57 2c c1 d2 1c 44 f5 df a6 55 9c e0 76 11 6e 91 4b 42 79 cc f2 26 7b 36 45 2f 3f 42 46 54 1f f4 2f 9a fa 66 b6 d9 10 e4 11 c3 e8 88 ad ca 30 eb 06 29 0c 65 76 15 e4 58 db 79 23 a6 c1 a8 6f 35 3b 2a 2c f5 2b d6 6c 78 c2 bf cc d4 5b ce 62 d0 c9 54 c5 da 21 a1 4f e7 f4 3e 09 d8 28 29 8e 98 03 ad c8 9f fc 8a 25 1e cb fd 8a 35 2b 2a f7 4c 9d 30 15 60 b1 c6 d3 1c 60 21 c7 53 8c Data Ascii: I#6G?8~Q&D#zcN'l11Goe]#Hi026kiH{ /]YzLrGL"}2QB}ohr2W,DUvnKBy&{6E/?BFT/f0)evXy#o5;,+lx[bT!O>()%5+L0``!S
2024-03-18 16:22:22 UTC	1369	IN	Data Raw: 20 75 34 4c 8e 1c f9 a1 f4 67 41 ba ad e5 8f a8 02 e9 72 ba 73 d7 04 15 bd 30 90 39 12 e5 c8 a0 e2 6f 8d a0 43 b3 7f 3e 07 f9 81 4c 9f 88 7e c2 3f 49 73 e2 81 de 04 f2 6c 1a e0 e0 9d 88 a7 11 e1 4c a7 cb 3d 3f a8 f8 3a bc 5d a6 e8 95 ef 02 f5 ed b0 9d 39 32 3e e8 8c e4 9e 3f db 19 8a 73 0e 63 49 65 18 ac 34 96 db 84 01 39 8c c8 1c 0d 85 c0 47 83 34 07 40 d1 2b 9f 67 cf 1c 00 b2 66 ae 03 46 e7 34 88 f4 66 37 a0 5c e2 9f a8 88 26 c3 03 59 ed 74 bb 81 f6 1a cb f7 a7 0f 01 fd 60 90 39 b6 62 cc f1 e4 cb 73 5d 54 d5 44 a8 2c 5e 3f 90 af 5b 52 44 b3 51 12 d1 e3 93 dd d9 35 41 26 d1 61 1c 31 5c 8a bd 89 39 28 97 4c f7 e6 7c 6b aa 12 94 ea 1e 7b 14 55 5f 0b f0 23 1a 9e c7 14 3d cc e9 ca 7d 33 e8 44 45 4d 7f 16 d8 23 e8 3c 9b 91 9b 88 69 55 8f 8b 55 3b b6 9c d0 73 Data Ascii: u4LgArs09oC>L~?IslL=?:]92>?scIe49G4@+gfF4f7\&Yt`9bs]TD,^?[RDQ5A&a1\9(L\|k{U_#=}3DEM#<iUU;s
2024-03-18 16:22:22 UTC	1369	IN	Data Raw: d1 8f 3b 5d b9 ff 0e 5b 47 a3 a2 e7 2e 5d 52 70 2a 3d 22 da 03 64 c2 d6 b3 35 aa bc bf b5 c7 9d b1 f1 b4 1f 58 f9 d2 16 06 d3 67 00 81 76 e5 9b 2f 8a 5e 55 69 d1 de b0 b6 81 37 22 ba 76 79 aa 54 2a ac f6 84 d3 1b f5 c0 22 45 3e dd da 9d 3d 27 e8 3c d6 7e ab 17 06 53 43 20 55 1f b7 66 15 61 14 e4 13 4e 25 7b 99 8d 86 05 8d 8a f6 d3 5a 34 99 0f 81 9e 85 fd 9d c8 55 a3 a2 5f 4f 76 e6 de 1d c4 a4 7c 6b ac 19 64 6a 53 e3 b7 81 77 d8 ca 59 2b 02 4f 2a 7c 49 25 fe f9 d6 ae 8d 0f 86 ad c7 16 b9 b5 ed 3b c6 26 62 a7 08 fa 21 1a d8 18 53 fc c8 19 71 df 3a d3 81 37 7e 63 75 5e a0 97 93 2c 8e a6 ae 9f 6a 4e dd c8 54 80 1f 89 c8 55 89 52 eb 75 72 c6 a3 63 61 0b 0a 82 f1 e1 cc 01 31 4f 4f 51 78 17 21 54 fa cd 83 9f 39 9e fb 26 9b a3 bc f5 89 f3 d4 30 7e 03 e8 eb 6c e7 Data Ascii: ;][G.]Rp="d5Xgv/^Ui7"vyT"E>='<~SC UfaN%{Z4U_Ov\|kdjSwY+O*\|I%;&b!Sq:7~cu^,jNTURurca1OOQx!T9&0~l
2024-03-18 16:22:22 UTC	88	IN	Data Raw: 50 80 b9 17 3c 91 41 2c a0 fd b4 e6 e3 ad db c7 2b 66 59 c5 98 94 78 5e 12 31 6d 82 3a 9e 48 9b 80 83 4a bb a0 5b 94 15 2b 94 11 5c 00 f5 64 4c 44 5d 15 75 63 c4 b2 9e 30 e2 c4 d9 10 46 bf da c5 c4 ff 03 f3 f6 fe 2b fb a2 f8 0f 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: P<A,+fYx^1m:HJ[+\dLD]uc0F+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.4	50155	142.251.35.162	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:23 UTC	1698	OUT	GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:23 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:22:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.4	50156	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:23 UTC	703	OUT	GET /Marketing/Project-Request/ HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:23 UTC	353	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 X-StackifyID: V2\|800005f1-0001-a500-b63f-84710c7967bb\|C82847\|CD6 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Date: Mon, 18 Mar 2024 16:22:23 GMT Connection: close Content-Length: 38100
2024-03-18 16:22:23 UTC	16031	IN	Data Raw: 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 20 69 64 3d 22 63 74 6c 30 30 5f 48 65 61 64 31 22 3e 3c 74 69 74 6c 65 3e 0d 0a 09 4d 61 72 6b 65 74 69 6e 67 20 2d 20 50 72 6f 6a 65 63 74 20 52 65 71 75 65 73 74 20 46 6f 72 6d 20 7c 20 49 6e 64 69 61 6e 61 20 57 65 73 6c 65 79 61 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head id="ctl00_Head1"><title>Marketing - Project Request Form \| Indiana Wesleya
2024-03-18 16:22:23 UTC	16384	IN	Data Raw: 70 6c 65 74 69 6f 6e 27 2c 27 38 38 34 31 27 29 22 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 42 6c 61 63 6b 22 3e 31 36 3c 2f 61 3e 3c 2f 74 64 3e 3c 2f 74 72 3e 3c 74 72 3e 3c 74 64 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 31 34 25 3b 22 3e 3c 61 20 68 72 65 66 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 5f 5f 64 6f 50 6f 73 74 42 61 63 6b 28 27 63 74 6c 30 30 24 43 6f 6e 74 65 6e 74 50 6c 61 63 65 48 6f 6c 64 65 72 31 24 43 6f 6d 70 6c 65 74 69 6f 6e 27 2c 27 38 38 34 32 27 29 22 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 42 6c 61 63 6b 22 3e 31 37 3c 2f 61 3e 3c 2f 74 64 3e 3c 74 64 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 43 43 43 Data Ascii: pletion','8841')" style="color:Black">16</a></td></tr><tr><td align="center" style="width:14%;"><a href="javascript:__doPostBack('ctl00$ContentPlaceHolder1$Completion','8842')" style="color:Black">17</a></td><td align="center" style="background-color:#CCC
2024-03-18 16:22:23 UTC	5685	IN	Data Raw: 65 6e 74 2e 63 6f 6e 74 72 6f 6c 74 6f 76 61 6c 69 64 61 74 65 20 3d 20 22 63 74 6c 30 30 5f 43 6f 6e 74 65 6e 74 50 6c 61 63 65 48 6f 6c 64 65 72 31 5f 74 78 74 42 6f 78 44 65 70 61 72 74 6d 65 6e 74 22 3b 0d 0a 63 74 6c 30 30 5f 43 6f 6e 74 65 6e 74 50 6c 61 63 65 48 6f 6c 64 65 72 31 5f 72 6c 76 64 44 65 70 61 72 74 6d 65 6e 74 2e 65 72 72 6f 72 6d 65 73 73 61 67 65 20 3d 20 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 74 68 65 20 64 65 70 61 72 74 6d 65 6e 74 20 72 65 71 75 65 73 74 69 6e 67 20 74 68 65 20 6d 61 74 65 72 69 61 6c 73 22 3b 0d 0a 63 74 6c 30 30 5f 43 6f 6e 74 65 6e 74 50 6c 61 63 65 48 6f 6c 64 65 72 31 5f 72 6c 76 64 44 65 70 61 72 74 6d 65 6e 74 2e 64 69 73 70 6c 61 79 20 3d 20 22 44 79 6e 61 6d 69 63 22 3b 0d 0a 63 74 6c 30 30 5f 43 6f Data Ascii: ent.controltovalidate = "ctl00_ContentPlaceHolder1_txtBoxDepartment";ctl00_ContentPlaceHolder1_rlvdDepartment.errormessage = "Please enter the department requesting the materials";ctl00_ContentPlaceHolder1_rlvdDepartment.display = "Dynamic";ctl00_Co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.4	50158	142.251.35.162	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:23 UTC	2693	OUT	GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5884294479391638&output=html&h=90&slotname=3654094576&adk=228266070&adf=3493768505&pi=t.ma~as.3654094576&w=970&url=https%3A%2F%2Fbrowser-update.org%2F&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1710778930134&bpp=1204&bdt=1441&idt=2890&shv=r20240313&mjsv=m202403130201&ptt=5&saldr=sd&correlator=966864692783&frm=24&ife=3&pv=2&ga_vid=751177015.1710778933&ga_sid=1710778933&ga_hid=640648971&ga_fc=0&nhd=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=-12245933&bih=-12245933&isw=970&ish=90&ifk=1017635361&scr_x=-12245933&scr_y=-12245933&eid=44759875%2C44759926%2C44759842%2C31081793%2C95325975%2C95327950%2C95327954%2C31081901%2C95320376%2C95322388%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=862165079531677&tmod=1386792793&uas=0&nvt=1&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C970%2C90&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=1.bp47bps3drp4&fsb=1&dtd=2937 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:23 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:22:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.4	50160	13.225.66.186	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:23 UTC	654	OUT	GET /images/button.png HTTP/1.1 Host: d31otfhas71ais.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:23 UTC	543	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1549 Connection: close Date: Mon, 18 Mar 2024 15:06:43 GMT Last-Modified: Thu, 27 Apr 2017 11:50:30 GMT ETag: "b2b37aa9f64082eeedb9670c620baca1" x-amz-meta-s3b-last-modified: 20170427T114916Z x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 fd6ee8ff46440f33e22da71450793e70.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR53-C1 X-Amz-Cf-Id: FIeBnIcCDnRx7SKgbY6WISbv71dHhohWDxe_CbTtvTHNfQetmvfZFA== Age: 4541 Vary: Origin
2024-03-18 16:22:23 UTC	1549	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 01 4b 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f Data Ascii: PNGIHDR22?KiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.4	50157	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:23 UTC	447	OUT	GET /update.min.js HTTP/1.1 Host: browser-update.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Sat, 02 Mar 2024 10:00:09 GMT
2024-03-18 16:22:23 UTC	674	IN	HTTP/1.1 304 Not Modified Date: Mon, 18 Mar 2024 16:22:23 GMT Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=update.min.js expires: Thu, 14 Mar 2024 18:00:01 GMT last-modified: Sat, 02 Mar 2024 10:00:09 GMT CF-Cache-Status: HIT Age: 426142 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HzeiBb%2B2TNgFehdTvt0ocfGPGZ65%2Fx0iECHVTnCk%2BtSM8lRPsbZrRedeVcq%2FpfpWFzkX1nBpqiOLQ1uCWayyxUxk3fhDsUY2l2eBqk1L3RMq2Vkdq0yGp6V2t2SDFCOMrtuy%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668fafab014309-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.4	50162	142.251.40.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:24 UTC	1414	OUT	GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:24 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:22:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.4	50163	13.225.66.186	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:24 UTC	370	OUT	GET /images/button.png HTTP/1.1 Host: d31otfhas71ais.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:24 UTC	543	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1549 Connection: close Date: Mon, 18 Mar 2024 15:06:43 GMT Last-Modified: Thu, 27 Apr 2017 11:50:30 GMT ETag: "b2b37aa9f64082eeedb9670c620baca1" x-amz-meta-s3b-last-modified: 20170427T114916Z x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 dffe9476e426d3cb9c316316cb30d40e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR53-C1 X-Amz-Cf-Id: fFyqqVwKnNevUoJ_35pq3Hk156scvp9Ix8zrq0eTRfG1sxJfZ1EXvw== Age: 4542 Vary: Origin
2024-03-18 16:22:24 UTC	1549	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 01 4b 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f Data Ascii: PNGIHDR22?KiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.4	50164	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:24 UTC	780	OUT	POST /_services/Randomizer/Randomizer.asmx/RetrieveHeaderImage HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive Content-Length: 25 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://secure2.indwes.edu Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure2.indwes.edu/Marketing/Project-Request/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:24 UTC	25	OUT	Data Raw: 7b 20 66 6f 6c 64 65 72 3a 20 27 67 65 6e 65 72 69 63 5f 69 77 75 27 20 7d Data Ascii: { folder: 'generic_iwu' }
2024-03-18 16:22:24 UTC	462	IN	HTTP/1.1 200 OK Cache-Control: private, max-age=0 Content-Type: application/json; charset=utf-8 Server: Microsoft-IIS/10.0 X-StackifyID: V2\|800011d4-1001-d200-b63f-84710c7967bb\|C82847\|CD6 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, X-Requested-With Date: Mon, 18 Mar 2024 16:22:23 GMT Connection: close Content-Length: 74
2024-03-18 16:22:24 UTC	74	IN	Data Raw: 7b 22 64 22 3a 22 2f 2f 73 65 63 75 72 65 32 2e 69 6e 64 77 65 73 2e 65 64 75 2f 5f 69 6d 67 2f 68 65 61 64 65 72 49 6d 61 67 65 73 2f 67 65 6e 65 72 69 63 5f 69 77 75 2f 67 65 6e 65 72 69 63 5f 69 77 75 2e 6a 70 67 22 7d Data Ascii: {"d":"//secure2.indwes.edu/_img/headerImages/generic_iwu/generic_iwu.jpg"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.4	50161	142.251.40.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:24 UTC	1246	OUT	GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:25 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:22:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.4	50166	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:24 UTC	398	OUT	GET /_services/Randomizer/Randomizer.asmx/RetrieveHeaderImage HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:25 UTC	319	IN	HTTP/1.1 400 Bad Request Content-Type: text/html Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, X-Requested-With Date: Mon, 18 Mar 2024 16:22:25 GMT Connection: close Content-Length: 11
2024-03-18 16:22:25 UTC	11	IN	Data Raw: 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.4	50167	142.251.35.162	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:26 UTC	2693	OUT	GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5884294479391638&output=html&h=90&slotname=3654094576&adk=228266070&adf=3493768505&pi=t.ma~as.3654094576&w=970&url=https%3A%2F%2Fbrowser-update.org%2F&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1710778930134&bpp=1204&bdt=1441&idt=2890&shv=r20240313&mjsv=m202403130201&ptt=5&saldr=sd&correlator=966864692783&frm=24&ife=3&pv=2&ga_vid=751177015.1710778933&ga_sid=1710778933&ga_hid=640648971&ga_fc=0&nhd=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=-12245933&bih=-12245933&isw=970&ish=90&ifk=1017635361&scr_x=-12245933&scr_y=-12245933&eid=44759875%2C44759926%2C44759842%2C31081793%2C95325975%2C95327950%2C95327954%2C31081901%2C95320376%2C95322388%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=862165079531677&tmod=1386792793&uas=0&nvt=1&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C970%2C90&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=1.bp47bps3drp4&fsb=1&dtd=2937 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:26 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:22:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.4	50168	142.251.35.162	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:26 UTC	1698	OUT	GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:26 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:22:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.4	50174	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:27 UTC	703	OUT	GET /Marketing/Project-Request/ HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:28 UTC	353	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 X-StackifyID: V2\|8000068d-0800-dc00-b63f-84710c7967bb\|C82847\|CD6 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Date: Mon, 18 Mar 2024 16:22:27 GMT Connection: close Content-Length: 38100
2024-03-18 16:22:28 UTC	16031	IN	Data Raw: 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 20 69 64 3d 22 63 74 6c 30 30 5f 48 65 61 64 31 22 3e 3c 74 69 74 6c 65 3e 0d 0a 09 4d 61 72 6b 65 74 69 6e 67 20 2d 20 50 72 6f 6a 65 63 74 20 52 65 71 75 65 73 74 20 46 6f 72 6d 20 7c 20 49 6e 64 69 61 6e 61 20 57 65 73 6c 65 79 61 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head id="ctl00_Head1"><title>Marketing - Project Request Form \| Indiana Wesleya
2024-03-18 16:22:28 UTC	16384	IN	Data Raw: 70 6c 65 74 69 6f 6e 27 2c 27 38 38 34 31 27 29 22 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 42 6c 61 63 6b 22 3e 31 36 3c 2f 61 3e 3c 2f 74 64 3e 3c 2f 74 72 3e 3c 74 72 3e 3c 74 64 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 31 34 25 3b 22 3e 3c 61 20 68 72 65 66 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 5f 5f 64 6f 50 6f 73 74 42 61 63 6b 28 27 63 74 6c 30 30 24 43 6f 6e 74 65 6e 74 50 6c 61 63 65 48 6f 6c 64 65 72 31 24 43 6f 6d 70 6c 65 74 69 6f 6e 27 2c 27 38 38 34 32 27 29 22 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 42 6c 61 63 6b 22 3e 31 37 3c 2f 61 3e 3c 2f 74 64 3e 3c 74 64 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 43 43 43 Data Ascii: pletion','8841')" style="color:Black">16</a></td></tr><tr><td align="center" style="width:14%;"><a href="javascript:__doPostBack('ctl00$ContentPlaceHolder1$Completion','8842')" style="color:Black">17</a></td><td align="center" style="background-color:#CCC
2024-03-18 16:22:28 UTC	5685	IN	Data Raw: 65 6e 74 2e 63 6f 6e 74 72 6f 6c 74 6f 76 61 6c 69 64 61 74 65 20 3d 20 22 63 74 6c 30 30 5f 43 6f 6e 74 65 6e 74 50 6c 61 63 65 48 6f 6c 64 65 72 31 5f 74 78 74 42 6f 78 44 65 70 61 72 74 6d 65 6e 74 22 3b 0d 0a 63 74 6c 30 30 5f 43 6f 6e 74 65 6e 74 50 6c 61 63 65 48 6f 6c 64 65 72 31 5f 72 6c 76 64 44 65 70 61 72 74 6d 65 6e 74 2e 65 72 72 6f 72 6d 65 73 73 61 67 65 20 3d 20 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 74 68 65 20 64 65 70 61 72 74 6d 65 6e 74 20 72 65 71 75 65 73 74 69 6e 67 20 74 68 65 20 6d 61 74 65 72 69 61 6c 73 22 3b 0d 0a 63 74 6c 30 30 5f 43 6f 6e 74 65 6e 74 50 6c 61 63 65 48 6f 6c 64 65 72 31 5f 72 6c 76 64 44 65 70 61 72 74 6d 65 6e 74 2e 64 69 73 70 6c 61 79 20 3d 20 22 44 79 6e 61 6d 69 63 22 3b 0d 0a 63 74 6c 30 30 5f 43 6f Data Ascii: ent.controltovalidate = "ctl00_ContentPlaceHolder1_txtBoxDepartment";ctl00_ContentPlaceHolder1_rlvdDepartment.errormessage = "Please enter the department requesting the materials";ctl00_ContentPlaceHolder1_rlvdDepartment.display = "Dynamic";ctl00_Co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.4	50176	142.251.40.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:28 UTC	1246	OUT	GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:28 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:22:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.4	50175	142.251.40.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:28 UTC	1414	OUT	GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:29 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:22:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.4	50177	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:28 UTC	447	OUT	GET /update.min.js HTTP/1.1 Host: browser-update.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Sat, 02 Mar 2024 10:00:09 GMT
2024-03-18 16:22:28 UTC	668	IN	HTTP/1.1 304 Not Modified Date: Mon, 18 Mar 2024 16:22:28 GMT Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=update.min.js expires: Thu, 14 Mar 2024 18:00:01 GMT last-modified: Sat, 02 Mar 2024 10:00:09 GMT CF-Cache-Status: HIT Age: 426147 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=egMpwRDcn2vRYktPHiHNhGyh7VauNvf9eRvl3cA41FgU6kjpIfhOM7nsfe58lyDmbXPwfFpjp8HGQURBn4o4WQmb06Xe%2BWQxuINAPUpjntI1LMdRR3uQfGF4DZUOsoLIm%2FZLpg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668fcc3da98c96-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.4	50179	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:29 UTC	780	OUT	POST /_services/Randomizer/Randomizer.asmx/RetrieveHeaderImage HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive Content-Length: 25 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://secure2.indwes.edu Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure2.indwes.edu/Marketing/Project-Request/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:29 UTC	25	OUT	Data Raw: 7b 20 66 6f 6c 64 65 72 3a 20 27 67 65 6e 65 72 69 63 5f 69 77 75 27 20 7d Data Ascii: { folder: 'generic_iwu' }
2024-03-18 16:22:29 UTC	462	IN	HTTP/1.1 200 OK Cache-Control: private, max-age=0 Content-Type: application/json; charset=utf-8 Server: Microsoft-IIS/10.0 X-StackifyID: V2\|80000616-0801-2300-b63f-84710c7967bb\|C82847\|CD6 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, X-Requested-With Date: Mon, 18 Mar 2024 16:22:29 GMT Connection: close Content-Length: 74
2024-03-18 16:22:29 UTC	74	IN	Data Raw: 7b 22 64 22 3a 22 2f 2f 73 65 63 75 72 65 32 2e 69 6e 64 77 65 73 2e 65 64 75 2f 5f 69 6d 67 2f 68 65 61 64 65 72 49 6d 61 67 65 73 2f 67 65 6e 65 72 69 63 5f 69 77 75 2f 67 65 6e 65 72 69 63 5f 69 77 75 2e 6a 70 67 22 7d Data Ascii: {"d":"//secure2.indwes.edu/_img/headerImages/generic_iwu/generic_iwu.jpg"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.4	50180	142.251.35.162	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:29 UTC	2693	OUT	GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5884294479391638&output=html&h=90&slotname=3654094576&adk=228266070&adf=3493768505&pi=t.ma~as.3654094576&w=970&url=https%3A%2F%2Fbrowser-update.org%2F&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1710778930134&bpp=1204&bdt=1441&idt=2890&shv=r20240313&mjsv=m202403130201&ptt=5&saldr=sd&correlator=966864692783&frm=24&ife=3&pv=2&ga_vid=751177015.1710778933&ga_sid=1710778933&ga_hid=640648971&ga_fc=0&nhd=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=-12245933&bih=-12245933&isw=970&ish=90&ifk=1017635361&scr_x=-12245933&scr_y=-12245933&eid=44759875%2C44759926%2C44759842%2C31081793%2C95325975%2C95327950%2C95327954%2C31081901%2C95320376%2C95322388%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=862165079531677&tmod=1386792793&uas=0&nvt=1&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C970%2C90&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=1.bp47bps3drp4&fsb=1&dtd=2937 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:29 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:22:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.4	50181	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:29 UTC	398	OUT	GET /_services/Randomizer/Randomizer.asmx/RetrieveHeaderImage HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:30 UTC	319	IN	HTTP/1.1 400 Bad Request Content-Type: text/html Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, X-Requested-With Date: Mon, 18 Mar 2024 16:22:29 GMT Connection: close Content-Length: 11
2024-03-18 16:22:30 UTC	11	IN	Data Raw: 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.4	50182	142.251.35.162	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:29 UTC	1698	OUT	GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:30 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:22:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.4	50183	142.251.40.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:30 UTC	1246	OUT	GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:30 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:22:30 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.4	50184	142.251.40.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:30 UTC	1414	OUT	GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:31 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:22:31 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.4	50187	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:32 UTC	703	OUT	GET /Marketing/Project-Request/ HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:32 UTC	353	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 X-StackifyID: V2\|8000061a-0801-2300-b63f-84710c7967bb\|C82847\|CD6 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Date: Mon, 18 Mar 2024 16:22:31 GMT Connection: close Content-Length: 38100
2024-03-18 16:22:32 UTC	16031	IN	Data Raw: 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 20 69 64 3d 22 63 74 6c 30 30 5f 48 65 61 64 31 22 3e 3c 74 69 74 6c 65 3e 0d 0a 09 4d 61 72 6b 65 74 69 6e 67 20 2d 20 50 72 6f 6a 65 63 74 20 52 65 71 75 65 73 74 20 46 6f 72 6d 20 7c 20 49 6e 64 69 61 6e 61 20 57 65 73 6c 65 79 61 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head id="ctl00_Head1"><title>Marketing - Project Request Form \| Indiana Wesleya
2024-03-18 16:22:32 UTC	16384	IN	Data Raw: 70 6c 65 74 69 6f 6e 27 2c 27 38 38 34 31 27 29 22 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 42 6c 61 63 6b 22 3e 31 36 3c 2f 61 3e 3c 2f 74 64 3e 3c 2f 74 72 3e 3c 74 72 3e 3c 74 64 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 31 34 25 3b 22 3e 3c 61 20 68 72 65 66 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 5f 5f 64 6f 50 6f 73 74 42 61 63 6b 28 27 63 74 6c 30 30 24 43 6f 6e 74 65 6e 74 50 6c 61 63 65 48 6f 6c 64 65 72 31 24 43 6f 6d 70 6c 65 74 69 6f 6e 27 2c 27 38 38 34 32 27 29 22 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 42 6c 61 63 6b 22 3e 31 37 3c 2f 61 3e 3c 2f 74 64 3e 3c 74 64 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 43 43 43 Data Ascii: pletion','8841')" style="color:Black">16</a></td></tr><tr><td align="center" style="width:14%;"><a href="javascript:__doPostBack('ctl00$ContentPlaceHolder1$Completion','8842')" style="color:Black">17</a></td><td align="center" style="background-color:#CCC
2024-03-18 16:22:32 UTC	5685	IN	Data Raw: 65 6e 74 2e 63 6f 6e 74 72 6f 6c 74 6f 76 61 6c 69 64 61 74 65 20 3d 20 22 63 74 6c 30 30 5f 43 6f 6e 74 65 6e 74 50 6c 61 63 65 48 6f 6c 64 65 72 31 5f 74 78 74 42 6f 78 44 65 70 61 72 74 6d 65 6e 74 22 3b 0d 0a 63 74 6c 30 30 5f 43 6f 6e 74 65 6e 74 50 6c 61 63 65 48 6f 6c 64 65 72 31 5f 72 6c 76 64 44 65 70 61 72 74 6d 65 6e 74 2e 65 72 72 6f 72 6d 65 73 73 61 67 65 20 3d 20 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 74 68 65 20 64 65 70 61 72 74 6d 65 6e 74 20 72 65 71 75 65 73 74 69 6e 67 20 74 68 65 20 6d 61 74 65 72 69 61 6c 73 22 3b 0d 0a 63 74 6c 30 30 5f 43 6f 6e 74 65 6e 74 50 6c 61 63 65 48 6f 6c 64 65 72 31 5f 72 6c 76 64 44 65 70 61 72 74 6d 65 6e 74 2e 64 69 73 70 6c 61 79 20 3d 20 22 44 79 6e 61 6d 69 63 22 3b 0d 0a 63 74 6c 30 30 5f 43 6f Data Ascii: ent.controltovalidate = "ctl00_ContentPlaceHolder1_txtBoxDepartment";ctl00_ContentPlaceHolder1_rlvdDepartment.errormessage = "Please enter the department requesting the materials";ctl00_ContentPlaceHolder1_rlvdDepartment.display = "Dynamic";ctl00_Co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.4	50188	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:33 UTC	447	OUT	GET /update.min.js HTTP/1.1 Host: browser-update.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Sat, 02 Mar 2024 10:00:09 GMT
2024-03-18 16:22:33 UTC	670	IN	HTTP/1.1 304 Not Modified Date: Mon, 18 Mar 2024 16:22:33 GMT Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=update.min.js expires: Thu, 14 Mar 2024 18:00:01 GMT last-modified: Sat, 02 Mar 2024 10:00:09 GMT CF-Cache-Status: HIT Age: 426152 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8k4s4KQNVK3YuiyZ0SBcd2XogPTWR1I8Fv5qbWHBLM67tSZ6FrhlEGqhqhPopxttk2UdC440q5uethqHXAADvNxafMLtXog5ImH82Fn%2B9K9VZTLd5PPQjh%2Fo1v1uaWyrmM%2BPEA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668fedea7a43ff-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.4	50189	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:34 UTC	780	OUT	POST /_services/Randomizer/Randomizer.asmx/RetrieveHeaderImage HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive Content-Length: 25 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://secure2.indwes.edu Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure2.indwes.edu/Marketing/Project-Request/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:34 UTC	25	OUT	Data Raw: 7b 20 66 6f 6c 64 65 72 3a 20 27 67 65 6e 65 72 69 63 5f 69 77 75 27 20 7d Data Ascii: { folder: 'generic_iwu' }
2024-03-18 16:22:34 UTC	462	IN	HTTP/1.1 200 OK Cache-Control: private, max-age=0 Content-Type: application/json; charset=utf-8 Server: Microsoft-IIS/10.0 X-StackifyID: V2\|8000061c-0801-2300-b63f-84710c7967bb\|C82847\|CD6 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, X-Requested-With Date: Mon, 18 Mar 2024 16:22:34 GMT Connection: close Content-Length: 75
2024-03-18 16:22:34 UTC	75	IN	Data Raw: 7b 22 64 22 3a 22 2f 2f 73 65 63 75 72 65 32 2e 69 6e 64 77 65 73 2e 65 64 75 2f 5f 69 6d 67 2f 68 65 61 64 65 72 49 6d 61 67 65 73 2f 67 65 6e 65 72 69 63 5f 69 77 75 2f 67 65 6e 65 72 69 63 5f 69 77 75 33 2e 6a 70 67 22 7d Data Ascii: {"d":"//secure2.indwes.edu/_img/headerImages/generic_iwu/generic_iwu3.jpg"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.4	50192	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:34 UTC	398	OUT	GET /_services/Randomizer/Randomizer.asmx/RetrieveHeaderImage HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:35 UTC	319	IN	HTTP/1.1 400 Bad Request Content-Type: text/html Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, X-Requested-With Date: Mon, 18 Mar 2024 16:22:34 GMT Connection: close Content-Length: 11
2024-03-18 16:22:35 UTC	11	IN	Data Raw: 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.4	50191	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:34 UTC	653	OUT	GET /_img/headerImages/generic_iwu/generic_iwu3.jpg HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure2.indwes.edu/Marketing/Project-Request/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:35 UTC	315	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 02 Dec 2010 18:59:01 GMT Accept-Ranges: bytes ETag: "804839fb5292cb1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Date: Mon, 18 Mar 2024 16:22:34 GMT Connection: close Content-Length: 71730
2024-03-18 16:22:35 UTC	16069	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff e1 0c 33 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 34 20 4d 61 63 69 6e 74 6f 73 68 00 32 30 31 30 3a 31 32 3a 30 32 20 31 33 3a 35 39 3a 30 30 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 03 c0 a0 03 00 04 00 00 00 01 00 00 00 7b 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 Data Ascii: JFIFHH3ExifMM*bj(1r2i''Adobe Photoshop CS4 Macintosh2010:12:02 13:59:00{
2024-03-18 16:22:35 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 77 22 3f 3e ff ee 00 0e 41 64 6f 62 65 00 64 00 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 Data Ascii: <?xpacket end="w"?>Adobed
2024-03-18 16:22:35 UTC	16384	IN	Data Raw: 3b a6 8a e5 95 e4 32 48 d4 db e1 6f b5 f1 7e d6 36 2f 66 40 ad f3 c7 9e ac fc c1 a5 59 a4 69 3c 7a 62 c2 a2 d5 2f 90 18 a6 67 60 7e 26 42 7f 63 e0 4e 4e dc 7e 3f dd e4 67 96 f6 0c c4 36 b7 99 6b fa b1 87 57 2b 0c 8f 71 6c 4f a6 f1 b3 16 49 54 ee 43 d6 8b f6 7e c7 c0 bf 0e 53 0c 5e 9a 3c d1 29 6e 93 7d 7d 57 58 6b 57 b5 4b 5b 59 0b c6 2f 9e 5a 28 43 50 16 66 4e 8a 18 af 4f f8 8e 64 46 04 c3 88 73 1f 8f 4b 5d 8e 48 5d 2e e1 e6 d5 a0 d3 af 63 74 69 4b 71 92 23 58 ce c4 2b 6f fb 1b 57 97 f2 e5 93 97 a7 8a f9 28 e7 45 56 ee d2 3b 5b 9e 30 4a 27 2b 5a 7a 4c 4a d4 1f 12 05 72 b8 48 c8 29 8e ea 90 dd 96 56 0a 7a ee c8 7d 87 5f a3 2d e1 da d5 94 f9 4a 78 a7 d0 f5 26 b9 bb 36 f6 89 f5 62 2e e4 15 10 29 77 2d 20 04 65 f1 e2 03 76 34 2d bb ef cc af 21 58 bf d5 74 eb Data Ascii: ;2Ho~6/f@Yi<zb/g`~&BcNN~?g6kW+qlOITC~S^<)n}}WXkWK[Y/Z(CPfNOdFsK]H].ctiKq#X+oW(EV;[0J'+ZzLJrH)Vz}_-Jx&6b.)w- ev4-!Xt
2024-03-18 16:22:35 UTC	16384	IN	Data Raw: a7 07 e5 f2 f9 2f 8b 05 68 6f fc bb 5d 92 62 3f d4 a7 f1 c1 f9 7c 9e 49 f1 20 ca f4 cd 19 2e 34 69 35 98 2d 26 6d 3e 16 e2 f2 50 56 a3 a9 0b 5a 90 32 43 0c fc 98 9c 91 4d 74 6b 0b 7b c8 4c d1 8f 4a 15 3c 44 92 fc 20 b7 80 eb 93 18 e4 c0 cc 2e 95 ed 61 b8 30 c8 8e ae 86 84 15 af f1 c3 c1 25 e2 0c a7 55 11 2f 97 2d b6 25 65 60 14 01 b9 3f 2c b0 83 4d 60 ee c7 17 40 69 6f 65 b5 30 94 9a 25 0e dc c5 05 18 55 68 7d f2 ae 09 36 71 04 ae 08 ac a5 b8 f4 23 8c b4 d5 23 80 53 5d ba e1 e0 9a 78 82 27 53 d2 12 cc c7 1d cc 66 36 96 31 22 0a 13 55 fa 31 e1 92 04 82 49 2e 8d 6f 32 f2 45 d8 f8 82 3f 5d 33 1e 52 21 b4 00 81 97 cb 28 7a 65 47 33 3e 04 2c 9e 56 3d 8e 0f 1d 78 14 bf c2 d7 35 f8 6b 83 c7 09 e0 5a 7c b1 7a bd 39 63 e3 05 e0 2a 91 e8 fa 94 5b a9 70 7e 9c 89 c9 Data Ascii: /ho]b?\|I .4i5-&m>PVZ2CMtk{LJ<D .a0%U/-%e`?,M`@ioe0%Uh}6q##S]x'Sf61"U1I.o2E?]3R!(zeG3>,V=x5kZ\|z9c*[p~
2024-03-18 16:22:35 UTC	6509	IN	Data Raw: f4 10 20 86 bc 82 a8 d8 01 50 7b 66 3e 4d a4 40 41 9c bb d1 3f f2 b1 bc dc 69 ff 00 3b 24 9b ff 00 30 02 9f 86 0e 32 8e 39 77 ab af e6 1f 99 50 12 de 68 6a 83 b0 e2 5a bf 70 c3 e2 9e e4 78 87 bd 7c 7f 99 de 62 65 a3 6b a3 ad 39 3a 38 fd 59 2f 18 8f e1 5f 10 f7 aa a7 e6 6e b6 08 e5 ab c5 27 8f c5 30 c4 6a 4f f3 57 8c f7 a6 16 bf 9a f7 31 d3 d4 bd 46 f1 02 69 6b f8 8c 97 e6 2f f8 52 32 14 c6 3f cd 39 64 75 1f 5f 58 c3 1a 7f bd 3f ae a3 07 e6 63 fc d2 cb c5 5f 2f e6 1c 8c 39 2e b4 c3 c4 2d ca 1f c0 8c 1f 99 87 f3 64 9f 11 56 0f 3b cf 25 08 f3 0b 05 ae c5 a7 8f af d1 92 f1 f1 f7 1f 92 7c 54 47 f8 a2 fd fe 2f f1 0c 8a 3c 7d 68 a8 6b 83 c7 c5 f8 0c bc 55 36 f3 1d eb 29 91 7c d0 55 54 d0 b3 34 4c 2b f7 65 82 50 3d c9 f1 43 71 6b 7a fc ac 16 0f 33 07 63 b8 5f 4a Data Ascii: P{f>M@A?i;$029wPhjZpx\|bek9:8Y/_n'0jOW1Fik/R2?9du_X?c_/9.-dV;%\|TG/<}hkU6)\|UT4L+eP=Cqkz3c_J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.4	50195	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:35 UTC	703	OUT	GET /Marketing/Project-Request/ HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:36 UTC	353	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 X-StackifyID: V2\|80000505-0800-5d00-b63f-84710c7967bb\|C82847\|CD6 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Date: Mon, 18 Mar 2024 16:22:35 GMT Connection: close Content-Length: 38100
2024-03-18 16:22:36 UTC	16031	IN	Data Raw: 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 20 69 64 3d 22 63 74 6c 30 30 5f 48 65 61 64 31 22 3e 3c 74 69 74 6c 65 3e 0d 0a 09 4d 61 72 6b 65 74 69 6e 67 20 2d 20 50 72 6f 6a 65 63 74 20 52 65 71 75 65 73 74 20 46 6f 72 6d 20 7c 20 49 6e 64 69 61 6e 61 20 57 65 73 6c 65 79 61 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head id="ctl00_Head1"><title>Marketing - Project Request Form \| Indiana Wesleya
2024-03-18 16:22:36 UTC	16384	IN	Data Raw: 70 6c 65 74 69 6f 6e 27 2c 27 38 38 34 31 27 29 22 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 42 6c 61 63 6b 22 3e 31 36 3c 2f 61 3e 3c 2f 74 64 3e 3c 2f 74 72 3e 3c 74 72 3e 3c 74 64 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 31 34 25 3b 22 3e 3c 61 20 68 72 65 66 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 5f 5f 64 6f 50 6f 73 74 42 61 63 6b 28 27 63 74 6c 30 30 24 43 6f 6e 74 65 6e 74 50 6c 61 63 65 48 6f 6c 64 65 72 31 24 43 6f 6d 70 6c 65 74 69 6f 6e 27 2c 27 38 38 34 32 27 29 22 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 42 6c 61 63 6b 22 3e 31 37 3c 2f 61 3e 3c 2f 74 64 3e 3c 74 64 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 43 43 43 Data Ascii: pletion','8841')" style="color:Black">16</a></td></tr><tr><td align="center" style="width:14%;"><a href="javascript:__doPostBack('ctl00$ContentPlaceHolder1$Completion','8842')" style="color:Black">17</a></td><td align="center" style="background-color:#CCC
2024-03-18 16:22:36 UTC	5685	IN	Data Raw: 65 6e 74 2e 63 6f 6e 74 72 6f 6c 74 6f 76 61 6c 69 64 61 74 65 20 3d 20 22 63 74 6c 30 30 5f 43 6f 6e 74 65 6e 74 50 6c 61 63 65 48 6f 6c 64 65 72 31 5f 74 78 74 42 6f 78 44 65 70 61 72 74 6d 65 6e 74 22 3b 0d 0a 63 74 6c 30 30 5f 43 6f 6e 74 65 6e 74 50 6c 61 63 65 48 6f 6c 64 65 72 31 5f 72 6c 76 64 44 65 70 61 72 74 6d 65 6e 74 2e 65 72 72 6f 72 6d 65 73 73 61 67 65 20 3d 20 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 74 68 65 20 64 65 70 61 72 74 6d 65 6e 74 20 72 65 71 75 65 73 74 69 6e 67 20 74 68 65 20 6d 61 74 65 72 69 61 6c 73 22 3b 0d 0a 63 74 6c 30 30 5f 43 6f 6e 74 65 6e 74 50 6c 61 63 65 48 6f 6c 64 65 72 31 5f 72 6c 76 64 44 65 70 61 72 74 6d 65 6e 74 2e 64 69 73 70 6c 61 79 20 3d 20 22 44 79 6e 61 6d 69 63 22 3b 0d 0a 63 74 6c 30 30 5f 43 6f Data Ascii: ent.controltovalidate = "ctl00_ContentPlaceHolder1_txtBoxDepartment";ctl00_ContentPlaceHolder1_rlvdDepartment.errormessage = "Please enter the department requesting the materials";ctl00_ContentPlaceHolder1_rlvdDepartment.display = "Dynamic";ctl00_Co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.4	50197	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:35 UTC	447	OUT	GET /update.min.js HTTP/1.1 Host: browser-update.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Sat, 02 Mar 2024 10:00:09 GMT
2024-03-18 16:22:35 UTC	672	IN	HTTP/1.1 304 Not Modified Date: Mon, 18 Mar 2024 16:22:35 GMT Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=update.min.js expires: Thu, 14 Mar 2024 18:00:01 GMT last-modified: Sat, 02 Mar 2024 10:00:09 GMT CF-Cache-Status: HIT Age: 426154 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L2PhnAyxfLHNOJbOFvtMWTfQyNzE8VW6CxDSZHAHp%2FjCScA%2BjHAq3gKlwlMntwExp%2Fp68enQNXlqc8Giedy2dADppFnYAh68cYFxXUM6NGw5CHnAjmUGNc36SPo%2F2XMcUvFdGA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86668ffa9a7f72b9-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.4	50196	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:35 UTC	388	OUT	GET /_img/headerImages/generic_iwu/generic_iwu3.jpg HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:36 UTC	315	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 02 Dec 2010 18:59:01 GMT Accept-Ranges: bytes ETag: "804839fb5292cb1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Date: Mon, 18 Mar 2024 16:22:35 GMT Connection: close Content-Length: 71730
2024-03-18 16:22:36 UTC	16069	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff e1 0c 33 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 34 20 4d 61 63 69 6e 74 6f 73 68 00 32 30 31 30 3a 31 32 3a 30 32 20 31 33 3a 35 39 3a 30 30 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 03 c0 a0 03 00 04 00 00 00 01 00 00 00 7b 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 Data Ascii: JFIFHH3ExifMM*bj(1r2i''Adobe Photoshop CS4 Macintosh2010:12:02 13:59:00{
2024-03-18 16:22:36 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 77 22 3f 3e ff ee 00 0e 41 64 6f 62 65 00 64 00 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 Data Ascii: <?xpacket end="w"?>Adobed
2024-03-18 16:22:36 UTC	16384	IN	Data Raw: 3b a6 8a e5 95 e4 32 48 d4 db e1 6f b5 f1 7e d6 36 2f 66 40 ad f3 c7 9e ac fc c1 a5 59 a4 69 3c 7a 62 c2 a2 d5 2f 90 18 a6 67 60 7e 26 42 7f 63 e0 4e 4e dc 7e 3f dd e4 67 96 f6 0c c4 36 b7 99 6b fa b1 87 57 2b 0c 8f 71 6c 4f a6 f1 b3 16 49 54 ee 43 d6 8b f6 7e c7 c0 bf 0e 53 0c 5e 9a 3c d1 29 6e 93 7d 7d 57 58 6b 57 b5 4b 5b 59 0b c6 2f 9e 5a 28 43 50 16 66 4e 8a 18 af 4f f8 8e 64 46 04 c3 88 73 1f 8f 4b 5d 8e 48 5d 2e e1 e6 d5 a0 d3 af 63 74 69 4b 71 92 23 58 ce c4 2b 6f fb 1b 57 97 f2 e5 93 97 a7 8a f9 28 e7 45 56 ee d2 3b 5b 9e 30 4a 27 2b 5a 7a 4c 4a d4 1f 12 05 72 b8 48 c8 29 8e ea 90 dd 96 56 0a 7a ee c8 7d 87 5f a3 2d e1 da d5 94 f9 4a 78 a7 d0 f5 26 b9 bb 36 f6 89 f5 62 2e e4 15 10 29 77 2d 20 04 65 f1 e2 03 76 34 2d bb ef cc af 21 58 bf d5 74 eb Data Ascii: ;2Ho~6/f@Yi<zb/g`~&BcNN~?g6kW+qlOITC~S^<)n}}WXkWK[Y/Z(CPfNOdFsK]H].ctiKq#X+oW(EV;[0J'+ZzLJrH)Vz}_-Jx&6b.)w- ev4-!Xt
2024-03-18 16:22:36 UTC	16384	IN	Data Raw: a7 07 e5 f2 f9 2f 8b 05 68 6f fc bb 5d 92 62 3f d4 a7 f1 c1 f9 7c 9e 49 f1 20 ca f4 cd 19 2e 34 69 35 98 2d 26 6d 3e 16 e2 f2 50 56 a3 a9 0b 5a 90 32 43 0c fc 98 9c 91 4d 74 6b 0b 7b c8 4c d1 8f 4a 15 3c 44 92 fc 20 b7 80 eb 93 18 e4 c0 cc 2e 95 ed 61 b8 30 c8 8e ae 86 84 15 af f1 c3 c1 25 e2 0c a7 55 11 2f 97 2d b6 25 65 60 14 01 b9 3f 2c b0 83 4d 60 ee c7 17 40 69 6f 65 b5 30 94 9a 25 0e dc c5 05 18 55 68 7d f2 ae 09 36 71 04 ae 08 ac a5 b8 f4 23 8c b4 d5 23 80 53 5d ba e1 e0 9a 78 82 27 53 d2 12 cc c7 1d cc 66 36 96 31 22 0a 13 55 fa 31 e1 92 04 82 49 2e 8d 6f 32 f2 45 d8 f8 82 3f 5d 33 1e 52 21 b4 00 81 97 cb 28 7a 65 47 33 3e 04 2c 9e 56 3d 8e 0f 1d 78 14 bf c2 d7 35 f8 6b 83 c7 09 e0 5a 7c b1 7a bd 39 63 e3 05 e0 2a 91 e8 fa 94 5b a9 70 7e 9c 89 c9 Data Ascii: /ho]b?\|I .4i5-&m>PVZ2CMtk{LJ<D .a0%U/-%e`?,M`@ioe0%Uh}6q##S]x'Sf61"U1I.o2E?]3R!(zeG3>,V=x5kZ\|z9c*[p~
2024-03-18 16:22:36 UTC	6509	IN	Data Raw: f4 10 20 86 bc 82 a8 d8 01 50 7b 66 3e 4d a4 40 41 9c bb d1 3f f2 b1 bc dc 69 ff 00 3b 24 9b ff 00 30 02 9f 86 0e 32 8e 39 77 ab af e6 1f 99 50 12 de 68 6a 83 b0 e2 5a bf 70 c3 e2 9e e4 78 87 bd 7c 7f 99 de 62 65 a3 6b a3 ad 39 3a 38 fd 59 2f 18 8f e1 5f 10 f7 aa a7 e6 6e b6 08 e5 ab c5 27 8f c5 30 c4 6a 4f f3 57 8c f7 a6 16 bf 9a f7 31 d3 d4 bd 46 f1 02 69 6b f8 8c 97 e6 2f f8 52 32 14 c6 3f cd 39 64 75 1f 5f 58 c3 1a 7f bd 3f ae a3 07 e6 63 fc d2 cb c5 5f 2f e6 1c 8c 39 2e b4 c3 c4 2d ca 1f c0 8c 1f 99 87 f3 64 9f 11 56 0f 3b cf 25 08 f3 0b 05 ae c5 a7 8f af d1 92 f1 f1 f7 1f 92 7c 54 47 f8 a2 fd fe 2f f1 0c 8a 3c 7d 68 a8 6b 83 c7 c5 f8 0c bc 55 36 f3 1d eb 29 91 7c d0 55 54 d0 b3 34 4c 2b f7 65 82 50 3d c9 f1 43 71 6b 7a fc ac 16 0f 33 07 63 b8 5f 4a Data Ascii: P{f>M@A?i;$029wPhjZpx\|bek9:8Y/_n'0jOW1Fik/R2?9du_X?c_/9.-dV;%\|TG/<}hkU6)\|UT4L+eP=Cqkz3c_J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.4	50199	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:36 UTC	780	OUT	POST /_services/Randomizer/Randomizer.asmx/RetrieveHeaderImage HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive Content-Length: 25 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://secure2.indwes.edu Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure2.indwes.edu/Marketing/Project-Request/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:36 UTC	25	OUT	Data Raw: 7b 20 66 6f 6c 64 65 72 3a 20 27 67 65 6e 65 72 69 63 5f 69 77 75 27 20 7d Data Ascii: { folder: 'generic_iwu' }
2024-03-18 16:22:36 UTC	462	IN	HTTP/1.1 200 OK Cache-Control: private, max-age=0 Content-Type: application/json; charset=utf-8 Server: Microsoft-IIS/10.0 X-StackifyID: V2\|80000b89-1001-1d00-b63f-84710c7967bb\|C82847\|CD6 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, X-Requested-With Date: Mon, 18 Mar 2024 16:22:36 GMT Connection: close Content-Length: 75
2024-03-18 16:22:36 UTC	75	IN	Data Raw: 7b 22 64 22 3a 22 2f 2f 73 65 63 75 72 65 32 2e 69 6e 64 77 65 73 2e 65 64 75 2f 5f 69 6d 67 2f 68 65 61 64 65 72 49 6d 61 67 65 73 2f 67 65 6e 65 72 69 63 5f 69 77 75 2f 67 65 6e 65 72 69 63 5f 69 77 75 32 2e 6a 70 67 22 7d Data Ascii: {"d":"//secure2.indwes.edu/_img/headerImages/generic_iwu/generic_iwu2.jpg"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.4	50200	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:36 UTC	653	OUT	GET /_img/headerImages/generic_iwu/generic_iwu2.jpg HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure2.indwes.edu/Marketing/Project-Request/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:37 UTC	315	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Fri, 27 Apr 2012 12:46:42 GMT Accept-Ranges: bytes ETag: "6ca6a8cb7324cd1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Date: Mon, 18 Mar 2024 16:22:36 GMT Connection: close Content-Length: 69217
2024-03-18 16:22:37 UTC	16069	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 6f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 31 20 36 34 2e 31 34 30 39 34 39 2c 20 32 30 31 30 2f 31 32 2f 30 37 2d 31 30 3a 35 37 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyPohttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xm
2024-03-18 16:22:37 UTC	16384	IN	Data Raw: e4 8e 35 8a e8 3f b6 10 04 a0 52 11 7d 40 f5 ae aa ce 43 56 05 d1 61 06 c5 6f cd 73 1e 37 c6 1e 41 92 ca bd 9c b6 9e 96 f5 bb f4 07 d5 f8 0b 12 3e ed 44 ca 23 02 53 c9 80 4e b8 3e 7d c7 f9 3d ac d3 e0 32 12 64 55 54 a4 ae 3d f0 50 52 87 fe 2c 35 ea 0f c7 44 06 39 8c 54 61 32 70 48 af ed b0 f3 5b 4a d6 90 4f 6b 73 b9 04 53 89 5e aa 0d 09 23 e1 50 3c c6 85 64 98 60 54 e2 01 42 96 fc 76 f5 1a 59 0e 5b 22 4c 8b b4 09 2e 24 72 9d 49 05 6b d4 52 ba 09 07 9a 28 ae 25 78 b4 c0 5d 4c d7 96 d3 e5 a5 b8 8d 11 4a 7c d4 87 75 08 a6 d5 a1 5f ee d2 8c 35 38 25 31 1a 4e 0a 15 e7 5c 1e f0 45 71 7d 60 2d e7 b9 43 f9 b1 06 aa 5c 46 05 04 44 90 40 21 ba ab 79 1f b0 9d 55 b6 3a 32 44 05 c6 2a ba 71 cc b4 bc 1f 3f 16 46 f6 c4 e5 71 17 a0 47 c8 b0 cd e3 32 02 77 14 a8 3b 66 89 Data Ascii: 5?R}@CVaos7A>D#SN>}=2dUT=PR,5D9Ta2pH[JOksS^#P<d`TBvY["L.$rIkR(%x]LJ\|u_58%1N\Eq}`-C\FD@!yU:2D*q?FqG2w;f
2024-03-18 16:22:37 UTC	16384	IN	Data Raw: 9e 47 ad 2b 75 31 eb fe f9 d7 a0 50 5a b8 f7 0f 82 f2 bb c7 ea 4b bc fc 52 20 82 bd 74 5d 4a 1a 4a fd 08 a7 ef f8 e9 3a 6d 25 7a f6 58 05 6a 1d ad e0 de 1a 62 54 b4 10 bd ed 22 9e 3d 74 c9 69 58 13 a6 92 76 2b 7a 27 db a4 a4 97 45 0b 74 3b 4d 0f 4f 0d 47 50 53 88 55 5f ea ff 00 92 0c 37 6f 30 58 84 80 dd 4d c9 73 89 1f b0 0a d0 47 6b 0b c8 ee c1 98 54 2b 94 fb b5 4f 7b 60 8d 32 ed 61 ed 28 b4 c7 55 f0 1d e7 d8 3f 15 41 22 ca 5b c8 3d 85 b1 30 bd a9 03 7e fa a9 34 1e 90 69 4f 3d 73 c2 40 ad b6 47 36 19 3b 3f 67 6c b0 dd 45 3b 51 cb c6 de 9a 50 0e 94 70 3c 3e cd 10 18 85 20 43 27 69 ef 6f 65 b7 73 86 bb 89 36 b6 dd d7 60 48 46 df c4 36 ff 00 d6 74 e6 c0 32 4a 21 d3 67 1b ca 72 9b fb a9 22 bf b5 b4 f9 67 af b0 d6 88 55 89 06 95 60 24 14 00 75 d2 aa ed 6e 02 Data Ascii: G+u1PZKR t]JJ:m%zXjbT"=tiXv+z'Et;MOGPSU_7o0XMsGkT+O{`2a(U?A"[=0~4iO=s@G6;?glE;QPp<> C'ioes6`HF6t2J!gr"gU`$un
2024-03-18 16:22:37 UTC	16384	IN	Data Raw: 73 dd a4 52 94 81 9c 09 e1 88 00 64 67 a9 26 43 13 0d de 3d 4b c8 ba d9 91 4f 11 82 e5 ef d4 5f 0f e7 f8 ce e0 e7 ef be 7a cf 0d c6 b2 37 6c f8 fb a6 bb b6 32 ce 26 50 c5 c4 2b 30 64 43 26 e5 0c 53 ad 3c c6 b9 61 b2 d9 cf 75 68 24 99 bb 9c 0b 07 0f 9b 62 86 60 4b b9 65 1e db 70 4e e4 5b f1 4f d4 b1 98 8c a6 5f 1f 0c 73 49 f3 98 d5 8e 59 03 90 19 83 2c 6c e5 68 28 40 a6 e2 08 fb 35 a3 b9 ea db 5a ed 15 19 81 32 c0 03 ec 0d cf 97 7a d0 d9 ed 36 f6 92 6e 9e 90 07 b5 74 af e8 ff 00 8a da 65 7e a5 31 3c aa e9 65 f9 ee 3f c5 ff 00 f0 5b 6b 8c c5 fe 52 e2 de ce 5c 52 45 32 5c 47 7b 2b ac 4e 6e 26 6e 91 8d a2 9b 57 a0 d6 d8 d6 18 4c 32 ab 6c 6b 89 96 89 6a 18 fb 1f 0f 72 e9 9f 71 0c 37 b9 7b 1c 33 0d c6 7c 3d dd c8 8b f3 08 dd 14 d1 1e aa a4 13 55 dd 41 5e ba 75 Data Ascii: sRdg&C=KO_z7l2&P+0dC&S<auh$b`KepN[O_sIY,lh(@5Z2z6nte~1<e?[kR\RE2\G{+Nn&nWL2lkjrq7{3\|=UA^u
2024-03-18 16:22:37 UTC	3996	IN	Data Raw: 13 6d a4 44 12 34 c4 f9 a4 23 ff 00 b1 e2 4f 2c 96 d5 56 18 8c 4e 0a 3a c6 49 75 15 dd d5 9c 98 fb 7b 39 0c cc f2 19 b6 98 e8 ca 6a c9 21 7d ae 28 be 5a f4 6d bd 82 d1 aa 0c ca d8 2e 54 93 c6 1a cb 07 79 fa e4 bf 96 98 3b 09 f3 59 16 1e 98 c2 d8 c1 25 c1 e8 00 00 0d ba df e9 f5 08 c9 fc 4a ab b9 93 c4 af 9e 2c ae 4e e7 33 93 c9 65 af 5c b5 c6 56 ea 7b cb 92 dd 6b 25 c4 8d 23 12 7c c9 2d a0 48 b9 27 9a b5 10 c0 05 72 fe 84 30 12 64 7b af 9e cf 6c 56 4e 37 c6 6e 8d b3 39 a2 ac f9 09 62 b3 4e be 23 d0 f2 6a 55 e6 a3 69 c1 74 8f 94 72 3c 8e 3a 68 2d b0 36 d7 3b 6d 52 43 7c e2 6d ce d4 72 aa 10 8a f4 aa 9a 54 6b 2e eb 4c 70 08 d1 83 a4 5c 3a f6 fa ee f2 f8 e5 ee 5e 38 e5 46 78 e3 95 16 66 0e cc 3a 13 ed d7 4d 44 b5 1c 54 f4 b2 2a cb 98 23 b4 16 d1 5d 5b c8 2f Data Ascii: mD4#O,VN:Iu{9j!}(Zm.Ty;Y%J,N3e\V{k%#\|-H'r0d{lVN7n9bN#jUitr<:h-6;mRC\|mrTk.Lp\:^8Fxf:MDT*#][/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.4	50201	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:36 UTC	398	OUT	GET /_services/Randomizer/Randomizer.asmx/RetrieveHeaderImage HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:37 UTC	319	IN	HTTP/1.1 400 Bad Request Content-Type: text/html Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, X-Requested-With Date: Mon, 18 Mar 2024 16:22:36 GMT Connection: close Content-Length: 11
2024-03-18 16:22:37 UTC	11	IN	Data Raw: 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.4	50206	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:37 UTC	447	OUT	GET /update.min.js HTTP/1.1 Host: browser-update.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Sat, 02 Mar 2024 10:00:09 GMT
2024-03-18 16:22:37 UTC	672	IN	HTTP/1.1 304 Not Modified Date: Mon, 18 Mar 2024 16:22:37 GMT Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=update.min.js expires: Thu, 14 Mar 2024 18:00:01 GMT last-modified: Sat, 02 Mar 2024 10:00:09 GMT CF-Cache-Status: HIT Age: 426156 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N5RmMu9kd8F7xD75kiD4DOWyzhw7ciavgIqt4f97nCpA0uWwvwpoELwWS55UIAbPBBwu4FPvnRpSjx9bAXpKG%2FHX6k%2FNYJqii32Urb4mQhZ%2BGwbSCFSKl8GyLo%2FTlqlQpgNJVg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 866690064837422e-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.4	50204	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:37 UTC	703	OUT	GET /Marketing/Project-Request/ HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://iwu.marketing/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:38 UTC	353	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 X-StackifyID: V2\|80002022-0801-2800-b63f-84710c7967bb\|C82847\|CD6 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Date: Mon, 18 Mar 2024 16:22:37 GMT Connection: close Content-Length: 38100
2024-03-18 16:22:38 UTC	16031	IN	Data Raw: 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 20 69 64 3d 22 63 74 6c 30 30 5f 48 65 61 64 31 22 3e 3c 74 69 74 6c 65 3e 0d 0a 09 4d 61 72 6b 65 74 69 6e 67 20 2d 20 50 72 6f 6a 65 63 74 20 52 65 71 75 65 73 74 20 46 6f 72 6d 20 7c 20 49 6e 64 69 61 6e 61 20 57 65 73 6c 65 79 61 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head id="ctl00_Head1"><title>Marketing - Project Request Form \| Indiana Wesleya
2024-03-18 16:22:38 UTC	16384	IN	Data Raw: 70 6c 65 74 69 6f 6e 27 2c 27 38 38 34 31 27 29 22 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 42 6c 61 63 6b 22 3e 31 36 3c 2f 61 3e 3c 2f 74 64 3e 3c 2f 74 72 3e 3c 74 72 3e 3c 74 64 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 31 34 25 3b 22 3e 3c 61 20 68 72 65 66 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 5f 5f 64 6f 50 6f 73 74 42 61 63 6b 28 27 63 74 6c 30 30 24 43 6f 6e 74 65 6e 74 50 6c 61 63 65 48 6f 6c 64 65 72 31 24 43 6f 6d 70 6c 65 74 69 6f 6e 27 2c 27 38 38 34 32 27 29 22 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 42 6c 61 63 6b 22 3e 31 37 3c 2f 61 3e 3c 2f 74 64 3e 3c 74 64 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 43 43 43 Data Ascii: pletion','8841')" style="color:Black">16</a></td></tr><tr><td align="center" style="width:14%;"><a href="javascript:__doPostBack('ctl00$ContentPlaceHolder1$Completion','8842')" style="color:Black">17</a></td><td align="center" style="background-color:#CCC
2024-03-18 16:22:38 UTC	5685	IN	Data Raw: 65 6e 74 2e 63 6f 6e 74 72 6f 6c 74 6f 76 61 6c 69 64 61 74 65 20 3d 20 22 63 74 6c 30 30 5f 43 6f 6e 74 65 6e 74 50 6c 61 63 65 48 6f 6c 64 65 72 31 5f 74 78 74 42 6f 78 44 65 70 61 72 74 6d 65 6e 74 22 3b 0d 0a 63 74 6c 30 30 5f 43 6f 6e 74 65 6e 74 50 6c 61 63 65 48 6f 6c 64 65 72 31 5f 72 6c 76 64 44 65 70 61 72 74 6d 65 6e 74 2e 65 72 72 6f 72 6d 65 73 73 61 67 65 20 3d 20 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 74 68 65 20 64 65 70 61 72 74 6d 65 6e 74 20 72 65 71 75 65 73 74 69 6e 67 20 74 68 65 20 6d 61 74 65 72 69 61 6c 73 22 3b 0d 0a 63 74 6c 30 30 5f 43 6f 6e 74 65 6e 74 50 6c 61 63 65 48 6f 6c 64 65 72 31 5f 72 6c 76 64 44 65 70 61 72 74 6d 65 6e 74 2e 64 69 73 70 6c 61 79 20 3d 20 22 44 79 6e 61 6d 69 63 22 3b 0d 0a 63 74 6c 30 30 5f 43 6f Data Ascii: ent.controltovalidate = "ctl00_ContentPlaceHolder1_txtBoxDepartment";ctl00_ContentPlaceHolder1_rlvdDepartment.errormessage = "Please enter the department requesting the materials";ctl00_ContentPlaceHolder1_rlvdDepartment.display = "Dynamic";ctl00_Co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.4	50205	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:37 UTC	388	OUT	GET /_img/headerImages/generic_iwu/generic_iwu2.jpg HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:38 UTC	315	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Fri, 27 Apr 2012 12:46:42 GMT Accept-Ranges: bytes ETag: "6ca6a8cb7324cd1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Date: Mon, 18 Mar 2024 16:22:37 GMT Connection: close Content-Length: 69217
2024-03-18 16:22:38 UTC	16069	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 6f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 31 20 36 34 2e 31 34 30 39 34 39 2c 20 32 30 31 30 2f 31 32 2f 30 37 2d 31 30 3a 35 37 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyPohttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xm
2024-03-18 16:22:38 UTC	16384	IN	Data Raw: e4 8e 35 8a e8 3f b6 10 04 a0 52 11 7d 40 f5 ae aa ce 43 56 05 d1 61 06 c5 6f cd 73 1e 37 c6 1e 41 92 ca bd 9c b6 9e 96 f5 bb f4 07 d5 f8 0b 12 3e ed 44 ca 23 02 53 c9 80 4e b8 3e 7d c7 f9 3d ac d3 e0 32 12 64 55 54 a4 ae 3d f0 50 52 87 fe 2c 35 ea 0f c7 44 06 39 8c 54 61 32 70 48 af ed b0 f3 5b 4a d6 90 4f 6b 73 b9 04 53 89 5e aa 0d 09 23 e1 50 3c c6 85 64 98 60 54 e2 01 42 96 fc 76 f5 1a 59 0e 5b 22 4c 8b b4 09 2e 24 72 9d 49 05 6b d4 52 ba 09 07 9a 28 ae 25 78 b4 c0 5d 4c d7 96 d3 e5 a5 b8 8d 11 4a 7c d4 87 75 08 a6 d5 a1 5f ee d2 8c 35 38 25 31 1a 4e 0a 15 e7 5c 1e f0 45 71 7d 60 2d e7 b9 43 f9 b1 06 aa 5c 46 05 04 44 90 40 21 ba ab 79 1f b0 9d 55 b6 3a 32 44 05 c6 2a ba 71 cc b4 bc 1f 3f 16 46 f6 c4 e5 71 17 a0 47 c8 b0 cd e3 32 02 77 14 a8 3b 66 89 Data Ascii: 5?R}@CVaos7A>D#SN>}=2dUT=PR,5D9Ta2pH[JOksS^#P<d`TBvY["L.$rIkR(%x]LJ\|u_58%1N\Eq}`-C\FD@!yU:2D*q?FqG2w;f
2024-03-18 16:22:38 UTC	16384	IN	Data Raw: 9e 47 ad 2b 75 31 eb fe f9 d7 a0 50 5a b8 f7 0f 82 f2 bb c7 ea 4b bc fc 52 20 82 bd 74 5d 4a 1a 4a fd 08 a7 ef f8 e9 3a 6d 25 7a f6 58 05 6a 1d ad e0 de 1a 62 54 b4 10 bd ed 22 9e 3d 74 c9 69 58 13 a6 92 76 2b 7a 27 db a4 a4 97 45 0b 74 3b 4d 0f 4f 0d 47 50 53 88 55 5f ea ff 00 92 0c 37 6f 30 58 84 80 dd 4d c9 73 89 1f b0 0a d0 47 6b 0b c8 ee c1 98 54 2b 94 fb b5 4f 7b 60 8d 32 ed 61 ed 28 b4 c7 55 f0 1d e7 d8 3f 15 41 22 ca 5b c8 3d 85 b1 30 bd a9 03 7e fa a9 34 1e 90 69 4f 3d 73 c2 40 ad b6 47 36 19 3b 3f 67 6c b0 dd 45 3b 51 cb c6 de 9a 50 0e 94 70 3c 3e cd 10 18 85 20 43 27 69 ef 6f 65 b7 73 86 bb 89 36 b6 dd d7 60 48 46 df c4 36 ff 00 d6 74 e6 c0 32 4a 21 d3 67 1b ca 72 9b fb a9 22 bf b5 b4 f9 67 af b0 d6 88 55 89 06 95 60 24 14 00 75 d2 aa ed 6e 02 Data Ascii: G+u1PZKR t]JJ:m%zXjbT"=tiXv+z'Et;MOGPSU_7o0XMsGkT+O{`2a(U?A"[=0~4iO=s@G6;?glE;QPp<> C'ioes6`HF6t2J!gr"gU`$un
2024-03-18 16:22:38 UTC	16384	IN	Data Raw: 73 dd a4 52 94 81 9c 09 e1 88 00 64 67 a9 26 43 13 0d de 3d 4b c8 ba d9 91 4f 11 82 e5 ef d4 5f 0f e7 f8 ce e0 e7 ef be 7a cf 0d c6 b2 37 6c f8 fb a6 bb b6 32 ce 26 50 c5 c4 2b 30 64 43 26 e5 0c 53 ad 3c c6 b9 61 b2 d9 cf 75 68 24 99 bb 9c 0b 07 0f 9b 62 86 60 4b b9 65 1e db 70 4e e4 5b f1 4f d4 b1 98 8c a6 5f 1f 0c 73 49 f3 98 d5 8e 59 03 90 19 83 2c 6c e5 68 28 40 a6 e2 08 fb 35 a3 b9 ea db 5a ed 15 19 81 32 c0 03 ec 0d cf 97 7a d0 d9 ed 36 f6 92 6e 9e 90 07 b5 74 af e8 ff 00 8a da 65 7e a5 31 3c aa e9 65 f9 ee 3f c5 ff 00 f0 5b 6b 8c c5 fe 52 e2 de ce 5c 52 45 32 5c 47 7b 2b ac 4e 6e 26 6e 91 8d a2 9b 57 a0 d6 d8 d6 18 4c 32 ab 6c 6b 89 96 89 6a 18 fb 1f 0f 72 e9 9f 71 0c 37 b9 7b 1c 33 0d c6 7c 3d dd c8 8b f3 08 dd 14 d1 1e aa a4 13 55 dd 41 5e ba 75 Data Ascii: sRdg&C=KO_z7l2&P+0dC&S<auh$b`KepN[O_sIY,lh(@5Z2z6nte~1<e?[kR\RE2\G{+Nn&nWL2lkjrq7{3\|=UA^u
2024-03-18 16:22:38 UTC	3996	IN	Data Raw: 13 6d a4 44 12 34 c4 f9 a4 23 ff 00 b1 e2 4f 2c 96 d5 56 18 8c 4e 0a 3a c6 49 75 15 dd d5 9c 98 fb 7b 39 0c cc f2 19 b6 98 e8 ca 6a c9 21 7d ae 28 be 5a f4 6d bd 82 d1 aa 0c ca d8 2e 54 93 c6 1a cb 07 79 fa e4 bf 96 98 3b 09 f3 59 16 1e 98 c2 d8 c1 25 c1 e8 00 00 0d ba df e9 f5 08 c9 fc 4a ab b9 93 c4 af 9e 2c ae 4e e7 33 93 c9 65 af 5c b5 c6 56 ea 7b cb 92 dd 6b 25 c4 8d 23 12 7c c9 2d a0 48 b9 27 9a b5 10 c0 05 72 fe 84 30 12 64 7b af 9e cf 6c 56 4e 37 c6 6e 8d b3 39 a2 ac f9 09 62 b3 4e be 23 d0 f2 6a 55 e6 a3 69 c1 74 8f 94 72 3c 8e 3a 68 2d b0 36 d7 3b 6d 52 43 7c e2 6d ce d4 72 aa 10 8a f4 aa 9a 54 6b 2e eb 4c 70 08 d1 83 a4 5c 3a f6 fa ee f2 f8 e5 ee 5e 38 e5 46 78 e3 95 16 66 0e cc 3a 13 ed d7 4d 44 b5 1c 54 f4 b2 2a cb 98 23 b4 16 d1 5d 5b c8 2f Data Ascii: mD4#O,VN:Iu{9j!}(Zm.Ty;Y%J,N3e\V{k%#\|-H'r0d{lVN7n9bN#jUitr<:h-6;mRC\|mrTk.Lp\:^8Fxf:MDT*#][/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.4	50208	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:38 UTC	780	OUT	POST /_services/Randomizer/Randomizer.asmx/RetrieveHeaderImage HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive Content-Length: 25 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://secure2.indwes.edu Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure2.indwes.edu/Marketing/Project-Request/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:38 UTC	25	OUT	Data Raw: 7b 20 66 6f 6c 64 65 72 3a 20 27 67 65 6e 65 72 69 63 5f 69 77 75 27 20 7d Data Ascii: { folder: 'generic_iwu' }
2024-03-18 16:22:38 UTC	462	IN	HTTP/1.1 200 OK Cache-Control: private, max-age=0 Content-Type: application/json; charset=utf-8 Server: Microsoft-IIS/10.0 X-StackifyID: V2\|80002026-0801-2800-b63f-84710c7967bb\|C82847\|CD6 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, X-Requested-With Date: Mon, 18 Mar 2024 16:22:37 GMT Connection: close Content-Length: 75
2024-03-18 16:22:38 UTC	75	IN	Data Raw: 7b 22 64 22 3a 22 2f 2f 73 65 63 75 72 65 32 2e 69 6e 64 77 65 73 2e 65 64 75 2f 5f 69 6d 67 2f 68 65 61 64 65 72 49 6d 61 67 65 73 2f 67 65 6e 65 72 69 63 5f 69 77 75 2f 67 65 6e 65 72 69 63 5f 69 77 75 32 2e 6a 70 67 22 7d Data Ascii: {"d":"//secure2.indwes.edu/_img/headerImages/generic_iwu/generic_iwu2.jpg"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.4	50209	199.8.17.71	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:38 UTC	398	OUT	GET /_services/Randomizer/Randomizer.asmx/RetrieveHeaderImage HTTP/1.1 Host: secure2.indwes.edu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:39 UTC	319	IN	HTTP/1.1 400 Bad Request Content-Type: text/html Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=63072000 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, X-Requested-With Date: Mon, 18 Mar 2024 16:22:39 GMT Connection: close Content-Length: 11
2024-03-18 16:22:39 UTC	11	IN	Data Raw: 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.4	50210	35.170.17.215	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:41 UTC	644	OUT	GET /56 HTTP/1.1 Host: indwes.tfaforms.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:42 UTC	542	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close server: nginx set-cookie: FORMASSEMBLY=6a4809387c058e25edd85f81ecc72a5f; HttpOnly=1; Path=/; SameSite=None; Secure cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: Thu, 01 Jan 1970 00:00:00 GMT, -1 p3p: CP="CAO PSA OUR" strict-transport-security: max-age=31536000; includeSubDomains; preload x-fa-app: 20-104 set-cookie: FASRV=8e78f24973a4e556; path=/; HttpOnly
2024-03-18 16:22:42 UTC	15842	IN	Data Raw: 33 66 61 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 72 6f 6d 6f 74 69 6f 6e 61 6c 20 49 74 65 6d 20 52 65 71 75 65 73 74 20 46 6f 72 6d 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0a 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 69 6e 64 77 65 73 2e 65 64 75 2f 5f 73 68 61 72 65 64 2d 72 65 73 6f 75 72 63 65 73 2f 5f 68 61 6e 6e 6f 6e 68 69 6c 6c 2f 5f 66 69 6c Data Ascii: 3fa0<!DOCTYPE HTML><html lang="en-US"><head> <title>Promotional Item Request Form</title> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <link href="https://www.indwes.edu/_shared-resources/_hannonhill/_fil
2024-03-18 16:22:42 UTC	454	IN	Data Raw: 20 20 20 20 20 20 3c 2f 70 3e 0a 20 3c 2f 64 69 76 3e 0a 0a 3c 73 63 72 69 70 74 0a 20 20 20 20 69 64 3d 22 6f 70 65 6e 2d 74 65 6c 65 6d 65 74 72 79 2d 73 63 72 69 70 74 22 0a 20 20 20 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 0a 20 20 20 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 69 6e 64 77 65 73 2e 74 66 61 66 6f 72 6d 73 2e 6e 65 74 2f 64 69 73 74 2f 6f 70 65 6e 2d 74 65 6c 65 6d 65 74 72 79 2f 6f 70 65 6e 2d 74 65 6c 65 6d 65 74 72 79 2e 33 65 36 63 31 62 65 64 61 61 37 66 62 34 34 35 32 64 64 30 2e 6a 73 22 0a 20 20 20 20 64 61 74 61 2d 63 75 73 74 6f 6d 65 72 2d 69 64 3d 22 35 35 35 30 38 22 0a 20 20 20 20 64 61 74 61 2d 65 78 70 6f 72 74 65 72 2d 75 72 6c 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 65 61 73 74 2d 31 2d 6f 74 Data Ascii: </p> </div><script id="open-telemetry-script" type="text/javascript" src="https://indwes.tfaforms.net/dist/open-telemetry/open-telemetry.3e6c1bedaa7fb4452dd0.js" data-customer-id="55508" data-exporter-url="https://us-east-1-ot
2024-03-18 16:22:42 UTC	10	IN	Data Raw: 35 0d 0a 74 6d 6c 3e 0a 0d 0a Data Ascii: 5tml>
2024-03-18 16:22:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.4	50212	104.36.115.113	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:41 UTC	2042	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=9859246&p=156011&s=165626&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; chkChromeAb67Sec=2; pi=156011:4; DPSync3=1711929600%3A263_262_261_260_259_201%7C1710806400%3A248%7C1711324800%3A265; SyncRTB3=1711929600%3A13_250_166_3_104_165_54_71_220_21%7C1711324800%3A15_223; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; SPugT=1710728775; KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; PugT=1710778939
2024-03-18 16:22:41 UTC	970	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=3; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=156011:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1711324800%3A265%7C1711756800%3A257%7C1711929600%3A262_256_263_261_260_259_201_258%7C1710806400%3A248_255; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1711929600%3A22_8_166_104_54_48_13_165_231_178_249_250_3_220_71_21%7C1711324800%3A15_223; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Mon, 18 Mar 2024 16:22:40 GMT Content-Length: 1414 Connection: close
2024-03-18 16:22:41 UTC	1414	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 73 79 6e 63 68 72 6f 73 63 72 69 70 74 2e 64 65 6c 69 76 65 72 79 65 6e 67 69 6e 65 2e 61 64 73 77 69 7a 7a 2e 63 6f 6d 2f 73 79 6e 63 4d 65 3f 70 61 72 74 6e 65 72 44 6f 6d 61 69 6e 3d 6d 72 74 6e 73 76 72 2e 63 6f 6d 26 69 64 54 79 70 65 3d 63 6f 6f 6b 69 65 26 70 61 72 74 6e 65 72 55 73 65 72 49 64 3d 32 36 46 43 35 42 43 34 2d 43 30 45 41 2d 34 38 31 45 2d 41 43 36 44 2d 32 39 37 45 46 34 39 33 30 45 33 35 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 69 64 73 79 6e 63 2e 72 6c 63 64 6e 2e 63 6f 6d 2f Data Ascii: PubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn.com/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.4	50216	35.207.24.140	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:41 UTC	1328	OUT	GET /imp_s2s/v3/n8UGQb8oRsoLuVNWaPOgOcGz9MQJ9n-mDyOm5Rwc2mCEe0IoMJKkiishgKAVPr7vW-Op5SqLPpvNhaf7JZgScNC5JJ-Tn8GN9JhXOZAvpMRY-8oKI8g7qkcN6ho-rIH6LmuEMRJWGzNVn2S8k48_-d9U_JFzkQONalz8aatPtkRDWNImaA2IOx3bGXgdpWfLOHQiw1hlMyCqrbWsdAOopnr0PCR9rMyIhTa_Z7lbDM2QFaA3TjmDUf_I7m9vGvRB875GQcl81Rb9AYuAFLbMRl85wKx_yx8mCfK1M-jlot0aJemgW_Jyz1dzBjdBiLyCLNwOw6YDnksQpk9ijcM3QvoSdqz43bIQf9j03Xc_0ite4hlwDut-0pga_paq-WI6XTIFqdpPP1fI_TPcCRstoPDNsC7XhW1bAbRf6gu3j8YBB4BjlWPTSJFhvyTyBSRrWGYyMwdhLFsAC1ADM_8IQhqdfcD8RtRA8whROeatyjMXRqQu6Og513Zv_qaWKxWfoOva0YKTwupRHQ/ZfhqLwAOBfUIg6-yAAhcO_kHV4_h8kd_xzRsDw?q=1&cbvp=2 HTTP/1.1 Host: rtb-use.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1710778929; tuuid=2393ecfc-a9f7-4cbe-bbea-03c6f5980eff; tuuid_lu=1710778930; ssh=!intentiq,1710778930
2024-03-18 16:22:42 UTC	260	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Content-Type: text/html; charset=UTF-8 Date: Mon, 18 Mar 2024 16:22:42 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.4	50214	142.251.35.162	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:41 UTC	1698	OUT	GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:42 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:22:42 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.4	50215	142.251.40.226	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:41 UTC	2738	OUT	GET /pcs/view?xai=AKAOjsu2efMI-QAuO9Nc6NowBZFGMbNB_HL8VKq_AHTk0RBhGvteX_sro2NF4DPMoneo-MFNVjmaYJqeKYGBFX9UFEx_B1uYKnohFxH99ZC85uKLNtjXh58iDOTVTu4WnhJvlQp6xRWPB3j2BWJifI8sEo118b9xnhbmv95pNbYv41mJHWe8DXeFxwrrytEBYGhGfKAadBFA4PcHbOqaBsARfaOp1KdL4WonbEtb39snDwmESVpPV8_j1RJ76EdCfXvzv8E0mimdc8KI4Z_xlZ7CY9yXt57BPSOeQ09In7lPgqL138lHC5IcdqfELfMV2r3byGdwPc-jySZYi5ecsabZxwsMUXCVhll-wTyQ8sx_pFoQoQJlbOtPxH72Lo-tcUJxJXwUwhqU_yeuewOz6ZyfhpjyUR0moCQ4K09l4l03HoZQJuoSyfRy3PSz5osQ0NYaaqZcvk2Ye41euSa-zKr_ti4G6jvuo55XBdYcY_ybb0T3f9uoaMdvtp_zSAwFASBu8-OKCj0IHVs1w5Uh2u7cONZ2hMSMOWGqtHO9kAzigwgsnGvVem7PGdU4N62b1Wlg7TybACvbqIXm4rMNbudaaJkWSLPnRCyK4aVFLM5MEK0eMV37_iP7Ks7jJr2ScBVghGbRwSfEFAH-c3h7YQ5KNeOLe5GAWPrZN99QkibgMyOKNcIPIDVJp5MXINBZb-Pc8DA5C8V7bcprNWcIVOqMIHBctIB5Sv1ZxdOe-EisXEEfk85sEKTWlmtkDt0tRpaSYxKL8HcdToFh7qVZCixi0hLjyzv6yx9WheHdTCDwdAVvyhsmxabPelkhcW4FGxJzphFdi_hkKzF7nh8-w6Q00KDKCKfUtoiXHqpuUsa_ggjiefXia5rROQF-oMsMuwnKTOqV3yhvxVZrmlYaZdmOymhItvNXpxsUwwvgINxszNZJEboZvFL2HpX95Kyl6kkcTjWgnWgIi4EorEscwDOb1iUV0y9PkAI3R3saO340DxUgSYksN4rFZouLdKyzxq-qSfNnEdypvJYM6c2K95qYJzzFpsClhBbnrVTnPnqH99xBzsNzvM5lDp_u9pe4QffeXKQnbwiMVTne5gLEjt7x3hw-7qEMUza1UtAOXK7cT0WCz_wDvNIKMObXS6dqwASo0eo_RmouLFpFeOvpRjjZsjMTJ0ojHXjkbfDGryQKa2q4L1MqGFl54Gsn-C6hCbwUx5I3WiEbqMfhn0-D7WXVV8F1f-QU0WkXy9hXVwNsTCyQbS1xgImgs-n5EwtnBhu5L9I_aLyV0L7kRKt2PXT3l2Cr4NdPjgqpJV7Gz3BTXntuuCZK-S_2odRoEOJeUvZpJEeyAuwvYCCIowdwfz9Mv-iw7NQ2GZ_CKVUuKBC3jdoBaLrH2xXAidtXO6SRCxel4OJgBHjWbqnrHUJtq8zO2UB4ohaEBjvgSJJxQx75R14P5ooY_EZtX_nlfXpPC_aVcwElVyDrP2Ra95_LD-YU&sai=AMfl-YQ7LYSGcYmu68xh_hXheICVAQYcRnl7sb026DIE4p2p-J3bLmzjD8ak2cniBGN7Nyk8mhQGggdh66TzgAUMOI3-UukEMpNsNOjTNvRPgEcyZvYLH5KqbvwidVSZDKjZY74tdQpxnl3Qvf19CI41Ys__s6Tqnjc4xqqLrmA6M1YgpYSj-f8-uEH0D3UqYsDFbZT7aICaG3ZR8uymEjeE1npwPp8rKtYNXc6Er-Gkt2HITDZXeQof6zgjztr0GACnOITAfgMAlP8EhyAaCHmNl7A2UOAqW83_CVpwrjccj5h0dfspqMtbcmTrtaImrVT_HMCF8IpKig2fgAA&sig=Cg0ArKJSzDphJ07OXkX1EAE&uach_m=%5BUACH%5D&urlfix=1&cbvp=2&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:42 UTC	895	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Cache-Control: private Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 18 Mar 2024 16:22:42 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.4	50217	8.18.47.7	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:42 UTC	716	OUT	GET /usersync/141?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.deepintent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:42 UTC	528	IN	HTTP/1.1 200 OK p3p: policyref='http://cdn.deepintent.com/p3p.xml', CP='NON CUR DEV TAI' set-cookie: CDIUSER=di_e09d9c0161bc43c18c9fa; Max-Age=47260800; SameSite=None; Expires=Tue, 16 Sep 2025 16:22:42 GMT; Domain=deepintent.com; Secure; Path=/ set-cookie: CDIPARTNERS=%7B%221%22%3A%2220240318%22%7D; Max-Age=47260800; SameSite=None; Expires=Tue, 16 Sep 2025 16:22:42 GMT; Domain=deepintent.com; Secure; Path=/ content-type: image/gif content-length: 0 date: Mon, 18 Mar 2024 16:22:42 GMT server: c connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.4	50213	142.251.35.162	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:42 UTC	2693	OUT	GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5884294479391638&output=html&h=90&slotname=3654094576&adk=228266070&adf=3493768505&pi=t.ma~as.3654094576&w=970&url=https%3A%2F%2Fbrowser-update.org%2F&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1710778930134&bpp=1204&bdt=1441&idt=2890&shv=r20240313&mjsv=m202403130201&ptt=5&saldr=sd&correlator=966864692783&frm=24&ife=3&pv=2&ga_vid=751177015.1710778933&ga_sid=1710778933&ga_hid=640648971&ga_fc=0&nhd=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=-12245933&bih=-12245933&isw=970&ish=90&ifk=1017635361&scr_x=-12245933&scr_y=-12245933&eid=44759875%2C44759926%2C44759842%2C31081793%2C95325975%2C95327950%2C95327954%2C31081901%2C95320376%2C95322388%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=862165079531677&tmod=1386792793&uas=0&nvt=1&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C970%2C90&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=1.bp47bps3drp4&fsb=1&dtd=2937 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:42 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:22:42 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.4	50211	35.170.17.215	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:42 UTC	645	OUT	GET /js/FA__DOMContentLoadedEventDispatcher.js HTTP/1.1 Host: indwes.tfaforms.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://indwes.tfaforms.net/56 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: FORMASSEMBLY=6a4809387c058e25edd85f81ecc72a5f; FASRV=8e78f24973a4e556
2024-03-18 16:22:42 UTC	344	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:42 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 133 Connection: close server: nginx last-modified: Fri, 01 Mar 2024 16:57:34 GMT etag: "65e208fe-85" strict-transport-security: max-age=31536000; includeSubDomains; preload x-fa-app: 20-104 accept-ranges: bytes
2024-03-18 16:22:42 UTC	133	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 27 46 41 5f 5f 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 29 29 3b 0a 7d 29 3b 0a Data Ascii: document.addEventListener('DOMContentLoaded', function () { document.dispatchEvent(new CustomEvent('FA__DOMContentLoaded'));});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.4	50220	192.184.68.134	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:42 UTC	792	OUT	GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: d=EAABCQGzK4EA; mc=65f86a39-0bce5-d0ea9-092f1
2024-03-18 16:22:42 UTC	692	IN	HTTP/1.1 302 Found Date: Mon, 18 Mar 2024 16:22:42 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: d=EMABDgGzK4EO-TA; expires=Sun, 16-Jun-2024 16:22:42 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.4	50222	35.170.17.215	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:42 UTC	702	OUT	GET /dist/form-builder/5.0.0/wforms-layout.css?v=8b5c9ffd0b6fc88dc72529725004f6b69b9e0ae8 HTTP/1.1 Host: indwes.tfaforms.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://indwes.tfaforms.net/56 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: FORMASSEMBLY=6a4809387c058e25edd85f81ecc72a5f; FASRV=8e78f24973a4e556
2024-03-18 16:22:43 UTC	319	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:43 GMT Content-Type: text/css Content-Length: 30758 Connection: close server: nginx last-modified: Fri, 01 Mar 2024 17:40:29 GMT etag: "65e2130d-7826" strict-transport-security: max-age=31536000; includeSubDomains; preload x-fa-app: 20-104 accept-ranges: bytes
2024-03-18 16:22:43 UTC	16065	IN	Data Raw: 2a 20 7b 0a 09 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 0a 7d 0a 0a 2f 2a 20 52 65 73 65 74 20 43 53 53 20 2d 20 73 63 6f 70 65 20 6c 69 6d 69 74 65 64 20 74 6f 20 2e 77 46 6f 72 6d 20 2d 20 62 61 73 65 64 20 6f 6e 20 59 55 49 20 72 65 73 65 74 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 2f 0a 2e 77 46 6f 72 6d 20 64 6c 2c 20 2e 77 46 6f 72 6d 20 64 74 2c 20 2e 77 46 6f 72 6d 20 64 64 2c 20 2e 77 46 6f 72 6d 20 75 6c 2c 20 2e 77 46 6f 72 6d 20 6f 6c 2c 20 2e 77 46 6f 72 6d 20 6c 69 2c 20 2e 77 46 6f 72 6d 20 64 69 76 2c 20 2e 77 46 6f 72 6d 20 74 Data Ascii: * {-webkit-font-smoothing: antialiased;}/* Reset CSS - scope limited to .wForm - based on YUI reset * -------------------------------------------------------- */.wForm dl, .wForm dt, .wForm dd, .wForm ul, .wForm ol, .wForm li, .wForm div, .wForm t
2024-03-18 16:22:43 UTC	14693	IN	Data Raw: 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0a 0a 2f 2a 20 44 69 73 70 6c 61 79 65 64 20 6f 6e 20 74 68 65 20 73 69 64 65 20 28 77 69 74 68 20 6f 72 20 77 69 74 68 6f 75 74 20 66 6f 63 75 73 29 20 2a 2f 0a 2e 77 46 6f 72 6d 20 2e 68 69 6e 74 73 53 69 64 65 20 2e 66 69 65 6c 64 2d 68 69 6e 74 2c 0a 2e 77 46 6f 72 6d 20 2e 68 69 6e 74 73 53 69 64 65 20 2e 66 69 65 6c 64 2d 68 69 6e 74 2d 69 6e 61 63 74 69 76 65 20 09 09 09 09 7b 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 3b 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 72 6d 61 6c 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 2e 77 46 6f 72 6d 20 2e 68 69 6e 74 73 53 69 64 65 20 2e 66 69 65 6c 64 2d 68 Data Ascii: ound-color: #FFFFFF; }/* Displayed on the side (with or without focus) */.wForm .hintsSide .field-hint,.wForm .hintsSide .field-hint-inactive { display: inline-block; vertical-align:top; white-space: normal !important; }.wForm .hintsSide .field-h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.4	50224	35.170.17.215	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:42 UTC	645	OUT	GET /uploads/themes/theme-55.css HTTP/1.1 Host: indwes.tfaforms.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://indwes.tfaforms.net/56 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: FORMASSEMBLY=6a4809387c058e25edd85f81ecc72a5f; FASRV=8e78f24973a4e556
2024-03-18 16:22:43 UTC	319	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:43 GMT Content-Type: text/css Content-Length: 18007 Connection: close server: nginx last-modified: Wed, 25 Oct 2023 12:55:29 GMT etag: "65391041-4657" strict-transport-security: max-age=31536000; includeSubDomains; preload x-fa-app: 20-104 accept-ranges: bytes
2024-03-18 16:22:43 UTC	16065	IN	Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4f 70 65 6e 2b 53 61 6e 73 3a 33 30 30 2c 34 30 30 2c 37 30 30 29 3b 40 69 6d 70 6f 72 74 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 52 6f 62 6f 74 6f 3a 33 30 30 2c 34 30 30 2c 37 30 30 29 3b 40 69 6d 70 6f 72 74 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 52 6f 62 6f 74 6f 2b 53 6c 61 62 3a 33 30 30 2c 34 30 30 2c 37 30 30 29 3b 40 69 6d 70 6f 72 74 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 74 61 63 6b 70 61 74 68 2e 62 Data Ascii: @import url(https://fonts.googleapis.com/css?family=Open+Sans:300,400,700);@import url(https://fonts.googleapis.com/css?family=Roboto:300,400,700);@import url(https://fonts.googleapis.com/css?family=Roboto+Slab:300,400,700);@import url(https://stackpath.b
2024-03-18 16:22:43 UTC	1942	IN	Data Raw: 6c 6f 72 3a 23 61 36 31 39 32 65 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 65 72 72 6f 72 4d 65 73 73 61 67 65 7b 63 6f 6c 6f 72 3a 23 61 36 31 39 32 65 21 69 6d 70 6f 72 74 61 6e 74 7d 61 2e 65 72 72 4d 73 67 7b 63 6f 6c 6f 72 3a 23 61 36 31 39 32 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 77 46 6f 72 6d 43 6f 6e 74 61 69 6e 65 72 20 2e 65 72 72 4d 73 67 7b 63 6f 6c 6f 72 3a 23 61 36 31 39 32 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 46 6f 72 6d 43 6f 6e 74 61 69 6e 65 72 20 2e 61 63 74 69 6f 6e 73 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 2e 77 46 6f 72 6d 43 6f 6e 74 61 69 6e 65 72 20 2e 61 63 74 69 6f 6e 73 20 2e 70 72 69 6d 61 72 79 41 63 74 Data Ascii: lor:#a6192e!important;color:#ffffff!important}.errorMessage{color:#a6192e!important}a.errMsg{color:#a6192e;text-decoration:underline}.wFormContainer .errMsg{color:#a6192e!important}.wFormContainer .actions{margin-top:0}.wFormContainer .actions .primaryAct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.4	50225	35.170.17.215	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:42 UTC	634	OUT	GET /css/kalendae.css HTTP/1.1 Host: indwes.tfaforms.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://indwes.tfaforms.net/56 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: FORMASSEMBLY=6a4809387c058e25edd85f81ecc72a5f; FASRV=8e78f24973a4e556
2024-03-18 16:22:43 UTC	318	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:43 GMT Content-Type: text/css Content-Length: 6681 Connection: close server: nginx last-modified: Fri, 01 Mar 2024 16:57:34 GMT etag: "65e208fe-1a19" strict-transport-security: max-age=31536000; includeSubDomains; preload x-fa-app: 20-104 accept-ranges: bytes
2024-03-18 16:22:43 UTC	6681	IN	Data Raw: 2f 2a 2a 20 42 61 73 65 20 63 6f 6e 74 61 69 6e 65 72 20 2a 2a 2f 0a 2e 6b 61 6c 65 6e 64 61 65 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 7a 6f 6f 6d 3a 31 3b 2a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 65 65 3b 0a 09 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 35 70 78 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 0a 09 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 09 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 27 2c 20 27 48 65 6c Data Ascii: / Base container /.kalendae {display: inline-block;zoom:1;*display:inline;background:#eee;padding:10px;margin:5px;border-radius:5px;-moz-border-radius: 5px;-webkit-border-radius: 5px;font-size:11px;font-family:'Helvetica Neue', 'Hel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.4	50223	35.170.17.215	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:42 UTC	671	OUT	GET /wForms/3.11/js/wforms.js?v=8b5c9ffd0b6fc88dc72529725004f6b69b9e0ae8 HTTP/1.1 Host: indwes.tfaforms.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://indwes.tfaforms.net/56 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: FORMASSEMBLY=6a4809387c058e25edd85f81ecc72a5f; FASRV=8e78f24973a4e556
2024-03-18 16:22:43 UTC	350	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:43 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 220883 Connection: close server: nginx last-modified: Fri, 01 Mar 2024 17:30:43 GMT etag: "65e210c3-35ed3" strict-transport-security: max-age=31536000; includeSubDomains; preload x-fa-app: 20-104 accept-ranges: bytes
2024-03-18 16:22:43 UTC	16034	IN	Data Raw: 76 61 72 20 62 61 73 65 32 3d 7b 6e 61 6d 65 3a 22 62 61 73 65 32 22 2c 76 65 72 73 69 6f 6e 3a 22 31 2e 30 22 2c 65 78 70 6f 72 74 73 3a 22 42 61 73 65 2c 50 61 63 6b 61 67 65 2c 41 62 73 74 72 61 63 74 2c 4d 6f 64 75 6c 65 2c 45 6e 75 6d 65 72 61 62 6c 65 2c 4d 61 70 2c 43 6f 6c 6c 65 63 74 69 6f 6e 2c 52 65 67 47 72 70 2c 55 6e 64 65 66 69 6e 65 64 2c 4e 75 6c 6c 2c 54 68 69 73 2c 54 72 75 65 2c 46 61 6c 73 65 2c 61 73 73 69 67 6e 49 44 2c 64 65 74 65 63 74 2c 67 6c 6f 62 61 6c 22 2c 6e 61 6d 65 73 70 61 63 65 3a 22 22 7d 3b 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 5f 6e 6f 5f 73 68 72 69 6e 6b 5f 29 7b 76 61 72 20 55 6e 64 65 66 69 6e 65 64 3d 4b 28 29 2c 4e 75 6c 6c 3d 4b 28 6e 75 6c 6c 29 2c 54 72 75 65 3d 4b 28 21 30 29 2c 46 61 6c 73 65 3d 4b 28 21 Data Ascii: var base2={name:"base2",version:"1.0",exports:"Base,Package,Abstract,Module,Enumerable,Map,Collection,RegGrp,Undefined,Null,This,True,False,assignID,detect,global",namespace:""};new function(_no_shrink_){var Undefined=K(),Null=K(null),True=K(!0),False=K(!
2024-03-18 16:22:43 UTC	16384	IN	Data Raw: 29 7b 76 61 72 20 6e 3d 30 3b 72 65 74 75 72 6e 20 41 72 72 61 79 32 2e 72 65 64 75 63 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 32 2e 6c 69 6b 65 28 74 29 3f 41 72 72 61 79 32 2e 72 65 64 75 63 65 28 74 2c 61 72 67 75 6d 65 6e 74 73 2e 63 61 6c 6c 65 65 2c 65 29 3a 65 5b 6e 2b 2b 5d 3d 74 2c 65 7d 2c 5b 5d 29 7d 2c 66 6f 72 45 61 63 68 3a 5f 41 72 72 61 79 5f 66 6f 72 45 61 63 68 2c 69 6e 64 65 78 4f 66 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 61 3d 65 2e 6c 65 6e 67 74 68 3b 6e 75 6c 6c 3d 3d 6e 3f 6e 3d 30 3a 6e 3c 30 26 26 28 6e 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 61 2b 6e 29 29 3b 66 6f 72 28 76 61 72 20 69 3d 6e 3b 69 3c 61 3b 69 2b 2b 29 69 66 28 65 5b 69 5d 3d 3d 3d 74 29 72 65 Data Ascii: ){var n=0;return Array2.reduce(e,function(e,t){return Array2.like(t)?Array2.reduce(t,arguments.callee,e):e[n++]=t,e},[])},forEach:_Array_forEach,indexOf:function(e,t,n){var a=e.length;null==n?n=0:n<0&&(n=Math.max(0,a+n));for(var i=n;i<a;i++)if(e[i]===t)re
2024-03-18 16:22:43 UTC	16320	IN	Data Raw: 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 62 61 73 65 28 65 2c 22 45 76 65 6e 74 73 22 3d 3d 74 3f 22 55 49 45 76 65 6e 74 73 22 3a 74 29 7d 7d 7d 7d 29 2c 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 45 76 65 6e 74 3d 42 61 73 65 2e 65 78 74 65 6e 64 28 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 21 31 3b 74 68 69 73 2e 66 69 72 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 7c 7c 28 65 3d 21 30 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 44 6f 63 75 6d 65 6e 74 45 76 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 74 2c 22 45 76 65 6e 74 73 22 29 3b 45 76 65 6e 74 2e 69 6e 69 74 45 76 65 6e 74 28 65 2c 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 Data Ascii: e,t){return this.base(e,"Events"==t?"UIEvents":t)}}}}),DOMContentLoadedEvent=Base.extend({constructor:function(t){var e=!1;this.fire=function(){e\|\|(e=!0,setTimeout(function(){var e=DocumentEvent.createEvent(t,"Events");Event.initEvent(e,"DOMContentLoaded"
2024-03-18 16:22:43 UTC	16320	IN	Data Raw: 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 53 74 61 74 69 63 4e 6f 64 65 4c 69 73 74 28 74 68 69 73 2e 6d 61 70 28 49 29 2e 73 6c 69 63 65 28 65 2c 74 29 29 7d 2c 22 40 28 58 50 61 74 68 52 65 73 75 6c 74 29 22 3a 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 26 26 74 2e 73 6e 61 70 73 68 6f 74 49 74 65 6d 3f 28 74 68 69 73 2e 6c 65 6e 67 74 68 3d 74 2e 73 6e 61 70 73 68 6f 74 4c 65 6e 67 74 68 2c 74 68 69 73 2e 69 74 65 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3c 30 26 26 28 65 2b 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 74 2e 73 6e 61 70 73 68 6f 74 49 74 65 6d 28 65 29 7d 29 3a 74 68 69 73 2e 62 61 73 65 28 74 29 7d 7d 7d 29 3b 53 74 61 74 69 63 4e 6f 64 65 4c 69 73 74 2e 69 6d 70 6c 65 6d 65 6e Data Ascii: t){return new StaticNodeList(this.map(I).slice(e,t))},"@(XPathResult)":{constructor:function(t){t&&t.snapshotItem?(this.length=t.snapshotLength,this.item=function(e){return e<0&&(e+=this.length),t.snapshotItem(e)}):this.base(t)}}});StaticNodeList.implemen
2024-03-18 16:22:43 UTC	16384	IN	Data Raw: 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2a 5b 69 64 24 3d 22 2d 48 48 2d 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 22 5d 27 29 3b 6e 75 6c 6c 21 3d 3d 74 26 26 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 63 6c 6f 73 65 54 6f 6f 6c 74 69 70 46 6f 72 48 69 6e 74 28 65 29 7d 29 3b 76 61 72 20 6e 3d 61 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 48 69 6e 74 49 64 28 65 2e 69 64 29 3b 6e 26 26 28 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 7c 7c 62 61 73 65 32 2e 44 4f 4d 2e 62 69 6e 64 28 6e 29 2c 22 53 45 4c 45 43 54 22 3d 3d 6e 2e 74 61 67 4e 61 6d 65 7c 7c 22 54 45 58 54 41 52 45 41 22 3d 3d 6e Data Ascii: ach(function(e){var t=e.querySelector('*[id$="-HH-close-button"]');null!==t&&t.addEventListener("mousedown",function(){a.closeTooltipForHint(e)});var n=a.getElementByHintId(e.id);n&&(n.addEventListener\|\|base2.DOM.bind(n),"SELECT"==n.tagName\|\|"TEXTAREA"==n
2024-03-18 16:22:43 UTC	16384	IN	Data Raw: 74 79 70 65 2e 6a 75 6d 70 54 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 74 68 69 73 2c 61 3d 65 3b 6e 2e 63 75 72 72 65 6e 74 50 61 67 65 49 6e 64 65 78 21 3d 61 26 26 28 6e 2e 62 65 68 61 76 69 6f 72 2e 68 69 64 65 50 61 67 65 28 6e 2e 62 65 68 61 76 69 6f 72 2e 67 65 74 50 61 67 65 42 79 49 6e 64 65 78 28 6e 2e 63 75 72 72 65 6e 74 50 61 67 65 49 6e 64 65 78 29 29 2c 6e 2e 73 65 74 75 70 4d 61 6e 61 67 65 64 43 6f 6e 74 72 6f 6c 73 28 61 29 2c 6e 2e 62 65 68 61 76 69 6f 72 2e 73 68 6f 77 50 61 67 65 28 6e 2e 62 65 68 61 76 69 6f 72 2e 67 65 74 50 61 67 65 42 79 49 6e 64 65 78 28 61 29 29 2c 6e 2e 63 75 72 72 65 6e 74 50 61 67 65 49 6e 64 65 78 3d 61 29 2c 76 49 6e 73 74 61 6e 63 65 3d 77 46 4f 52 4d 53 2e 67 65 74 42 65 68 61 76 Data Ascii: type.jumpTo=function(e){var t,n=this,a=e;n.currentPageIndex!=a&&(n.behavior.hidePage(n.behavior.getPageByIndex(n.currentPageIndex)),n.setupManagedControls(a),n.behavior.showPage(n.behavior.getPageByIndex(a)),n.currentPageIndex=a),vInstance=wFORMS.getBehav
2024-03-18 16:22:43 UTC	16384	IN	Data Raw: 3b 66 6f 72 28 76 61 72 20 67 3d 74 68 69 73 2e 62 65 68 61 76 69 6f 72 2e 55 50 44 41 54 45 41 42 4c 45 5f 41 54 54 52 5f 41 52 52 41 59 2e 6c 65 6e 67 74 68 2c 76 3d 30 3b 76 3c 67 3b 76 2b 2b 29 7b 76 61 72 20 6d 2c 53 3d 74 68 69 73 2e 62 65 68 61 76 69 6f 72 2e 55 50 44 41 54 45 41 42 4c 45 5f 41 54 54 52 5f 41 52 52 41 59 5b 76 5d 2c 62 3d 74 68 69 73 2e 63 6c 65 61 72 53 75 66 66 69 78 28 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 53 29 29 3b 62 26 26 28 22 6e 61 6d 65 22 3d 3d 53 26 26 22 49 4e 50 55 54 22 3d 3d 65 2e 74 61 67 4e 61 6d 65 26 26 6e 7c 7c 28 69 26 26 22 69 64 22 3d 3d 53 3f 65 2e 69 64 3d 62 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 22 28 2e 2a 29 28 22 2b 77 46 4f 52 4d 53 2e 62 65 68 61 76 69 6f 72 73 2e 76 61 Data Ascii: ;for(var g=this.behavior.UPDATEABLE_ATTR_ARRAY.length,v=0;v<g;v++){var m,S=this.behavior.UPDATEABLE_ATTR_ARRAY[v],b=this.clearSuffix(e.getAttribute(S));b&&("name"==S&&"INPUT"==e.tagName&&n\|\|(i&&"id"==S?e.id=b.replace(new RegExp("(.*)("+wFORMS.behaviors.va
2024-03-18 16:22:43 UTC	16384	IN	Data Raw: 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 53 45 4c 45 43 54 22 29 2c 69 3d 30 3b 69 3c 61 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 61 5b 69 5d 2e 64 69 73 61 62 6c 65 64 3d 21 30 2c 61 5b 69 5d 2e 5f 77 66 6f 72 6d 73 5f 64 69 73 61 62 6c 65 64 3d 21 30 3b 66 6f 72 28 76 61 72 20 72 3d 61 5b 69 5d 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 4f 50 54 49 4f 4e 22 29 2c 73 3d 30 3b 73 3c 72 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 72 5b 73 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 54 52 49 47 47 45 52 5f 43 4f 4e 44 49 54 49 4f 4e 41 4c 53 29 26 26 6e 65 77 20 54 72 69 67 67 65 72 28 72 5b 73 5d 29 2e 74 72 69 67 67 65 72 28 29 3b 74 68 69 73 2e 66 6c 61 67 43 61 6c 63 75 6c 61 74 69 6f 6e 46 6f 72 55 70 64 61 74 65 28 61 5b 69 5d 29 Data Ascii: entsByTagName("SELECT"),i=0;i<a.length;i++){a[i].disabled=!0,a[i]._wforms_disabled=!0;for(var r=a[i].getElementsByTagName("OPTION"),s=0;s<r.length;s++)r[s].getAttribute(TRIGGER_CONDITIONALS)&&new Trigger(r[s]).trigger();this.flagCalculationForUpdate(a[i])
2024-03-18 16:22:43 UTC	16384	IN	Data Raw: 22 5e 22 2b 74 2b 22 24 22 2c 22 69 22 29 5d 7d 28 29 7d 2c 77 46 4f 52 4d 53 2e 62 65 68 61 76 69 6f 72 73 2e 76 61 6c 69 64 61 74 69 6f 6e 2e 72 75 6c 65 73 2e 69 73 44 61 74 65 2e 66 61 69 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 69 3d 74 68 69 73 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 2c 6e 29 7b 76 61 72 20 65 3d 62 61 73 65 32 2e 44 4f 4d 2e 48 54 4d 4c 44 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 69 2e 74 61 72 67 65 74 2c 77 46 4f 52 4d 53 2e 68 65 6c 70 65 72 73 2e 65 73 63 61 70 65 51 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 22 2b 65 29 29 2c 61 3d 62 61 73 65 32 2e 44 4f 4d 2e 48 54 4d 4c 44 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 69 2e 74 61 72 67 65 74 2c 77 Data Ascii: "^"+t+"$","i")]}()},wFORMS.behaviors.validation.rules.isDate.fail=function(e,t){var n,i=this;function a(e,t,n){var e=base2.DOM.HTMLDocument.querySelector(i.target,wFORMS.helpers.escapeQuerySelector("#"+e)),a=base2.DOM.HTMLDocument.querySelector(i.target,w
2024-03-18 16:22:43 UTC	16384	IN	Data Raw: 2a 24 2f 5d 3b 66 6f 72 28 6e 20 69 6e 20 61 29 69 66 28 61 5b 6e 5d 2e 74 65 73 74 28 74 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 77 46 4f 52 4d 53 2e 62 65 68 61 76 69 6f 72 73 2e 76 61 6c 69 64 61 74 69 6f 6e 2e 69 6e 73 74 61 6e 63 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 69 64 61 74 65 43 75 73 74 6f 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 6e 65 77 20 52 65 67 45 78 70 28 22 2f 28 2e 2a 29 2f 28 5b 67 69 5d 2a 29 22 29 2c 6e 3d 65 2e 63 6c 61 73 73 4e 61 6d 65 2e 6d 61 74 63 68 28 6e 29 3b 69 66 28 74 68 69 73 2e 69 73 45 6d 70 74 79 28 74 29 29 72 65 74 75 72 6e 21 30 3b 69 66 28 6e 26 26 6e 5b 30 5d 29 7b 6e 3d 6e 65 77 20 52 65 67 45 78 70 28 6e 5b 31 5d 2c 6e 5b 32 5d 29 3b 69 66 28 21 74 2e 6d Data Ascii: $/];for(n in a)if(a[n].test(t))return!0;return!1},wFORMS.behaviors.validation.instance.prototype.validateCustom=function(e,t){var n=new RegExp("/(.)/([gi]*)"),n=e.className.match(n);if(this.isEmpty(t))return!0;if(n&&n[0]){n=new RegExp(n[1],n[2]);if(!t.m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.4	50221	35.170.17.215	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:42 UTC	642	OUT	GET /js/kalendae/kalendae.standalone.min.js HTTP/1.1 Host: indwes.tfaforms.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://indwes.tfaforms.net/56 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: FORMASSEMBLY=6a4809387c058e25edd85f81ecc72a5f; FASRV=8e78f24973a4e556
2024-03-18 16:22:43 UTC	348	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:43 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 35492 Connection: close server: nginx last-modified: Fri, 01 Mar 2024 16:57:34 GMT etag: "65e208fe-8aa4" strict-transport-security: max-age=31536000; includeSubDomains; preload x-fa-app: 20-104 accept-ranges: bytes
2024-03-18 16:22:43 UTC	16036	IN	Data Raw: 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0a 20 2a 09 4b 61 6c 65 6e 64 61 65 2c 20 61 20 66 72 61 6d 65 77 6f 72 6b 20 61 67 6e 6f 73 74 69 63 20 6a 61 76 61 73 63 72 69 70 74 20 64 61 74 65 20 70 69 63 6b 65 72 20 20 20 20 20 20 20 20 20 20 20 2a 0a 20 2a 09 43 6f 70 79 72 69 67 68 74 28 63 29 20 32 30 31 33 20 4a 61 72 76 69 73 20 42 61 64 67 6c 65 79 20 28 63 68 69 70 65 72 73 6f 66 74 40 67 6d 61 69 6c 2e 63 6f 6d 29 20 20 20 20 20 20 20 20 20 2a 0a 20 2a 09 68 74 74 70 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 43 68 69 70 65 72 53 6f 66 74 2f 4b 61 6c 65 6e 64 61 65 20 20 20 20 20 20 20 Data Ascii: /******************************************************************** Kalendae, a framework agnostic javascript date picker Copyright(c) 2013 Jarvis Badgley (chipersoft@gmail.com) *http://github.com/ChiperSoft/Kalendae
2024-03-18 16:22:43 UTC	16384	IN	Data Raw: 28 22 73 68 6f 77 22 2c 74 68 69 73 29 7d 2c 68 69 64 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 3b 74 68 69 73 2e 70 75 62 6c 69 73 68 28 22 68 69 64 65 22 2c 74 68 69 73 29 7d 2c 64 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 2c 62 3d 74 68 69 73 2e 69 6e 70 75 74 3b 66 2e 72 65 6d 6f 76 65 45 76 65 6e 74 28 61 2c 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 74 68 69 73 2e 5f 65 76 65 6e 74 73 2e 63 6f 6e 74 61 69 6e 65 72 4d 6f 75 73 65 64 6f 77 6e 29 3b 66 2e 72 65 6d 6f 76 65 45 76 65 6e 74 28 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2c 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 74 68 69 73 2e Data Ascii: ("show",this)},hide:function(){this.container.style.display="none";this.publish("hide",this)},destroy:function(){var a=this.container,b=this.input;f.removeEvent(a,"mousedown",this._events.containerMousedown);f.removeEvent(window.document,"mousedown",this.
2024-03-18 16:22:43 UTC	3072	IN	Data Raw: 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 62 3a 74 68 69 73 2e 61 64 64 28 22 79 22 2c 61 2d 62 29 7d 2c 77 65 65 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 6c 61 6e 67 28 29 2e 77 65 65 6b 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 62 3a 74 68 69 73 2e 61 64 64 28 22 64 22 2c 37 2a 28 61 2d 62 29 29 7d 2c 69 73 6f 57 65 65 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 45 28 74 68 69 73 2c 31 2c 34 29 2e 77 65 65 6b 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 62 3a 74 68 69 73 2e 61 64 64 28 22 64 22 2c 37 2a 28 61 2d 62 29 29 7d 2c 77 65 65 6b 64 61 79 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 28 74 68 69 73 2e 5f 64 2e 67 65 74 44 61 79 28 29 2b 37 2d 74 68 69 73 2e 6c 61 Data Ascii: urn null==a?b:this.add("y",a-b)},week:function(a){var b=this.lang().week(this);return null==a?b:this.add("d",7(a-b))},isoWeek:function(a){var b=E(this,1,4).week;return null==a?b:this.add("d",7(a-b))},weekday:function(a){var b=(this._d.getDay()+7-this.la

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.4	50228	104.17.24.14	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:42 UTC	592	OUT	GET /ajax/libs/font-awesome/4.4.0/css/font-awesome.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://indwes.tfaforms.net/56 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:43 UTC	948	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:43 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e5f-6857" Last-Modified: Mon, 04 May 2020 16:10:07 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 434647 Expires: Sat, 08 Mar 2025 16:22:43 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bRVnPS6PGik5Rx91Tfl7H2XwZB%2BSNS7GGWy2bdY%2BcTmTtCV%2FwvtZ6kG7Z03Oy0BGM4dzvRb2CwJI39%2FG74sAmdP0mG7wEYd6NZYMMo2KxL%2BeoEtHN1Jp9zRnEh9Pu6CDHQfDLpqW"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 866690278ee419bb-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:22:43 UTC	421	IN	Data Raw: 36 38 35 37 0d 0a 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 34 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 34 Data Ascii: 6857/! Font Awesome 4.4.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.4
2024-03-18 16:22:43 UTC	1369	IN	Data Raw: 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 77 6f 66 66 3f 76 3d 34 2e 34 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 74 74 66 3f 76 3d 34 2e 34 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 73 76 67 3f 76 3d 34 2e 34 2e 30 23 66 6f 6e 74 61 77 65 73 6f 6d 65 72 65 67 75 6c 61 72 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 66 61 7b 64 69 73 70 6c 61 79 3a 69 6e Data Ascii: fonts/fontawesome-webfont.woff?v=4.4.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.4.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.4.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:in
2024-03-18 16:22:43 UTC	1369	IN	Data Raw: 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d Data Ascii: ebkit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}@keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}
2024-03-18 16:22:43 UTC	1369	IN	Data Raw: 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 61 2d 73 74 61 63 6b 2d 31 78 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 2e 66 61 2d 73 74 61 63 6b 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 69 6e 76 65 72 73 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 66 61 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 30 22 7d 2e 66 61 2d 6d 75 73 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 31 22 7d 2e 66 61 2d 73 65 61 72 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 32 22 7d 2e 66 61 2d 65 6e 76 65 6c 6f 70 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 Data Ascii: lute;left:0;width:100%;text-align:center}.fa-stack-1x{line-height:inherit}.fa-stack-2x{font-size:2em}.fa-inverse{color:#fff}.fa-glass:before{content:"\f000"}.fa-music:before{content:"\f001"}.fa-search:before{content:"\f002"}.fa-envelope-o:before{content:"
2024-03-18 16:22:43 UTC	1369	IN	Data Raw: 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 34 22 7d 2e 66 61 2d 68 65 61 64 70 68 6f 6e 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 35 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 36 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 37 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 38 22 7d 2e 66 61 2d 71 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 39 22 7d 2e 66 61 2d 62 61 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 61 22 7d 2e 66 61 2d 74 61 67 3a 62 65 66 6f 72 65 7b 63 Data Ascii: e{content:"\f024"}.fa-headphones:before{content:"\f025"}.fa-volume-off:before{content:"\f026"}.fa-volume-down:before{content:"\f027"}.fa-volume-up:before{content:"\f028"}.fa-qrcode:before{content:"\f029"}.fa-barcode:before{content:"\f02a"}.fa-tag:before{c
2024-03-18 16:22:43 UTC	1369	IN	Data Raw: 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 39 22 7d 2e 66 61 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 61 22 7d 2e 66 61 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 62 22 7d 2e 66 61 2d 70 61 75 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 63 22 7d 2e 66 61 2d 73 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 64 22 7d 2e 66 61 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 65 22 7d 2e 66 61 2d 66 61 73 74 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 30 22 7d 2e 66 61 2d 73 74 65 70 2d 66 6f 72 77 61 72 64 3a 62 65 Data Ascii: ward:before{content:"\f049"}.fa-backward:before{content:"\f04a"}.fa-play:before{content:"\f04b"}.fa-pause:before{content:"\f04c"}.fa-stop:before{content:"\f04d"}.fa-forward:before{content:"\f04e"}.fa-fast-forward:before{content:"\f050"}.fa-step-forward:be
2024-03-18 16:22:43 UTC	1369	IN	Data Raw: 37 30 22 7d 2e 66 61 2d 77 61 72 6e 69 6e 67 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 74 72 69 61 6e 67 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 31 22 7d 2e 66 61 2d 70 6c 61 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 32 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 33 22 7d 2e 66 61 2d 72 61 6e 64 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 34 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 35 22 7d 2e 66 61 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 36 22 7d 2e 66 61 2d 63 68 65 76 72 6f 6e 2d Data Ascii: 70"}.fa-warning:before,.fa-exclamation-triangle:before{content:"\f071"}.fa-plane:before{content:"\f072"}.fa-calendar:before{content:"\f073"}.fa-random:before{content:"\f074"}.fa-comment:before{content:"\f075"}.fa-magnet:before{content:"\f076"}.fa-chevron-
2024-03-18 16:22:43 UTC	1369	IN	Data Raw: 73 71 75 61 72 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 36 22 7d 2e 66 61 2d 62 6f 6f 6b 6d 61 72 6b 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 37 22 7d 2e 66 61 2d 70 68 6f 6e 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 38 22 7d 2e 66 61 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 39 22 7d 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 66 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 61 22 7d 2e 66 61 2d 67 69 74 68 75 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 62 22 7d 2e 66 61 2d 75 6e 6c 6f 63 6b 3a 62 65 66 6f 72 65 7b Data Ascii: square-o:before{content:"\f096"}.fa-bookmark-o:before{content:"\f097"}.fa-phone-square:before{content:"\f098"}.fa-twitter:before{content:"\f099"}.fa-facebook-f:before,.fa-facebook:before{content:"\f09a"}.fa-github:before{content:"\f09b"}.fa-unlock:before{
2024-03-18 16:22:43 UTC	1369	IN	Data Raw: 79 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 37 22 7d 2e 66 61 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 38 22 7d 2e 66 61 2d 6e 61 76 69 63 6f 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 65 6f 72 64 65 72 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 39 22 7d 2e 66 61 2d 6c 69 73 74 2d 75 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 61 22 7d 2e 66 61 2d 6c 69 73 74 2d 6f 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 62 22 7d 2e 66 61 2d 73 74 72 69 6b 65 74 68 72 6f 75 67 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 63 22 7d 2e 66 61 2d 75 6e 64 65 72 6c 69 6e 65 Data Ascii: y-o:before{content:"\f0c7"}.fa-square:before{content:"\f0c8"}.fa-navicon:before,.fa-reorder:before,.fa-bars:before{content:"\f0c9"}.fa-list-ul:before{content:"\f0ca"}.fa-list-ol:before{content:"\f0cb"}.fa-strikethrough:before{content:"\f0cc"}.fa-underline
2024-03-18 16:22:43 UTC	1369	IN	Data Raw: 62 65 66 6f 72 65 2c 2e 66 61 2d 63 6c 69 70 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 61 22 7d 2e 66 61 2d 6c 69 67 68 74 62 75 6c 62 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 62 22 7d 2e 66 61 2d 65 78 63 68 61 6e 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 63 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 64 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 75 70 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 65 22 7d 2e 66 61 2d 75 73 65 72 2d 6d 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 30 22 7d 2e 66 61 2d 73 74 65 74 68 6f 73 63 6f 70 65 3a 62 65 66 Data Ascii: before,.fa-clipboard:before{content:"\f0ea"}.fa-lightbulb-o:before{content:"\f0eb"}.fa-exchange:before{content:"\f0ec"}.fa-cloud-download:before{content:"\f0ed"}.fa-cloud-upload:before{content:"\f0ee"}.fa-user-md:before{content:"\f0f0"}.fa-stethoscope:bef

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.4	50229	35.170.17.215	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:42 UTC	637	OUT	GET /wForms/3.11/js/wforms_calendar.js HTTP/1.1 Host: indwes.tfaforms.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://indwes.tfaforms.net/56 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: FORMASSEMBLY=6a4809387c058e25edd85f81ecc72a5f; FASRV=8e78f24973a4e556
2024-03-18 16:22:43 UTC	346	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:43 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 3829 Connection: close server: nginx last-modified: Fri, 01 Mar 2024 17:30:52 GMT etag: "65e210cc-ef5" strict-transport-security: max-age=31536000; includeSubDomains; preload x-fa-app: 20-104 accept-ranges: bytes
2024-03-18 16:22:43 UTC	3829	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 0a 09 69 66 28 74 79 70 65 6f 66 20 4b 61 6c 65 6e 64 61 65 20 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 20 7d 0a 09 0a 09 69 66 28 21 77 46 4f 52 4d 53 2e 68 65 6c 70 65 72 73 2e 63 61 6c 65 6e 64 61 72 29 20 7b 77 46 4f 52 4d 53 2e 68 65 6c 70 65 72 73 2e 63 61 6c 65 6e 64 61 72 20 3d 20 7b 7d 7d 3b 0a 09 77 46 4f 52 4d 53 2e 68 65 6c 70 65 72 73 2e 63 61 6c 65 6e 64 61 72 2e 61 6c 72 65 61 64 79 41 70 70 6c 69 65 64 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 0a 09 77 46 4f 52 4d 53 2e 62 65 68 61 76 69 6f 72 73 2e 63 61 6c 65 6e 64 61 72 20 3d 20 7b 0a 09 09 43 53 53 5f 53 45 4c 45 43 54 4f 52 20 3a 20 22 2e 76 61 6c 69 64 61 74 65 2d 64 61 74 65 63 61 6c 22 Data Ascii: (function() {if(typeof Kalendae == 'undefined') { return false; }if(!wFORMS.helpers.calendar) {wFORMS.helpers.calendar = {}};wFORMS.helpers.calendar.alreadyApplied = false; wFORMS.behaviors.calendar = {CSS_SELECTOR : ".validate-datecal"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.4	50230	8.28.7.83	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:43 UTC	2225	OUT	GET /AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; pi=156011:4; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; SPugT=1710728775; KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; PugT=1710778939; chkChromeAb67Sec=3; DPSync3=1711324800%3A265%7C1711756800%3A257%7C1711929600%3A262_256_263_261_260_259_201_258%7C1710806400%3A248_255; SyncRTB3=1711929600%3A22_8_166_104_54_48_13_165_231_178_249_250_3_220_71_21%7C1711324800%3A15_223
2024-03-18 16:22:43 UTC	760	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Mar 2024 16:22:41 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_153=1923-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&19420-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&22979-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&23462-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 16-Jun-2024 16:22:41 GMT; path=/ Set-Cookie: PugT=1710778961; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 16:22:41 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-18 16:22:43 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.4	50231	209.54.182.161	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:43 UTC	803	OUT	GET /ecm3?ex=pubmatic.com&id=PM_UID26FC5BC4-C0EA-481E-AC6D-297EF4930E35 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
2024-03-18 16:22:43 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 18 Mar 2024 16:22:43 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: XRWATAEKNEH59WDDZJT1 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-18 16:22:43 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.4	50232	18.238.55.58	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:43 UTC	718	OUT	GET /syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent= HTTP/1.1 Host: synchroscript.deliveryengine.adswizz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:43 UTC	312	IN	HTTP/1.1 200 OK Server: CloudFront Date: Mon, 18 Mar 2024 16:22:43 GMT Content-Length: 0 Connection: close X-Cache: Error from cloudfront Via: 1.1 a09be795efaa72bd6adbcee7b35c4d1c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: ZBCDCi0xQqZtLtV5z7l6Hlb342ZqpGXW7dMlOc6hV8lH462W3NshXQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.4	50233	35.244.154.8	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:43 UTC	656	OUT	GET /712188.gif?partner_uid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent= HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:43 UTC	735	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://idsync.rlcdn.com/1000.gif?memo=CPy7KxIwCiwIARCFpQoaJDI2RkM1QkM0LUMwRUEtNDgxRS1BQzZELTI5N0VGNDkzMEUzNRAAGg0I09ThrwYSBQjoBxAAQgBKAA P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=to/OuTGAApiQL97C9UEJZf5XeWOA0Xxfg28Ykd/FzJ0=; Path=/; Domain=rlcdn.com; Expires=Tue, 18 Mar 2025 16:22:43 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Fri, 17 May 2024 16:22:43 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Mon, 18 Mar 2024 16:22:43 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.4	50235	142.250.65.162	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:43 UTC	2454	OUT	GET /pcs/view?xai=AKAOjsu2efMI-QAuO9Nc6NowBZFGMbNB_HL8VKq_AHTk0RBhGvteX_sro2NF4DPMoneo-MFNVjmaYJqeKYGBFX9UFEx_B1uYKnohFxH99ZC85uKLNtjXh58iDOTVTu4WnhJvlQp6xRWPB3j2BWJifI8sEo118b9xnhbmv95pNbYv41mJHWe8DXeFxwrrytEBYGhGfKAadBFA4PcHbOqaBsARfaOp1KdL4WonbEtb39snDwmESVpPV8_j1RJ76EdCfXvzv8E0mimdc8KI4Z_xlZ7CY9yXt57BPSOeQ09In7lPgqL138lHC5IcdqfELfMV2r3byGdwPc-jySZYi5ecsabZxwsMUXCVhll-wTyQ8sx_pFoQoQJlbOtPxH72Lo-tcUJxJXwUwhqU_yeuewOz6ZyfhpjyUR0moCQ4K09l4l03HoZQJuoSyfRy3PSz5osQ0NYaaqZcvk2Ye41euSa-zKr_ti4G6jvuo55XBdYcY_ybb0T3f9uoaMdvtp_zSAwFASBu8-OKCj0IHVs1w5Uh2u7cONZ2hMSMOWGqtHO9kAzigwgsnGvVem7PGdU4N62b1Wlg7TybACvbqIXm4rMNbudaaJkWSLPnRCyK4aVFLM5MEK0eMV37_iP7Ks7jJr2ScBVghGbRwSfEFAH-c3h7YQ5KNeOLe5GAWPrZN99QkibgMyOKNcIPIDVJp5MXINBZb-Pc8DA5C8V7bcprNWcIVOqMIHBctIB5Sv1ZxdOe-EisXEEfk85sEKTWlmtkDt0tRpaSYxKL8HcdToFh7qVZCixi0hLjyzv6yx9WheHdTCDwdAVvyhsmxabPelkhcW4FGxJzphFdi_hkKzF7nh8-w6Q00KDKCKfUtoiXHqpuUsa_ggjiefXia5rROQF-oMsMuwnKTOqV3yhvxVZrmlYaZdmOymhItvNXpxsUwwvgINxszNZJEboZvFL2HpX95Kyl6kkcTjWgnWgIi4EorEscwDOb1iUV0y9PkAI3R3saO340DxUgSYksN4rFZouLdKyzxq-qSfNnEdypvJYM6c2K95qYJzzFpsClhBbnrVTnPnqH99xBzsNzvM5lDp_u9pe4QffeXKQnbwiMVTne5gLEjt7x3hw-7qEMUza1UtAOXK7cT0WCz_wDvNIKMObXS6dqwASo0eo_RmouLFpFeOvpRjjZsjMTJ0ojHXjkbfDGryQKa2q4L1MqGFl54Gsn-C6hCbwUx5I3WiEbqMfhn0-D7WXVV8F1f-QU0WkXy9hXVwNsTCyQbS1xgImgs-n5EwtnBhu5L9I_aLyV0L7kRKt2PXT3l2Cr4NdPjgqpJV7Gz3BTXntuuCZK-S_2odRoEOJeUvZpJEeyAuwvYCCIowdwfz9Mv-iw7NQ2GZ_CKVUuKBC3jdoBaLrH2xXAidtXO6SRCxel4OJgBHjWbqnrHUJtq8zO2UB4ohaEBjvgSJJxQx75R14P5ooY_EZtX_nlfXpPC_aVcwElVyDrP2Ra95_LD-YU&sai=AMfl-YQ7LYSGcYmu68xh_hXheICVAQYcRnl7sb026DIE4p2p-J3bLmzjD8ak2cniBGN7Nyk8mhQGggdh66TzgAUMOI3-UukEMpNsNOjTNvRPgEcyZvYLH5KqbvwidVSZDKjZY74tdQpxnl3Qvf19CI41Ys__s6Tqnjc4xqqLrmA6M1YgpYSj-f8-uEH0D3UqYsDFbZT7aICaG3ZR8uymEjeE1npwPp8rKtYNXc6Er-Gkt2HITDZXeQof6zgjztr0GACnOITAfgMAlP8EhyAaCHmNl7A2UOAqW83_CVpwrjccj5h0dfspqMtbcmTrtaImrVT_HMCF8IpKig2fgAA&sig=Cg0ArKJSzDphJ07OXkX1EAE&uach_m=%5BUACH%5D&urlfix=1&cbvp=2&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:43 UTC	895	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Cache-Control: private Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 18 Mar 2024 16:22:43 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.4	50234	142.251.40.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:43 UTC	1414	OUT	GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:43 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:22:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.4	50237	35.207.24.140	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:43 UTC	1044	OUT	GET /imp_s2s/v3/n8UGQb8oRsoLuVNWaPOgOcGz9MQJ9n-mDyOm5Rwc2mCEe0IoMJKkiishgKAVPr7vW-Op5SqLPpvNhaf7JZgScNC5JJ-Tn8GN9JhXOZAvpMRY-8oKI8g7qkcN6ho-rIH6LmuEMRJWGzNVn2S8k48_-d9U_JFzkQONalz8aatPtkRDWNImaA2IOx3bGXgdpWfLOHQiw1hlMyCqrbWsdAOopnr0PCR9rMyIhTa_Z7lbDM2QFaA3TjmDUf_I7m9vGvRB875GQcl81Rb9AYuAFLbMRl85wKx_yx8mCfK1M-jlot0aJemgW_Jyz1dzBjdBiLyCLNwOw6YDnksQpk9ijcM3QvoSdqz43bIQf9j03Xc_0ite4hlwDut-0pga_paq-WI6XTIFqdpPP1fI_TPcCRstoPDNsC7XhW1bAbRf6gu3j8YBB4BjlWPTSJFhvyTyBSRrWGYyMwdhLFsAC1ADM_8IQhqdfcD8RtRA8whROeatyjMXRqQu6Og513Zv_qaWKxWfoOva0YKTwupRHQ/ZfhqLwAOBfUIg6-yAAhcO_kHV4_h8kd_xzRsDw?q=1&cbvp=2 HTTP/1.1 Host: rtb-use.mfadsrvr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1710778929; tuuid=2393ecfc-a9f7-4cbe-bbea-03c6f5980eff; tuuid_lu=1710778930; ssh=!intentiq,1710778930
2024-03-18 16:22:43 UTC	260	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Content-Type: text/html; charset=UTF-8 Date: Mon, 18 Mar 2024 16:22:43 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.4	50238	35.170.17.215	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:43 UTC	683	OUT	GET /wForms/3.11/js/localization-en_US.js?v=8b5c9ffd0b6fc88dc72529725004f6b69b9e0ae8 HTTP/1.1 Host: indwes.tfaforms.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://indwes.tfaforms.net/56 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: FORMASSEMBLY=6a4809387c058e25edd85f81ecc72a5f; FASRV=8e78f24973a4e556
2024-03-18 16:22:43 UTC	347	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:43 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 6667 Connection: close server: nginx last-modified: Fri, 01 Mar 2024 17:30:48 GMT etag: "65e210c8-1a0b" strict-transport-security: max-age=31536000; includeSubDomains; preload x-fa-app: 20-104 accept-ranges: bytes
2024-03-18 16:22:43 UTC	6667	IN	Data Raw: 0a 69 66 20 28 74 79 70 65 6f 66 20 77 46 4f 52 4d 53 2e 62 65 68 61 76 69 6f 72 73 2e 76 61 6c 69 64 61 74 69 6f 6e 2e 6d 65 73 73 61 67 65 73 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0a 20 20 20 20 77 46 4f 52 4d 53 2e 62 65 68 61 76 69 6f 72 73 2e 76 61 6c 69 64 61 74 69 6f 6e 2e 6d 65 73 73 61 67 65 73 20 3d 20 7b 7d 3b 0a 7d 3b 0a 0a 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 76 61 72 20 6b 65 79 2c 20 74 6d 70 3b 0a 20 20 20 20 66 6f 72 20 28 6b 65 79 20 69 6e 20 28 74 6d 70 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 6f 6e 65 52 65 71 75 69 72 65 64 3a 20 22 54 68 69 73 20 73 65 63 74 69 6f 6e 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 2c 0a 20 20 20 20 20 20 20 20 69 73 52 65 71 75 69 72 65 64 3a 20 22 54 68 69 73 20 66 69 Data Ascii: if (typeof wFORMS.behaviors.validation.messages === 'undefined') { wFORMS.behaviors.validation.messages = {};};(function () { var key, tmp; for (key in (tmp = { oneRequired: "This section is required.", isRequired: "This fi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.4	50239	35.170.17.215	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:43 UTC	625	OUT	GET /dist/jquery/jquery.js HTTP/1.1 Host: indwes.tfaforms.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://indwes.tfaforms.net/56 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: FORMASSEMBLY=6a4809387c058e25edd85f81ecc72a5f; FASRV=8e78f24973a4e556
2024-03-18 16:22:43 UTC	349	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:43 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 89617 Connection: close server: nginx last-modified: Fri, 01 Mar 2024 17:40:29 GMT etag: "65e2130d-15e11" strict-transport-security: max-age=31536000; includeSubDomains; preload x-fa-app: 20-104 accept-ranges: bytes
2024-03-18 16:22:43 UTC	16035	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6a 71 75 65 72 79 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 Data Ascii: /! For license information please see jquery.js.LICENSE.txt /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window wit
2024-03-18 16:22:43 UTC	16384	IN	Data Raw: 67 22 7d 72 65 74 75 72 6e 21 30 7d 69 66 28 68 3d 5b 61 3f 76 2e 66 69 72 73 74 43 68 69 6c 64 3a 76 2e 6c 61 73 74 43 68 69 6c 64 5d 2c 61 26 26 6d 29 7b 66 6f 72 28 78 3d 28 64 3d 28 6c 3d 28 63 3d 28 66 3d 28 70 3d 76 29 5b 62 5d 7c 7c 28 70 5b 62 5d 3d 7b 7d 29 29 5b 70 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 66 5b 70 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 65 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 54 26 26 6c 5b 31 5d 29 26 26 6c 5b 32 5d 2c 70 3d 64 26 26 76 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 64 5d 3b 70 3d 2b 2b 64 26 26 70 26 26 70 5b 67 5d 7c 7c 28 78 3d 64 3d 30 29 7c 7c 68 2e 70 6f 70 28 29 3b 29 69 66 28 31 3d 3d 3d 70 2e 6e 6f 64 65 54 79 70 65 26 26 2b 2b 78 26 26 70 3d 3d 3d 74 29 7b 63 5b 65 5d 3d 5b 54 2c 64 2c 78 5d 3b 62 72 65 61 Data Ascii: g"}return!0}if(h=[a?v.firstChild:v.lastChild],a&&m){for(x=(d=(l=(c=(f=(p=v)[b]\|\|(p[b]={}))[p.uniqueID]\|\|(f[p.uniqueID]={}))[e]\|\|[])[0]===T&&l[1])&&l[2],p=d&&v.childNodes[d];p=++d&&p&&p[g]\|\|(x=d=0)\|\|h.pop();)if(1===p.nodeType&&++x&&p===t){c[e]=[T,d,x];brea
2024-03-18 16:22:43 UTC	16384	IN	Data Raw: 28 65 2c 74 2c 73 2c 6e 5b 73 5d 2c 21 30 2c 6f 2c 61 29 3b 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 26 26 28 69 3d 21 30 2c 68 28 72 29 7c 7c 28 61 3d 21 30 29 2c 6c 26 26 28 61 3f 28 74 2e 63 61 6c 6c 28 65 2c 72 29 2c 74 3d 6e 75 6c 6c 29 3a 28 6c 3d 74 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6c 2e 63 61 6c 6c 28 77 28 65 29 2c 6e 29 7d 29 29 2c 74 29 29 66 6f 72 28 3b 73 3c 75 3b 73 2b 2b 29 74 28 65 5b 73 5d 2c 6e 2c 61 3f 72 3a 72 2e 63 61 6c 6c 28 65 5b 73 5d 2c 73 2c 74 28 65 5b 73 5d 2c 6e 29 29 29 3b 72 65 74 75 72 6e 20 69 3f 65 3a 6c 3f 74 2e 63 61 6c 6c 28 65 29 3a 75 3f 74 28 65 5b 30 5d 2c 6e 29 3a 6f 7d 2c 5f 3d 2f 5e 2d 6d 73 2d 2f 2c 7a 3d 2f 2d 28 5b 61 2d 7a 5d 29 2f 67 3b 66 75 6e 63 Data Ascii: (e,t,s,n[s],!0,o,a);else if(void 0!==r&&(i=!0,h(r)\|\|(a=!0),l&&(a?(t.call(e,r),t=null):(l=t,t=function(e,t,n){return l.call(w(e),n)})),t))for(;s<u;s++)t(e[s],n,a?r:r.call(e[s],s,t(e[s],n)));return i?e:l?t.call(e):u?t(e[0],n):o},_=/^-ms-/,z=/-([a-z])/g;func
2024-03-18 16:22:43 UTC	16384	IN	Data Raw: 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 72 29 29 3b 72 65 74 75 72 6e 20 65 7d 77 2e 65 78 74 65 6e 64 28 7b 68 74 6d 6c 50 72 65 66 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 2c 73 3d 65 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 30 29 2c 75 3d 69 65 28 65 29 3b 69 66 28 21 28 64 2e 6e 6f 43 6c 6f 6e 65 43 68 65 63 6b 65 64 7c 7c 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 31 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 77 2e 69 73 58 4d 4c 44 6f 63 28 65 29 29 29 66 6f 72 28 61 3d 79 65 28 73 29 2c 72 3d 30 2c 69 3d 28 6f 3d 79 65 28 65 29 29 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 4f 65 28 6f 5b Data Ascii: Node.removeChild(r));return e}w.extend({htmlPrefilter:function(e){return e},clone:function(e,t,n){var r,i,o,a,s=e.cloneNode(!0),u=ie(e);if(!(d.noCloneChecked\|\|1!==e.nodeType&&11!==e.nodeType\|\|w.isXMLDoc(e)))for(a=ye(s),r=0,i=(o=ye(e)).length;r<i;r++)Oe(o[
2024-03-18 16:22:43 UTC	16384	IN	Data Raw: 74 22 29 2c 74 3d 76 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 65 6c 65 63 74 22 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 76 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 69 6f 6e 22 29 29 3b 65 2e 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 2c 64 2e 63 68 65 63 6b 4f 6e 3d 22 22 21 3d 3d 65 2e 76 61 6c 75 65 2c 64 2e 6f 70 74 53 65 6c 65 63 74 65 64 3d 74 2e 73 65 6c 65 63 74 65 64 2c 28 65 3d 76 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 29 2e 76 61 6c 75 65 3d 22 74 22 2c 65 2e 74 79 70 65 3d 22 72 61 64 69 6f 22 2c 64 2e 72 61 64 69 6f 56 61 6c 75 65 3d 22 74 22 3d 3d 3d 65 2e 76 61 6c 75 65 7d 28 29 3b 76 61 72 20 63 74 2c 66 74 3d 77 2e 65 78 70 72 2e 61 74 74 72 48 61 6e 64 6c 65 3b 77 2e 66 6e 2e 65 Data Ascii: t"),t=v.createElement("select").appendChild(v.createElement("option"));e.type="checkbox",d.checkOn=""!==e.value,d.optSelected=t.selected,(e=v.createElement("input")).value="t",e.type="radio",d.radioValue="t"===e.value}();var ct,ft=w.expr.attrHandle;w.fn.e
2024-03-18 16:22:43 UTC	8046	IN	Data Raw: 7d 29 29 2c 74 68 69 73 7d 7d 29 2c 77 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 68 69 64 64 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 77 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 28 65 29 7d 2c 77 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 28 65 2e 6f 66 66 73 65 74 57 69 64 74 68 7c 7c 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c 7c 65 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e 67 74 68 29 7d 2c 77 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 78 68 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7d 63 61 74 63 68 28 65 29 7b 7d Data Ascii: })),this}}),w.expr.pseudos.hidden=function(e){return!w.expr.pseudos.visible(e)},w.expr.pseudos.visible=function(e){return!!(e.offsetWidth\|\|e.offsetHeight\|\|e.getClientRects().length)},w.ajaxSettings.xhr=function(){try{return new e.XMLHttpRequest}catch(e){}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.4	50240	35.170.17.215	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:43 UTC	643	OUT	GET /js/typeahead/v1.2.0/typeahead.bundle.js HTTP/1.1 Host: indwes.tfaforms.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://indwes.tfaforms.net/56 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: FORMASSEMBLY=6a4809387c058e25edd85f81ecc72a5f; FASRV=8e78f24973a4e556
2024-03-18 16:22:43 UTC	350	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:43 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 104933 Connection: close server: nginx last-modified: Fri, 01 Mar 2024 16:57:34 GMT etag: "65e208fe-199e5" strict-transport-security: max-age=31536000; includeSubDomains; preload x-fa-app: 20-104 accept-ranges: bytes
2024-03-18 16:22:43 UTC	16034	IN	Data Raw: 2f 2a 21 0a 20 2a 20 74 79 70 65 61 68 65 61 64 2e 6a 73 20 31 2e 32 2e 30 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 69 74 74 65 72 2f 74 79 70 65 61 68 65 61 64 2e 6a 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 37 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 0a 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 72 6f 6f 74 2c 20 66 61 63 74 6f 72 79 29 20 7b 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 29 20 7b 0a 20 20 20 20 20 20 20 20 64 65 66 69 6e 65 28 5b 20 22 6a 71 75 65 72 79 22 20 Data Ascii: /! typeahead.js 1.2.0 * https://github.com/twitter/typeahead.js * Copyright 2013-2017 Twitter, Inc. and other contributors; Licensed MIT */(function(root, factory) { if (typeof define === "function" && define.amd) { define([ "jquery"
2024-03-18 16:22:43 UTC	16384	IN	Data Raw: 54 6f 6b 65 6e 69 7a 65 72 20 61 6e 64 20 71 75 65 72 79 54 6f 6b 65 6e 69 7a 65 72 20 61 72 65 20 62 6f 74 68 20 72 65 71 75 69 72 65 64 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 69 64 65 6e 74 69 66 79 20 3d 20 6f 2e 69 64 65 6e 74 69 66 79 20 7c 7c 20 5f 2e 73 74 72 69 6e 67 69 66 79 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 64 61 74 75 6d 54 6f 6b 65 6e 69 7a 65 72 20 3d 20 6f 2e 64 61 74 75 6d 54 6f 6b 65 6e 69 7a 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 71 75 65 72 79 54 6f 6b 65 6e 69 7a 65 72 20 3d 20 6f 2e 71 75 65 72 79 54 6f 6b 65 6e 69 7a 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 6d 61 74 63 68 41 6e 79 51 75 65 72 79 54 6f Data Ascii: Tokenizer and queryTokenizer are both required"); } this.identify = o.identify \|\| _.stringify; this.datumTokenizer = o.datumTokenizer; this.queryTokenizer = o.queryTokenizer; this.matchAnyQueryTo
2024-03-18 16:22:43 UTC	16384	IN	Data Raw: 61 6c 69 7a 65 3a 20 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 69 61 6c 69 7a 65 28 66 6f 72 63 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 21 74 68 69 73 2e 69 6e 69 74 50 72 6f 6d 69 73 65 20 7c 7c 20 66 6f 72 63 65 20 3f 20 74 68 69 73 2e 5f 69 6e 69 74 69 61 6c 69 7a 65 28 29 20 3a 20 74 68 69 73 2e 69 6e 69 74 50 72 6f 6d 69 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 64 64 3a 20 66 75 6e 63 74 69 6f 6e 20 61 64 64 28 64 61 74 61 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 69 6e 64 65 78 2e 61 64 64 28 64 61 74 61 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 20 20 20 20 20 20 20 20 Data Ascii: alize: function initialize(force) { return !this.initPromise \|\| force ? this._initialize() : this.initPromise; }, add: function add(data) { this.index.add(data); return this;
2024-03-18 16:22:43 UTC	16256	IN	Data Raw: 8a e3 8f 8b e3 8f 97 ef bc a8 ef bd 88 5d 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 49 3a 20 22 5b 49 69 c3 8c 2d c3 8f c3 ac 2d c3 af c4 a8 2d c4 b0 c4 b2 c4 b3 c7 8f c7 90 c8 88 2d c8 8b e1 b4 b5 e1 b5 a2 e1 b8 ac e1 b8 ad e1 bb 88 2d e1 bb 8b e2 81 b1 e2 84 90 e2 84 91 e2 84 b9 e2 85 88 e2 85 a0 2d e2 85 a3 e2 85 a5 2d e2 85 a8 e2 85 aa e2 85 ab e2 85 b0 2d e2 85 b3 e2 85 b5 2d e2 85 b8 e2 85 ba e2 85 bb e2 92 a4 e2 92 be e2 93 98 e3 8d ba e3 8f 8c e3 8f 95 ef ac 81 ef ac 83 ef bc a9 ef bd 89 5d 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 4a 3a 20 22 5b 4a 6a c4 b2 2d c4 b5 c7 87 2d c7 8c c7 b0 ca b2 e1 b4 b6 e2 85 89 e2 92 a5 e2 92 bf e2 93 99 e2 b1 bc ef bc aa ef bd 8a 5d 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 4b 3a 20 22 5b 4b 6b c4 b6 c4 Data Ascii: ]", I: "[Ii---------]", J: "[Jj--]", K: "[Kk
2024-03-18 16:22:43 UTC	16384	IN	Data Raw: 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 73 75 67 67 65 73 74 69 6f 6e 73 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 5f 72 65 6e 64 65 72 53 75 67 67 65 73 74 69 6f 6e 73 28 71 75 65 72 79 2c 20 73 75 67 67 65 73 74 69 6f 6e 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 21 74 68 69 73 2e 24 6c 61 73 74 53 75 67 67 65 73 74 69 6f 6e 2e 6c 65 6e 67 74 68 20 26 26 20 74 68 69 73 2e 74 65 6d 70 6c 61 74 65 73 2e 6e 6f 74 46 6f 75 6e 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 5f 72 65 6e 64 65 72 4e 6f 74 46 6f 75 6e 64 28 71 75 65 72 79 29 3b 0a 20 20 20 Data Ascii: ); } else if (suggestions.length) { this._renderSuggestions(query, suggestions); } else if (!this.$lastSuggestion.length && this.templates.notFound) { this._renderNotFound(query);
2024-03-18 16:22:43 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 5f 68 69 64 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 69 73 4f 70 65 6e 28 29 20 26 26 20 74 68 69 73 2e 5f 73 68 6f 77 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 73 2e 5f 6f 6e 43 6c 65 61 72 65 64 2e 61 70 70 6c 79 28 74 68 69 73 2c 20 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 20 30 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 4c 61 6e 67 75 61 67 65 44 69 72 65 63 74 69 6f 6e 3a 20 66 Data Ascii: this._hide(); } else { this.isOpen() && this._show(); } return s._onCleared.apply(this, [].slice.call(arguments, 0)); }, setLanguageDirection: f
2024-03-18 16:22:43 UTC	7107	IN	Data Raw: 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 20 77 77 77 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 65 6e 75 20 3d 20 6e 65 77 20 4d 65 6e 75 43 6f 6e 73 74 72 75 63 74 6f 72 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 6f 64 65 3a 20 24 6d 65 6e 75 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 73 65 74 73 3a 20 64 61 74 61 73 65 74 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 20 77 77 77 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 74 61 74 75 73 20 3d 20 6e 65 77 20 53 74 61 74 75 73 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: t }, www); menu = new MenuConstructor({ node: $menu, datasets: datasets }, www); status = new Status({

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.4	50241	35.170.17.215	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:43 UTC	662	OUT	GET /dist/open-telemetry/open-telemetry.3e6c1bedaa7fb4452dd0.js HTTP/1.1 Host: indwes.tfaforms.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://indwes.tfaforms.net/56 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: FORMASSEMBLY=6a4809387c058e25edd85f81ecc72a5f; FASRV=8e78f24973a4e556
2024-03-18 16:22:43 UTC	349	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:43 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 81200 Connection: close server: nginx last-modified: Fri, 01 Mar 2024 17:40:30 GMT etag: "65e2130e-13d30" strict-transport-security: max-age=31536000; includeSubDomains; preload x-fa-app: 20-104 accept-ranges: bytes
2024-03-18 16:22:43 UTC	16035	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 7d 3b 74 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 29 72 65 74 75 72 6e 20 67 6c 6f 62 61 6c 54 68 69 73 3b 74 72 79 7b 72 65 74 75 72 6e 20 74 68 69 73 7c 7c 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 7d 63 61 74 63 68 28 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 7d 7d 28 29 3b 76 61 72 20 65 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 Data Ascii: !function(){"use strict";var t={};t.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(t){if("object"==typeof window)return window}}();var e="object"==typeof globalThis?globalThis:"object"==t
2024-03-18 16:22:43 UTC	16384	IN	Data Raw: 74 61 72 74 65 64 2e 20 43 61 6e 6e 6f 74 20 73 65 6e 64 20 6f 62 6a 65 63 74 73 22 29 3b 65 6c 73 65 7b 76 61 72 20 6f 3d 74 68 69 73 2e 63 6f 6e 76 65 72 74 28 74 29 2c 69 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6f 29 2c 61 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 2e 5f 75 73 65 58 48 52 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 72 2c 6f 2c 69 29 7b 76 61 72 20 61 2c 73 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 3d 21 30 2c 75 2e 61 62 6f 72 74 28 29 7d 29 2c 72 29 2c 75 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 75 2e 6f 70 65 6e 28 22 50 4f 53 54 22 2c 65 29 2c 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 51 28 51 28 7b 7d 2c 7b 41 63 63 65 70 Data Ascii: tarted. Cannot send objects");else{var o=this.convert(t),i=JSON.stringify(o),a=new Promise((function(t,e){r._useXHR?function(t,e,n,r,o,i){var a,s=setTimeout((function(){a=!0,u.abort()}),r),u=new XMLHttpRequest;u.open("POST",e),Object.entries(Q(Q({},{Accep
2024-03-18 16:22:43 UTC	16384	IN	Data Raw: 55 65 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 2e 73 65 74 56 61 6c 75 65 28 4d 65 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 46 65 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 64 65 6c 65 74 65 56 61 6c 75 65 28 4d 65 29 7d 76 61 72 20 6a 65 2c 42 65 2c 6b 65 3d 22 70 72 6f 70 61 67 61 74 69 6f 6e 22 2c 47 65 3d 6e 65 77 20 49 65 2c 58 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 74 68 69 73 2e 63 72 65 61 74 65 42 61 67 67 61 67 65 3d 54 2c 74 68 69 73 2e 67 65 74 42 61 67 67 61 67 65 3d 44 65 2c 74 68 69 73 2e 73 65 74 42 61 67 67 61 67 65 3d 55 65 2c 74 68 69 73 2e 64 65 6c 65 74 65 42 61 67 67 61 67 65 3d 46 65 7d 72 65 74 75 72 6e 20 74 2e 67 65 74 49 6e 73 74 61 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e Data Ascii: Ue(t,e){return t.setValue(Me,e)}function Fe(t){return t.deleteValue(Me)}var je,Be,ke="propagation",Ge=new Ie,Xe=function(){function t(){this.createBaggage=T,this.getBaggage=De,this.setBaggage=Ue,this.deleteBaggage=Fe}return t.getInstance=function(){return
2024-03-18 16:22:43 UTC	16384	IN	Data Raw: 54 45 5f 56 41 4c 55 45 5f 4c 45 4e 47 54 48 5f 4c 49 4d 49 54 2c 61 74 74 72 69 62 75 74 65 43 6f 75 6e 74 4c 69 6d 69 74 3a 42 28 29 2e 4f 54 45 4c 5f 53 50 41 4e 5f 41 54 54 52 49 42 55 54 45 5f 43 4f 55 4e 54 5f 4c 49 4d 49 54 2c 6c 69 6e 6b 43 6f 75 6e 74 4c 69 6d 69 74 3a 42 28 29 2e 4f 54 45 4c 5f 53 50 41 4e 5f 4c 49 4e 4b 5f 43 4f 55 4e 54 5f 4c 49 4d 49 54 2c 65 76 65 6e 74 43 6f 75 6e 74 4c 69 6d 69 74 3a 42 28 29 2e 4f 54 45 4c 5f 53 50 41 4e 5f 45 56 45 4e 54 5f 43 4f 55 4e 54 5f 4c 49 4d 49 54 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 56 6e 28 74 29 7b 73 77 69 74 63 68 28 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 42 28 29 29 2c 74 2e 4f 54 45 4c 5f 54 52 41 43 45 53 5f 53 41 4d 50 4c 45 52 29 7b 63 61 73 65 20 53 2e 41 6c 77 61 79 73 4f 6e 3a Data Ascii: TE_VALUE_LENGTH_LIMIT,attributeCountLimit:B().OTEL_SPAN_ATTRIBUTE_COUNT_LIMIT,linkCountLimit:B().OTEL_SPAN_LINK_COUNT_LIMIT,eventCountLimit:B().OTEL_SPAN_EVENT_COUNT_LIMIT}}}function Vn(t){switch(void 0===t&&(t=B()),t.OTEL_TRACES_SAMPLER){case S.AlwaysOn:
2024-03-18 16:22:43 UTC	16013	IN	Data Raw: 6f 6e 2e 66 6f 72 6d 61 73 73 65 6d 62 6c 79 22 7d 28 69 72 7c 7c 28 69 72 3d 7b 7d 29 29 3b 76 61 72 20 6c 72 2c 66 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 74 68 69 73 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 4b 65 79 3d 22 6f 70 65 6e 74 65 6c 65 6d 65 74 72 79 2f 73 65 73 73 69 6f 6e 22 2c 74 68 69 73 2e 69 64 47 65 6e 65 72 61 74 6f 72 3d 6e 65 77 20 7a 6e 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 53 65 73 73 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 74 68 69 73 2e 67 65 74 53 74 6f 72 61 67 65 4b 65 79 28 74 2c 65 29 29 3b 69 66 28 6e 29 7b 76 61 72 20 72 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 Data Ascii: on.formassembly"}(ir\|\|(ir={}));var lr,fr=function(){function t(){this.sessionStorageKey="opentelemetry/session",this.idGenerator=new zn}return t.prototype.getSession=function(t,e){var n=localStorage.getItem(this.getStorageKey(t,e));if(n){var r=JSON.parse(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.4	50242	35.170.17.215	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:43 UTC	644	OUT	GET /js/iframe_message_helper_internal.js?v=2 HTTP/1.1 Host: indwes.tfaforms.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://indwes.tfaforms.net/56 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: FORMASSEMBLY=6a4809387c058e25edd85f81ecc72a5f; FASRV=8e78f24973a4e556
2024-03-18 16:22:43 UTC	348	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:43 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 21277 Connection: close server: nginx last-modified: Fri, 01 Mar 2024 16:57:34 GMT etag: "65e208fe-531d" strict-transport-security: max-age=31536000; includeSubDomains; preload x-fa-app: 20-104 accept-ranges: bytes
2024-03-18 16:22:43 UTC	16036	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 54 68 69 73 20 73 63 72 69 70 74 20 6d 75 73 74 20 62 65 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 61 20 46 6f 72 6d 41 73 73 65 6d 62 6c 79 20 66 6f 72 6d 2e 0a 20 2a 20 57 68 65 6e 20 6c 6f 61 64 65 64 20 69 6e 20 61 6e 20 49 46 52 41 4d 45 2c 20 69 74 20 77 69 6c 6c 20 63 6f 6e 74 69 6e 75 6f 75 73 6c 79 20 73 65 6e 64 20 69 74 73 20 75 70 64 61 74 65 64 0a 20 2a 20 68 65 69 67 68 74 20 73 6f 20 74 68 61 74 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 63 61 6e 20 61 64 6a 75 73 74 20 49 46 52 41 4d 45 20 68 65 69 67 68 74 20 74 6f 20 6d 61 74 63 68 0a 20 2a 20 69 74 20 63 6f 6e 74 65 6e 74 27 73 20 68 65 69 67 68 74 2e 0a 20 2a 0a 20 2a 20 54 68 65 20 70 6f 73 74 69 6e 67 20 69 73 20 64 6f 6e 65 20 74 68 72 6f 75 67 68 20 61 20 63 72 Data Ascii: /** * This script must be included in a FormAssembly form. * When loaded in an IFRAME, it will continuously send its updated * height so that the container can adjust IFRAME height to match * it content's height. * * The posting is done through a cr
2024-03-18 16:22:43 UTC	5241	IN	Data Raw: 65 20 74 68 69 73 2c 20 77 65 20 6d 75 73 74 20 63 68 65 63 6b 20 69 66 20 61 6e 79 20 6f 66 20 74 68 65 20 68 65 69 67 68 74 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 68 61 73 20 63 68 61 6e 67 65 64 20 28 65 76 65 6e 20 69 66 20 74 68 65 69 72 20 6d 61 78 69 6d 75 6d 20 76 61 6c 75 65 20 68 61 73 20 6e 6f 74 20 62 65 65 6e 20 63 68 61 6e 67 65 64 29 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 4e 6f 77 2c 20 69 66 20 74 68 65 72 65 20 61 72 65 20 61 6e 79 20 63 68 61 6e 67 65 64 20 68 65 69 67 68 74 73 2c 20 6c 65 74 20 75 73 20 66 69 6e 64 20 74 68 65 69 72 20 6d 61 78 69 6d 75 6d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 76 61 6c 75 65 2e 20 49 66 20 74 68 69 73 20 76 61 6c 75 65 20 69 73 20 73 6d 61 6c 6c 65 72 20 74 68 61 6e 20 Data Ascii: e this, we must check if any of the heights // has changed (even if their maximum value has not been changed). // Now, if there are any changed heights, let us find their maximum // value. If this value is smaller than

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.4	50236	142.251.40.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:43 UTC	1246	OUT	GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:44 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:22:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.4	50243	35.244.154.8	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:43 UTC	759	OUT	GET /1000.gif?memo=CPy7KxIwCiwIARCFpQoaJDI2RkM1QkM0LUMwRUEtNDgxRS1BQzZELTI5N0VGNDkzMEUzNRAAGg0I09ThrwYSBQjoBxAAQgBKAA HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=to/OuTGAApiQL97C9UEJZf5XeWOA0Xxfg28Ykd/FzJ0=; pxrc=CAA=
2024-03-18 16:22:44 UTC	751	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://pippio.com/api/sync?pid=5324&it=1&iv=5737758c10a90c387ccf8a08ce2db777776e72e4674bede82ca0e8392d345f71791426b5417dce21&_=2 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=1U/u0c8QkPWQL97C9UEJZf5XeWOA0Xxfg28Ykd/FzJ0=; Path=/; Domain=rlcdn.com; Expires=Tue, 18 Mar 2025 16:22:44 GMT; Secure; SameSite=None Set-Cookie: pxrc=CNTU4a8GEgUI6AcQABIFCOhHEAA=; Path=/; Domain=rlcdn.com; Expires=Fri, 17 May 2024 16:22:44 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Mon, 18 Mar 2024 16:22:44 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.4	50247	104.18.11.207	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:44 UTC	613	OUT	GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://indwes.tfaforms.net/uploads/themes/theme-55.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:44 UTC	931	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:44 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"269550530cc127b6aa5a35925a7de6ce" Last-Modified: Mon, 25 Jan 2021 22:04:55 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/31/2023 18:51:50 CDN-EdgeStorageId: 871 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 89a80850cf648016f7f038802a45eac9 CDN-Cache: HIT CF-Cache-Status: HIT Age: 434989 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8666902e2d7e424d-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:22:44 UTC	438	IN	Data Raw: 37 39 31 38 0d 0a 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 37 Data Ascii: 7918/! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7
2024-03-18 16:22:44 UTC	1369	IN	Data Raw: 2d 77 65 62 66 6f 6e 74 2e 77 6f 66 66 3f 76 3d 34 2e 37 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 74 74 66 3f 76 3d 34 2e 37 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 73 76 67 3f 76 3d 34 2e 37 2e 30 23 66 6f 6e 74 61 77 65 73 6f 6d 65 72 65 67 75 6c 61 72 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 66 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 3a 6e Data Ascii: -webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:n
2024-03-18 16:22:44 UTC	1369	IN	Data Raw: 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 39 30 7b 2d 6d Data Ascii: otate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}@keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}.fa-rotate-90{-m
2024-03-18 16:22:44 UTC	1369	IN	Data Raw: 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 61 2d 73 74 61 63 6b 2d 31 78 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 2e 66 61 2d 73 74 61 63 6b 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 69 6e 76 65 72 73 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 66 61 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 30 22 7d 2e 66 61 2d 6d 75 73 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 31 22 7d 2e 66 61 2d 73 65 61 72 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 32 22 7d 2e 66 61 2d 65 6e 76 65 6c 6f 70 65 2d 6f 3a 62 65 66 Data Ascii: position:absolute;left:0;width:100%;text-align:center}.fa-stack-1x{line-height:inherit}.fa-stack-2x{font-size:2em}.fa-inverse{color:#fff}.fa-glass:before{content:"\f000"}.fa-music:before{content:"\f001"}.fa-search:before{content:"\f002"}.fa-envelope-o:bef
2024-03-18 16:22:44 UTC	1369	IN	Data Raw: 66 61 2d 66 6c 61 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 34 22 7d 2e 66 61 2d 68 65 61 64 70 68 6f 6e 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 35 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 36 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 37 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 38 22 7d 2e 66 61 2d 71 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 39 22 7d 2e 66 61 2d 62 61 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 61 22 7d 2e 66 61 Data Ascii: fa-flag:before{content:"\f024"}.fa-headphones:before{content:"\f025"}.fa-volume-off:before{content:"\f026"}.fa-volume-down:before{content:"\f027"}.fa-volume-up:before{content:"\f028"}.fa-qrcode:before{content:"\f029"}.fa-barcode:before{content:"\f02a"}.fa
2024-03-18 16:22:44 UTC	1369	IN	Data Raw: 2e 66 61 2d 66 61 73 74 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 39 22 7d 2e 66 61 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 61 22 7d 2e 66 61 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 62 22 7d 2e 66 61 2d 70 61 75 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 63 22 7d 2e 66 61 2d 73 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 64 22 7d 2e 66 61 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 65 22 7d 2e 66 61 2d 66 61 73 74 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 30 22 7d 2e 66 61 2d 73 74 Data Ascii: .fa-fast-backward:before{content:"\f049"}.fa-backward:before{content:"\f04a"}.fa-play:before{content:"\f04b"}.fa-pause:before{content:"\f04c"}.fa-stop:before{content:"\f04d"}.fa-forward:before{content:"\f04e"}.fa-fast-forward:before{content:"\f050"}.fa-st
2024-03-18 16:22:44 UTC	1369	IN	Data Raw: 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 30 22 7d 2e 66 61 2d 77 61 72 6e 69 6e 67 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 74 72 69 61 6e 67 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 31 22 7d 2e 66 61 2d 70 6c 61 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 32 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 33 22 7d 2e 66 61 2d 72 61 6e 64 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 34 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 35 22 7d 2e 66 61 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 36 22 Data Ascii: {content:"\f070"}.fa-warning:before,.fa-exclamation-triangle:before{content:"\f071"}.fa-plane:before{content:"\f072"}.fa-calendar:before{content:"\f073"}.fa-random:before{content:"\f074"}.fa-comment:before{content:"\f075"}.fa-magnet:before{content:"\f076"
2024-03-18 16:22:44 UTC	1369	IN	Data Raw: 3a 22 5c 66 30 39 35 22 7d 2e 66 61 2d 73 71 75 61 72 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 36 22 7d 2e 66 61 2d 62 6f 6f 6b 6d 61 72 6b 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 37 22 7d 2e 66 61 2d 70 68 6f 6e 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 38 22 7d 2e 66 61 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 39 22 7d 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 66 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 61 22 7d 2e 66 61 2d 67 69 74 68 75 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 62 22 7d 2e 66 61 2d 75 Data Ascii: :"\f095"}.fa-square-o:before{content:"\f096"}.fa-bookmark-o:before{content:"\f097"}.fa-phone-square:before{content:"\f098"}.fa-twitter:before{content:"\f099"}.fa-facebook-f:before,.fa-facebook:before{content:"\f09a"}.fa-github:before{content:"\f09b"}.fa-u
2024-03-18 16:22:44 UTC	1369	IN	Data Raw: 6f 72 65 2c 2e 66 61 2d 66 6c 6f 70 70 79 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 37 22 7d 2e 66 61 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 38 22 7d 2e 66 61 2d 6e 61 76 69 63 6f 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 65 6f 72 64 65 72 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 39 22 7d 2e 66 61 2d 6c 69 73 74 2d 75 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 61 22 7d 2e 66 61 2d 6c 69 73 74 2d 6f 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 62 22 7d 2e 66 61 2d 73 74 72 69 6b 65 74 68 72 6f 75 67 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 63 22 7d Data Ascii: ore,.fa-floppy-o:before{content:"\f0c7"}.fa-square:before{content:"\f0c8"}.fa-navicon:before,.fa-reorder:before,.fa-bars:before{content:"\f0c9"}.fa-list-ul:before{content:"\f0ca"}.fa-list-ol:before{content:"\f0cb"}.fa-strikethrough:before{content:"\f0cc"}
2024-03-18 16:22:44 UTC	1369	IN	Data Raw: 39 22 7d 2e 66 61 2d 70 61 73 74 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 6c 69 70 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 61 22 7d 2e 66 61 2d 6c 69 67 68 74 62 75 6c 62 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 62 22 7d 2e 66 61 2d 65 78 63 68 61 6e 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 63 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 64 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 75 70 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 65 22 7d 2e 66 61 2d 75 73 65 72 2d 6d 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 30 22 7d 2e 66 61 2d 73 74 Data Ascii: 9"}.fa-paste:before,.fa-clipboard:before{content:"\f0ea"}.fa-lightbulb-o:before{content:"\f0eb"}.fa-exchange:before{content:"\f0ec"}.fa-cloud-download:before{content:"\f0ed"}.fa-cloud-upload:before{content:"\f0ee"}.fa-user-md:before{content:"\f0f0"}.fa-st

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.4	50249	18.238.55.69	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:44 UTC	482	OUT	GET /syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent= HTTP/1.1 Host: synchroscript.deliveryengine.adswizz.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:44 UTC	312	IN	HTTP/1.1 200 OK Server: CloudFront Date: Mon, 18 Mar 2024 16:22:44 GMT Content-Length: 0 Connection: close X-Cache: Error from cloudfront Via: 1.1 f52a6d89da5cd85d46c2c4e4af9acf1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: kZTTvQyIqtlfcp8bKsU2_SjHzOTHlG0qIJ3crZFZc6hZG7Rlzz6yyA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.4	50248	107.23.193.229	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:44 UTC	718	OUT	GET /map/c=14701/tp=MTAI/tpid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35/gdpr=0/gdpr_consent= HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=cd7195d98b33730cda0d063b9003130e
2024-03-18 16:22:44 UTC	314	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:44 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.57.49 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-03-18 16:22:44 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.4	50250	107.178.254.65	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:44 UTC	680	OUT	GET /api/sync?pid=5324&it=1&iv=5737758c10a90c387ccf8a08ce2db777776e72e4674bede82ca0e8392d345f71791426b5417dce21&_=2 HTTP/1.1 Host: pippio.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:44 UTC	959	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://px.ads.linkedin.com/db_sync?pid=10339&puuid=5737758c10a90c387ccf8a08ce2db777776e72e4674bede82ca0e8392d345f71791426b5417dce21&rand=00282941 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: did=4rRGlOIxzUDuSNPR; Path=/; Domain=pippio.com; Expires=Tue, 18 Mar 2025 16:22:44 GMT; Secure; SameSite=None Set-Cookie: didts=1710778964; Path=/; Domain=pippio.com; Expires=Tue, 18 Mar 2025 16:22:44 GMT; Secure; SameSite=None Set-Cookie: nnls=; Path=/; Domain=pippio.com; Expires=Fri, 17 May 2024 16:22:44 GMT; Secure; SameSite=None Set-Cookie: pxrc=CNTU4a8GEgYIgr0rEAA=; Path=/; Domain=pippio.com; Expires=Fri, 17 May 2024 16:22:44 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Mon, 18 Mar 2024 16:22:44 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.4	50252	34.111.113.62	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:44 UTC	789	OUT	GET /idsync/ex/receive?partner_id=3203&partner_device_id=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1710778931516; TapAd_DID=da9fa8fc-3c38-47c1-bced-e79257211d8c; TapAd_3WAY_SYNCS=1!1888
2024-03-18 16:22:44 UTC	1101	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:44 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1710778931516;Expires=Fri, 17 May 2024 16:22:44 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=da9fa8fc-3c38-47c1-bced-e79257211d8c;Expires=Fri, 17 May 2024 16:22:44 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!1888;Expires=Fri, 17 May 2024 16:22:44 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:44 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.4	50251	35.170.17.215	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:44 UTC	702	OUT	GET /dist/form-builder/5.0.0/wforms-jsonly.css?v=8b5c9ffd0b6fc88dc72529725004f6b69b9e0ae8 HTTP/1.1 Host: indwes.tfaforms.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://indwes.tfaforms.net/56 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: FORMASSEMBLY=6a4809387c058e25edd85f81ecc72a5f; FASRV=8e78f24973a4e556
2024-03-18 16:22:44 UTC	316	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:44 GMT Content-Type: text/css Content-Length: 755 Connection: close server: nginx last-modified: Fri, 01 Mar 2024 17:40:29 GMT etag: "65e2130d-2f3" strict-transport-security: max-age=31536000; includeSubDomains; preload x-fa-app: 20-104 accept-ranges: bytes
2024-03-18 16:22:44 UTC	755	IN	Data Raw: 0a 0a 2f 2a 20 41 63 63 65 73 73 69 62 6c 69 74 79 20 52 65 6c 61 74 65 64 20 52 75 6c 65 73 20 2a 2f 0a 2f 2a 20 54 68 65 73 65 20 61 72 65 20 74 68 65 20 72 75 6c 65 73 20 74 68 61 74 20 73 68 6f 75 6c 64 20 2a 6e 6f 74 2a 20 61 70 70 6c 79 20 69 66 20 6a 61 76 61 73 63 72 69 70 74 20 69 73 20 64 69 73 61 62 6c 65 64 2e 20 2a 2f 0a 0a 0a 2e 6f 66 66 73 74 61 74 65 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 68 74 6d 6c 20 2e 77 46 6f 72 6d 20 66 6f 72 6d 20 2e 77 66 50 61 67 65 2c 20 68 74 6d 6c 20 2e 77 46 6f 72 6d 20 66 6f 72 6d 20 2e 77 66 48 69 64 65 53 75 62 6d 69 74 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 68 74 6d 6c 20 Data Ascii: /* Accessiblity Related Rules // These are the rules that should not apply if javascript is disabled. */.offstate { display: none !important;}html .wForm form .wfPage, html .wForm form .wfHideSubmit { display: none !important;}html

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.4	50254	52.207.168.130	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:44 UTC	482	OUT	GET /map/c=14701/tp=MTAI/tpid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35/gdpr=0/gdpr_consent= HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=cd7195d98b33730cda0d063b9003130e
2024-03-18 16:22:44 UTC	315	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:44 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.50.110 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-03-18 16:22:44 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.4	50255	142.251.35.162	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:44 UTC	2693	OUT	GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5884294479391638&output=html&h=90&slotname=3654094576&adk=228266070&adf=3493768505&pi=t.ma~as.3654094576&w=970&url=https%3A%2F%2Fbrowser-update.org%2F&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1710778930134&bpp=1204&bdt=1441&idt=2890&shv=r20240313&mjsv=m202403130201&ptt=5&saldr=sd&correlator=966864692783&frm=24&ife=3&pv=2&ga_vid=751177015.1710778933&ga_sid=1710778933&ga_hid=640648971&ga_fc=0&nhd=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=-12245933&bih=-12245933&isw=970&ish=90&ifk=1017635361&scr_x=-12245933&scr_y=-12245933&eid=44759875%2C44759926%2C44759842%2C31081793%2C95325975%2C95327950%2C95327954%2C31081901%2C95320376%2C95322388%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=862165079531677&tmod=1386792793&uas=0&nvt=1&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C970%2C90&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=1.bp47bps3drp4&fsb=1&dtd=2937 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:44 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:22:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.4	50256	142.251.35.162	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:44 UTC	1698	OUT	GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:44 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:22:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.4	50259	8.28.7.84	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:44 UTC	2220	OUT	GET /AdServer/SPug?partnerID=156011&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; pi=156011:4; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; SPugT=1710728775; KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; chkChromeAb67Sec=3; DPSync3=1711324800%3A265%7C1711756800%3A257%7C1711929600%3A262_256_263_261_260_259_201_258%7C1710806400%3A248_255; SyncRTB3=1711929600%3A22_8_166_104_54_48_13_165_231_178_249_250_3_220_71_21%7C1711324800%3A15_223; KRTBCOOKIE_153=1923-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&19420-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&22979-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&23462-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF; PugT=1710778961
2024-03-18 16:22:44 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Mar 2024 16:22:44 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1710778964; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 16:22:44 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-18 16:22:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.4	50258	38.68.201.140	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:44 UTC	604	OUT	GET /sn.ashx?&gdpr=0&gdpr_consent= HTTP/1.1 Host: pmp.mxptint.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:44 UTC	720	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R35CA5_112946CAA_57D5D193&r=https://pmp.mxptint.net/sn.ashx?ak=1 P3P: CP="NON CUR ADM DEVo PSAo PSDo OUR IND UNI COM NAV DEM STA PRE" P3P: CP="NON CUR ADM DEVo PSAo PSDo OUR IND UNI COM NAV DEM STA PRE" Set-Cookie: mxpim=R35CA5_112946CAA_57D5D193.1.000000000000000065F86A54; domain=mxptint.net; expires=Wed, 18-Mar-2026 16:22:44 GMT; path=/; secure; SameSite=None Date: Mon, 18 Mar 2024 16:22:44 GMT Connection: close Content-Length: 302 Strict-Transport-Security: max-age=-393783764; includeSubDomains
2024-03-18 16:22:44 UTC	302	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 71 63 7a 30 78 4a 6d 4e 76 5a 47 55 39 4d 6a 63 30 4e 43 5a 30 62 44 30 78 4e 54 63 32 4f 44 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 52 33 35 43 41 35 5f 31 31 32 39 34 36 43 41 41 5f 35 37 44 35 44 31 39 33 26 61 6d 70 3b 72 3d 68 74 74 70 73 3a 2f 2f 70 6d 70 2e 6d 78 70 74 69 6e 74 2e 6e 65 74 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R35CA5_112946CAA_57D5D193&r=https://pmp.mxptint.net

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.4	50257	34.197.235.192	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:44 UTC	615	OUT	GET /CookieSyncPubMatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb.adentifi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:45 UTC	128	IN	HTTP/1.1 204 No Content Date: Mon, 18 Mar 2024 16:22:45 GMT Content-Type: text/plain Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.4	50261	35.170.17.215	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:45 UTC	792	OUT	GET /forms/get_image/1/MqqGsVxq5heqLeiklT0qTYKa21Fex14qTlVGnmtc08YnIBwpyPMWpGlSrWqrBYae-MasterLogo_white.png HTTP/1.1 Host: indwes.tfaforms.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://indwes.tfaforms.net/uploads/themes/theme-55.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: FORMASSEMBLY=6a4809387c058e25edd85f81ecc72a5f; FASRV=8e78f24973a4e556
2024-03-18 16:22:45 UTC	555	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:45 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close server: nginx p3p: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM" set-cookie: FORMASSEMBLY=6a4809387c058e25edd85f81ecc72a5f; HttpOnly=1; Path=/; SameSite=None; Secure etag: "5fdd8a64a2f66037a2a16f5046819683" last-modified: Tue, 27 Sep 2022 14:45:33 GMT expires: Thu, 16 Mar 2034 16:22:49 GMT cache-control: max-age=315360000 strict-transport-security: max-age=31536000; includeSubDomains; preload x-fa-app: 20-104
2024-03-18 16:22:45 UTC	15829	IN	Data Raw: 37 64 64 32 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0a 4a 00 00 05 51 08 06 00 00 00 c5 56 47 0a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 6e 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 03 01 12 00 03 00 00 00 01 00 01 00 00 01 31 00 02 00 00 00 11 00 00 00 32 87 69 00 04 00 00 00 01 00 00 00 44 00 00 00 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 0a 4a a0 03 00 04 00 00 00 01 00 00 05 51 00 00 00 00 d4 6f 7f ab 00 00 01 cb 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 58 4d 50 20 43 6f Data Ascii: 7dd2PNGIHDRJQVGsRGBneXIfMM*12iDAdobe ImageReadyJQoiTXtXML:com.adobe.xmp<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Co
2024-03-18 16:22:45 UTC	16384	IN	Data Raw: 97 03 c0 24 04 08 10 20 d0 43 a0 3c 39 49 e4 eb ee 93 39 db 9d 00 01 02 04 08 10 98 5b c0 1d 14 e6 ae af ec 08 10 20 40 80 40 33 01 8d 92 cd 68 0d 4c 80 00 01 02 bd 04 92 56 57 78 b0 99 a0 17 e5 af 79 82 57 7a fa 95 83 1f 08 10 20 40 80 c0 0d 81 a4 d5 11 66 6e 6a 28 37 6a 33 fa 43 49 c7 ce ab a5 93 46 a3 1f 51 e2 23 40 80 40 3f 81 d2 6f aa a7 66 aa 4f ed 6d 67 02 04 08 10 20 40 80 c0 60 02 61 17 5c 0e a6 27 1c 02 04 08 10 20 d0 46 40 a3 64 1b 57 a3 12 20 40 80 40 5f 81 d2 77 3a b3 11 20 40 80 00 01 02 04 9a 0b 94 e6 33 3c 3f 41 dd 3b 44 f0 c5 18 bb 73 dd 6b 73 d4 f6 49 17 11 1d 95 b3 71 08 10 20 40 60 0a 81 1f 41 59 cc 7c 41 4b 50 19 84 4a 80 00 01 02 07 0b d4 83 c7 33 1c 01 02 04 08 10 20 40 60 38 01 8d 92 c3 95 44 40 04 08 10 20 30 b1 40 9d 38 37 a9 11 Data Ascii: $ C<9I9[ @@3hLVWxyWz @fnj(7j3CIFQ#@@?ofOmg @`a\' F@dW @@_w: @3<?A;DsksIq @`AY\|AKPJ3 @`8D@ 0@87
2024-03-18 16:22:45 UTC	5	IN	Data Raw: 40 80 00 0d 0a Data Ascii: @
2024-03-18 16:22:45 UTC	16384	IN	Data Raw: 37 66 66 30 0d 0a 81 27 02 de 06 f0 04 67 cb 2c 03 25 b7 28 59 86 00 01 02 04 08 10 20 40 80 00 01 02 04 08 2c 22 70 7b fa d1 6b 96 54 5d d8 cf 52 29 71 12 20 40 20 b5 40 4d 1d bd e0 09 10 20 40 80 00 01 02 04 08 c4 13 a8 f1 42 12 11 01 02 04 52 08 94 04 51 d6 c8 31 1a 28 19 b9 3a 62 9b 46 20 d3 85 c6 69 d0 25 42 80 00 01 02 5e 91 61 1b 20 40 80 00 81 23 02 f5 c8 4a 17 ae e3 0e da 0b f1 75 4d 80 00 81 a3 02 b7 81 ee e5 e8 ba a3 d7 4b f6 fa e4 d1 3c fa 7b 20 90 ec 7c b0 f3 07 0f ea 68 32 01 02 04 08 10 58 49 60 e4 3e ba 7d ec 95 b6 2c b9 12 20 b0 9a 40 f4 ef 78 03 25 57 db 22 e7 c9 d7 c9 9b 79 6a 29 13 02 04 08 10 20 40 80 00 01 02 04 e2 08 64 7b 25 5d 89 43 27 12 02 04 08 10 d8 21 50 76 2c 6b 51 02 d9 04 6a 96 80 47 0e 88 c8 62 22 ce 39 05 92 0d 5e 9e b3 Data Ascii: 7ff0'g,%(Y @,"p{kT]R)q @ @M @BRQ1(:bF i%B^a @#JuMK<{ \|h2XI`>}, @x%W"yj) @d{%]C'!Pv,kQjGb"9^
2024-03-18 16:22:45 UTC	16376	IN	Data Raw: 2c 27 ff 6e e7 54 0c 94 9c 7d 6b 94 1f 01 02 5b 04 ea 96 85 82 2c e3 78 3f 48 21 84 41 a0 93 80 df f1 4e b0 9a 25 90 44 20 e2 b5 86 5f 74 cb 1e 37 26 1c 87 90 64 53 17 26 01 02 04 d6 13 f0 ea ed f5 6a de 33 e3 d2 b3 71 6d 13 20 40 80 00 81 84 02 25 61 cc 42 26 40 80 00 81 ff 0a 64 bb b1 6a d9 93 e5 36 58 02 4f 04 a2 5e dc 7a 12 b2 59 04 08 10 58 57 c0 4d 2a eb d6 5e e6 6b 0b 04 bd b1 a5 ac 5d 15 d9 13 20 40 20 9c 40 09 17 91 80 08 10 20 f0 55 c0 cd 36 5f 4d c2 4d 31 50 32 5c 49 04 b4 aa 80 3b 61 56 ad bc bc 09 10 68 28 50 1b b6 a5 29 02 04 08 10 20 50 b3 10 dc 8e 25 5e b3 c4 2a 4e 02 23 05 82 5e 74 1f 49 a0 2f 02 04 08 64 12 a8 59 82 75 1e 37 4b a5 c4 49 80 00 01 02 04 08 1c 14 a8 07 d7 b3 1a 01 02 04 46 09 44 7d c8 41 19 05 70 b0 9f 7a 70 bd a9 56 33 50 Data Ascii: ,'nT}k[,x?H!AN%D _t7&dS&j3qm @%aB&@dj6XO^zYXWM^k] @ @ U6_MM1P2\I;aVh(P) P%^N#^tI/dYu7KIFD}ApzpV3P
2024-03-18 16:22:45 UTC	7694	IN	Data Raw: 31 65 30 36 0d 0a a2 a2 dd 3f d8 d5 f3 df 5f 54 8b 04 8e 17 68 c7 77 f1 5a 0f 61 cf 22 5e 4b d6 d6 87 0b 18 28 79 38 b1 0e 08 bc 2c d0 5f 6e 61 ff 06 da fe 4d 6a 91 00 81 b3 04 3c 60 3e 4b 5a 3f 04 08 10 98 5a 20 e9 01 fc f7 42 b4 a9 ab 21 39 02 2f 08 54 7c 03 c7 9d 74 da 9d cf 7c 44 80 00 01 02 17 81 b0 e3 fa cb 6f 09 56 74 02 04 4a 0a 24 5d 2f b6 b0 e3 66 c9 82 0b 8a 00 81 21 02 ff 0c e9 55 a7 04 08 10 20 40 20 5c c0 40 c9 f0 02 0a ff 71 81 c0 99 78 49 37 15 1e 2f 88 2d 08 ac 25 50 e5 c2 b5 ad c5 2e 5b 02 04 08 10 d8 5b 20 e9 41 52 e0 f9 ff de e5 d2 1e 81 7b 02 fd de 87 05 3f 33 a0 a6 60 51 84 44 80 40 29 81 5e 2a 1a c1 10 20 b0 a4 40 d2 f5 e2 a5 40 ce 2f 97 dc 4b 25 3d 89 40 9f 24 0f 69 10 20 b0 8e 40 95 e7 c4 69 e2 3d 2d 60 f1 d6 16 30 50 b2 76 7d 44 Data Ascii: 1e06?_ThwZa"^K(y8,_naMj<`>KZ?Z B!9/T\|t\|DoVtJ$]/f!U @ \@qxI7/-%P.[[ AR{?3`QD@)^* @@/K%=@$i @i=-`0Pv}D
2024-03-18 16:22:45 UTC	16384	IN	Data Raw: 37 66 65 63 0d 0a c8 85 9b 24 60 00 cd e1 d5 6a 87 f7 a0 03 02 04 08 dc 16 e8 b7 3f f2 09 01 02 04 0e 17 88 b9 a7 f9 c4 04 bb 98 dc 0e af b2 0e 08 04 0a 14 1d c4 dd 02 29 f7 0c d9 84 99 3d 35 b5 45 e0 1c 81 ea f7 dd fb 39 0c 7a 21 f0 a7 80 81 92 7f 7a f8 2d 5b 20 ea 04 2d ec 61 57 f6 9e 21 7a 02 04 08 10 20 40 80 c0 5a 02 ff a6 a4 fb 73 36 7e 4b 89 57 9c 04 06 08 a4 3d e0 6d 03 8c 74 49 80 00 81 64 81 a4 f3 b6 6f c9 d0 62 27 40 e0 aa 40 bf ba d4 c2 43 04 9e 18 ec 79 48 1c 1a 25 40 a0 bc 40 da 7d 80 f2 a0 02 24 b0 b0 40 2b 9e 7b cc f5 70 71 47 e1 3d 28 60 a0 e4 83 60 56 27 40 80 00 01 02 85 05 aa cf 0c 2a 4c 27 34 02 04 08 cc 23 10 36 21 a7 cd 23 2f 13 02 87 08 f4 43 5a 3d a0 51 0f 7e 0f 40 d5 24 01 02 2b 08 f4 a0 24 dd 73 08 2a 96 50 09 6c 11 28 fa c6 b6 Data Ascii: 7fec$`j?)=5E9z!z-[ -aW!z @Zs6~KW=mtIdob'@@CyH%@@}$@+{pqG=(``V'@L'4#6!#/CZ=Q~@$+$sPl(
2024-03-18 16:22:45 UTC	16372	IN	Data Raw: 72 01 5f bb bd f9 09 d0 37 6f 51 83 04 08 10 20 40 80 00 81 71 04 7a 4a 2a 1e c0 90 52 29 71 12 88 14 a8 3a e1 b9 45 6a 6e 10 74 ca c2 cc 0d 52 d5 04 01 02 04 08 10 78 5a c0 44 c9 a7 e9 1c 38 ba 40 d8 40 db e8 e5 90 1f 81 d5 02 85 56 79 b7 d5 c9 68 20 41 a0 27 04 29 46 02 04 08 10 20 30 88 40 da 57 c0 b4 00 f7 aa 03 5e 01 74 42 24 40 80 00 01 02 04 26 10 48 ba 56 6a 45 eb d1 0b c6 95 f6 b0 8f 82 84 42 22 30 8f 40 a1 31 a7 79 d0 65 4a e0 79 81 92 f7 0e 43 26 37 f7 e7 d9 1d 49 a0 a6 80 89 92 35 eb 22 2a 02 d7 04 3c 85 ee 9a 8a 6d 04 08 10 28 28 60 b2 7d c1 a2 08 89 00 01 02 04 46 16 e8 29 c9 85 dc 00 7d 39 60 c0 27 a6 66 29 e7 96 38 09 10 20 40 80 00 81 e3 04 0e b8 56 da 32 99 92 93 ff dc 3b db b2 c4 da 22 40 80 00 01 02 04 08 ec 23 e0 9a 6d 1f 57 ad 9e 2b Data Ascii: r_7oQ @qzJR)q:EjntRxZD8@@Vyh A')F 0@W^tB$@&HVjEB"0@1yeJyC&7I5"<m((`}F)}9`'f)8 @V2;"@#mW+
2024-03-18 16:22:45 UTC	16384	IN	Data Raw: 35 66 32 66 0d 0a e5 8c 12 27 01 02 04 08 10 20 50 48 20 66 f1 8e 01 f1 42 67 cd f5 50 4c 62 bd ee 62 2b 01 02 04 08 10 48 15 e8 85 03 6f 85 63 fb 3b 34 f7 29 ab 57 48 7c 55 05 4c 94 bc 5e 19 1f b6 ae bb 3c b4 35 65 80 eb a1 64 ec 44 80 00 01 02 04 08 10 20 40 80 00 81 50 81 b0 27 f7 fc 08 60 ee 01 31 0a 91 00 01 02 04 08 10 20 50 4d a0 57 0b e8 4e 3c ed ce 7b de 22 40 80 00 01 02 04 08 10 d8 56 c0 37 b7 6c eb a9 35 02 04 1e 10 30 51 f2 01 24 bb 10 20 40 80 00 81 3d 04 ac f4 d9 43 55 9b 04 08 10 20 40 80 c0 9b 40 cc 93 7b de e2 6d 01 95 73 f3 36 a0 48 47 85 98 f4 c4 29 9f 3b 8e 3a 2b f4 43 80 00 01 02 d7 04 c2 16 ef 78 88 c6 bf 45 ec ff fe e8 27 02 04 08 10 20 40 80 c0 74 02 d5 af 0b fb 74 15 91 30 81 8d 04 4c 94 dc 08 f2 e4 66 d2 06 c0 4e e6 d2 3d 01 02 Data Ascii: 5f2f' PH fBgPLbb+Hoc;4)WH\|UL^<5edD @P'`1 PMWN<{"@V7l50Q$ @=CU @@{ms6HG);:+CxE' @tt0LfN=
2024-03-18 16:22:45 UTC	7991	IN	Data Raw: bc 84 05 08 10 20 40 80 00 01 02 04 08 10 20 40 80 c0 e7 02 e5 f3 c9 7d 4d 75 01 ba af fe 10 0d 01 02 04 08 10 20 40 60 05 81 b2 42 1d 8f 56 51 1f 2d 60 ef cb 8f 98 2c 19 7d fa 1c 89 28 c7 bd f7 ad f6 13 20 40 80 40 3f 02 d3 76 69 d4 a7 48 36 68 49 92 fd ac 6e 22 21 b0 1b 81 74 89 92 b1 31 28 49 7b e7 25 69 dc c2 26 40 80 00 01 02 04 08 10 20 40 80 00 81 fe 04 32 dc 45 ee 67 b7 fb 5b 6f b2 47 54 b3 37 40 fc 04 08 10 20 40 60 07 02 19 f6 53 5d af 99 67 45 1c 71 7f ff 29 ae 43 3e 27 be 16 39 4f cf 2a 85 00 01 02 04 36 15 68 db a1 b6 3d 8a 20 32 ec 57 dd 6b 25 49 f2 5e 39 cb 11 20 f0 90 40 ba 44 c9 68 6d 79 a8 c5 16 26 40 80 00 01 02 b9 05 46 3e 28 ca dd 33 a2 27 40 80 00 01 02 2b 09 64 b9 68 17 4f 99 39 ae 44 a2 9a fd 08 48 6a d8 4f 5f 6b 29 01 02 04 08 24 Data Ascii: @ @}Mu @`BVQ-`,}( @@?viH6hIn"!t1(I{%i&@ @2Eg[oGT7@ @`S]gEq)C>'9O*6h= 2Wk%I^9 @Dhmy&@F>(3'@+dhO9DHjO_k)$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.4	50265	104.17.24.14	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:45 UTC	677	OUT	GET /ajax/libs/font-awesome/4.4.0/fonts/fontawesome-webfont.woff2?v=4.4.0 HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://indwes.tfaforms.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.4.0/css/font-awesome.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:46 UTC	979	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:46 GMT Content-Type: application/octet-stream; charset=utf-8 Content-Length: 64464 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: "5eb03e5f-fbd0" Last-Modified: Mon, 04 May 2020 16:10:07 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 432887 Expires: Sat, 08 Mar 2025 16:22:46 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jJZdQGJ5Jw3xULFMVxZLIk%2FW%2BcAlguyH9eq4LeRHAGiDTdknt8ExSpnZcWnanOmv4YT8oltqqxId12cynhP1R6%2F12rkkzdwhOwGQYNGyheMCDQXTw6j%2BaoK9vGu2GQVE5yTf0%2BzN"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 86669039bdf972a1-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:22:46 UTC	390	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 fb d0 00 0e 00 00 00 02 1b d4 00 00 fb 71 00 04 01 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 85 6a 11 08 0a 87 d9 5c 86 94 58 01 36 02 24 03 93 44 0b 89 72 00 04 20 05 87 08 07 af 37 3f 77 65 62 66 06 5b 66 b3 91 81 d1 ee f6 21 a1 db 10 38 fc cf d6 34 9d c2 8c 44 d8 a5 c1 0b 55 1d a8 61 e3 00 c0 fc bd 66 f6 ff ff ff ff d9 47 45 c6 4c c2 d2 6e 03 00 40 55 55 ff 5f d8 08 8b ac 41 ad 7b a4 84 7b e8 29 29 d8 34 63 c9 15 89 cd 32 69 a7 9a 7c f0 49 9e 4e 9c 95 2f 6c ec 6a c4 a8 12 f5 3a dd dc 6f f0 90 bb 72 a2 c3 41 eb 68 24 57 3c f2 40 c7 33 1b 1e 1c e8 c6 a3 63 e9 2b 56 4e 74 bc d0 87 74 7a df 38 c8 c2 68 b0 e8 3a c5 3a a4 cb 0d 9b 57 36 cf c2 bc 91 95 65 27 5b 54 e1 2c 10 64 Data Ascii: wOF2q?FFTM`j\X6$Dr 7?webf[f!84DUafGELn@UU_A{{))4c2i\|IN/lj:orAh$W<@3c+VNttz8h::W6e'[T,d
2024-03-18 16:22:46 UTC	1369	IN	Data Raw: 97 bf f2 b2 ea b9 a9 86 6f 79 b5 c4 d8 35 23 64 c8 d2 1b fb b4 84 78 be ae 2a de fb 4c 54 55 77 8f a4 1a dd 64 54 2e c0 d3 ee 9c 57 ba 09 3a 13 39 40 db ec 28 1b 04 09 01 45 42 4c 14 95 b0 30 88 54 50 40 b0 7b 66 81 3d 75 73 46 2f 74 73 9b 6e 2e 5c bb 76 5d bf ed 57 ee f7 ab 5f ff f7 e2 5d d0 33 bd 4f d9 03 89 6a db ad a3 22 8c 8f a6 48 ce 26 a1 ff 7e 3f dd 9c b9 41 d0 16 8a b6 42 e1 73 1b 30 a6 d6 93 d1 3f ae 87 35 ad a4 3b 96 92 c3 38 83 14 18 02 28 a9 86 93 8c 77 c7 cb d9 e5 b4 f5 31 fc dc f1 01 f3 00 40 58 25 c5 ce 41 1c 5c 84 cb 38 02 86 a7 b9 fd 5b 52 db d8 60 d4 88 1d a3 46 88 c4 46 d4 8e 51 35 68 11 d8 d1 a3 42 4a e1 4e 50 99 82 92 7e 44 11 86 95 a8 18 08 ca 19 f5 bf 85 60 24 33 0b a3 fe ff 1b fa 57 67 cd 2c 57 67 ee fa cc 7b 2a 06 a7 c8 aa b6 21 Data Ascii: oy5#dxLTUwdT.W:9@(EBL0TP@{f=usF/tsn.\v]W_]3Oj"H&~?ABs0?5;8(w1@X%A\8[R`FFQ5hBJNP~D`$3Wg,Wg{!
2024-03-18 16:22:46 UTC	1369	IN	Data Raw: c1 3c 70 94 c4 2d d2 28 e9 bd 5b 20 b7 5b d0 fe 54 0d 22 b4 6e 24 04 02 08 5a 28 9e d6 54 64 fc d4 e7 24 4a 58 39 3a 25 76 c8 ec 80 ac ce 61 05 82 04 c8 93 d1 67 05 2a a1 7e 2a 52 2d 72 cc 49 89 52 43 d1 5f 56 2b 88 00 ee ee ee ae 0d 86 9c 2c ff e4 5a 0c e5 04 5d e1 d3 79 12 72 0b e9 d1 4c 42 30 5d d2 26 84 18 39 da 85 a1 62 ac 44 1c a9 2d bb 9c d6 d8 73 c1 10 f0 14 64 f5 b2 4b f3 6a 4e 21 ed 21 c1 d3 53 64 65 8d 92 2c a0 7e 7a 03 79 62 89 c9 90 db 1f b8 aa b0 da 0a 34 91 d3 42 46 4a 97 e4 20 e4 bb d1 01 c4 e5 39 15 8b a1 5d 18 1c fd 74 92 c5 f8 66 05 a2 e4 a9 cf f2 9f 0c 89 5c d6 d9 85 da 0b 90 64 04 7d 4f 9b 70 62 22 3d 95 b1 5c 00 86 1b 1e 30 49 58 f2 d6 40 3e d8 d7 0d d1 b0 09 8f 88 69 2e ff df 5a d9 2d c7 70 c5 75 7f 86 c1 4c 4f c7 8c d0 d5 1c 57 7a Data Ascii: <p-([ [T"n$Z(Td$JX9:%vag~R-rIRC_V+,Z]yrLB0]&9bD-sdKjN!!Sde,~zyb4BFJ 9]tf\d}Opb"=\0IX@>i.Z-puLOWz
2024-03-18 16:22:46 UTC	1369	IN	Data Raw: 35 36 71 7b 63 7f b1 48 8b 6a 32 bf 7e fb e0 70 49 b2 6d 6a 68 bd d6 13 60 bd 86 ed da 70 08 47 91 d6 62 78 ae f5 19 ef 30 72 f7 2c 36 9f 01 89 85 9f c3 6a 75 1d be 5a f4 ca 2f 9a d9 b1 f1 95 41 1e 04 78 4f 9b 8a d4 61 c2 68 b4 6b 68 b3 64 16 26 93 a4 bb dc a0 20 37 60 4e 8a d2 b5 a5 66 dc 74 8c b6 53 b0 a1 23 76 ce e5 4c 55 09 cd a3 d1 ad 86 6b b8 0e 9d bc 0f 62 6e 0a 37 35 31 63 0d 0b b6 5a 32 ae 25 e9 cf 48 4a cf 1e c8 e4 1a 1e 92 47 a7 59 21 d6 4a f1 f7 06 1a fb 52 fd d9 40 30 c1 07 1a 74 15 5f ba 7c ba cb f7 66 0b 94 63 6a d6 4d 6b 68 63 db 1b f0 cc 7d 2b 96 91 2b 9a 77 26 c7 b6 9a 73 a2 38 4a 7b f9 6f 41 4b 26 51 0d 6d dc 7e a0 1e 2b 7f e5 4c d3 19 59 a9 6a ee fc b9 8e 61 12 9f 6f 32 dc a9 7a e3 0a be 92 b2 be 9a 0f b9 55 27 83 2a 17 22 c7 dc c1 f5 Data Ascii: 56q{cHj2~pImjh`pGbx0r,6juZ/AxOahkhd& 7`NftS#vLUkbn751cZ2%HJGY!JR@0t_\|fcjMkhc}++w&s8J{oAK&Qm~+LYjao2zU'*"
2024-03-18 16:22:46 UTC	1369	IN	Data Raw: a1 0f 5b 70 bf be fc ff 19 26 ce 34 1b 76 b7 4c 39 25 8b 44 72 0c 39 80 ce 96 e5 96 27 c4 6f 8b fb b3 a4 b0 d5 e0 60 a0 03 d6 ce 1f fc d2 8b 4b ec 1e fd 7f 99 9b de f3 46 58 03 8a 63 6d 15 0d e6 8a 9c 3a 53 73 6e dd 8f b1 4f 07 e3 9c 6a f2 7b da 34 e0 b4 09 44 0a b8 02 f1 87 2d 56 bd a9 fa 92 01 ae 04 42 88 f2 1d e7 2f 01 8b a7 26 38 7e 0c 08 db df 15 c7 d1 77 f5 5c de b3 0e 46 47 a8 4c bb 0b 31 92 18 a7 a3 8b d8 e5 a2 92 3b 35 c4 75 80 1d 66 28 b7 b2 6c 6f be 4e 38 0c ef 68 a6 93 4b 92 62 d8 1d 9e bf 5a 42 86 f0 82 bd bd 79 07 43 4e f0 40 40 0b f7 8e 99 a3 c2 0f 7e 30 36 17 2e 89 a9 e6 15 3b 54 53 4e 1b bd c3 67 2d 76 57 d7 01 02 ff 06 cc da 1d 79 20 d0 7f c0 09 41 e3 90 04 de 87 99 d5 18 c4 55 86 1a eb c3 38 46 90 3b 84 a7 98 e9 6b 03 c8 87 3b 3f f1 b1 Data Ascii: [p&4vL9%Dr9'o`KFXcm:SsnOj{4D-VB/&8~w\FGL1;5uf(loN8hKbZByCN@@~06.;TSNg-vWy AU8F;k;?
2024-03-18 16:22:46 UTC	1369	IN	Data Raw: ff 44 f5 89 3c c4 50 e5 08 45 ab 88 3f 64 dd 8f 54 66 4a 26 03 f8 6e df 7e a4 41 5f d7 14 34 a8 40 5c 60 ad 82 b3 25 3f fd 30 81 90 b2 83 43 28 53 2b d9 e3 e5 79 d0 af 62 35 c6 03 e3 c8 f9 f1 11 17 3a 86 c7 96 a9 70 43 8c 86 c3 28 29 fc 63 c0 08 cd d9 f0 68 04 c0 0b d9 b5 3f a0 84 08 ce 16 bb f3 ca 24 d6 9f 6d 84 be af dc 30 3a e1 8d 72 f0 ab 5f e9 9f f1 2c 60 c4 d9 7e fc e8 41 d3 8e 08 bc 0c 8c a2 68 d0 50 49 38 c4 17 94 83 a5 6a 51 7f f0 62 e5 67 8a 33 94 ec 42 4c 7b ef f4 b5 50 e3 09 80 6e 71 4c da 8b 42 9b 31 a9 5a a3 df 3e dc 5c 52 75 8e 3c b8 3a 3e 5b 37 d5 b2 ff d4 ba da a0 1f 1f 6a 9d b4 a0 4d f6 5c da 10 aa 52 f6 d4 69 8f ac fb 3c 50 0c 36 84 76 65 82 a7 de 66 63 62 40 3f e1 a9 57 4b 75 c3 9a 14 cf 2e ac b6 ad 81 bc be 7d 7a 39 9a b5 e2 20 68 29 Data Ascii: D<PE?dTfJ&n~A_4@\`%?0C(S+yb5:pC()ch?$m0:r_,`~AhPI8jQbg3BL{PnqLB1Z>\Ru<:>[7jM\Ri<P6vefcb@?WKu.}z9 h)
2024-03-18 16:22:46 UTC	1369	IN	Data Raw: 64 1b fc c4 51 28 59 3d 4c 68 94 4e c7 d3 b4 c9 2d c4 6c bd bc 9e e0 d2 e9 df 08 45 68 31 d0 a6 9a 8a cc d8 21 08 53 6e 8b 60 5b 8d 40 77 f8 a8 9d 0c a6 81 b8 c0 5a e3 2d 17 1f a4 9c 14 99 89 e7 b1 56 65 07 99 f5 a6 68 70 8a 4f e1 23 88 25 24 38 61 27 85 3e 64 3c e2 ab fe e6 3d 4e 2d fe b3 49 93 0a 15 cf bc 12 94 0a fb aa 16 2c 24 0a 8a a8 90 23 13 13 88 da f9 1a 44 a6 a4 88 5d f4 4a 09 c4 a7 0e 30 60 77 1a 58 1d 6b 3f 84 3b 48 dc bb e0 c6 79 ab d0 20 00 01 8d 23 da 6e 78 06 77 23 52 11 fe 5a b6 06 b9 c5 ea 2e 0a 93 17 54 53 2b 58 7a cf a8 48 d3 77 1f c4 2c a2 e1 d3 8f 74 bc fd 57 6a 0b 5d d7 fc d2 65 a2 b8 c5 c0 70 05 29 01 ac c0 e2 bc e3 b0 22 37 44 6b e4 28 8a 36 0d 68 b0 cd e1 68 b1 7b 98 2b c6 61 d5 6b 55 86 b9 93 b9 8f 1c 03 4d 80 bf 85 bf e9 65 43 Data Ascii: dQ(Y=LhN-lEh1!Sn`[@wZ-VehpO#%$8a'>d<=N-I,$#D]J0`wXk?;Hy #nxw#RZ.TS+XzHw,tWj]ep)"7Dk(6hh{+akUMeC
2024-03-18 16:22:46 UTC	1369	IN	Data Raw: 38 67 40 0c dd e0 90 03 14 3c 56 ec b5 20 18 46 1e 9a b0 71 70 8f 40 47 e7 13 70 03 f7 c0 dc b5 99 7a a1 f1 51 a8 23 0d dc f6 c1 89 d8 66 0d 65 14 a7 69 c8 31 e2 91 bb eb 22 5b 6c 38 c1 d4 17 c6 86 3c 64 4e f9 1b 75 fa 1e b9 6a 32 34 26 75 fa 0e 9f d2 e3 62 28 b2 d4 93 35 d2 be 5f e8 44 70 e7 0d ae 62 a9 d7 53 bf b2 7a 77 91 c8 ae a8 60 7d 4c a1 dc f1 26 f6 e1 73 30 83 d2 16 3b 02 c8 ae 76 1b a2 1f b1 79 81 c4 39 ba c2 88 0c f1 a4 3c 36 42 24 69 8a 86 b3 d4 15 96 54 1e 59 37 4f b6 bf d4 d4 f9 a6 aa 92 29 e8 52 6a 54 51 1b e8 10 74 d0 e8 50 45 7e fd 84 df e0 3e e5 64 ef e2 b1 5f c4 e5 95 57 4e ae 43 c9 80 3e 2b cc d3 78 c9 48 81 2a 2f 9f 88 cd 10 4c 6c 3c 24 c7 94 46 30 8b b2 43 85 4b 09 b1 40 d8 30 70 36 f6 22 1a 9b 6d 6f ce c4 6b e1 77 d7 38 16 38 96 4a Data Ascii: 8g@<V Fqp@GpzQ#fei1"[l8<dNuj24&ub(5_DpbSzw`}L&s0;vy9<6B$iTY7O)RjTQtPE~>d_WNC>+xH*/Ll<$F0CK@0p6"mokw88J
2024-03-18 16:22:46 UTC	1369	IN	Data Raw: 08 cf 03 9e 60 a7 46 86 d8 ba 50 71 71 16 d7 00 a8 c4 58 05 ae 84 1d 1c fe 2e 9f eb 7d 93 62 a7 94 3f f8 45 8f 63 14 0f 23 28 55 99 82 6d d6 c4 05 71 02 b7 c4 f1 ac ef eb 1d 9c 57 5f 2f 45 bf 26 78 d6 f3 b4 8a 64 db fe 73 95 49 53 9f 1e c1 00 04 f2 4f a1 18 c4 ba b4 ce d8 bd cc ee c5 1e 77 30 ad c2 55 85 bd 92 83 f9 20 59 e2 a6 03 d1 04 4c 4b 14 a5 13 ae 61 d5 e1 40 c4 93 8a a7 ac 70 f3 34 d4 db a2 cb 96 db 9c 03 2a 9a 7b 6a 1b a6 6f fc 95 68 4d df 20 77 ed db 6b 03 f1 d9 96 83 93 32 ce 51 8f 57 a0 ac 51 9c c0 3a a5 f8 a2 35 31 7c 5e ef 54 ce 30 7a 2f a5 3b db 33 a6 f2 79 d8 0f 25 46 d2 a9 bc eb e4 ad ab a6 c3 74 c6 6d f3 01 21 b6 bc e6 5e 9f 54 07 6e 8c 2b de 36 62 d8 55 b5 19 c3 75 70 0e a1 c3 02 20 c8 26 ed 84 86 81 41 41 56 3d 5d 15 1a c3 5d 30 07 0b Data Ascii: `FPqqX.}b?Ec#(UmqW_/E&xdsISOw0U YLKa@p4*{johM wk2QWQ:51\|^T0z/;3y%Ftm!^Tn+6bUup &AAV=]]0
2024-03-18 16:22:46 UTC	1369	IN	Data Raw: ae fc fc 04 fd dc fb c1 fb 21 c6 8e 38 41 25 ad 71 a4 96 8b 00 4e 75 91 1f a4 20 91 ce b4 84 0c 32 40 5c 07 70 d5 8e e6 be 07 26 03 9c 3f d1 8f f8 2a 3b b8 8e ed ce 08 d6 d8 a3 ef ce d2 e3 24 d9 e9 b1 ea 82 d0 bd 9e 21 b1 d4 cd 80 11 d2 b3 db 07 f0 8e 55 80 b8 67 8e 0d 2a 1a 96 bd a5 a4 98 42 37 f4 21 dd 2e 3b 6b a4 d3 ce 41 82 3f 44 44 9f 4a 77 46 3a 35 65 c8 81 de 67 3c cc b0 e1 21 4b 13 e4 f2 b2 cc 26 c3 02 62 ce 06 b3 58 27 25 42 ae 27 2c f2 84 3a 73 df 98 33 2c cb ee db 76 b6 6b 45 6d a6 cc aa 82 a1 56 ea 77 4b 29 26 3a a3 bf e8 11 1e 52 ff 6f 03 67 a5 b1 b2 ac cb a1 5a 9b af da bd a5 2a 5a 13 86 73 af ff 2c f2 b6 e1 18 52 46 79 87 e2 2a 26 a3 be 6f 6d 34 e5 fa 90 87 7c f1 1f 87 36 b6 3e 98 91 e6 0b 96 94 3e 97 5c 11 f8 4e 3a 58 0c 34 3d 8f bb e9 da Data Ascii: !8A%qNu 2@\p&?;$!UgB7!.;kA?DDJwF:5eg<!K&bX'%B',:s3,vkEmVwK)&:RogZZs,RFy&om4\|6>>\N:X4=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.4	50266	8.28.7.83	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:45 UTC	2366	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R35CA5_112946CAA_57D5D193&r=https://pmp.mxptint.net/sn.ashx?ak=1 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; pi=156011:4; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; chkChromeAb67Sec=3; DPSync3=1711324800%3A265%7C1711756800%3A257%7C1711929600%3A262_256_263_261_260_259_201_258%7C1710806400%3A248_255; SyncRTB3=1711929600%3A22_8_166_104_54_48_13_165_231_178_249_250_3_220_71_21%7C1711324800%3A15_223; KRTBCOOKIE_153=1923-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&19420-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&22979-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&23462-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF; PugT=1710778961; SPugT=1710778964
2024-03-18 16:22:46 UTC	657	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 18 Mar 2024 16:22:44 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_52=22772-R35CA5_112946CAA_57D5D193&KRTB&23092-R35CA5_112946CAA_57D5D193; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 16:22:44 GMT; path=/ Set-Cookie: PugT=1710778964; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 16:22:44 GMT; path=/ Location: https://pmp.mxptint.net/sn.ashx?ak=1 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-18 16:22:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.4	50267	34.111.113.62	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:45 UTC	553	OUT	GET /idsync/ex/receive?partner_id=3203&partner_device_id=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1710778931516; TapAd_DID=da9fa8fc-3c38-47c1-bced-e79257211d8c; TapAd_3WAY_SYNCS=1!1888
2024-03-18 16:22:46 UTC	1101	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:46 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1710778931516;Expires=Fri, 17 May 2024 16:22:46 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=da9fa8fc-3c38-47c1-bced-e79257211d8c;Expires=Fri, 17 May 2024 16:22:46 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!1888;Expires=Fri, 17 May 2024 16:22:46 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:46 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.4	50268	142.251.40.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:46 UTC	1246	OUT	GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:47 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:22:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.4	50269	142.251.40.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:46 UTC	1414	OUT	GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:46 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:22:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.4	50271	216.54.215.75	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:47 UTC	662	OUT	GET /_shared-resources/_hannonhill/_files/images/favicons/favicon-32x32.png?v=GvJKryKOzM HTTP/1.1 Host: www.indwes.edu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://indwes.tfaforms.net/56 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:47 UTC	306	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=604800 Content-Type: image/png Last-Modified: Tue, 13 Sep 2022 16:04:29 GMT Accept-Ranges: bytes ETag: "6b166a818ac7d81:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Mon, 18 Mar 2024 16:22:46 GMT Connection: close Content-Length: 587
2024-03-18 16:22:47 UTC	587	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 03 00 00 00 44 a4 8a c6 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 9c 50 4c 54 45 ff ff ff e3 29 67 dd dd dd fe fd fe 5a 5a 5a 55 55 55 f4 a3 be dd 00 4a dd 00 48 de 03 4d fc f9 fa e7 e7 e7 ba ba ba fc e7 ee de 0b 51 61 61 61 7b 7b 7b 69 69 69 f4 ac c3 f3 a0 bb ec 70 98 d0 d0 d0 f6 b6 cb 70 70 70 ee 80 a4 fd ee f2 dd 00 47 a2 9e 9f e1 15 59 ea 61 8e e4 35 6f e8 56 86 e6 47 7c f9 d3 df ed ed ed f7 c7 d7 8b 89 8a e1 1d 5e c1 c1 c1 cb c9 c9 94 94 94 f6 f6 f6 fb dc e6 f0 8c ad d8 d8 d8 b6 b6 b6 f0 9c b7 dc 00 46 a9 a9 a9 df b7 c4 c4 8b 9e d7 8f a6 38 61 ca b4 00 00 01 5a 49 44 41 54 38 8d ed 92 d9 72 83 30 0c 45 05 d8 d8 66 87 02 81 b2 07 c8 42 16 d2 f6 ff ff ad d7 cc 64 Data Ascii: PNGIHDR DgAMAaPLTE)gZZZUUUJHMQaaa{{{iiippppGYa5oVG\|^F8aZIDAT8r0EfBd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.4	50273	38.68.201.140	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:47 UTC	655	OUT	GET /sn.ashx?ak=1 HTTP/1.1 Host: pmp.mxptint.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mxpim=R35CA5_112946CAA_57D5D193.1.000000000000000065F86A54
2024-03-18 16:22:48 UTC	242	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: image/gif Expires: -1 Date: Mon, 18 Mar 2024 16:22:47 GMT Connection: close Content-Length: 43 Strict-Transport-Security: max-age=-393783768; includeSubDomains
2024-03-18 16:22:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.4	50275	216.54.215.75	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:48 UTC	421	OUT	GET /_shared-resources/_hannonhill/_files/images/favicons/favicon-32x32.png?v=GvJKryKOzM HTTP/1.1 Host: www.indwes.edu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:48 UTC	306	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=604800 Content-Type: image/png Last-Modified: Tue, 13 Sep 2022 16:04:29 GMT Accept-Ranges: bytes ETag: "6b166a818ac7d81:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Mon, 18 Mar 2024 16:22:47 GMT Connection: close Content-Length: 587
2024-03-18 16:22:48 UTC	587	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 03 00 00 00 44 a4 8a c6 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 9c 50 4c 54 45 ff ff ff e3 29 67 dd dd dd fe fd fe 5a 5a 5a 55 55 55 f4 a3 be dd 00 4a dd 00 48 de 03 4d fc f9 fa e7 e7 e7 ba ba ba fc e7 ee de 0b 51 61 61 61 7b 7b 7b 69 69 69 f4 ac c3 f3 a0 bb ec 70 98 d0 d0 d0 f6 b6 cb 70 70 70 ee 80 a4 fd ee f2 dd 00 47 a2 9e 9f e1 15 59 ea 61 8e e4 35 6f e8 56 86 e6 47 7c f9 d3 df ed ed ed f7 c7 d7 8b 89 8a e1 1d 5e c1 c1 c1 cb c9 c9 94 94 94 f6 f6 f6 fb dc e6 f0 8c ad d8 d8 d8 b6 b6 b6 f0 9c b7 dc 00 46 a9 a9 a9 df b7 c4 c4 8b 9e d7 8f a6 38 61 ca b4 00 00 01 5a 49 44 41 54 38 8d ed 92 d9 72 83 30 0c 45 05 d8 d8 66 87 02 81 b2 07 c8 42 16 d2 f6 ff ff ad d7 cc 64 Data Ascii: PNGIHDR DgAMAaPLTE)gZZZUUUJHMQaaa{{{iiippppGYa5oVG\|^F8aZIDAT8r0EfBd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.4	50276	44.217.137.122	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:48 UTC	525	OUT	GET /forms/get_image/1/MqqGsVxq5heqLeiklT0qTYKa21Fex14qTlVGnmtc08YnIBwpyPMWpGlSrWqrBYae-MasterLogo_white.png HTTP/1.1 Host: indwes.tfaforms.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: FORMASSEMBLY=6a4809387c058e25edd85f81ecc72a5f; FASRV=8e78f24973a4e556
2024-03-18 16:22:48 UTC	555	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:48 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close server: nginx p3p: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM" set-cookie: FORMASSEMBLY=6a4809387c058e25edd85f81ecc72a5f; HttpOnly=1; Path=/; SameSite=None; Secure etag: "5fdd8a64a2f66037a2a16f5046819683" last-modified: Tue, 27 Sep 2022 14:45:33 GMT expires: Thu, 16 Mar 2034 16:22:52 GMT cache-control: max-age=315360000 strict-transport-security: max-age=31536000; includeSubDomains; preload x-fa-app: 20-104
2024-03-18 16:22:48 UTC	15829	IN	Data Raw: 35 63 62 36 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0a 4a 00 00 05 51 08 06 00 00 00 c5 56 47 0a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 6e 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 03 01 12 00 03 00 00 00 01 00 01 00 00 01 31 00 02 00 00 00 11 00 00 00 32 87 69 00 04 00 00 00 01 00 00 00 44 00 00 00 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 0a 4a a0 03 00 04 00 00 00 01 00 00 05 51 00 00 00 00 d4 6f 7f ab 00 00 01 cb 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 58 4d 50 20 43 6f Data Ascii: 5cb6PNGIHDRJQVGsRGBneXIfMM*12iDAdobe ImageReadyJQoiTXtXML:com.adobe.xmp<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Co
2024-03-18 16:22:48 UTC	7913	IN	Data Raw: 97 03 c0 24 04 08 10 20 d0 43 a0 3c 39 49 e4 eb ee 93 39 db 9d 00 01 02 04 08 10 98 5b c0 1d 14 e6 ae af ec 08 10 20 40 80 40 33 01 8d 92 cd 68 0d 4c 80 00 01 02 bd 04 92 56 57 78 b0 99 a0 17 e5 af 79 82 57 7a fa 95 83 1f 08 10 20 40 80 c0 0d 81 a4 d5 11 66 6e 6a 28 37 6a 33 fa 43 49 c7 ce ab a5 93 46 a3 1f 51 e2 23 40 80 40 3f 81 d2 6f aa a7 66 aa 4f ed 6d 67 02 04 08 10 20 40 80 c0 60 02 61 17 5c 0e a6 27 1c 02 04 08 10 20 d0 46 40 a3 64 1b 57 a3 12 20 40 80 40 5f 81 d2 77 3a b3 11 20 40 80 00 01 02 04 9a 0b 94 e6 33 3c 3f 41 dd 3b 44 f0 c5 18 bb 73 dd 6b 73 d4 f6 49 17 11 1d 95 b3 71 08 10 20 40 60 0a 81 1f 41 59 cc 7c 41 4b 50 19 84 4a 80 00 01 02 07 0b d4 83 c7 33 1c 01 02 04 08 10 20 40 60 38 01 8d 92 c3 95 44 40 04 08 10 20 30 b1 40 9d 38 37 a9 11 Data Ascii: $ C<9I9[ @@3hLVWxyWz @fnj(7j3CIFQ#@@?ofOmg @`a\' F@dW @@_w: @3<?A;DsksIq @`AY\|AKPJ3 @`8D@ 0@87
2024-03-18 16:22:48 UTC	16384	IN	Data Raw: 37 66 65 61 0d 0a cf 13 20 40 80 40 4f 81 d2 73 b2 67 e6 ba ac 8e 50 9f d9 bf d7 be 97 13 f5 2f bd e6 32 0f 01 02 04 08 10 e8 28 e0 4b ea 8e d8 23 4c 95 f2 de eb 6a 65 35 c9 11 0e 1a 31 10 20 30 8a 40 c2 c9 ef b7 56 49 8d 05 6f e3 f6 33 01 02 04 08 10 20 40 20 51 a0 24 06 2d 66 02 04 08 10 20 40 20 57 40 a3 64 6e ed 44 4e 80 00 01 02 04 08 10 20 40 80 00 01 02 e3 0b 68 9a 7b be 46 69 8d b1 e5 f9 94 8d 40 80 00 81 69 04 ca 34 99 48 64 ab 40 d2 eb 76 5a 23 ef d6 1a d8 8e 00 01 02 04 d6 16 a8 6b a7 2f 7b 02 04 08 10 20 40 80 c0 7d 01 8d 92 f7 6d 3c 43 80 00 01 02 1d 05 dc a2 b0 23 b6 a9 08 10 20 40 80 00 01 02 59 02 35 25 5c ab 79 a7 54 4a 9c 04 08 10 20 40 e0 1f 81 c2 81 00 01 02 04 08 cc 26 10 76 47 86 e1 f9 2f 9e 2f c3 07 29 40 02 04 08 10 20 40 60 b3 80 Data Ascii: 7fea @@OsgP/2(K#Lje51 0@VIo3 @ Q$-f @ W@dnDN @h{Fi@i4Hd@vZ#k/{ @}m<C# @Y5%\yTJ @&vG//)@ @`
2024-03-18 16:22:48 UTC	16370	IN	Data Raw: 6e 81 64 37 95 cd 5d 0c d9 11 20 f0 8f 40 c4 ef a5 91 0f db 89 98 bf 4d 93 00 01 02 04 08 dc 13 30 50 f2 9e 8a 69 a3 05 52 5d 50 b3 a3 37 7a f3 d0 1f 01 02 04 c6 08 f8 7e 1f e3 ac 17 02 04 08 10 d8 2c 50 37 2f 79 f1 82 23 4f bc 5f 9c aa ee 09 10 20 40 a0 9f 40 aa f3 83 37 86 9f fd 28 b4 dc 5b 20 d9 f1 7f e9 ed a1 7d 02 04 ce 0b 38 26 3a 6f a8 05 02 04 ba 08 94 2e ad e6 69 34 db 31 46 1e 59 91 12 c8 29 50 73 86 7d 79 d4 d9 1e e8 f0 2d 98 81 92 df 12 59 80 40 78 01 77 15 87 2f 91 00 09 10 20 b0 5f c0 eb b5 f6 9b 59 83 00 01 02 33 09 24 bb 80 ef c4 f3 4c 1b 9f 5c 08 10 20 40 80 c0 dc 02 35 4b 7a 06 5e 65 a9 94 38 09 fc 23 50 38 10 20 40 80 00 01 02 04 08 c4 15 88 78 be dd b5 e0 6b b6 17 03 25 af 71 d7 6b 5e 81 1a 30 f4 12 30 26 21 11 20 40 20 9b 40 cd 16 b0 Data Ascii: nd7] @M0PiR]P7z~,P7/y#O_ @@7([ }8&:o.i41FY)Ps}y-Y@xw/ _Y3$L\ @5Kz^e8#P8 @xk%qk^00&! @ @
2024-03-18 16:22:48 UTC	16384	IN	Data Raw: 34 30 30 65 0d 0a 06 4a 3e 08 66 75 02 09 02 fe c1 4c a8 92 18 09 e4 08 b8 58 dd 56 2b 33 e5 b7 39 59 8b 00 01 02 2f 08 a4 5d f0 8f 7c 1b f3 0b cc 36 25 70 b8 40 3f bc 07 1d 10 20 40 80 c0 61 02 61 f7 1d 9d 8f 1d b6 27 68 98 00 81 82 02 ad 60 4c 42 22 40 a0 8e 40 af 13 8a 48 08 10 20 10 25 d0 a2 a2 15 ec 97 02 06 4a 7e 49 64 05 02 04 76 10 a8 3e ca 7e 87 14 35 41 e0 10 81 b4 01 21 87 20 68 94 00 01 02 04 08 fc 14 e8 29 12 26 19 a4 54 4a 9c 23 04 c2 06 d8 8c 20 d2 27 01 02 04 2a 0b f4 ca c1 bd 8f ed 72 3e d6 de ff ee 67 02 04 4e 15 70 4f f3 54 6e 9d 11 20 b0 51 a0 6f 5c 6f ca d5 5c 8b 4f 59 56 49 11 20 40 80 c0 13 02 06 4a 3e 81 b6 d0 26 06 b7 2d 54 ec 83 53 6d 07 b7 af 79 02 04 08 10 20 40 80 00 81 b9 05 7a d8 0d 5d d7 52 73 ef 8f b2 7b 5e c0 43 f3 e7 ed Data Ascii: 400eJ>fuLXV+39Y/]\|6%p@? @aa'h`LB"@@H %J~Idv>~5A! h)&TJ# '*r>gNpOTn Qo\o\OYVI @J>&-TSmy @z]Rs{^C
2024-03-18 16:22:48 UTC	22	IN	Data Raw: cd 23 2f 13 02 87 08 f4 43 5a 3d a0 51 0f 7e 0f 40 d5 24 01 0d 0a Data Ascii: #/CZ=Q~@$
2024-03-18 16:22:48 UTC	16314	IN	Data Raw: 33 66 62 32 0d 0a 02 2b 08 f4 a0 24 dd 73 08 2a 96 50 09 6c 11 28 fa c6 b6 5b a1 47 bd 28 e3 56 12 96 13 20 40 80 00 01 02 f3 09 84 dd 8f 9f af 00 32 22 f0 a0 80 81 92 0f 82 59 9d c0 c4 02 6e 34 4c 5c 5c a9 1d 2e d0 0f ef 61 5b 07 6d db 6a d6 22 40 80 00 81 89 05 d2 66 9d 3b 07 9d 78 67 94 da eb 02 61 0f af 0d a0 79 bd e4 5a 20 40 e0 35 81 b8 f3 8a b0 e3 7c 7b ad 3c b6 26 40 a0 98 40 cc b5 e3 cf bf 44 f0 10 9f 01 0b 0f 71 59 99 40 35 81 aa c7 a7 b8 73 cd bd 0a fb cc 71 78 af be b5 43 80 00 01 02 04 f6 16 30 50 72 6f 51 ed 0d 11 08 7c 73 45 d5 93 fc 21 f5 d3 29 81 74 81 b0 07 1b e9 dc 09 f1 f7 84 20 c5 48 80 c0 9c 02 49 0f 83 dc 64 9d 73 1f 94 d5 ae 02 69 d7 8d 6d d7 ec 35 46 80 00 81 c9 05 2e e7 6d ff 4f 4a 8a 81 f7 5e 53 68 c5 49 60 a4 40 1f d9 f9 83 7d Data Ascii: 3fb2+$s*Pl([G(V @2"Yn4L\\.a[mj"@f;xgayZ @5\|{<&@@DqY@5sqxC0ProQ\|sE!)t HIdsim5F.mOJ^ShI`@}
2024-03-18 16:22:48 UTC	70	IN	Data Raw: 37 66 36 30 0d 0a 1d 49 a0 a6 80 89 92 35 eb 22 2a 02 d7 04 3c 85 ee 9a 8a 6d 04 08 10 28 28 60 b2 7d c1 a2 08 89 00 01 02 04 46 16 e8 29 c9 85 dc 00 7d 39 60 c0 27 a6 66 29 e7 96 38 09 10 20 40 80 00 81 e3 04 Data Ascii: 7f60I5"*<m((`}F)}9`'f)8 @
2024-03-18 16:22:48 UTC	16384	IN	Data Raw: 0e b8 56 da 32 99 92 93 ff dc 3b db b2 c4 da 22 40 80 00 01 02 04 08 ec 23 e0 9a 6d 1f 57 ad 9e 2b 60 a2 e4 b9 fe d3 f4 ee eb 1d 36 29 75 db a4 15 8d 10 20 40 80 00 01 02 04 08 10 20 40 60 20 81 b0 1b 76 09 0b e0 fa de a7 47 58 cd f6 e6 d0 3e 01 02 04 08 10 20 90 25 d0 53 c2 35 2e 93 52 29 71 12 c8 14 b8 7c ae 7b ad 16 79 ca e2 c4 1d dd 4a 4e 8e df 31 5f 4d 13 20 40 80 00 81 c5 02 26 4a 2e 26 73 c0 93 02 ed c9 e3 ce 3a ac e4 e3 97 cf c2 d0 2f 81 01 04 7a 85 1c 7c 48 af 50 05 31 10 20 40 80 00 01 02 83 09 c4 7c 76 7b 1b a8 6e 01 fe 31 a6 01 96 42 24 40 80 00 01 02 04 c6 13 f8 15 94 52 2b 1a 6b af 16 97 fb b6 d5 2a 22 1e 02 e5 05 7a f9 08 05 48 80 c0 7b 81 fe fe 45 a1 9f 13 16 54 17 e2 12 0a 81 6d 04 4c 94 dc c6 51 2b 04 08 10 20 50 5b 20 e9 06 66 6d 49 d1 Data Ascii: V2;"@#mW+`6)u @ @` vGX> %S5.R)q\|{yJN1_M @&J.&s:/z\|HP1 @\|v{n1B$@R+k*"zH{ETmLQ+ P[ fmI
2024-03-18 16:22:48 UTC	16306	IN	Data Raw: 08 f2 e4 66 d2 06 c0 4e e6 d2 3d 01 02 04 08 bc 17 f0 24 e0 f7 1a 7e 26 40 80 00 01 02 c3 08 f4 94 4c 52 ae 45 4c 36 4b 39 a3 0e 8b b3 1d d6 93 8e 08 10 20 40 80 40 ae 40 cc d8 45 d2 22 88 23 4e 87 b0 09 ae 47 90 e8 83 00 01 02 04 08 10 d8 58 c0 bd b6 55 a0 16 74 af e2 73 f0 cc 02 26 4a 7e aa 7e ca 00 cd a7 b0 ab bd ac 3e bb be 9a 97 78 08 10 20 40 80 00 01 02 04 08 10 20 b0 a9 40 d8 c0 a6 af dd de b4 fa 1a 23 40 80 00 01 02 04 08 94 11 e8 65 22 f9 3e 90 f6 fd 2e f6 20 40 80 00 01 02 04 08 10 18 5d c0 02 9a d1 2b 2c bf d9 05 4c 94 9c fd 0c 90 3f 01 02 04 08 9c 25 10 b3 a2 fe 2c 20 fd 12 20 40 80 00 01 02 4f 0b a4 5d 67 b4 a7 33 3d ee 40 ab b4 8f b3 d6 13 01 02 04 08 10 20 30 88 40 d8 e2 1d 0f 80 18 e4 bc 93 06 01 02 04 08 10 20 10 21 50 f9 fe 65 ab 2e e8 Data Ascii: fN=$~&@LREL6K9 @@@E"#NGXUts&J~~>x @ @#@e">. @]+,L?%, @O]g3=@ 0@ !Pe.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.4	50277	38.68.201.140	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:48 UTC	419	OUT	GET /sn.ashx?ak=1 HTTP/1.1 Host: pmp.mxptint.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mxpim=R35CA5_112946CAA_57D5D193.1.000000000000000065F86A54
2024-03-18 16:22:48 UTC	242	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: image/gif Expires: -1 Date: Mon, 18 Mar 2024 16:22:47 GMT Connection: close Content-Length: 43 Strict-Transport-Security: max-age=-393783768; includeSubDomains
2024-03-18 16:22:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.4	50278	104.36.115.113	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:48 UTC	2396	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=62310470&p=156011&s=165626&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; pi=156011:4; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; chkChromeAb67Sec=3; DPSync3=1711324800%3A265%7C1711756800%3A257%7C1711929600%3A262_256_263_261_260_259_201_258%7C1710806400%3A248_255; SyncRTB3=1711929600%3A22_8_166_104_54_48_13_165_231_178_249_250_3_220_71_21%7C1711324800%3A15_223; KRTBCOOKIE_153=1923-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&19420-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&22979-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&23462-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF; SPugT=1710778964; KRTBCOOKIE_52=22772-R35CA5_112946CAA_57D5D193&KRTB&23092-R35CA5_112946CAA_57D5D193; PugT=1710778964
2024-03-18 16:22:48 UTC	1018	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=4; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=156011:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1711929600%3A261_260_258_236_256_263_201_245_262_259%7C1710806400%3A248_255%7C1711756800%3A257%7C1711324800%3A253_252_265; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1711929600%3A3_220_21_46_166_54_250_178_5_233_104_48_165_231_55_22_8_13_249_71%7C1711584000%3A63%7C1711324800%3A223_2_15; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Mon, 18 Mar 2024 16:22:48 GMT Content-Length: 1438 Connection: close
2024-03-18 16:22:48 UTC	1438	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 62 70 69 2e 72 74 61 63 74 69 76 61 74 65 2e 63 6f 6d 2f 74 61 67 2f 3f 69 64 3d 32 30 39 30 39 26 75 73 65 72 5f 69 64 3d 32 36 46 43 35 42 43 34 2d 43 30 45 41 2d 34 38 31 45 2d 41 43 36 44 2d 32 39 37 45 46 34 39 33 30 45 33 35 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 69 2e 6c 69 61 64 6d 2e 63 6f 6d 2f 73 2f 37 35 31 34 35 3f 62 69 64 64 65 72 5f 69 64 3d 31 39 35 37 35 35 26 62 69 64 64 65 72 5f 75 75 69 64 3d 32 36 46 43 35 42 43 34 2d 43 30 45 41 2d 34 38 31 45 2d 41 43 36 44 2d 32 39 37 45 46 Data Ascii: PubMatic.loadAsyncImagePixel('https://bpi.rtactivate.com/tag/?id=20909&user_id=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://i.liadm.com/s/75145?bidder_id=195755&bidder_uuid=26FC5BC4-C0EA-481E-AC6D-297EF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.4	50279	35.211.178.172	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:48 UTC	815	OUT	GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=2b28c092-dd0b-42bb-b143-c15d16fc69ab; c=1710778930; tuuid_lu=1710778930
2024-03-18 16:22:49 UTC	294	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 18 Mar 2024 16:22:49 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //r.bidswitch.net/sync?bidswitch_ssp_id=pubmatic&bsw_custom_parameter=2b28c092-dd0b-42bb-b143-c15d16fc69ab

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.4	50280	54.145.134.218	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:49 UTC	848	OUT	GET /ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:49 UTC	711	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Mon, 18 Mar 2024 16:22:48 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://pm.w55c.net/ping_match.gif?scc=1&ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= Pragma: no-cache Server: PingMatch/v2.0.30-801-g0076fb7#rel-ec2-master i-0ecb6e109b56d351a@us-east-1d@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=Ru9JGeXJ1RMfLb5; Domain=.w55c.net; Expires=Fri, 18 Apr 2025 02:22:49 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.4	50282	209.54.182.161	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:49 UTC	803	OUT	GET /ecm3?ex=pubmatic.com&id=PM_UID26FC5BC4-C0EA-481E-AC6D-297EF4930E35 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
2024-03-18 16:22:49 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 18 Mar 2024 16:22:49 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 03ZXD68JNWGMZH3QMWEB Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-18 16:22:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.4	50281	54.174.97.40	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:49 UTC	718	OUT	GET /sync?nid=11&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:49 UTC	1387	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Mon, 18 Mar 2024 16:22:49 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=kMV4FFfoUmxPTw0WMkb-TL9g48I&gdpr=0&gdpr_consent= Set-Cookie: sa-user-id=s%3A0-90c57814-57e8-526c-4f4f-0d163246fe4c.B61J4%2Fa0U0NbKHHvyAxKZX944H04dyXEK%2B3cpg%2FOgsI; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-90c57814-57e8-526c-4f4f-0d163246fe4c.B61J4%2Fa0U0NbKHHvyAxKZX944H04dyXEK%2B3cpg%2FOgsI; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AkMV4FFfoUmxPTw0WMkb-TL9g48I.xu%2FnZHoLqnWJQ25AgE6mvxIvCJfqSdbtOTkqcqR3JX8; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AkMV4FFfoUmxPTw0WMkb-TL9g48I.xu%2FnZHoLqnWJQ25AgE6mvxIvCJfqSdbtOTkqcqR3JX8; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIIo0rVeEMKgU7pUhnkfYcytPsdc-UnYHUzPW_hq2SyGUEHwYBCDZ1OGvBjABOgT87-jmQgSE5Xtr.owhiOIoPZcQTPkevYJ2U2VR0dvftDLzMZFsW7W7NpiY; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIIo0rVeEMKgU7pUhnkfYcytPsdc-UnYHUzPW_hq2SyGUEHwYBCDZ1OGvBjABOgT87-jmQgSE5Xtr.owhiOIoPZcQTPkevYJ2U2VR0dvftDLzMZFsW7W7NpiY; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Content-Length: 188 Connection: Close
2024-03-18 16:22:49 UTC	188	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4d 7a 45 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 6b 4d 56 34 46 46 66 6f 55 6d 78 50 54 77 30 57 4d 6b 62 2d 54 4c 39 67 34 38 49 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=kMV4FFfoUmxPTw0WMkb-TL9g48I&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.4	50285	52.22.221.65	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:49 UTC	644	OUT	GET /s/75145?bidder_id=195755&bidder_uuid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:49 UTC	490	IN	HTTP/1.1 303 See Other Date: Mon, 18 Mar 2024 16:22:49 GMT Content-Length: 0 Connection: close Location: /s/75145?bidder_id=195755&bidder_uuid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&_li_chk=true&previous_uuid=c32b96b973584442be1423432a0e89b0 Set-Cookie: lidid=c32b96b9-7358-4442-be14-23432a0e89b0; Max-Age=63072000; Expires=Wed, 18 Mar 2026 16:22:49 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 1 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.4	50284	3.215.42.230	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:49 UTC	657	OUT	GET /tag/?id=20909&user_id=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent= HTTP/1.1 Host: bpi.rtactivate.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:49 UTC	140	IN	HTTP/1.1 200 OK Server: awselb/2.0 Date: Mon, 18 Mar 2024 16:22:49 GMT Content-Type: image/gif Content-Length: 43 Connection: close
2024-03-18 16:22:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.4	50286	35.211.118.13	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:49 UTC	853	OUT	GET /sync?bidswitch_ssp_id=pubmatic&bsw_custom_parameter=2b28c092-dd0b-42bb-b143-c15d16fc69ab HTTP/1.1 Host: r.bidswitch.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=2b28c092-dd0b-42bb-b143-c15d16fc69ab; c=1710778930; tuuid_lu=1710778930
2024-03-18 16:22:49 UTC	493	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Mon, 18 Mar 2024 16:22:49 GMT Location: https://pixel.tapad.com/idsync/ex/receive?partner_id=3205&partner_device_id=2b28c092-dd0b-42bb-b143-c15d16fc69ab&partner_url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D393%26user_id%3D0%26ssp%3Dpubmatic%26bsw_param%3D2b28c092-dd0b-42bb-b143-c15d16fc69ab Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.4	50287	54.145.134.218	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:49 UTC	890	OUT	GET /ping_match.gif?scc=1&ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1 Host: pm.w55c.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=Ru9JGeXJ1RMfLb5
2024-03-18 16:22:49 UTC	773	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Mon, 18 Mar 2024 16:22:49 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:Ru9JGeXJ1RMfLb5&gdpr=0&gdpr_consent= Pragma: no-cache Server: PingMatch/v2.0.30-801-g0076fb7#rel-ec2-master i-0c70956bdcd05991c@us-east-1b@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=Ru9JGeXJ1RMfLb5; Domain=.w55c.net; Expires=Fri, 18 Apr 2025 16:22:49 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchpubmatic=5; Domain=.w55c.net; Expires=Wed, 17 Apr 2024 16:22:49 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.4	50288	8.28.7.83	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:49 UTC	2547	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=8259856715668781746 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; pi=156011:4; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; KRTBCOOKIE_153=1923-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&19420-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&22979-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&23462-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF; SPugT=1710778964; KRTBCOOKIE_52=22772-R35CA5_112946CAA_57D5D193&KRTB&23092-R35CA5_112946CAA_57D5D193; PugT=1710778964; chkChromeAb67Sec=4; DPSync3=1711929600%3A261_260_258_236_256_263_201_245_262_259%7C1710806400%3A248_255%7C1711756800%3A257%7C1711324800%3A253_252_265; SyncRTB3=1711929600%3A3_220_21_46_166_54_250_178_5_233_104_48_165_231_55_22_8_13_249_71%7C1711584000%3A63%7C1711324800%3A223_2_15
2024-03-18 16:22:49 UTC	583	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Mar 2024 02:33:47 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_18=22947-8259856715668781746; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 16-Jun-2024 02:33:47 GMT; path=/ Set-Cookie: PugT=1710729227; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 02:33:47 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-18 16:22:49 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.4	50289	8.28.7.83	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:49 UTC	2577	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=kMV4FFfoUmxPTw0WMkb-TL9g48I&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; pi=156011:4; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; KRTBCOOKIE_153=1923-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&19420-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&22979-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&23462-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF; SPugT=1710778964; KRTBCOOKIE_52=22772-R35CA5_112946CAA_57D5D193&KRTB&23092-R35CA5_112946CAA_57D5D193; PugT=1710778964; chkChromeAb67Sec=4; DPSync3=1711929600%3A261_260_258_236_256_263_201_245_262_259%7C1710806400%3A248_255%7C1711756800%3A257%7C1711324800%3A253_252_265; SyncRTB3=1711929600%3A3_220_21_46_166_54_250_178_5_233_104_48_165_231_55_22_8_13_249_71%7C1711584000%3A63%7C1711324800%3A223_2_15
2024-03-18 16:22:49 UTC	709	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Mar 2024 16:22:48 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_860=16335-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23334-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23417-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23426-kMV4FFfoUmxPTw0WMkb-TL9g48I; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 16-Jun-2024 16:22:48 GMT; path=/ Set-Cookie: PugT=1710778968; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 16:22:48 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-18 16:22:49 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.4	50290	52.22.221.65	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:49 UTC	756	OUT	GET /s/75145?bidder_id=195755&bidder_uuid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&_li_chk=true&previous_uuid=c32b96b973584442be1423432a0e89b0 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=c32b96b9-7358-4442-be14-23432a0e89b0
2024-03-18 16:22:49 UTC	618	IN	HTTP/1.1 303 See Other Date: Mon, 18 Mar 2024 16:22:49 GMT Content-Length: 0 Connection: close Location: https://live.rezync.com/sync?c=0aa2530f29e4f4a05b5d5d9bb35d60c2&p=93c1662463a616a7155169889dd99651&pid=c32b96b9-7358-4442-be14-23432a0e89b0 Set-Cookie: _li_ss=CggKBgiiARC8Fw; Max-Age=2592000; Expires=Wed, 17 Apr 2024 16:22:49 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=c32b96b9-7358-4442-be14-23432a0e89b0; Max-Age=63072000; Expires=Wed, 18 Mar 2026 16:22:49 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 3 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.4	50293	34.111.113.62	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:49 UTC	1017	OUT	GET /idsync/ex/receive?partner_id=3205&partner_device_id=2b28c092-dd0b-42bb-b143-c15d16fc69ab&partner_url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D393%26user_id%3D0%26ssp%3Dpubmatic%26bsw_param%3D2b28c092-dd0b-42bb-b143-c15d16fc69ab HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1710778931516; TapAd_DID=da9fa8fc-3c38-47c1-bced-e79257211d8c; TapAd_3WAY_SYNCS=1!1888
2024-03-18 16:22:49 UTC	1463	IN	HTTP/1.1 302 Found Date: Mon, 18 Mar 2024 16:22:49 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1710778931516;Expires=Fri, 17 May 2024 16:22:49 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=da9fa8fc-3c38-47c1-bced-e79257211d8c;Expires=Fri, 17 May 2024 16:22:49 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!1888;Expires=Fri, 17 May 2024 16:22:49 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://secure.adnxs.com/getuid?https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Freceive%3Fpartner_id%3DAPPNEXUS%26partner_device_id%3D%24UID%26pt%3Dda9fa8fc-3c38-47c1-bced-e79257211d8c%252Chttps%25253A%25252F%25252Fx.bidswitch.net%25252Fsync%25253Fdsp_id%25253D393%252526user_id%25253D0%252526ssp%25253Dpubmatic%252526bsw_param%25253D2b28c092-dd0b-42bb-b143-c15d16fc69ab%252C Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.4	50292	3.215.42.230	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:49 UTC	421	OUT	GET /tag/?id=20909&user_id=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent= HTTP/1.1 Host: bpi.rtactivate.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:50 UTC	140	IN	HTTP/1.1 200 OK Server: awselb/2.0 Date: Mon, 18 Mar 2024 16:22:49 GMT Content-Type: image/gif Content-Length: 43 Connection: close
2024-03-18 16:22:50 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.4	50294	8.28.7.83	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:49 UTC	2569	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:Ru9JGeXJ1RMfLb5&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; pi=156011:4; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; KRTBCOOKIE_153=1923-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&19420-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&22979-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&23462-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF; SPugT=1710778964; KRTBCOOKIE_52=22772-R35CA5_112946CAA_57D5D193&KRTB&23092-R35CA5_112946CAA_57D5D193; PugT=1710778964; chkChromeAb67Sec=4; DPSync3=1711929600%3A261_260_258_236_256_263_201_245_262_259%7C1710806400%3A248_255%7C1711756800%3A257%7C1711324800%3A253_252_265; SyncRTB3=1711929600%3A3_220_21_46_166_54_250_178_5_233_104_48_165_231_55_22_8_13_249_71%7C1711584000%3A63%7C1711324800%3A223_2_15
2024-03-18 16:22:50 UTC	614	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Mar 2024 01:51:04 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_107=1471-uid:Ru9JGeXJ1RMfLb5&KRTB&23421-uid:Ru9JGeXJ1RMfLb5; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 16-Jun-2024 01:51:04 GMT; path=/ Set-Cookie: PugT=1710726664; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 01:51:04 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-18 16:22:50 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.4	50291	44.205.216.19	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:49 UTC	718	OUT	GET /qmap?c=240&tp=PUBM&tpid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=cd7195d98b33730cda0d063b9003130e
2024-03-18 16:22:49 UTC	315	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:49 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.56.247 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-03-18 16:22:49 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.4	50295	18.164.116.23	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:50 UTC	690	OUT	GET /sync?c=0aa2530f29e4f4a05b5d5d9bb35d60c2&p=93c1662463a616a7155169889dd99651&pid=c32b96b9-7358-4442-be14-23432a0e89b0 HTTP/1.1 Host: live.rezync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:50 UTC	1188	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 963 Connection: close Date: Mon, 18 Mar 2024 16:22:50 GMT Location: https://p.rfihub.com/cm?pub=39342&in=1&userid=e90cf1c2-fac0-4c1a-9d96-09b4ab0b6774%3A1710778970.333378&forward=https%3A//i.liadm.com/s/56409%3Fbidder_id%3D200442%26bidder_uuid%3De90cf1c2-fac0-4c1a-9d96-09b4ab0b6774%253A1710778970.333378%26pid%3D500040%26it%3D1%26iv%3De90cf1c2-fac0-4c1a-9d96-09b4ab0b6774%253A1710778970.333378%26_%3D1710778970.3372326&cb=1710778970.337284 Set-Cookie: zync-uuid=e90cf1c2-fac0-4c1a-9d96-09b4ab0b6774:1710778970.333378; Domain=rezync.com; Expires=Sat, 12 Apr 2025 16:22:50 GMT; Path=/; SameSite=None; Secure Set-Cookie: sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiZTkwY2YxYzItZmFjMC00YzFhLTlkOTYtMDliNGFiMGI2Nzc0OjE3MTA3Nzg5NzAuMzMzMzc4In0.ZfhqWg.fKr8c_QMekhOy0foxtDKnmjFw1Y; Expires=Sat, 12 Apr 2025 16:22:50 GMT; HttpOnly; Path=/; SameSite=None; Secure Vary: Cookie Server: lighttpd/1.4.69 X-Cache: Miss from cloudfront Via: 1.1 54a56da0fe0bae919389c7d572d4720e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: 6qYVRLIH7swLZNqhsaZhiMWIeBbDGNGADscujuTTgL7FHdNrZsb9EQ==
2024-03-18 16:22:50 UTC	963	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 74 6f 20 74 68 65 20 74 61 72 67 65 74 20 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 2e 72 66 69 68 75 62 2e 63 6f 6d 2f 63 6d 3f 70 75 62 3d 33 39 33 34 32 26 61 6d 70 3b 69 6e 3d 31 26 61 6d 70 3b 75 73 65 72 69 64 3d 65 39 30 63 66 31 63 32 2d 66 61 63 30 2d 34 63 31 61 2d 39 64 39 36 2d 30 39 62 34 61 62 30 62 36 37 37 34 25 33 41 31 37 31 30 37 37 38 Data Ascii: <!doctype html><html lang=en><title>Redirecting...</title><h1>Redirecting...</h1><p>You should be redirected automatically to the target URL: <a href="https://p.rfihub.com/cm?pub=39342&in=1&userid=e90cf1c2-fac0-4c1a-9d96-09b4ab0b6774%3A1710778

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.4	50298	52.207.168.130	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:50 UTC	482	OUT	GET /qmap?c=240&tp=PUBM&tpid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=cd7195d98b33730cda0d063b9003130e
2024-03-18 16:22:50 UTC	315	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:50 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.10.139 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-03-18 16:22:50 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.4	50296	68.67.160.75	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:50 UTC	1268	OUT	GET /getuid?https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Freceive%3Fpartner_id%3DAPPNEXUS%26partner_device_id%3D%24UID%26pt%3Dda9fa8fc-3c38-47c1-bced-e79257211d8c%252Chttps%25253A%25252F%25252Fx.bidswitch.net%25252Fsync%25253Fdsp_id%25253D393%252526user_id%25253D0%252526ssp%25253Dpubmatic%252526bsw_param%25253D2b28c092-dd0b-42bb-b143-c15d16fc69ab%252C HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=sc-qkOWOy4X_p3mD-LWUzAd-XDCZQmscLkmizNrfavkuQbEqumPcpRbLQP5MYfuaYQ8bCCHdAwNtUmwS86qSDkNpL-Zwzckxzo46gNxy6nM.; icu=ChgIs8t_EAoYASABKAEwr9ThrwY4AUABSAEQr9ThrwYYAA..; receive-cookie-deprecation=1; uuid2=9164480480629189644
2024-03-18 16:22:50 UTC	1671	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Mon, 18 Mar 2024 16:22:50 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://pixel.tapad.com/idsync/ex/receive?partner_id=APPNEXUS&partner_device_id=9164480480629189644&pt=da9fa8fc-3c38-47c1-bced-e79257211d8c%2Chttps%253A%252F%252Fx.bidswitch.net%252Fsync%253Fdsp_id%253D393%2526user_id%253D0%2526ssp%253Dpubmatic%2526bsw_param%253D2b28c092-dd0b-42bb-b143-c15d16fc69ab%2C AN-X-Request-Uuid: 43fd4eb5-11d9-4499-a3f3-51e6e08ba7cf Set-Cookie: XANDR_PANID=sc-qkOWOy4X_p3mD-LWUzAd-XDCZQmscLkmizNrfavkuQbEqumPcpRbLQP5MYfuaYQ8bCCHdAwNtUmwS86qSDkNpL-Zwzckxzo46gNxy6nM.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 16-Jun-2024 16:22:50 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 06-Mar-2034 16:22:50 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=9164480480629189644; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 16-Jun-2024 16:22:50 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 191.96.227.194; 191.96.227.194; 673.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.4	50297	52.22.81.24	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:50 UTC	641	OUT	GET /?companyId=673&id=pubmatic_id:26FC5BC4-C0EA-481E-AC6D-297EF4930E35 HTTP/1.1 Host: io.narrative.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:50 UTC	391	IN	HTTP/1.1 302 Found Date: Mon, 18 Mar 2024 16:22:50 GMT Location: https://io.narrative.io/?io.narrative.guid.v2=c3bb5df0-e543-11ee-b039-16c962239a11&companyId=673&id=pubmatic_id:26FC5BC4-C0EA-481E-AC6D-297EF4930E35 Server: nginx/1.22.1 Set-Cookie: io.narrative.guid.v2=c3bb5df0-e543-11ee-b039-16c962239a11; Max-Age=47278080; SameSite=None; Secure Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.4	50299	52.22.81.24	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:50 UTC	766	OUT	GET /?io.narrative.guid.v2=c3bb5df0-e543-11ee-b039-16c962239a11&companyId=673&id=pubmatic_id:26FC5BC4-C0EA-481E-AC6D-297EF4930E35 HTTP/1.1 Host: io.narrative.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: io.narrative.guid.v2=c3bb5df0-e543-11ee-b039-16c962239a11
2024-03-18 16:22:50 UTC	242	IN	HTTP/1.1 204 No Content Cache-Control: no-cache Date: Mon, 18 Mar 2024 16:22:50 GMT Server: nginx/1.22.1 Set-Cookie: io.narrative.guid.v2=c3bb5df0-e543-11ee-b039-16c962239a11; Max-Age=47278080; SameSite=None; Secure Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.4	50301	34.111.113.62	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:50 UTC	1061	OUT	GET /idsync/ex/receive?partner_id=APPNEXUS&partner_device_id=9164480480629189644&pt=da9fa8fc-3c38-47c1-bced-e79257211d8c%2Chttps%253A%252F%252Fx.bidswitch.net%252Fsync%253Fdsp_id%253D393%2526user_id%253D0%2526ssp%253Dpubmatic%2526bsw_param%253D2b28c092-dd0b-42bb-b143-c15d16fc69ab%2C HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1710778931516; TapAd_DID=da9fa8fc-3c38-47c1-bced-e79257211d8c; TapAd_3WAY_SYNCS=1!1888
2024-03-18 16:22:51 UTC	1206	IN	HTTP/1.1 302 Found Date: Mon, 18 Mar 2024 16:22:51 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1710778931516;Expires=Fri, 17 May 2024 16:22:51 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=da9fa8fc-3c38-47c1-bced-e79257211d8c;Expires=Fri, 17 May 2024 16:22:51 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!1888-2!1888;Expires=Fri, 17 May 2024 16:22:51 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://x.bidswitch.net/sync?dsp_id=393&user_id=0&ssp=pubmatic&bsw_param=2b28c092-dd0b-42bb-b143-c15d16fc69ab Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.4	50302	18.164.116.23	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:51 UTC	1159	OUT	GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=8259856715668781746&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De90cf1c2-fac0-4c1a-9d96-09b4ab0b6774%253A1710778970.333378%26pid%3D500040%26it%3D1%26iv%3De90cf1c2-fac0-4c1a-9d96-09b4ab0b6774%253A1710778970.333378%26_%3D1710778970.3372326 HTTP/1.1 Host: live.rezync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zync-uuid=e90cf1c2-fac0-4c1a-9d96-09b4ab0b6774:1710778970.333378; sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiZTkwY2YxYzItZmFjMC00YzFhLTlkOTYtMDliNGFiMGI2Nzc0OjE3MTA3Nzg5NzAuMzMzMzc4In0.ZfhqWg.fKr8c_QMekhOy0foxtDKnmjFw1Y
2024-03-18 16:22:51 UTC	1068	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 647 Connection: close Date: Mon, 18 Mar 2024 16:22:51 GMT Location: https://i.liadm.com/s/56409?bidder_id=200442&bidder_uuid=e90cf1c2-fac0-4c1a-9d96-09b4ab0b6774%3A1710778970.333378&pid=500040&it=1&iv=e90cf1c2-fac0-4c1a-9d96-09b4ab0b6774%3A1710778970.333378&_=1710778970.3372326 Set-Cookie: zync-uuid=e90cf1c2-fac0-4c1a-9d96-09b4ab0b6774:1710778970.333378; Domain=rezync.com; Expires=Sat, 12 Apr 2025 16:22:51 GMT; Path=/; SameSite=None; Secure Set-Cookie: sd-session-id=.eJwNykEOgyAQQNG7zFqawcLMwGUM4piQVtqIbmq8e_m7l_wLpq_uW6paD4jHfuoA-V26GsQLWvlt-oIIMvognth6ImGx7AjuAZq2Vj51Kkt_NGBebR7NmjIal20yYQlkMMwuzTgTs4uWLTJLYHw8eyxw_wGpsCXi.ZfhqWw.mSAO7jeE0zWPCZ8J5_iR8BKIkMA; Expires=Sat, 12 Apr 2025 16:22:51 GMT; HttpOnly; Path=/; SameSite=None; Secure Vary: Cookie Server: lighttpd/1.4.69 X-Cache: Miss from cloudfront Via: 1.1 08307cdad31639e360e0351e9156d6ba.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: poOKxtT4wPAWnf6b5Y8_MetahmF3pPoyWGJab_qcjCXviWjPSKQcNg==
2024-03-18 16:22:51 UTC	647	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 74 6f 20 74 68 65 20 74 61 72 67 65 74 20 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 2e 6c 69 61 64 6d 2e 63 6f 6d 2f 73 2f 35 36 34 30 39 3f 62 69 64 64 65 72 5f 69 64 3d 32 30 30 34 34 32 26 61 6d 70 3b 62 69 64 64 65 72 5f 75 75 69 64 3d 65 39 30 63 66 31 63 32 2d 66 61 63 30 2d 34 63 31 61 2d 39 64 39 36 2d 30 39 62 34 61 62 30 62 36 37 37 34 25 33 41 Data Ascii: <!doctype html><html lang=en><title>Redirecting...</title><h1>Redirecting...</h1><p>You should be redirected automatically to the target URL: <a href="https://i.liadm.com/s/56409?bidder_id=200442&bidder_uuid=e90cf1c2-fac0-4c1a-9d96-09b4ab0b6774%3A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.4	50303	35.211.178.172	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:51 UTC	850	OUT	GET /sync?dsp_id=393&user_id=0&ssp=pubmatic&bsw_param=2b28c092-dd0b-42bb-b143-c15d16fc69ab HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=2b28c092-dd0b-42bb-b143-c15d16fc69ab; c=1710778930; tuuid_lu=1710778930
2024-03-18 16:22:51 UTC	614	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 18 Mar 2024 16:22:51 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=2b28c092-dd0b-42bb-b143-c15d16fc69ab&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy= Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.4	50304	34.36.216.150	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:51 UTC	624	OUT	GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:51 UTC	438	IN	HTTP/1.1 302 Found set-cookie: ssi=691baf7a-d9e5-4c92-bd01-b05ff60933fe#1710778971689; Domain=.sitescout.com; Expires=Tue, 18-Mar-2025 16:22:51 GMT; Path=/; Secure; SameSite=None location: https://pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=3&gdpr=0&gdpr_consent= Content-Length: 0 date: Mon, 18 Mar 2024 16:22:50 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.4	50307	8.28.7.83	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:51 UTC	2894	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=2b28c092-dd0b-42bb-b143-c15d16fc69ab&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; pi=156011:4; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; KRTBCOOKIE_153=1923-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&19420-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&22979-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&23462-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF; SPugT=1710778964; KRTBCOOKIE_52=22772-R35CA5_112946CAA_57D5D193&KRTB&23092-R35CA5_112946CAA_57D5D193; chkChromeAb67Sec=4; DPSync3=1711929600%3A261_260_258_236_256_263_201_245_262_259%7C1710806400%3A248_255%7C1711756800%3A257%7C1711324800%3A253_252_265; SyncRTB3=1711929600%3A3_220_21_46_166_54_250_178_5_233_104_48_165_231_55_22_8_13_249_71%7C1711584000%3A63%7C1711324800%3A223_2_15; KRTBCOOKIE_860=16335-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23334-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23417-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23426-kMV4FFfoUmxPTw0WMkb-TL9g48I; KRTBCOOKIE_18=22947-8259856715668781746; KRTBCOOKIE_107=1471-uid:Ru9JGeXJ1RMfLb5&KRTB&23421-uid:Ru9JGeXJ1RMfLb5; PugT=1710726664
2024-03-18 16:22:52 UTC	600	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Mar 2024 16:22:50 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_466=16530-2b28c092-dd0b-42bb-b143-c15d16fc69ab; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 16-Jun-2024 16:22:50 GMT; path=/ Set-Cookie: PugT=1710778970; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 16:22:50 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-18 16:22:52 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.4	50308	8.28.7.84	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:52 UTC	2632	OUT	GET /AdServer/SPug?partnerID=156011&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; pi=156011:4; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; KRTBCOOKIE_153=1923-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&19420-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&22979-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&23462-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF; SPugT=1710778964; KRTBCOOKIE_52=22772-R35CA5_112946CAA_57D5D193&KRTB&23092-R35CA5_112946CAA_57D5D193; chkChromeAb67Sec=4; DPSync3=1711929600%3A261_260_258_236_256_263_201_245_262_259%7C1710806400%3A248_255%7C1711756800%3A257%7C1711324800%3A253_252_265; SyncRTB3=1711929600%3A3_220_21_46_166_54_250_178_5_233_104_48_165_231_55_22_8_13_249_71%7C1711584000%3A63%7C1711324800%3A223_2_15; KRTBCOOKIE_860=16335-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23334-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23417-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23426-kMV4FFfoUmxPTw0WMkb-TL9g48I; KRTBCOOKIE_18=22947-8259856715668781746; KRTBCOOKIE_107=1471-uid:Ru9JGeXJ1RMfLb5&KRTB&23421-uid:Ru9JGeXJ1RMfLb5; PugT=1710726664
2024-03-18 16:22:52 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Mar 2024 16:22:52 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1710778972; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 16:22:52 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-18 16:22:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.4	50306	52.86.124.2	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:52 UTC	535	OUT	OPTIONS /v1/traces HTTP/1.1 Host: us-east-1-otel.formassembly.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://indwes.tfaforms.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://indwes.tfaforms.net/56 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:52 UTC	350	IN	HTTP/1.1 204 No Content Date: Mon, 18 Mar 2024 16:22:52 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST Access-Control-Allow-Origin: https://indwes.tfaforms.net Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.4	50309	52.22.221.65	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:52 UTC	836	OUT	GET /s/56409?bidder_id=200442&bidder_uuid=e90cf1c2-fac0-4c1a-9d96-09b4ab0b6774%3A1710778970.333378&pid=500040&it=1&iv=e90cf1c2-fac0-4c1a-9d96-09b4ab0b6774%3A1710778970.333378&_=1710778970.3372326 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _li_ss=CggKBgiiARC8Fw; lidid=c32b96b9-7358-4442-be14-23432a0e89b0
2024-03-18 16:22:52 UTC	601	IN	HTTP/1.1 303 See Other Date: Mon, 18 Mar 2024 16:22:52 GMT Content-Length: 0 Connection: close Location: https://pippio.com/api/sync?it=1&pid=500040&_=1710778970.3372326&iv=e90cf1c2-fac0-4c1a-9d96-09b4ab0b6774:1710778970.333378 Set-Cookie: _li_ss=CggKBgiiARC8Fw; Max-Age=2592000; Expires=Wed, 17 Apr 2024 16:22:52 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=c32b96b9-7358-4442-be14-23432a0e89b0; Max-Age=63072000; Expires=Wed, 18 Mar 2026 16:22:52 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 1 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.4	50305	52.86.124.2	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:52 UTC	535	OUT	OPTIONS /v1/traces HTTP/1.1 Host: us-east-1-otel.formassembly.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://indwes.tfaforms.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://indwes.tfaforms.net/56 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:52 UTC	350	IN	HTTP/1.1 204 No Content Date: Mon, 18 Mar 2024 16:22:52 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST Access-Control-Allow-Origin: https://indwes.tfaforms.net Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.4	50312	52.86.124.2	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:52 UTC	633	OUT	POST /v1/traces HTTP/1.1 Host: us-east-1-otel.formassembly.com Connection: keep-alive Content-Length: 1228 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://indwes.tfaforms.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://indwes.tfaforms.net/56 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:52 UTC	1228	OUT	Data Raw: 7b 22 72 65 73 6f 75 72 63 65 53 70 61 6e 73 22 3a 5b 7b 22 72 65 73 6f 75 72 63 65 22 3a 7b 22 61 74 74 72 69 62 75 74 65 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 73 65 72 76 69 63 65 2e 6e 61 6d 65 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 46 6f 72 6d 41 73 73 65 6d 62 6c 79 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 74 65 6c 65 6d 65 74 72 79 2e 73 64 6b 2e 6c 61 6e 67 75 61 67 65 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 77 65 62 6a 73 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 74 65 6c 65 6d 65 74 72 79 2e 73 64 6b 2e 6e 61 6d 65 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 6f 70 65 6e 74 65 6c 65 6d 65 74 72 79 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 74 65 6c 65 6d 65 Data Ascii: {"resourceSpans":[{"resource":{"attributes":[{"key":"service.name","value":{"stringValue":"FormAssembly"}},{"key":"telemetry.sdk.language","value":{"stringValue":"webjs"}},{"key":"telemetry.sdk.name","value":{"stringValue":"opentelemetry"}},{"key":"teleme
2024-03-18 16:22:52 UTC	239	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:52 GMT Content-Type: application/json Content-Length: 21 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://indwes.tfaforms.net Vary: Origin
2024-03-18 16:22:52 UTC	21	IN	Data Raw: 7b 22 70 61 72 74 69 61 6c 53 75 63 63 65 73 73 22 3a 7b 7d 7d Data Ascii: {"partialSuccess":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.4	50313	52.86.124.2	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:52 UTC	633	OUT	POST /v1/traces HTTP/1.1 Host: us-east-1-otel.formassembly.com Connection: keep-alive Content-Length: 1446 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://indwes.tfaforms.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://indwes.tfaforms.net/56 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:52 UTC	1446	OUT	Data Raw: 7b 22 72 65 73 6f 75 72 63 65 53 70 61 6e 73 22 3a 5b 7b 22 72 65 73 6f 75 72 63 65 22 3a 7b 22 61 74 74 72 69 62 75 74 65 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 73 65 72 76 69 63 65 2e 6e 61 6d 65 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 46 6f 72 6d 41 73 73 65 6d 62 6c 79 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 74 65 6c 65 6d 65 74 72 79 2e 73 64 6b 2e 6c 61 6e 67 75 61 67 65 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 77 65 62 6a 73 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 74 65 6c 65 6d 65 74 72 79 2e 73 64 6b 2e 6e 61 6d 65 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 6f 70 65 6e 74 65 6c 65 6d 65 74 72 79 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 74 65 6c 65 6d 65 Data Ascii: {"resourceSpans":[{"resource":{"attributes":[{"key":"service.name","value":{"stringValue":"FormAssembly"}},{"key":"telemetry.sdk.language","value":{"stringValue":"webjs"}},{"key":"telemetry.sdk.name","value":{"stringValue":"opentelemetry"}},{"key":"teleme
2024-03-18 16:22:52 UTC	239	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:52 GMT Content-Type: application/json Content-Length: 21 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://indwes.tfaforms.net Vary: Origin
2024-03-18 16:22:52 UTC	21	IN	Data Raw: 7b 22 70 61 72 74 69 61 6c 53 75 63 63 65 73 73 22 3a 7b 7d 7d Data Ascii: {"partialSuccess":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.4	50314	142.251.35.162	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:52 UTC	1698	OUT	GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:52 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:22:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.4	50315	142.251.35.162	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:52 UTC	2693	OUT	GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5884294479391638&output=html&h=90&slotname=3654094576&adk=228266070&adf=3493768505&pi=t.ma~as.3654094576&w=970&url=https%3A%2F%2Fbrowser-update.org%2F&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1710778930134&bpp=1204&bdt=1441&idt=2890&shv=r20240313&mjsv=m202403130201&ptt=5&saldr=sd&correlator=966864692783&frm=24&ife=3&pv=2&ga_vid=751177015.1710778933&ga_sid=1710778933&ga_hid=640648971&ga_fc=0&nhd=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=-12245933&bih=-12245933&isw=970&ish=90&ifk=1017635361&scr_x=-12245933&scr_y=-12245933&eid=44759875%2C44759926%2C44759842%2C31081793%2C95325975%2C95327950%2C95327954%2C31081901%2C95320376%2C95322388%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=862165079531677&tmod=1386792793&uas=0&nvt=1&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C970%2C90&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=1.bp47bps3drp4&fsb=1&dtd=2937 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:52 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:22:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.4	50316	52.86.124.2	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:53 UTC	633	OUT	POST /v1/traces HTTP/1.1 Host: us-east-1-otel.formassembly.com Connection: keep-alive Content-Length: 1446 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://indwes.tfaforms.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://indwes.tfaforms.net/56 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:53 UTC	1446	OUT	Data Raw: 7b 22 72 65 73 6f 75 72 63 65 53 70 61 6e 73 22 3a 5b 7b 22 72 65 73 6f 75 72 63 65 22 3a 7b 22 61 74 74 72 69 62 75 74 65 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 73 65 72 76 69 63 65 2e 6e 61 6d 65 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 46 6f 72 6d 41 73 73 65 6d 62 6c 79 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 74 65 6c 65 6d 65 74 72 79 2e 73 64 6b 2e 6c 61 6e 67 75 61 67 65 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 77 65 62 6a 73 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 74 65 6c 65 6d 65 74 72 79 2e 73 64 6b 2e 6e 61 6d 65 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 6f 70 65 6e 74 65 6c 65 6d 65 74 72 79 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 74 65 6c 65 6d 65 Data Ascii: {"resourceSpans":[{"resource":{"attributes":[{"key":"service.name","value":{"stringValue":"FormAssembly"}},{"key":"telemetry.sdk.language","value":{"stringValue":"webjs"}},{"key":"telemetry.sdk.name","value":{"stringValue":"opentelemetry"}},{"key":"teleme
2024-03-18 16:22:53 UTC	239	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:53 GMT Content-Type: application/json Content-Length: 21 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://indwes.tfaforms.net Vary: Origin
2024-03-18 16:22:53 UTC	21	IN	Data Raw: 7b 22 70 61 72 74 69 61 6c 53 75 63 63 65 73 73 22 3a 7b 7d 7d Data Ascii: {"partialSuccess":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.4	50317	52.86.124.2	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:53 UTC	633	OUT	POST /v1/traces HTTP/1.1 Host: us-east-1-otel.formassembly.com Connection: keep-alive Content-Length: 1446 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://indwes.tfaforms.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://indwes.tfaforms.net/56 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:53 UTC	1446	OUT	Data Raw: 7b 22 72 65 73 6f 75 72 63 65 53 70 61 6e 73 22 3a 5b 7b 22 72 65 73 6f 75 72 63 65 22 3a 7b 22 61 74 74 72 69 62 75 74 65 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 73 65 72 76 69 63 65 2e 6e 61 6d 65 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 46 6f 72 6d 41 73 73 65 6d 62 6c 79 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 74 65 6c 65 6d 65 74 72 79 2e 73 64 6b 2e 6c 61 6e 67 75 61 67 65 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 77 65 62 6a 73 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 74 65 6c 65 6d 65 74 72 79 2e 73 64 6b 2e 6e 61 6d 65 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 6f 70 65 6e 74 65 6c 65 6d 65 74 72 79 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 74 65 6c 65 6d 65 Data Ascii: {"resourceSpans":[{"resource":{"attributes":[{"key":"service.name","value":{"stringValue":"FormAssembly"}},{"key":"telemetry.sdk.language","value":{"stringValue":"webjs"}},{"key":"telemetry.sdk.name","value":{"stringValue":"opentelemetry"}},{"key":"teleme
2024-03-18 16:22:53 UTC	239	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:53 GMT Content-Type: application/json Content-Length: 21 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://indwes.tfaforms.net Vary: Origin
2024-03-18 16:22:53 UTC	21	IN	Data Raw: 7b 22 70 61 72 74 69 61 6c 53 75 63 63 65 73 73 22 3a 7b 7d 7d Data Ascii: {"partialSuccess":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.4	50319	34.36.216.150	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:53 UTC	698	OUT	GET /dmp/pixelSync?cookieQ=1&nid=3&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=691baf7a-d9e5-4c92-bd01-b05ff60933fe#1710778971689
2024-03-18 16:22:53 UTC	840	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=691baf7a-d9e5-4c92-bd01-b05ff60933fe#1710778971689; Domain=.sitescout.com; Expires=Tue, 18-Mar-2025 16:22:53 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyI0NSI6MTcxMDc3ODk3Mzg0Mn0; Domain=.sitescout.com; Expires=Wed, 17-Apr-2024 16:22:53 GMT; Path=/; Secure; SameSite=None location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=691baf7a-d9e5-4c92-bd01-b05ff60933fe-65f86a5b-5553&gdpr=0&gdpr_consent= Content-Length: 0 date: Mon, 18 Mar 2024 16:22:53 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.4	50320	107.178.254.65	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:53 UTC	755	OUT	GET /api/sync?it=1&pid=500040&_=1710778970.3372326&iv=e90cf1c2-fac0-4c1a-9d96-09b4ab0b6774:1710778970.333378 HTTP/1.1 Host: pippio.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: did=4rRGlOIxzUDuSNPR; didts=1710778964; nnls=; pxrc=CNTU4a8GEgYIgr0rEAA=
2024-03-18 16:22:53 UTC	461	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: pxrc=CNTU4a8GEgYIgr0rEAA=; Path=/; Domain=pippio.com; Expires=Fri, 17 May 2024 16:22:53 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Mon, 18 Mar 2024 16:22:53 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:53 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.4	50318	8.28.7.83	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:53 UTC	2837	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=3317571013507089770&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; pi=156011:4; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; KRTBCOOKIE_153=1923-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&19420-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&22979-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&23462-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF; KRTBCOOKIE_52=22772-R35CA5_112946CAA_57D5D193&KRTB&23092-R35CA5_112946CAA_57D5D193; chkChromeAb67Sec=4; DPSync3=1711929600%3A261_260_258_236_256_263_201_245_262_259%7C1710806400%3A248_255%7C1711756800%3A257%7C1711324800%3A253_252_265; SyncRTB3=1711929600%3A3_220_21_46_166_54_250_178_5_233_104_48_165_231_55_22_8_13_249_71%7C1711584000%3A63%7C1711324800%3A223_2_15; KRTBCOOKIE_860=16335-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23334-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23417-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23426-kMV4FFfoUmxPTw0WMkb-TL9g48I; KRTBCOOKIE_18=22947-8259856715668781746; KRTBCOOKIE_107=1471-uid:Ru9JGeXJ1RMfLb5&KRTB&23421-uid:Ru9JGeXJ1RMfLb5; KRTBCOOKIE_466=16530-2b28c092-dd0b-42bb-b143-c15d16fc69ab; PugT=1710778970; SPugT=1710778972
2024-03-18 16:22:53 UTC	644	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Mar 2024 02:29:13 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_22=14911-3317571013507089770&KRTB&23150-3317571013507089770&KRTB&23527-3317571013507089770; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 02:29:13 GMT; path=/ Set-Cookie: PugT=1710728953; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 02:29:13 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-18 16:22:53 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.4	50323	8.28.7.83	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:54 UTC	2938	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=691baf7a-d9e5-4c92-bd01-b05ff60933fe-65f86a5b-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; pi=156011:4; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; KRTBCOOKIE_153=1923-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&19420-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&22979-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&23462-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF; KRTBCOOKIE_52=22772-R35CA5_112946CAA_57D5D193&KRTB&23092-R35CA5_112946CAA_57D5D193; chkChromeAb67Sec=4; DPSync3=1711929600%3A261_260_258_236_256_263_201_245_262_259%7C1710806400%3A248_255%7C1711756800%3A257%7C1711324800%3A253_252_265; SyncRTB3=1711929600%3A3_220_21_46_166_54_250_178_5_233_104_48_165_231_55_22_8_13_249_71%7C1711584000%3A63%7C1711324800%3A223_2_15; KRTBCOOKIE_860=16335-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23334-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23417-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23426-kMV4FFfoUmxPTw0WMkb-TL9g48I; KRTBCOOKIE_18=22947-8259856715668781746; KRTBCOOKIE_107=1471-uid:Ru9JGeXJ1RMfLb5&KRTB&23421-uid:Ru9JGeXJ1RMfLb5; KRTBCOOKIE_466=16530-2b28c092-dd0b-42bb-b143-c15d16fc69ab; SPugT=1710778972; KRTBCOOKIE_22=14911-3317571013507089770&KRTB&23150-3317571013507089770&KRTB&23527-3317571013507089770; PugT=1710728953
2024-03-18 16:22:54 UTC	676	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Mar 2024 16:22:54 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_188=3189-691baf7a-d9e5-4c92-bd01-b05ff60933fe-65f86a5b-5553&KRTB&23418-691baf7a-d9e5-4c92-bd01-b05ff60933fe-65f86a5b-5553; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 16-Jun-2024 16:22:54 GMT; path=/ Set-Cookie: PugT=1710778974; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 16:22:54 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-18 16:22:54 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.4	50322	142.251.40.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:54 UTC	1414	OUT	GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:54 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:22:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.4	50324	142.251.40.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:54 UTC	1246	OUT	GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:54 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:22:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.4	50326	8.28.7.83	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:54 UTC	2704	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=3317571013507089770&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; pi=156011:4; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; KRTBCOOKIE_153=1923-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&19420-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&22979-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&23462-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF; KRTBCOOKIE_52=22772-R35CA5_112946CAA_57D5D193&KRTB&23092-R35CA5_112946CAA_57D5D193; chkChromeAb67Sec=4; DPSync3=1711929600%3A261_260_258_236_256_263_201_245_262_259%7C1710806400%3A248_255%7C1711756800%3A257%7C1711324800%3A253_252_265; SyncRTB3=1711929600%3A3_220_21_46_166_54_250_178_5_233_104_48_165_231_55_22_8_13_249_71%7C1711584000%3A63%7C1711324800%3A223_2_15; KRTBCOOKIE_860=16335-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23334-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23417-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23426-kMV4FFfoUmxPTw0WMkb-TL9g48I; KRTBCOOKIE_18=22947-8259856715668781746; KRTBCOOKIE_107=1471-uid:Ru9JGeXJ1RMfLb5&KRTB&23421-uid:Ru9JGeXJ1RMfLb5; KRTBCOOKIE_466=16530-2b28c092-dd0b-42bb-b143-c15d16fc69ab; SPugT=1710778972; KRTBCOOKIE_22=14911-3317571013507089770&KRTB&23150-3317571013507089770&KRTB&23527-3317571013507089770; PugT=1710728953
2024-03-18 16:22:54 UTC	644	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Mar 2024 16:22:53 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_22=14911-3317571013507089770&KRTB&23150-3317571013507089770&KRTB&23527-3317571013507089770; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 16:22:53 GMT; path=/ Set-Cookie: PugT=1710778973; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 16:22:53 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-18 16:22:54 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.4	50327	142.251.35.162	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:54 UTC	1698	OUT	GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:54 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:22:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.4	50325	52.86.124.2	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:54 UTC	633	OUT	POST /v1/traces HTTP/1.1 Host: us-east-1-otel.formassembly.com Connection: keep-alive Content-Length: 1446 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://indwes.tfaforms.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://indwes.tfaforms.net/56 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:54 UTC	1446	OUT	Data Raw: 7b 22 72 65 73 6f 75 72 63 65 53 70 61 6e 73 22 3a 5b 7b 22 72 65 73 6f 75 72 63 65 22 3a 7b 22 61 74 74 72 69 62 75 74 65 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 73 65 72 76 69 63 65 2e 6e 61 6d 65 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 46 6f 72 6d 41 73 73 65 6d 62 6c 79 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 74 65 6c 65 6d 65 74 72 79 2e 73 64 6b 2e 6c 61 6e 67 75 61 67 65 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 77 65 62 6a 73 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 74 65 6c 65 6d 65 74 72 79 2e 73 64 6b 2e 6e 61 6d 65 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 6f 70 65 6e 74 65 6c 65 6d 65 74 72 79 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 74 65 6c 65 6d 65 Data Ascii: {"resourceSpans":[{"resource":{"attributes":[{"key":"service.name","value":{"stringValue":"FormAssembly"}},{"key":"telemetry.sdk.language","value":{"stringValue":"webjs"}},{"key":"telemetry.sdk.name","value":{"stringValue":"opentelemetry"}},{"key":"teleme
2024-03-18 16:22:54 UTC	239	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:54 GMT Content-Type: application/json Content-Length: 21 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://indwes.tfaforms.net Vary: Origin
2024-03-18 16:22:54 UTC	21	IN	Data Raw: 7b 22 70 61 72 74 69 61 6c 53 75 63 63 65 73 73 22 3a 7b 7d 7d Data Ascii: {"partialSuccess":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.4	50328	107.178.254.65	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:54 UTC	519	OUT	GET /api/sync?it=1&pid=500040&_=1710778970.3372326&iv=e90cf1c2-fac0-4c1a-9d96-09b4ab0b6774:1710778970.333378 HTTP/1.1 Host: pippio.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: did=4rRGlOIxzUDuSNPR; didts=1710778964; nnls=; pxrc=CNTU4a8GEgYIgr0rEAA=
2024-03-18 16:22:54 UTC	461	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: pxrc=CNTU4a8GEgYIgr0rEAA=; Path=/; Domain=pippio.com; Expires=Fri, 17 May 2024 16:22:54 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Mon, 18 Mar 2024 16:22:54 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:22:54 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.4	50329	142.251.35.162	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:54 UTC	2693	OUT	GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5884294479391638&output=html&h=90&slotname=3654094576&adk=228266070&adf=3493768505&pi=t.ma~as.3654094576&w=970&url=https%3A%2F%2Fbrowser-update.org%2F&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1710778930134&bpp=1204&bdt=1441&idt=2890&shv=r20240313&mjsv=m202403130201&ptt=5&saldr=sd&correlator=966864692783&frm=24&ife=3&pv=2&ga_vid=751177015.1710778933&ga_sid=1710778933&ga_hid=640648971&ga_fc=0&nhd=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=-12245933&bih=-12245933&isw=970&ish=90&ifk=1017635361&scr_x=-12245933&scr_y=-12245933&eid=44759875%2C44759926%2C44759842%2C31081793%2C95325975%2C95327950%2C95327954%2C31081901%2C95320376%2C95322388%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=862165079531677&tmod=1386792793&uas=0&nvt=1&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C970%2C90&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=1.bp47bps3drp4&fsb=1&dtd=2937 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:54 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:22:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.4	50330	8.28.7.83	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:54 UTC	2836	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=691baf7a-d9e5-4c92-bd01-b05ff60933fe-65f86a5b-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; pi=156011:4; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; KRTBCOOKIE_153=1923-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&19420-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&22979-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&23462-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF; KRTBCOOKIE_52=22772-R35CA5_112946CAA_57D5D193&KRTB&23092-R35CA5_112946CAA_57D5D193; chkChromeAb67Sec=4; DPSync3=1711929600%3A261_260_258_236_256_263_201_245_262_259%7C1710806400%3A248_255%7C1711756800%3A257%7C1711324800%3A253_252_265; SyncRTB3=1711929600%3A3_220_21_46_166_54_250_178_5_233_104_48_165_231_55_22_8_13_249_71%7C1711584000%3A63%7C1711324800%3A223_2_15; KRTBCOOKIE_860=16335-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23334-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23417-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23426-kMV4FFfoUmxPTw0WMkb-TL9g48I; KRTBCOOKIE_18=22947-8259856715668781746; KRTBCOOKIE_107=1471-uid:Ru9JGeXJ1RMfLb5&KRTB&23421-uid:Ru9JGeXJ1RMfLb5; KRTBCOOKIE_466=16530-2b28c092-dd0b-42bb-b143-c15d16fc69ab; SPugT=1710778972; KRTBCOOKIE_22=14911-3317571013507089770&KRTB&23150-3317571013507089770&KRTB&23527-3317571013507089770; KRTBCOOKIE_188=3189-691baf7a-d9e5-4c92-bd01-b05ff60933fe-65f86a5b-5553&KRTB&23418-691baf7a-d9e5-4c92-bd01-b05ff60933fe-65f86a5b-5553; PugT=1710778974
2024-03-18 16:22:54 UTC	676	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Mar 2024 16:22:53 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_188=3189-691baf7a-d9e5-4c92-bd01-b05ff60933fe-65f86a5b-5553&KRTB&23418-691baf7a-d9e5-4c92-bd01-b05ff60933fe-65f86a5b-5553; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 16-Jun-2024 16:22:53 GMT; path=/ Set-Cookie: PugT=1710778973; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 16:22:53 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-18 16:22:54 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.4	50332	142.251.40.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:54 UTC	1414	OUT	GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:55 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:22:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.4	50333	142.251.40.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:55 UTC	1246	OUT	GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:55 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:22:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.4	50335	142.251.35.162	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:56 UTC	2693	OUT	GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5884294479391638&output=html&h=90&slotname=3654094576&adk=228266070&adf=3493768505&pi=t.ma~as.3654094576&w=970&url=https%3A%2F%2Fbrowser-update.org%2F&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1710778930134&bpp=1204&bdt=1441&idt=2890&shv=r20240313&mjsv=m202403130201&ptt=5&saldr=sd&correlator=966864692783&frm=24&ife=3&pv=2&ga_vid=751177015.1710778933&ga_sid=1710778933&ga_hid=640648971&ga_fc=0&nhd=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=-12245933&bih=-12245933&isw=970&ish=90&ifk=1017635361&scr_x=-12245933&scr_y=-12245933&eid=44759875%2C44759926%2C44759842%2C31081793%2C95325975%2C95327950%2C95327954%2C31081901%2C95320376%2C95322388%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=862165079531677&tmod=1386792793&uas=0&nvt=1&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C970%2C90&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=1.bp47bps3drp4&fsb=1&dtd=2937 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:56 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:22:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.4	50336	142.251.35.162	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:56 UTC	1698	OUT	GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:56 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:22:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.4	50334	52.86.124.2	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:56 UTC	633	OUT	POST /v1/traces HTTP/1.1 Host: us-east-1-otel.formassembly.com Connection: keep-alive Content-Length: 1446 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://indwes.tfaforms.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://indwes.tfaforms.net/56 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:56 UTC	1446	OUT	Data Raw: 7b 22 72 65 73 6f 75 72 63 65 53 70 61 6e 73 22 3a 5b 7b 22 72 65 73 6f 75 72 63 65 22 3a 7b 22 61 74 74 72 69 62 75 74 65 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 73 65 72 76 69 63 65 2e 6e 61 6d 65 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 46 6f 72 6d 41 73 73 65 6d 62 6c 79 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 74 65 6c 65 6d 65 74 72 79 2e 73 64 6b 2e 6c 61 6e 67 75 61 67 65 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 77 65 62 6a 73 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 74 65 6c 65 6d 65 74 72 79 2e 73 64 6b 2e 6e 61 6d 65 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 6f 70 65 6e 74 65 6c 65 6d 65 74 72 79 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 74 65 6c 65 6d 65 Data Ascii: {"resourceSpans":[{"resource":{"attributes":[{"key":"service.name","value":{"stringValue":"FormAssembly"}},{"key":"telemetry.sdk.language","value":{"stringValue":"webjs"}},{"key":"telemetry.sdk.name","value":{"stringValue":"opentelemetry"}},{"key":"teleme
2024-03-18 16:22:56 UTC	239	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:56 GMT Content-Type: application/json Content-Length: 21 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://indwes.tfaforms.net Vary: Origin
2024-03-18 16:22:56 UTC	21	IN	Data Raw: 7b 22 70 61 72 74 69 61 6c 53 75 63 63 65 73 73 22 3a 7b 7d 7d Data Ascii: {"partialSuccess":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.4	50337	142.251.40.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:58 UTC	1246	OUT	GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:58 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:22:58 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.4	50338	142.251.40.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:58 UTC	1414	OUT	GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:22:58 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:22:58 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.4	50339	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:59 UTC	1599	OUT	GET / HTTP/1.1 Host: browser-update.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA; cto_bundle=VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE5DeE1QUDZrQ1p1REU2QzUzMm9iS3pISWVKOFREZG8lM0Q
2024-03-18 16:22:59 UTC	550	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:59 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UMcpU%2FnPu6z6ZrSLWPQfvQ1uwCYPawfW4QeKLpyINauxR7nw%2BdK2wH4qXv0VaKLcV%2F6NcvZpNfOWaTYJLchtW6kk19Ki55JiSze4yH9okPPeMnuewRtHEE4GlXkt6ACserfjvQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8666908db9460f74-EWR
2024-03-18 16:22:59 UTC	1369	IN	Data Raw: 31 33 66 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 4e 6f 74 69 66 69 65 73 20 76 69 73 69 74 6f 72 73 20 74 6f 20 75 70 64 61 74 65 20 74 68 65 69 72 20 62 72 6f 77 73 65 72 20 2d 20 42 72 6f 77 73 65 72 2d 55 70 64 61 74 65 2e 6f 72 67 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f Data Ascii: 13fb<!DOCTYPE html ><html lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><title>Notifies visitors to update their browser - Browser-Update.org</title><meta name="description" content /><meta name="keywords" co
2024-03-18 16:22:59 UTC	1369	IN	Data Raw: 3c 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 0a 3c 6e 61 76 3e 0a 3c 64 69 76 3e 3c 61 20 68 72 65 66 3d 22 2f 22 3e 41 62 6f 75 74 20 74 68 65 20 50 72 6f 6a 65 63 74 3c 2f 61 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 3e 3c 61 20 68 72 65 66 3d 22 2f 75 70 64 61 74 65 2d 62 72 6f 77 73 65 72 2e 68 74 6d 6c 23 33 22 3e 55 70 64 61 74 65 20 79 6f 75 72 20 42 72 6f 77 73 65 72 3c 2f 61 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 3e 3c 61 20 68 72 65 66 3d 22 2f 73 74 61 74 2e 68 74 6d 6c 22 3e 53 74 61 74 69 73 74 69 63 73 3c 2f 61 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 3e 3c 61 20 68 72 65 66 3d 22 2f 62 6c 6f 67 2e 68 74 6d 6c 22 3e 42 6c 6f 67 3c 2f 61 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 3e 3c 61 20 68 72 65 66 3d 22 2f 63 6f 6e 74 61 Data Ascii: <span></span><span></span><nav><div><a href="/">About the Project</a></div><div><a href="/update-browser.html#3">Update your Browser</a></div><div><a href="/stat.html">Statistics</a></div><div><a href="/blog.html">Blog</a></div><div><a href="/conta
2024-03-18 16:22:59 UTC	1369	IN	Data Raw: 0a 3c 61 20 68 72 65 66 3d 22 2f 6c 76 2f 22 3e 4c 61 74 76 69 65 c5 a1 75 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 67 61 2f 22 3e 47 61 65 69 6c 67 65 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 6e 6f 2f 22 3e 4e 6f 72 73 6b 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 74 68 2f 22 3e e0 b8 a0 e0 b8 b2 e0 b8 a9 e0 b8 b2 e0 b9 84 e0 b8 97 e0 b8 a2 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 73 6b 2f 22 3e 73 6c 6f 76 65 6e c4 8d 69 6e 61 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 68 69 2f 22 3e e0 a4 b9 e0 a4 bf e0 a4 a8 e0 a5 8d e0 a4 a6 e0 a5 80 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 76 69 2f 22 3e 74 69 e1 ba bf 6e 67 20 56 69 e1 bb 87 74 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 75 7a 2f 22 3e 6f ca bb 7a 62 65 6b 63 68 61 3c 2f 61 3e Data Ascii: <a href="/lv/">Latvieu</a><a href="/ga/">Gaeilge</a><a href="/no/">Norsk</a><a href="/th/"></a><a href="/sk/">slovenina</a><a href="/hi/"></a><a href="/vi/">ting Vit</a><a href="/uz/">ozbekcha</a>
2024-03-18 16:22:59 UTC	1016	IN	Data Raw: 74 65 2e 3c 2f 62 3e 20 55 70 64 61 74 65 20 79 6f 75 72 20 62 72 6f 77 73 65 72 20 66 6f 72 20 6d 6f 72 65 20 73 65 63 75 72 69 74 79 2c 20 73 70 65 65 64 20 61 6e 64 20 74 68 65 20 62 65 73 74 20 65 78 70 65 72 69 65 6e 63 65 20 6f 6e 20 74 68 69 73 20 73 69 74 65 2e 3c 61 20 68 72 65 66 3d 22 75 70 64 61 74 65 2e 68 74 6d 6c 3f 66 6f 72 63 65 5f 6f 75 74 64 61 74 65 64 3d 74 72 75 65 22 3e 55 70 64 61 74 65 20 62 72 6f 77 73 65 72 3c 2f 61 3e 20 3c 61 20 69 64 3d 22 62 75 6f 72 67 69 67 22 3e 49 67 6e 6f 72 65 3c 2f 61 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 3e 0a 42 79 20 63 6c 69 63 6b 69 6e 67 20 74 68 65 20 6d 65 73 73 61 67 65 2c 20 74 68 65 79 20 77 69 6c 6c 20 67 65 74 20 74 6f 20 61 6e 20 3c 61 20 68 72 65 66 3d Data Ascii: te.</b> Update your browser for more security, speed and the best experience on this site.<a href="update.html?force_outdated=true">Update browser</a> <a id="buorgig">Ignore</a></div></div></li><li>By clicking the message, they will get to an <a href=
2024-03-18 16:22:59 UTC	1369	IN	Data Raw: 33 39 37 32 0d 0a 0a 57 65 20 74 61 6b 65 20 63 61 72 65 20 6e 6f 74 20 74 6f 20 65 72 72 6f 6e 65 6f 75 73 6c 79 20 6e 6f 74 69 66 79 20 75 73 65 72 73 20 62 79 20 63 6f 6e 73 74 61 6e 74 6c 79 20 74 77 65 61 6b 69 6e 67 20 61 6e 64 20 69 6d 70 72 6f 76 69 6e 67 20 74 68 65 20 64 65 74 65 63 74 69 6f 6e 20 63 6f 64 65 2e 20 55 73 65 72 73 20 61 72 65 20 70 72 65 73 65 6e 74 65 64 20 77 69 74 68 20 61 6e 20 75 70 2d 74 6f 2d 64 61 74 65 20 6c 69 73 74 20 6f 66 20 62 72 6f 77 73 65 72 73 20 74 68 61 74 20 61 72 65 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 74 68 65 69 72 20 73 79 73 74 65 6d 2e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 3e 0a 3c 68 33 3e 43 75 73 74 6f 6d 69 7a 61 62 6c 65 3c 2f 68 33 3e 0a 59 6f 75 20 63 61 6e 20 3c 61 20 68 72 65 66 3d 22 63 75 73 Data Ascii: 3972We take care not to erroneously notify users by constantly tweaking and improving the detection code. Users are presented with an up-to-date list of browsers that are available for their system.</li><li><h3>Customizable</h3>You can <a href="cus
2024-03-18 16:22:59 UTC	1369	IN	Data Raw: 3c 6c 69 20 63 6c 61 73 73 3d 22 62 65 22 3e 0a 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 66 2d 65 22 3e 45 64 67 65 2f 49 45 3c 2f 6c 61 62 65 6c 3e 0a 3c 73 65 6c 65 63 74 20 69 64 3d 22 66 2d 65 22 20 6f 6e 63 68 61 6e 67 65 3d 22 63 6f 64 65 28 29 22 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 30 22 3e 6c 61 74 65 73 74 20 76 65 72 73 69 6f 6e 20 28 63 75 72 72 65 6e 74 6c 79 20 31 32 32 29 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 2d 36 22 3e 61 74 20 6c 65 61 73 74 20 36 20 76 65 72 73 69 6f 6e 73 20 62 65 68 69 6e 64 20 6c 61 74 65 73 74 20 28 63 75 72 72 65 6e 74 6c 79 20 31 31 36 29 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 2d 35 22 3e 61 74 20 6c 65 61 73 74 20 35 20 76 65 72 73 Data Ascii: <li class="be"><label for="f-e">Edge/IE</label><select id="f-e" onchange="code()"><option value="0">latest version (currently 122)</option><option value="-6">at least 6 versions behind latest (currently 116)</option><option value="-5">at least 5 vers
2024-03-18 16:22:59 UTC	1369	IN	Data Raw: 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 39 39 22 3e 39 39 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 39 38 22 3e 39 38 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 39 37 22 3e 39 37 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 39 36 22 3e 39 36 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 39 35 22 3e 39 35 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 39 34 22 3e 39 34 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 39 33 22 3e 39 33 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 39 32 22 3e 39 32 3c 2f 6f 70 74 69 6f Data Ascii: </option><option value="99">99</option><option value="98">98</option><option value="97">97</option><option value="96">96</option><option value="95">95</option><option value="94">94</option><option value="93">93</option><option value="92">92</optio
2024-03-18 16:22:59 UTC	1369	IN	Data Raw: 72 72 65 6e 74 6c 79 20 31 31 39 29 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 2d 33 22 20 73 65 6c 65 63 74 65 64 3e 61 74 20 6c 65 61 73 74 20 33 20 76 65 72 73 69 6f 6e 73 20 62 65 68 69 6e 64 20 6c 61 74 65 73 74 20 28 63 75 72 72 65 6e 74 6c 79 20 31 32 30 29 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 2d 32 22 3e 61 74 20 6c 65 61 73 74 20 32 20 76 65 72 73 69 6f 6e 73 20 62 65 68 69 6e 64 20 6c 61 74 65 73 74 20 28 63 75 72 72 65 6e 74 6c 79 20 31 32 31 29 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 2d 31 22 3e 61 74 20 6c 65 61 73 74 20 31 20 76 65 72 73 69 6f 6e 73 20 62 65 68 69 6e 64 20 6c 61 74 65 73 74 20 28 63 75 72 72 65 6e 74 6c 79 20 31 32 32 29 Data Ascii: rrently 119)</option><option value="-3" selected>at least 3 versions behind latest (currently 120)</option><option value="-2">at least 2 versions behind latest (currently 121)</option><option value="-1">at least 1 versions behind latest (currently 122)
2024-03-18 16:22:59 UTC	1369	IN	Data Raw: 61 6c 75 65 3d 22 31 30 31 22 3e 31 30 31 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 31 30 30 22 3e 31 30 30 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 39 39 22 3e 39 39 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 39 38 22 3e 39 38 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 39 37 22 3e 39 37 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 39 36 22 3e 39 36 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 2f 73 65 6c 65 63 74 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 62 73 22 3e 0a 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 66 2d 73 22 3e 53 61 66 61 72 69 3c 2f 6c 61 62 65 6c 3e 0a 3c 73 65 6c 65 63 74 20 69 64 Data Ascii: alue="101">101</option><option value="100">100</option><option value="99">99</option><option value="98">98</option><option value="97">97</option><option value="96">96</option></select></li><li class="bs"><label for="f-s">Safari</label><select id
2024-03-18 16:22:59 UTC	1369	IN	Data Raw: 3e 61 74 20 6c 65 61 73 74 20 35 20 76 65 72 73 69 6f 6e 73 20 62 65 68 69 6e 64 20 6c 61 74 65 73 74 20 28 63 75 72 72 65 6e 74 6c 79 20 31 31 37 29 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 2d 34 22 3e 61 74 20 6c 65 61 73 74 20 34 20 76 65 72 73 69 6f 6e 73 20 62 65 68 69 6e 64 20 6c 61 74 65 73 74 20 28 63 75 72 72 65 6e 74 6c 79 20 31 31 38 29 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 2d 33 22 20 73 65 6c 65 63 74 65 64 3e 61 74 20 6c 65 61 73 74 20 33 20 76 65 72 73 69 6f 6e 73 20 62 65 68 69 6e 64 20 6c 61 74 65 73 74 20 28 63 75 72 72 65 6e 74 6c 79 20 31 31 39 29 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 2d 32 22 3e 61 74 20 6c 65 61 73 74 20 32 20 Data Ascii: >at least 5 versions behind latest (currently 117)</option><option value="-4">at least 4 versions behind latest (currently 118)</option><option value="-3" selected>at least 3 versions behind latest (currently 119)</option><option value="-2">at least 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.4	50344	52.86.124.2	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:59 UTC	535	OUT	OPTIONS /v1/traces HTTP/1.1 Host: us-east-1-otel.formassembly.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://indwes.tfaforms.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://indwes.tfaforms.net/56 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:59 UTC	350	IN	HTTP/1.1 204 No Content Date: Mon, 18 Mar 2024 16:22:59 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST Access-Control-Allow-Origin: https://indwes.tfaforms.net Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.4	50345	52.86.124.2	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:59 UTC	633	OUT	POST /v1/traces HTTP/1.1 Host: us-east-1-otel.formassembly.com Connection: keep-alive Content-Length: 1446 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://indwes.tfaforms.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://indwes.tfaforms.net/56 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:22:59 UTC	1446	OUT	Data Raw: 7b 22 72 65 73 6f 75 72 63 65 53 70 61 6e 73 22 3a 5b 7b 22 72 65 73 6f 75 72 63 65 22 3a 7b 22 61 74 74 72 69 62 75 74 65 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 73 65 72 76 69 63 65 2e 6e 61 6d 65 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 46 6f 72 6d 41 73 73 65 6d 62 6c 79 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 74 65 6c 65 6d 65 74 72 79 2e 73 64 6b 2e 6c 61 6e 67 75 61 67 65 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 77 65 62 6a 73 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 74 65 6c 65 6d 65 74 72 79 2e 73 64 6b 2e 6e 61 6d 65 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 6f 70 65 6e 74 65 6c 65 6d 65 74 72 79 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 74 65 6c 65 6d 65 Data Ascii: {"resourceSpans":[{"resource":{"attributes":[{"key":"service.name","value":{"stringValue":"FormAssembly"}},{"key":"telemetry.sdk.language","value":{"stringValue":"webjs"}},{"key":"telemetry.sdk.name","value":{"stringValue":"opentelemetry"}},{"key":"teleme
2024-03-18 16:22:59 UTC	239	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:22:59 GMT Content-Type: application/json Content-Length: 21 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://indwes.tfaforms.net Vary: Origin
2024-03-18 16:22:59 UTC	21	IN	Data Raw: 7b 22 70 61 72 74 69 61 6c 53 75 63 63 65 73 73 22 3a 7b 7d 7d Data Ascii: {"partialSuccess":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.4	50340	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:22:59 UTC	1567	OUT	GET /static/img/shot%20update.png HTTP/1.1 Host: browser-update.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA; cto_bundle=VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE5DeE1QUDZrQ1p1REU2QzUzMm9iS3pISWVKOFREZG8lM0Q
2024-03-18 16:23:00 UTC	688	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:23:00 GMT Content-Type: image/png Content-Length: 110584 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename="shot update.png" last-modified: Sun, 21 Mar 2021 12:19:12 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YpMX0eJpDXBIQg2MWjKGko3b7UqenVwRV7ZPtBeSbv5WbcRKNdExdo2j1BEMMy3cJWtuODXFNwQULByY%2FD513ee9oF%2BJjonwQjyo7voIE2uH4LSpQdpZY0gWIfOW9AK6AYo38g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86669090695f8c63-EWR
2024-03-18 16:23:00 UTC	681	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 2a 00 00 01 77 08 02 00 00 00 2d 91 e2 d3 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 ff a5 49 44 41 54 78 5e ec fd 07 98 24 49 76 1e 08 9a ab 90 19 a9 ab b2 b4 56 5d ad e5 b4 1a 8d 19 0c f4 80 5c 82 04 b9 14 4b 72 49 ae b8 25 8f e0 ee dd 47 de 61 c1 e5 f1 f6 bb 25 8f e4 1e 49 e0 23 09 92 58 2c 40 00 83 05 66 80 1d 8c e8 99 16 d3 5a 95 d6 ba b2 b2 52 8b c8 cc 50 1e 2e ef 09 73 0f 8f c8 c8 ac ac ae ca 4e 51 f6 e7 4b f3 67 cf 9e 99 9b 47 98 b9 d9 1f e6 42 0b cb 65 a1 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 b0 92 d0 e5 56 41 41 41 41 41 41 41 41 41 41 41 41 41 41 61 c5 a0 e8 b7 82 82 82 82 Data Ascii: PNGIHDR*w-sRGBgAMAapHYsodIDATx^$IvV]\KrI%Ga%I#X,@fZRP.sNQKgGBeVAAAAAAAAAAAAAAa
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: 61 c5 a1 e8 b7 82 82 82 82 82 82 82 82 82 82 82 82 82 c2 8a 43 d1 6f 05 05 05 05 05 05 05 05 05 05 05 05 05 85 15 87 a2 df 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2b 0e 45 bf 15 14 14 14 14 14 14 14 14 14 14 14 14 14 56 1c 8a 7e 2b 28 28 28 28 28 28 28 28 28 28 28 28 28 ac 38 14 fd 56 50 50 50 50 50 50 50 50 50 50 50 50 50 58 71 28 fa ad a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 b0 e2 50 f4 5b 41 41 41 41 41 41 41 41 41 41 41 41 41 61 c5 a1 e8 b7 82 82 82 82 82 82 82 82 82 82 82 82 82 c2 8a 43 d1 6f 05 05 05 05 05 05 05 05 05 05 05 05 05 85 15 87 a2 df 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2b 0e 45 bf 15 14 14 14 14 14 14 14 14 14 14 14 14 14 56 1c 8a 7e 2b 28 28 28 28 28 28 28 28 28 28 28 28 28 ac 38 14 fd 56 50 50 50 50 50 50 50 50 50 50 50 50 50 58 Data Ascii: aCo+EV~+(((((((((((((8VPPPPPPPPPPPPPXq(P[AAAAAAAAAAAAAaCo+EV~+(((((((((((((8VPPPPPPPPPPPPPX
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: ac d7 fd 6a 25 ac 56 82 6a 35 a8 d5 02 bb 16 38 75 0d ec 30 ef c7 c1 15 a0 69 86 1e ea ba 9e 4a e9 99 ac 9e cd ea b9 bc 96 cb 1b 10 a6 f0 69 c6 1a 14 6b 40 68 60 2f 06 81 62 59 51 50 50 f8 c4 f0 7d 5c d9 9e 98 12 37 87 f0 0a 73 e0 de 53 45 5c e8 e6 b5 ee 6a 15 1f 6c be 7e 01 e7 87 6c 06 6f 02 e7 95 f0 4d fd c8 c6 77 6d 17 bb 76 60 d8 d3 2d 9f 94 ae a0 a0 f0 89 00 e3 37 00 ba 90 1f c2 dc 3a f4 42 10 d0 c3 4a 10 4c b9 fe 8c e7 4d 79 fe 8c eb cd fb 20 7e 2d 08 6c 3f 70 45 08 0e 90 d5 d0 84 a9 69 96 10 39 43 cf e9 5a c1 30 ba 4d b3 db 34 7a 4c ab d7 34 7b 4c 33 af 1b e0 03 43 3e b8 19 24 30 de c3 1e 15 15 5f b3 50 f4 5b 81 10 3a c2 3b 25 bc 77 84 f8 86 d0 46 85 7e 40 68 59 ec bc c1 6d 11 0c 09 91 11 da 4e 61 fe 35 61 fc 98 d0 06 e0 0c 20 73 29 28 28 dc 15 78 Data Ascii: j%Vj58u0iJik@h`/bYQPP}\7sSE\jl~loMwmv`-7:BJLMy ~-l?pEi9CZ0M4zL4{L3C>$0_P[:;%wF~@hYmNa5a s)((x
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: 2a 74 bf 58 e8 7d 28 5b e8 b7 52 5d 86 45 b7 b1 35 9d 2f 14 56 14 8a 7e 3f e0 a0 2e 5a fd 7d 61 ff 81 b0 ce 0a 73 5a 18 bb 85 be 99 ae 3c 37 a5 03 f4 d8 60 04 e9 77 38 87 77 7d 1b 4f 10 fd fe 9a d0 b6 0b ad 53 f5 56 05 85 18 a1 6d 3b a3 c3 ce d0 20 10 ef fa ad 9b fe cc 14 de c5 5d af 35 6e e4 06 f0 34 17 d0 96 39 a3 b9 bd bd 3d da 3a 2f 5a 82 9c 4c 6b 9a 2e 60 b0 35 4d 2d 9d d1 32 59 a3 a7 2f bd 67 5f 7a f7 be d4 ae 3d a9 ed 3b c0 c2 de 0a 0a 0f 10 a0 6b 78 3e 3e 41 6d 7c 52 0c 8d 88 ab 37 c4 b5 9b 78 83 37 f0 f0 c9 69 e9 b3 a6 c0 b3 e5 f8 7c 02 08 71 21 2b d0 f0 d9 4e a0 f8 b4 ae e5 87 38 f5 07 05 81 07 89 7f 34 6e c3 9c 1c 34 ba 73 05 7f 78 c3 59 3a 9c 15 74 fa a1 1d 97 cb 28 6a d0 9a 1e 13 7a 89 9d db f0 79 6c 07 f7 8a fd 7b f0 b5 e1 db 06 44 7f 1f 92 Data Ascii: *tX}([R]E5/V~?.Z}asZ<7`w8w}OSVm; ]5n49=:/ZLk.`5M-2Y/g_z=;kx>>Am\|R7x7i\|q!+N84n4sxY:t(jzyl{D
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: e8 f7 5a 04 f4 eb ba 0f a2 d9 be 70 03 41 af e6 d7 bc 00 47 53 08 5d 8c 82 57 88 77 67 d1 55 60 26 29 10 5a ba b0 34 61 ea 22 6d 88 9c 81 96 c5 bb 0a 14 11 e2 2d df d5 7f 25 cc 21 bc eb 1b b8 b7 b6 49 e8 5b e8 c6 ef 85 80 69 8a 83 0c 3c 9c c0 4b d0 c3 92 d0 0e 09 fd 59 61 7c 59 18 2f d3 9b c0 d3 d2 51 41 61 a3 02 46 4c 4d 0b 2a 65 fb e2 b9 da 85 b3 f6 d5 cb fe d4 44 68 d7 02 7a 9a 9a f4 59 0c 8b 39 b4 b3 df 07 fa 0d 68 6f 5f b6 33 4c c4 0d 53 cb e6 8c fe cd 99 43 87 b3 0f 3f 9e 3d fa a8 9e ef 40 4f 35 b7 56 d8 00 00 9a 6d d7 f1 06 ef 0b 97 c5 a5 ab e2 f2 75 71 7b 04 5f 33 86 6f da bf 9b 0e b8 22 80 0a d0 5a 37 5f 5e 2e 34 a8 93 1b 06 70 ae 29 fb 6e d5 f7 80 66 d7 02 50 dc 4a e0 d7 02 bc e0 dc 0b fc 00 40 37 7a 43 66 16 2e 88 c3 e5 77 5a f6 c4 bd a2 00 c5 Data Ascii: ZpAGS]WwgU`&)Z4a"m-%!I[i<KYa\|Y/QAaFLM*eDhzY9ho_3LSC?=@O5Vmuq{_3o"Z7_^.4p)nfPJ@7zCf.wZ
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: c5 41 57 a1 07 13 f4 32 70 70 ee 12 e6 2f 0a e3 ab 42 db 8b 8b e7 54 0f e9 98 44 bd 2a 66 26 f0 b7 f0 ee cd f8 88 75 d5 6d 15 d6 03 42 df 77 86 6e d6 4e 1d af 9e 3a ee 4d 8c 11 f1 86 01 89 d3 a0 73 df 0d da fa 2f 52 c8 7d 60 e0 8b 96 b0 6c e7 05 36 24 e1 b9 bc 35 b0 25 f7 e4 33 b9 27 9f 4b ed d9 ab 19 fc 86 42 05 85 f5 00 18 8c 67 e7 f0 22 f3 d3 e7 c5 b1 d3 e2 a3 13 b8 06 8e f7 4a af 01 e0 98 88 13 5a 5c 6a d6 34 7c 80 79 e0 cd 78 f6 8c 6b cf ba 36 d0 ef 8a e7 d8 01 5e fb 8a 83 3c 0d d5 26 30 60 7e f4 13 61 b1 0e 7f ef 48 ec 02 2f 6d 0f 04 2e b9 43 3d 61 7a 0e 35 49 e9 7a 4e 37 72 7a aa c7 4c f7 58 99 ee 4d 03 9d 3b 77 a5 5e 7c d6 7a f2 51 63 ff 5e 7d 73 3f be 1e 1c ef 5a 57 50 58 d3 e0 1e 54 f2 c3 f7 e7 bd 3f 9e 72 8e 97 3d 3b c0 ee 46 43 7e dc bd 92 fd Data Ascii: AW2pp/BTD*f&umBwnN:Ms/R}`l6$5%3'KBg"JZ\j4\|yxk6^<&0`~aH/m.C=az5IzN7rzLXM;w^\|zQc^}s?ZWPXT?r=;FC~
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: fe 69 d3 6f 40 5b e7 b6 b6 84 a7 9e cb 99 7d fd 1d 2f 7d a1 f0 c2 e7 cc 4d 9b 3f 9d 9f 38 15 14 ee 0e 76 5d 54 2a e2 7b af 89 37 de 15 37 87 f0 89 6b 8e 83 cf 3e 5d 65 c0 88 ac f3 a2 b7 07 73 31 df 99 71 ed d1 7a 79 d2 a9 cd 38 35 8f 9e 61 6e ea 1a 4c 73 d1 11 dc 41 81 80 72 ae 29 d0 e9 00 a9 01 28 20 6e 18 c0 2c 08 8e 2a 97 ce f4 75 76 6d 3b fc d0 ae 17 5e ca 7d f6 c5 d4 67 5f c4 e7 d3 28 28 ac 19 f0 48 e6 04 e2 4c c5 ff 8d 31 e7 fd 79 bc cd 1b 1a 72 62 a9 99 91 8c 26 47 ca 58 6d eb b0 20 15 bb 32 eb 4d 61 94 bc 98 b1 61 27 ad 11 95 21 cc f0 11 c8 a5 db ca 1d 19 b8 0e ec 5a 72 6f 70 66 9d b8 b7 5c 0c 47 1d 14 f0 64 85 16 c0 f1 72 74 66 e3 5f 2a ec f9 d3 dd 47 0e a7 fb 4d 4d 5f 83 27 a8 b5 09 e3 57 fe fe df 97 ea c6 43 10 84 c5 f9 e0 e6 b0 ff d1 e9 70 6a Data Ascii: io@[}/}M?8v]T{77k>]es1qzy85anLsAr)( n,uvm;^}g_((HL1yrb&GXm 2Maa'!Zropf\Gdrtf_*GMM_'WCpj
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: e3 37 b5 95 05 74 0a 20 de 46 3d 0c 2b 81 33 e6 94 07 ed d9 e1 7a 79 c6 b5 dd d0 87 f1 df d2 8d 4c 36 9b e9 ea ca f6 f7 e7 b6 6d cb ef d8 51 d8 bd bb b0 6f 5f 61 ff 7e 0c f7 ec e9 d8 bd 3b bf 7d 7b 6e cb 96 4c 5f 5f aa b3 d3 cc 64 74 5d e7 93 18 76 cc 35 20 04 da c2 a1 6a f8 0b 02 4c 0e c2 20 a8 95 4b 95 6a a9 32 3d a9 5b 56 aa ab 1b 5f a3 00 2e 0a 0a 9f 3a e0 2c e0 05 e2 b5 59 ff 97 6f ba b7 ec 00 e6 b2 f8 2f 01 6d 92 a5 a1 53 a4 c5 c8 40 3d 8a b4 49 8d b5 04 a4 0d 7a 07 a9 1c 95 21 9b 22 c4 9e 51 b0 a8 25 0a 65 7a 5b 30 9d 06 8f a4 93 e4 de a0 11 1d 01 85 68 76 82 87 53 1e 54 98 87 a3 0e 6e 58 86 8c 62 5e 2c 15 2f 4d 9f f2 2b 1f 55 87 7a cc ec 76 ab 0b 7f 3a 24 3f 85 b6 d8 b0 f4 3b b4 9d 70 7a d6 f9 de 5b de 9b 1f 8a 4a c5 18 d8 64 3e f5 b0 d6 db ad a5 Data Ascii: 7t F=+3zyL6mQo_a~;}{nL__dt]v5 jL Kj2=[V_.:,Yo/mS@=Iz!"Q%ez[0hvSTnXb^,/M+Uzv:$?;pz[Jd>
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: 9f cd 9f 6a 74 07 63 0f 32 70 bc 79 3b 2d 2d 2d 68 3f d5 5e 02 40 63 ea c2 9f 16 fe 8c 18 7f 4a dc da 2e de ff 18 df f8 02 c4 1b 6a 62 06 22 6d 89 6c 4a bc f8 57 c4 73 bf 28 72 bd 22 d5 21 f3 29 28 7c 6a 08 43 af 38 33 f3 47 df a8 9c 3c e6 cf 16 f9 3a 29 ea 81 88 b8 73 34 61 b1 8e 70 57 1d a4 ad 73 3b e3 22 14 77 11 2c bb 58 c2 b2 9d 17 29 60 91 ba 35 19 cd ee 9e dc 53 9f e9 f9 cf fe bc d9 ab de 32 a8 f0 a9 00 9a 25 30 ed 99 59 7c d6 1a 0c 3a df 7b 4d 8c 4f ca a4 d5 05 4e 51 f1 5e 2f 27 0c 80 7b 0f bb e5 29 dd 9f 31 45 aa d0 91 e9 ee ee 3b 70 a8 7b df fe fc ce 9d b9 1d 3b 72 db b7 03 f7 b6 ba ba 96 4f 4a 03 d7 75 8a c5 da f8 78 f5 f6 ed 0a c8 d0 50 e9 da 35 10 bf 56 f3 aa 55 08 81 a8 63 87 5d f4 6c b0 c2 88 fa be 3c 69 e8 7a ba ab 0b 88 f7 de 5f f8 85 4d Data Ascii: jtc2py;---h?^@cJ.jb"mlJWs(r"!)(\|jC83G<:)s4apWs;"w,X)`5S2%0Y\|:{MONQ^/'{)1E;p{;rOJuxP5VUc]l<iz_M
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: 1e a0 bc 62 c9 3f 3f 54 ff de c7 a5 57 4f 55 de b9 50 bd 3e ee cd db a1 17 42 9b 42 ca 4d bf 05 b1 02 6d ad 2d fd 66 59 cc 0e 42 0d b6 29 ba 7c c1 9e d3 14 65 7e 0e 53 5c e4 de 1c 36 1c 3a 8c ca 73 99 13 4f e5 ce ec cd dd ee e0 37 7e 33 f4 7e 14 ce 76 4f ac bb 05 bc 63 4b 98 59 51 08 45 c1 17 35 17 6f af f5 a9 9e 06 9c 02 6b c2 2f 89 ee 5d a2 73 8b 30 d3 c2 50 3d 53 61 85 01 23 af ef 97 8f 7f 38 fd ed 3f ac 5d bb 0c 53 40 ec 20 d4 4c 21 80 fe c7 20 0d 3a 23 be 30 90 d3 56 05 f7 63 32 ba 7a b5 8f 00 33 7e 7f 7a ca 1d 1d d6 3b 0a d6 96 6d 78 50 f7 e1 b8 14 14 16 60 66 16 29 f7 77 5f c5 5b be d7 c4 ba 37 f4 3f 5c f7 76 c3 a0 ec d7 6f d6 e7 c6 f3 a6 f9 f8 c3 fd 5f fc c2 be af ff fc d6 97 5e ea 39 f2 50 76 cb 16 33 97 03 be 7d 7f 99 27 14 08 9c 36 dd df df b1 Data Ascii: b??TWOUP>BBMm-fYB)\|e~S\6:sO7~3~vOcKYQE5ok/]s0P=Sa#8?]S@ L! :#0Vc2z3~z;mxP`f)w_[7?\vo_^9Pv3}'6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.4	50346	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:00 UTC	1542	OUT	GET /update.min.js HTTP/1.1 Host: browser-update.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA; cto_bundle=VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE5DeE1QUDZrQ1p1REU2QzUzMm9iS3pISWVKOFREZG8lM0Q If-Modified-Since: Sat, 02 Mar 2024 10:00:09 GMT
2024-03-18 16:23:00 UTC	676	IN	HTTP/1.1 304 Not Modified Date: Mon, 18 Mar 2024 16:23:00 GMT Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=update.min.js expires: Thu, 14 Mar 2024 18:00:01 GMT last-modified: Sat, 02 Mar 2024 10:00:09 GMT CF-Cache-Status: HIT Age: 426179 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b6YU%2B8iBaKvCGOmfDbTN91lAaT%2Fl1xXAVc%2BexbVYu6VIqAJ6G%2B3%2BdDrzZS6h14hlzdqB%2B6dCVMTrOFBNxNN5RncsicwP0qlQZ6HmppmFf9REBWlEQjSA60MmqHy3DUm0wUJLZg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86669092280e0f6b-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.4	50347	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:00 UTC	1584	OUT	GET /static/img/dialog-warning.gif HTTP/1.1 Host: browser-update.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://browser-update.org/static/base2.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA; cto_bundle=VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE5DeE1QUDZrQ1p1REU2QzUzMm9iS3pISWVKOFREZG8lM0Q
2024-03-18 16:23:00 UTC	688	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:23:00 GMT Content-Type: image/gif Content-Length: 604 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=dialog-warning.gif last-modified: Sun, 21 Mar 2021 12:19:12 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oVfdz5wHqKfl8EzQ05%2FTZFDfmVq4SOrscr6aoaGucfyTGo6Xjdvlq8WOtoFXAzPEmYVq2hz1cfyXDiWX%2Bla%2F739uu0qeZXL0ep9qlyTQ3jyd8rZ7nFh1JE2gkGY5a4l3IvQezQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86669092cde7423d-EWR
2024-03-18 16:23:00 UTC	604	IN	Data Raw: 47 49 46 38 39 61 10 00 10 00 c6 49 00 93 01 01 99 00 00 8d 04 03 8e 04 03 9f 00 00 9e 01 01 90 05 04 92 05 04 94 05 04 96 05 04 af 00 00 b4 00 00 b8 00 00 90 0c 08 bc 00 00 7f 12 0d c0 00 00 c4 00 00 d1 00 00 d6 00 00 31 31 31 88 20 16 bb 14 14 8d 27 1c 40 40 40 43 43 43 92 31 22 4d 4d 4d 98 3b 2a d7 29 29 dc 2f 2f 9c 45 30 dc 33 33 9d 46 31 5a 5a 5a 5b 5b 5b db 39 39 da 3c 3c d9 41 41 68 68 68 ac 62 45 c6 94 68 cc 9e 6f e6 93 93 d2 a8 77 e7 a4 a4 e5 a7 a7 d7 b2 7e e4 aa aa e2 ab ab e1 ae ae dc ba 84 e1 c3 8a ef db 9a e1 e1 e1 e5 e5 e5 e8 e7 e7 ea e8 e8 e9 e9 e9 ea ea ea ed ea ea eb eb eb ec ec ec fb ef a8 f0 ec ec ed ed ed ee ee ee fc f1 aa ef ef ef fd f2 ab f0 f0 f0 f1 f1 f1 f2 f2 f2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: GIF89aI111 '@@@CCC1"MMM;*))//E033F1ZZZ[[[99<<AAhhhbEhow~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.4	50348	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:00 UTC	1559	OUT	GET /static/img/big/e.png HTTP/1.1 Host: browser-update.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA; cto_bundle=VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE5DeE1QUDZrQ1p1REU2QzUzMm9iS3pISWVKOFREZG8lM0Q
2024-03-18 16:23:00 UTC	679	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:23:00 GMT Content-Type: image/png Content-Length: 26826 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=e.png last-modified: Sun, 01 Aug 2021 16:06:48 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yrdaLV%2Bl6AoKuk2PggZxVGIN8WeC%2FExIyLLX%2BBL3FS9wNLe3JmiVd2tu9UjGhDLmfmClhb4cNi0z6SnQCeEtRgR36bSrcr8asNUfOyJyfzPzKsUioNkQ0YK1qWFXP%2FJtHLo1Ag%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86669092ca8632d3-EWR
2024-03-18 16:23:00 UTC	690	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 06 00 00 00 5c 72 a8 66 00 00 68 91 49 44 41 54 78 01 ec c1 81 00 00 00 00 80 a0 fd a9 17 a9 02 00 00 00 00 00 00 66 d7 1e 80 24 d9 ba 2d 8e ff 56 56 7d f6 f7 6c db b6 6d db b6 6d db b6 6d db b6 6d db ef f2 cd 54 9d f5 d4 2f 6e c6 64 4c 46 57 bf e9 b9 73 bb eb 1f 71 22 4f ee dc 39 ec b5 ce de bb ea a2 11 47 2e 04 cf f0 13 bf 1a 0a a1 f3 3d 8a 16 28 5c 73 5f 01 9d e5 cf ef 95 9a ed 0b a8 fb 34 47 f2 8c 3f f1 c3 8e dc 37 68 1f 2b 08 42 03 18 18 ee 25 92 7f 9c 18 41 68 33 37 09 ea c8 2d 4d 9e e9 27 be cf ad c7 91 f6 09 83 94 50 18 ab 82 ca d5 87 e2 d1 f4 31 f0 18 f4 b1 e8 63 d0 47 e0 91 f4 61 78 10 fd ef 75 7f 6c e8 86 0a a5 7b 7a 05 57 e8 5d f4 4e dc 46 ff 9d fe 0b fe 95 fe 13 fd 67 Data Ascii: PNGIHDR\rfhIDATxf$-VV}lmmmmT/ndLFWsq"O9G.=(\s_4G?7h+B%Ah37-M'P1cGaxul{zW]NFg
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: 53 55 10 45 39 dc 0c d6 de 9f 55 39 dd 52 94 40 ef a4 3f 8b ef a4 df 8d df 03 88 4e f3 b9 81 b3 72 34 80 6f 74 e4 ff 47 f6 cf 31 3f ed 35 77 6f b8 ff 4b d2 37 c2 cb e1 d1 40 95 3d 60 a2 59 17 ed 61 02 ef 0d 31 82 f5 fb 65 5b 70 d8 af 95 f5 1c 33 33 40 37 52 14 4a 7f 2e fa 4d f8 36 fc 01 40 b2 df 44 61 ef c8 41 e4 59 7f ea eb 1d 39 9c ee 9e 3b d8 60 07 d0 8c a7 c0 1b e3 f5 e9 53 02 d0 99 e8 05 aa 1c 7c d2 2f 73 0f a8 08 56 da 02 28 67 6f 0b 0e 36 93 9c ee 9d d2 21 2d b6 33 13 d9 e3 c7 e9 57 d1 6f c5 3f 01 6c a6 ab db a4 7b d4 91 75 90 67 ff 99 af 76 e4 f4 ec af bc c0 42 f8 8c 97 c5 db e1 15 c4 a6 0a 03 a5 13 b2 26 f0 ae 3c bb 01 46 70 f8 7c e0 00 31 e7 8c 06 70 58 4b 51 02 1d 27 6b 1b 45 49 ff 35 fa 6d d1 2f c6 8f 03 4c d3 d5 ed 64 ac cf 0a 8e c8 73 fe cc Data Ascii: SUE9U9R@?Nr4otG1?5woK7@=`Ya1e[p33@7RJ.M6@DaAY9;`S\|/sV(go6!-3Wo?l{ugvB&<Fp\|1pXKQ'kEI5m/Lds
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: df 13 b0 c3 b6 38 7b bf 7f 4e bd be ea 79 b5 04 cb e7 e7 d0 0e 1c fa e9 40 65 11 5f f9 d2 4f 4a 86 c9 c9 bd 93 e7 b9 e7 7e 31 f4 4b c9 2c d7 bc 1d 58 b4 00 a8 a4 f7 c4 da 9d 74 1b 25 fd a6 fd c8 9b e3 df ef b7 d9 5f 88 96 60 9a 52 17 6d fd fb bf bc c9 36 b2 c3 e3 d3 9f c2 7b 92 41 06 b6 10 44 ce 5c e6 1f f0 9d 80 83 db 02 a7 cc 4f 23 b0 de 12 2c 62 e7 57 09 04 38 f5 e9 1e 5d c6 0f 3b fd 63 49 88 75 04 ba ac 20 e2 9e 58 11 db 50 b1 ff 4f f6 de 02 3a 92 eb da fe fe ed 5b d5 92 66 c6 b1 e3 c4 61 f8 53 e8 31 33 33 33 33 43 f2 f8 f9 31 fd 19 1f 33 33 73 1e 86 99 5f c8 8c f1 98 69 ec 61 94 d4 55 fb eb a5 a9 5e 7d d6 59 d5 2a b5 25 8d 67 e6 cb 9d 75 5c 97 bb 24 eb ec 83 f7 b6 e0 8b ea aa bd b1 2a cd c7 b6 66 3c aa 1a 81 0b 98 0b 95 0a 98 8b 85 8e 1c fa 7a 1d 3e Data Ascii: 8{Ny@e_OJ~1K,Xt%_`Rm6{AD\O#,bW8];cIu XPO:[faS13333C133s_iaU^}Y%gu\$f<z>
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: 02 ce 07 2a 02 ce 57 ba ff fe ef 9e 3a fc be 0a f8 8d 18 29 4a 7f 58 e7 10 04 72 d9 9d 31 6d 6d dd 39 d3 02 72 ef f6 22 02 f3 2f 05 15 1e 7e 87 ec 03 c8 1f 30 57 fa 83 b2 07 30 cc 95 d2 de d1 44 d0 74 5c 41 ed 0f 8e 42 a7 9c 81 00 02 88 75 e1 0f bb 6c 69 f5 65 13 42 b8 1d 38 44 f4 ee c3 40 f7 dd ff dd a3 8e f9 3f 07 f8 93 60 f3 8b 9e b2 db 20 30 b4 76 e7 4d 81 e1 b1 dd d7 02 f2 d8 f6 fb 86 00 3b 4f f1 a0 fa ef d9 12 79 be 56 20 03 a4 63 bf 61 0f cf c9 27 48 fb c8 4e 92 3f 6b 13 06 05 2d 45 46 66 04 ac 23 7f 3c f2 0b 3b 6d a1 05 c4 a3 5c 0a e7 5f 99 30 ff f7 d6 a0 f5 2e b3 ef 1f 17 73 f8 2d 52 b4 f3 a6 c0 b6 bc fb f9 13 77 f6 a7 d0 36 7f 3f c3 00 b7 0d 90 51 64 e6 81 44 1f f5 8f f5 77 39 7b fa b3 2d 00 d1 8b cf 54 95 37 d9 ee 57 9f da ef ac 45 80 98 8d c9 Data Ascii: *W:)JXr1mm9r"/~0W0Dt\ABulieB8D@?` 0vM;OyV ca'HN?k-EFf#<;m\_0.s-Rw6?QdDw9{-T7WE
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: 67 5f 6e 27 b3 42 ae 30 63 e1 0f 6e cd 0f 01 ff 6f 37 4d 81 ba d0 72 2e ca 2d b7 ff 68 01 8f 81 a7 85 5b 7d ca b9 57 70 bd 83 8a f8 ce 4b ff ed ab ff 8b da ff ee ab 9d 43 10 f6 d6 a4 bd 0c 04 da e2 fe da 2a b8 cd 3b 6d e8 bc 8f a7 94 00 c1 c9 13 ea 9e d4 62 b2 46 90 41 ab 6b ba 92 a0 c0 ff 68 da ea 6f 1a b3 5f f2 ae 44 05 ea d6 85 73 5c 7e 03 bc 6f fb aa ff 39 60 7c 3b 32 2d 8a 35 85 3d a5 38 0b 3c ad 1b ec cc 82 c3 12 79 d8 dc 78 54 d4 7f 6f d7 01 28 b6 5c a4 b4 6c e1 08 c1 30 f0 08 50 0f a3 02 20 b2 f3 2f 46 0d 33 20 04 27 9f bb 39 fd df 3e 9c 99 bf 9b 17 c7 ba 1a 63 89 51 55 35 bf 08 7c ce 72 3d 66 37 4a bd 67 69 8d dd 2e d7 de f2 93 53 15 e6 2b 80 cf 4e aa ff f9 c1 f8 36 8e d7 4c 0b 54 15 a4 02 12 12 18 83 cf 92 db 16 db d0 86 3a ee e6 76 eb 8b 40 55 Data Ascii: g_n'B0cno7Mr.-h[}WpKC*;mbFAkho_Ds\~o9`\|;2-5=8<yxTo(\l0P /F3 '9>cQU5\|r=f7Jgi.S+N6LT:v@U
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: cf 19 28 65 b3 45 3d 96 83 c7 c0 f2 a8 6a 7f 14 78 41 29 de 19 00 18 d5 cd ae 39 fe 84 be 07 f8 f7 3b ee f8 33 18 53 aa 8a aa ae 36 a4 fb d1 fd 77 73 64 ff 3d 9c 7e f8 08 6d cb 86 67 bd da bb 0f 54 f2 f7 ce cd 31 ce 84 12 00 40 bf 83 0f a5 9e dc 74 30 07 b2 01 28 b0 3d eb 2d 31 3e 48 92 e0 a1 cf 67 49 a5 42 d5 88 c2 59 5f c0 fa 89 35 d6 ae bb 93 e3 37 df c5 f2 15 97 b1 ef df 3f 65 03 10 26 26 0d 1e 8f 71 d3 0f 04 de b2 ea ff 48 a4 bf b7 2a fd 07 8a b7 98 15 e8 4d c0 64 c8 1c f3 40 84 d4 f3 b7 9a 2f f0 f3 bb 65 67 61 96 fc 91 f9 93 66 31 e3 29 19 90 bf 65 3c 2e 3f d3 34 da af 1d d0 02 ea c9 66 ec 64 b9 71 43 fa 7b 0c 5c 2e f4 23 3b 7d c3 8f 6d 4a 7d d6 49 b7 76 f4 38 47 6e 9b 30 fe ed f7 b2 7a e2 34 a5 aa 29 cb 7b a8 4b 01 0a 68 9e 4a 2f 50 7a 02 16 09 04 Data Ascii: (eE=jxA)9;3S6wsd=~mgT1@t0(=-1>HgIBY_57?e&&qH*Md@/egaf1)e<.?4fdqC{\.#;}mJ}Iv8Gn0z4){KhJ/Pz
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: a1 f1 4e b9 d8 e7 8e 30 2e 20 0b d1 b5 21 7d b2 50 55 40 15 6e c7 68 b9 a0 51 c3 e9 7b 0e b1 7a e0 28 97 be cf 33 d9 f7 ec 27 83 85 9b 06 c4 23 63 7e 79 40 aa 33 e0 f9 f7 d6 bc f1 36 a8 1f a0 44 2c fd 67 f4 e3 4d 3d 79 7a de 37 95 05 af 20 f3 76 be 02 22 bd 63 f8 11 64 d9 67 bf 54 64 cf 52 f3 15 c0 6f 3e c2 33 02 3b a2 01 04 55 9f af 01 3f b9 33 05 04 5b 91 ff c6 36 f5 f2 88 b5 e3 a7 b8 f3 15 ef e4 fe b7 df 8a 55 51 ad ac 10 a5 9a a2 14 e4 6c 5b 51 2a c6 39 59 65 8e e6 80 48 ea 77 1c 8f 7d 1d 11 d6 96 40 9a 91 e7 9a 03 85 38 2e 15 22 31 87 1c 4c 06 4a d0 78 10 90 de 9d 6e ff ae 2d 0a 22 98 22 ea e6 57 d5 59 b3 60 42 54 23 ca de 7d e0 8a 23 6f bd 8d 83 af b9 81 e6 d4 19 ca 72 cd 14 58 16 67 7e 86 99 bf a7 5f d3 9a 07 13 89 16 4e 63 0e e8 89 95 5c ad 76 ff Data Ascii: N0. !}PU@nhQ{z(3'#c~y@36D,gM=yz7 v"cdgTdRo>3;U?3[6UQl[Q*9YeHw}@8."1LJxn-""WY`BT#}#orXg~_Nc\v
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: 36 16 a0 60 7f b4 9f 62 f8 8f 86 d6 50 82 bc 9f fd b3 37 24 c8 43 d7 dd 3d 71 f8 ed a7 d4 35 2a 55 96 f8 d9 41 d7 9f 4a 9b 9c 7a 42 c4 90 9a 92 54 8b e4 0c 2e 25 79 f8 4b 60 82 ec e1 cf 7d 91 34 5d ab d0 17 68 20 75 18 84 10 2a 42 19 f8 e6 ee 27 94 34 9c a4 09 24 12 94 ac 29 85 88 4a 76 7c 56 67 b5 01 2d 2d 6d 00 c1 91 b7 de cd 89 1b ee 9f d4 2b f0 62 99 9d ea 68 78 ee 70 1e 80 d3 ba cc ec fd 76 3e 61 6e 66 f4 61 27 9f 31 78 ab e1 bc fc f6 ea 97 f4 99 c9 51 18 0b 90 e7 bc 5e 18 47 c4 91 71 23 b8 bc aa db 8f 9f 10 a5 b8 4c 88 ad 51 6c 2c 40 30 25 a6 d2 df f3 72 fa ab e5 8a 87 ae b9 7b 12 df bf 93 b2 34 0a 1e fc cc 54 43 9a 80 10 31 c4 55 40 15 31 cf df 94 94 fb df a7 d2 f7 a6 03 a7 5c 01 0d 9b 1a d9 1c e8 71 60 26 a6 4d cc 9c 24 3e 21 33 51 42 a4 77 56 01 Data Ascii: 6`bP7$C=q5UAJzBT.%yK`}4]h uB'4$)Jv\|Vg--m+bhxpv>anfa'1xQ^Gq#LQl,@0%r{4TC1U@1\q`&M$>!3QBwV
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: a1 1e 4d 20 d2 dc bd e9 c6 73 a6 22 49 dd 97 50 a4 d9 dc ae 4e 4e 06 0a 5b 15 14 db 80 e6 a6 52 7b 56 cf ef 40 1e 07 a9 ef 36 65 a1 ba d0 9c 58 a7 39 b9 c6 9e 67 ee 8b a6 40 47 c3 75 4d 9f 62 56 87 90 6d 47 37 d6 b5 4b 1c 07 69 56 07 a7 36 b9 1d 32 00 1d 4c 9d 59 3f 71 ef 64 8a 20 47 33 60 be 99 20 91 b3 f8 f2 5c 39 27 9e 2a cd ed bb 91 da b1 96 b5 92 e9 06 97 ad 8c fc a7 7b 97 7c 48 a2 44 c5 b0 8f 4a 68 0c d2 0d 77 7e b7 2c 1a cb 7b 11 9f 80 00 28 4c 3d fe 4b 85 07 af ba 97 e3 f7 1d 3f 7b c9 84 bb e1 d2 67 87 77 d4 d3 6f 41 94 76 79 ae 63 7f 51 3e f3 3f ff 98 6d 9f 74 2c 69 1c 01 19 e6 e3 23 75 f4 7b 89 e7 1f 36 13 bd 49 43 ce e6 44 54 f3 4b c1 59 55 8f 9a 51 ec 67 06 a0 16 80 e6 99 18 49 db 12 96 82 46 c6 f4 f7 83 51 02 cf 99 63 b4 ec 5b e1 f4 dd 67 38 Data Ascii: M s"IPNN[R{V@6eX9g@GuMbVmG7KiV62LY?qd G3` \9'*{\|HDJhw~,{(L=K?{gwoAvycQ>?mt,i#u{6ICDTKYUQgIFQc[g8
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: f4 ee 6d f2 82 54 4d ef 1b 3c f8 8d 91 91 2a 8a 8a 54 de 0a fa 76 a4 67 b9 94 2f 70 55 fd ae eb fa 26 4a 35 d6 78 bd 68 bc 56 6b bc 5a 6b 7d b5 d2 fa 99 4a 6b a7 26 74 b2 2e ab 27 6a 9d 39 56 e9 f4 d1 c2 78 bc 8a 7d 23 e8 f7 ad f2 e5 94 f2 2c a4 af 80 f2 0a e8 bc ad a5 d8 a8 c9 79 02 5a aa 58 3d 04 a7 ee 58 a3 8c 22 50 0d 90 7a fa 9c db 5b ba a5 38 8d cd f3 fe a7 44 9d 4d d6 1b 72 5f 7f ae bf 83 3b d0 e9 19 df 3c a6 05 03 ee a4 b1 a7 6c a6 29 b7 69 ce 19 3b 77 04 d3 25 88 d9 02 53 09 3d 59 88 a1 a2 2f bb e3 7b d8 4a b9 e1 ae e7 4f 91 e4 d5 98 8f 53 a5 66 fd e4 7a 75 fb 8b ee c2 6d c7 88 39 a6 9e 12 60 c2 33 98 03 dd 1c 42 bf e2 2d 3e 39 74 45 37 ae 61 69 3b ac 09 0c ab dd 3d 45 da 1d 4d 20 9b 04 9b 54 01 9b 52 1a a0 a6 6d 01 fe 55 f8 e7 80 57 30 2d cd 6a Data Ascii: mTM<*Tvg/pU&J5xhVkZk}Jk&t.'j9Vx}#,yZX=X"Pz[8DMr_;<l)i;w%S=Y/{JOSfzum9`3B->9tE7ai;=EM TRmUW0-j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.4	50349	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:00 UTC	1559	OUT	GET /static/img/big/s.png HTTP/1.1 Host: browser-update.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://browser-update.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA; cto_bundle=VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE5DeE1QUDZrQ1p1REU2QzUzMm9iS3pISWVKOFREZG8lM0Q
2024-03-18 16:23:00 UTC	679	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:23:00 GMT Content-Type: image/png Content-Length: 52207 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=s.png last-modified: Sun, 01 Aug 2021 16:06:49 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ELtgpafrrS7V1bZTpexJW5i6eHlLD4uh0%2FwsSPesN76B14MSMxMhwLM%2FyOBzy4wbtgYB3Ysh%2BrJFjJOfcCszrtUU7lL3cwdrfeTmhYhQD0FEy5vdZ2WiOJxomHtyldd9VMR%2Frw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86669092c8634376-EWR
2024-03-18 16:23:00 UTC	690	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 dc 00 00 00 dc 08 06 00 00 00 1b 5a cf 81 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 1b af 00 00 1b af 01 5e 1a 91 1c 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ec bd 77 bc 25 45 99 ff ff 7e aa ba 4f b8 61 12 33 cc 0c 39 88 44 95 a4 62 04 54 82 ba e6 84 ae a2 ae bb 2a 8a 7e 8d 3f 5d bf ea ba ae ab ae ae bb eb 7e 15 15 59 75 45 01 05 04 89 06 a2 20 20 c3 c0 c0 90 73 1a 26 dd 99 3b 37 9f d0 5d cf ef 8f aa ea ee 73 87 49 88 0c 2a 35 af 3b e7 de 73 aa ab ab bb eb 53 9f cf 13 aa 8e a8 2a 4f 95 a7 ca 53 e5 89 29 66 6b 77 e0 a9 f2 54 f9 6b 2a c9 d6 ee c0 53 65 f3 cb e8 e8 a8 Data Ascii: PNGIHDRZsBIT\|dpHYs^tEXtSoftwarewww.inkscape.org< IDATxw%E~Oa39DbT~?]~YuE s&;7]sI5;sSOS)fkwTkSe
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: b6 4e a7 73 72 ab d5 fa e9 ac 59 b3 1e dc da 9d 79 32 95 a7 00 57 29 93 93 93 7b 89 c8 a7 eb f5 fa 5b 80 c6 9f f2 5c 55 20 0d b7 60 6d 07 ee 1f 15 d6 75 60 32 87 a9 3c 00 47 21 c3 ff ae f8 bf 23 fc 55 c3 af e2 5f 8d 40 62 fc fb 56 a0 99 40 bf 85 79 0d d8 75 86 32 bb ee df 23 b4 f3 04 3c 79 ed 74 3a 97 a8 ea bf 35 9b cd df fe e9 4f f7 e4 2f 4f 01 0e 18 1f 1f 3f b0 d9 6c 7e 06 78 1d 8f 21 dd 6d 73 e4 58 ac 32 de 85 7b 47 85 9b d7 c2 a2 55 c2 aa 29 78 78 02 5a ce 03 c6 00 88 07 cc f4 e3 23 d6 84 f2 f7 f8 f4 04 70 80 04 20 a9 fa 1f 47 09 d6 d9 35 d8 a6 0e cf d8 46 d9 67 36 ec 3d 1b 16 f6 2b fd 01 84 7f ca a1 e0 9c 5b 34 35 35 f5 65 e0 97 83 83 83 7f b5 83 ee af 1a 70 93 93 93 2f 4a d3 f4 33 c6 98 a3 1f cf 76 8d 40 a6 b0 6c 4c b8 6a b9 30 9e c3 44 07 ee 18 f1 Data Ascii: NsrYy2W){[\U `mu`2<G!#U_@bV@yu2#<yt:5O/O?l~x!msX2{GU)xxZ#p G5Fg6=+[455ep/J3v@lLj0D
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: 06 e1 93 17 1a 3e 7a 8e e5 d6 55 11 a0 5b 5e 44 a4 af d1 68 7c b9 d9 6c de 34 32 32 f2 b2 c7 d6 ca 93 b3 fc c5 00 6e 74 74 b4 6f 72 72 f2 cb 03 03 03 37 01 5b fc 90 44 60 f9 a8 70 ca f5 86 e3 ce b4 fc f3 6f 0c 2b c7 84 14 30 61 a0 e1 fc ec 2e aa 88 2b 81 d7 67 72 3e f5 bc 0e bb 0c 3a 5e bc 53 86 cb 5d 19 fc 0a 60 70 ce b0 34 ac 34 db 6f 9e 22 b9 83 dc b7 a9 4e c1 09 56 85 35 93 00 c2 dc ba 97 70 a2 ea 99 34 ba 17 a7 3b 2b 02 a8 63 df d4 79 30 a8 7a f6 5d 36 0e 16 f1 7d c8 7d 5d cd 61 df 39 14 ce 96 3b d7 08 09 52 9e c3 79 89 db ed e6 7c fe 85 6d e6 35 1c c7 1f dc a1 13 27 80 00 4a 75 1e 7c 46 fd 0f aa 24 0a 37 2d 87 f7 9d 61 f8 fa 65 86 9f 5e 2f e4 31 40 bf 85 c5 18 b3 67 5f 5f df 6f 27 26 26 7e 36 3e 3e be fd 63 68 e2 49 57 fe 22 24 e5 c8 c8 c8 b3 fb fa Data Ascii: >zU[^Dh\|l422nttorr7[D`po+0a.+gr>:^S]`p44o"NV5p4;+cy0z]6}}]a9;Ry\|m5'Ju\|F$7-ae^/1@g__o'&&~6>>chIW"$
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: 30 9c b6 4a f9 b3 01 dc ba 75 eb e6 35 1a 8d 0b 93 24 f9 0a 5b e8 ec 39 6f a9 e1 a3 3f 4f 39 fd 3a cf 1e 7e a0 7a c0 e4 28 47 ec dd e6 27 ef 98 c0 91 a1 38 5c a0 03 05 54 84 4c 2c 43 e3 7e 34 ec 34 db 71 f8 6e 79 01 ca e0 f3 40 45 38 f3 66 21 0d f1 af ed 66 fa 76 9c 94 e6 57 86 70 d3 0a 80 38 11 b8 1e 70 63 60 d2 59 4e b9 a5 c6 d9 77 d5 70 d6 a2 46 70 22 3d ed 94 eb 6a 24 0c fe f2 2d 35 02 d6 f2 e3 a5 35 ae 78 38 45 8d 89 8a b6 00 d4 de f3 1c a9 f1 47 4c 39 c1 18 21 07 34 00 65 32 57 5e b3 b7 23 cb 7d 92 f5 65 0f fa 28 7f 3c de 9b 8c 8e 03 16 66 64 21 fd f8 b4 eb 0d eb da 16 15 09 31 93 a8 a4 95 7d e7 77 38 f1 2d e3 ec b7 a0 43 1e e5 b0 f1 a0 9d e8 c0 8f af 36 bc ed fb 96 3f dc 2b c5 bd d9 9c 1f 80 7a bd 7e ac b5 f6 ba b5 6b d7 3e 63 4b c6 c4 d6 2a 7f 16 Data Ascii: 0Ju5$[9o?O9:~z(G'8\TL,C~44qny@E8f!fvWp8pc`YNwpFp"=j$-55x8EGL9!4e2W^#}e(<fd!1}w8-C6?+z~k>cK*
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: 30 a5 67 b8 32 58 18 65 67 1e 3e 73 e2 6d 32 27 4a 16 32 42 b0 5e 4a 8b 81 05 03 8e 4e ee 93 b0 2f 7e 50 a8 25 12 bc 98 c1 19 12 da b4 89 04 89 eb 27 8e 5c 7d 5b 5d a7 bc fb 19 5d 76 9c e9 bb f0 b9 4b 2c b5 7a 52 4c 10 9e bd 1c dd 3c e3 65 4f 73 de 0e 54 e1 8c 9b bd 03 c7 b7 a5 05 c3 75 f2 9c 8f 1e 36 ce d5 1f 59 c7 07 5e 3c 49 c7 69 29 ab 45 b9 fa 3e e1 d0 af d4 f8 f9 75 16 b3 91 d1 3a 1d 80 cd 66 f3 58 55 3d 77 dd ba 75 4f 2a 0f e6 93 0a 70 23 23 23 69 ad 56 fb 71 92 24 9f dc 5c 4f d5 5d 2b 85 8f fd 2c e5 ec 25 a6 58 32 13 07 ad 02 83 0d c7 ec 86 a3 d5 11 5e b5 4f ce ac 46 c7 db 68 01 24 7e 26 f7 b3 f9 75 cb 7c c2 6d cd 2a 7f b3 57 de 63 c7 69 70 b9 ff bf eb 92 82 f1 76 9e 91 d3 c9 f3 c0 20 25 23 45 39 18 7f 2f 80 14 98 ab eb 04 63 94 3c 87 e7 2c 70 de Data Ascii: 0g2Xeg>sm2'J2B^JN/~P%'\}[]]vK,zRL<eOsTu6Y^<Ii)E>u:fXU=wuOp###iVq$\O]+,%X2^OFh$~&u\|mWcipv %#E9/c<,p
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: 54 9f 8a fa 75 40 10 18 d9 bf 86 05 9e 01 90 8f 36 41 09 ea 3d 7e 45 1a 8a 03 e7 98 df 70 ac 6a c5 60 1d 38 15 12 23 3e 89 3b 80 34 18 aa 88 06 cf a6 53 be f6 bc 09 9e bb 40 31 02 df 5d 6a 39 f9 b6 86 6f 23 80 14 c5 b7 81 16 39 9f 16 88 4b 8a fc 9a 42 47 9e 75 b9 fa bd 53 74 33 a1 9e c0 47 ce 4d f9 c3 b2 3a 06 af 42 24 24 5b bb 5c d9 b6 2f e3 f8 17 4e 71 c5 3d 29 bf be bd e9 d7 f6 05 10 3a 27 bc ef b0 8c f7 bc 20 df 6c db ae d3 e9 5c 9f 65 d9 61 b3 67 cf de 2a 5f 42 b2 55 25 a5 b5 f6 df d9 4c b0 89 c0 d7 7f 95 72 f6 0d b6 b0 91 e2 44 fe fa fd db bc eb b9 1d de 7e 70 9b f7 3f 7f 12 c4 5b 09 71 f3 1e 82 bc bb 65 4d 8d f8 6d 13 83 35 e1 f5 fb 75 41 5c b0 29 08 60 93 8a bc 0a 80 d5 8a 53 c2 80 b5 86 d3 ef 4e c8 f1 03 fd d8 7d 1c ad 4c e3 18 0d 72 48 4a af 1f Data Ascii: Tu@6A=~Epj`8#>;4S@1]j9o#9KBGuSt3GM:B$$[\/Nq=):' l\eag*_BU%LrD~p?[qeMm5uA\)`SN}LrHJ
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: d4 7c 7b 94 e7 2d 58 2d b6 59 ba 18 79 c5 6e 6d de b6 4f 8e 53 61 b4 0b 9f bc b4 41 9a 24 28 7e a5 bc 06 b0 35 4c c6 0f 5f 3f 89 c1 c7 f0 be 77 75 c2 85 77 35 31 89 0d 7d f7 13 40 c5 69 4b 9f 4e b1 60 62 39 63 b5 99 3c b0 d6 92 1a 61 bf ed dd 46 33 53 c0 5f 67 9a a6 87 8e 8e 8e 0e f5 f5 f5 2d da d4 98 7c 3c ca 13 26 29 87 86 86 e6 37 1a 8d 33 44 a4 b1 39 39 71 ff 74 76 8d 45 0f 94 60 eb 2a cc 1b ec b0 df 76 2d 3a 59 5c 8f 56 c9 77 14 61 32 4f f8 fc 45 4d 9f 16 84 70 c8 f6 8e d7 ed db 29 74 7f e1 40 10 e1 fe f1 94 5f de ed 5d fe b3 1b f0 ad 23 db 64 1a 1c 28 d5 35 6a 02 54 a4 a6 9a 8a ad 14 92 96 73 31 74 d5 14 52 34 ee 49 37 1d 0c 1a ee 76 31 88 2b 4c 1a a5 5f 35 ee 54 95 88 3d ed 50 4a de 0d b1 5a f5 1c 05 98 85 1e 69 5c 0d 76 17 59 26 e2 81 52 b5 23 73 Data Ascii: \|{-X-YynmOSaA$(~5L_?wuw51}@iKN`b9c<aF3S_g-\|<&)73D99qtvE`*v-:Y\Vwa2OEMp)t@_]#d(5jTs1tR4I7v1+L_5T=PJZi\vY&R#s
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: fc 02 58 11 42 82 83 9f 14 6b ae c5 9b 57 9c c1 b9 b7 7e 92 59 2b 1f e2 e1 15 2b b9 e7 05 c7 f0 b6 1f 24 ac 9c 4c 83 8d 17 53 f9 fc f5 4a 18 3f 1f ff 59 8d 35 63 6c d2 9e 53 55 ac b5 5f 1a 1a 1a 7a dc be 37 70 7a f9 93 31 dc d0 d0 90 b5 d6 5e 94 a6 e9 61 9b aa 9b e5 70 d0 3f f7 63 13 82 e4 09 3b 1e db ea c0 0e 0f 54 1d cd a4 cb 55 1f 9a a2 1d f6 36 3c fb 76 cb bf fc ae 8f 34 0d 29 52 55 f6 09 6e fc e8 f8 28 a5 57 65 b3 c6 10 b0 fe d5 ab a7 78 78 dc f0 c1 ab fa c8 35 2c a8 8c f6 4b 68 a6 fa fb a3 ba ee 2b 7f 47 cf 5d f9 7e 65 8e 0d f6 a4 2f 25 ab 68 64 ca 40 3d 71 ff e6 e2 f3 a2 a9 c0 b4 15 f7 b8 4a d8 8e ae ca 40 b1 f9 2a 25 56 dd 89 da fb 51 f9 99 16 f4 aa 4e 7d 3f 9c b7 c3 50 8a 9c c6 62 7e 54 3f a0 cb db aa d4 c9 f9 f2 c1 53 d4 8c f2 b1 2b 1b 74 d4 86 Data Ascii: XBkW~Y++$LSJ?Y5clSU_z7pz1^ap?c;TU6<v4)RUn(Wexx5,Kh+G]~e/%hd@=qJ@*%VQN}?Pb~T?S+t
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: 72 42 d6 6d 93 e7 1d 9c 56 83 01 19 7b cc 99 e2 9c bf 9f a0 db f5 7d 6c e7 70 c7 50 52 a8 0d 07 88 81 0b 6e da bc d5 05 c6 98 a4 dd 6e 7f f7 f1 dc 01 ec 71 65 b8 e5 cb 97 3f b3 bf bf 7f 31 9b d8 19 d9 29 bc ed 7b 4d ee 5c 65 0a c7 44 e1 c4 10 65 46 23 e3 c4 63 c6 d9 71 a6 1f e8 f5 44 f9 fc 45 0d 7e 79 7b 1d 63 cb 98 5a 1c 70 8a a3 2f 75 9c fe a6 36 0b fb 7d 33 43 6d e1 a5 67 0c 90 86 ac 75 2d d2 b3 2a 83 4c fc e3 8a 3b 48 55 f3 26 7b 9c 1a 71 5a 2a 6c b7 e2 ee 11 6d cc 42 96 c4 e3 aa ea 69 ba 64 8c 40 aa 00 b4 fc 6c 5a dd 4d 96 e9 95 2a cf 53 7b 79 b1 07 83 15 1b 0d 42 6a 55 3c bd 42 0c 90 15 7f 87 d7 c8 64 e1 e6 95 aa 2e 6a 34 ad fc 1d 5c a9 52 7d 3f 0f e7 89 0e 12 e7 10 85 8e 31 7c e7 fa af f2 da d5 d7 11 d7 5f ad 5b bb 96 07 6f be 15 31 86 9b b6 7b 36 Data Ascii: rBmV{}lpPRnnqe?1){M\eDeF#cqDE~y{cZp/u6}3Cmgu-L;HU&{qZlmBid@lZM*S{yBjU<Bd.j4\R}?1\|_[o1{6
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: d2 1a b6 de 87 ad 37 91 5a 9d ab 96 d5 38 71 71 8d eb 1e 31 bc ea e4 26 8b 57 a4 a4 49 a9 56 aa d3 8e 6a 4e 3b 77 f4 d7 ba 64 79 9c 9c 94 3b 57 0a d7 dd 17 c4 ee 46 56 af 24 49 22 22 f2 dd d1 d1 d1 3f 6a 37 e7 3f da 69 b2 7a f5 ea 17 d6 6a b5 df d1 6b 01 ac 57 6e 5f 2e 1c 73 42 a3 f8 92 89 c9 ae 72 c6 df af 63 f7 6d 1d 8d 04 de fa bf fd dc bc 3a dc b0 42 b6 94 6c 27 a2 48 d8 d5 d8 15 19 ff 54 1e 76 b8 d1 26 d8 3c 16 9c 18 06 9a 96 b6 1a 5c f8 f2 8d 9e ed a3 82 e4 e8 b5 c5 82 bd 16 a5 64 11 bb 0a e7 10 4a 1b 0f 7a 3e 2b ed 37 a1 ea 3c 89 a5 9a 07 a9 e1 b0 1e 0f 9e 4c 7b 2d 8f f4 6f 0a 95 03 37 7c af ab 1f 57 89 bb e8 04 5a bc a7 c4 60 73 d9 74 19 c8 d6 9e 59 a0 fc 4c 03 a6 04 55 d7 eb 3c 81 c2 61 a2 ae 74 f7 e3 94 4c 12 be ff 87 af f1 ea e5 d7 21 62 0b df Data Ascii: 7Z8qq1&WIVjN;wdy;WFV$I""?j7?izjkWn_.sBrcm:Bl'HTv&<\dJz>+7<L{-o7\|WZ`stYLU<atL!b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.4	50351	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:00 UTC	1328	OUT	GET /static/img/shot%20update.png HTTP/1.1 Host: browser-update.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA; cto_bundle=VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE5DeE1QUDZrQ1p1REU2QzUzMm9iS3pISWVKOFREZG8lM0Q
2024-03-18 16:23:00 UTC	694	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:23:00 GMT Content-Type: image/png Content-Length: 110584 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename="shot update.png" last-modified: Sun, 21 Mar 2021 12:19:12 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K%2Bf3dR6g9zFWkt1ZxcaRd5zPoyRevQgokwc5vT46rqg%2FZt2%2BNjE2oa9kjKV2RduxY3eQRNOfYqfdscSpaVSs%2Bs%2FxVAbZR6UDq4T7YuahYgqGWUOnOQqPtyDfk7c0axXF9PDm6w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 866690953d2e0f64-EWR
2024-03-18 16:23:00 UTC	675	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 2a 00 00 01 77 08 02 00 00 00 2d 91 e2 d3 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 ff a5 49 44 41 54 78 5e ec fd 07 98 24 49 76 1e 08 9a ab 90 19 a9 ab b2 b4 56 5d ad e5 b4 1a 8d 19 0c f4 80 5c 82 04 b9 14 4b 72 49 ae b8 25 8f e0 ee dd 47 de 61 c1 e5 f1 f6 bb 25 8f e4 1e 49 e0 23 09 92 58 2c 40 00 83 05 66 80 1d 8c e8 99 16 d3 5a 95 d6 ba b2 b2 52 8b c8 cc 50 1e 2e ef 09 73 0f 8f c8 c8 ac ac ae ca 4e 51 f6 e7 4b f3 67 cf 9e 99 9b 47 98 b9 d9 1f e6 42 0b cb 65 a1 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 b0 92 d0 e5 56 41 41 41 41 41 41 41 41 41 41 41 41 41 41 61 c5 a0 e8 b7 82 82 82 82 Data Ascii: PNGIHDR*w-sRGBgAMAapHYsodIDATx^$IvV]\KrI%Ga%I#X,@fZRP.sNQKgGBeVAAAAAAAAAAAAAAa
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: 41 41 41 41 41 41 61 c5 a1 e8 b7 82 82 82 82 82 82 82 82 82 82 82 82 82 c2 8a 43 d1 6f 05 05 05 05 05 05 05 05 05 05 05 05 05 85 15 87 a2 df 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2b 0e 45 bf 15 14 14 14 14 14 14 14 14 14 14 14 14 14 56 1c 8a 7e 2b 28 28 28 28 28 28 28 28 28 28 28 28 28 ac 38 14 fd 56 50 50 50 50 50 50 50 50 50 50 50 50 50 58 71 28 fa ad a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 b0 e2 50 f4 5b 41 41 41 41 41 41 41 41 41 41 41 41 41 61 c5 a1 e8 b7 82 82 82 82 82 82 82 82 82 82 82 82 82 c2 8a 43 d1 6f 05 05 05 05 05 05 05 05 05 05 05 05 05 85 15 87 a2 df 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2b 0e 45 bf 15 14 14 14 14 14 14 14 14 14 14 14 14 14 56 1c 8a 7e 2b 28 28 28 28 28 28 28 28 28 28 28 28 28 ac 38 14 fd 56 50 50 50 50 50 50 50 50 Data Ascii: AAAAAAaCo+EV~+(((((((((((((8VPPPPPPPPPPPPPXq(P[AAAAAAAAAAAAAaCo+EV~+(((((((((((((8VPPPPPPPP
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: f8 ec 25 9f c2 20 ac d7 fd 6a 25 ac 56 82 6a 35 a8 d5 02 bb 16 38 75 0d ec 30 ef c7 c1 15 a0 69 86 1e ea ba 9e 4a e9 99 ac 9e cd ea b9 bc 96 cb 1b 10 a6 f0 69 c6 1a 14 6b 40 68 60 2f 06 81 62 59 51 50 50 f8 c4 f0 7d 5c d9 9e 98 12 37 87 f0 0a 73 e0 de 53 45 5c e8 e6 b5 ee 6a 15 1f 6c be 7e 01 e7 87 6c 06 6f 02 e7 95 f0 4d fd c8 c6 77 6d 17 bb 76 60 d8 d3 2d 9f 94 ae a0 a0 f0 89 00 e3 37 00 ba 90 1f c2 dc 3a f4 42 10 d0 c3 4a 10 4c b9 fe 8c e7 4d 79 fe 8c eb cd fb 20 7e 2d 08 6c 3f 70 45 08 0e 90 d5 d0 84 a9 69 96 10 39 43 cf e9 5a c1 30 ba 4d b3 db 34 7a 4c ab d7 34 7b 4c 33 af 1b e0 03 43 3e b8 19 24 30 de c3 1e 15 15 5f b3 50 f4 5b 81 10 3a c2 3b 25 bc 77 84 f8 86 d0 46 85 7e 40 68 59 ec bc c1 6d 11 0c 09 91 11 da 4e 61 fe 35 61 fc 98 d0 06 e0 0c 20 73 Data Ascii: % j%Vj58u0iJik@h`/bYQPP}\7sSE\jl~loMwmv`-7:BJLMy ~-l?pEi9CZ0M4zL4{L3C>$0_P[:;%wF~@hYmNa5a s
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: 0b ea b3 d9 b2 9e 2a 74 bf 58 e8 7d 28 5b e8 b7 52 5d 86 45 b7 b1 35 9d 2f 14 56 14 8a 7e 3f e0 a0 2e 5a fd 7d 61 ff 81 b0 ce 0a 73 5a 18 bb 85 be 99 ae 3c 37 a5 03 f4 d8 60 04 e9 77 38 87 77 7d 1b 4f 10 fd fe 9a d0 b6 0b ad 53 f5 56 05 85 18 a1 6d 3b a3 c3 ce d0 20 10 ef fa ad 9b fe cc 14 de c5 5d af 35 6e e4 06 f0 34 17 d0 96 39 a3 b9 bd bd 3d da 3a 2f 5a 82 9c 4c 6b 9a 2e 60 b0 35 4d 2d 9d d1 32 59 a3 a7 2f bd 67 5f 7a f7 be d4 ae 3d a9 ed 3b c0 c2 de 0a 0a 0f 10 a0 6b 78 3e 3e 41 6d 7c 52 0c 8d 88 ab 37 c4 b5 9b 78 83 37 f0 f0 c9 69 e9 b3 a6 c0 b3 e5 f8 7c 02 08 71 21 2b d0 f0 d9 4e a0 f8 b4 ae e5 87 38 f5 07 05 81 07 89 7f 34 6e c3 9c 1c 34 ba 73 05 7f 78 c3 59 3a 9c 15 74 fa a1 1d 97 cb 28 6a d0 9a 1e 13 7a 89 9d db f0 79 6c 07 f7 8a fd 7b f0 b5 e1 Data Ascii: *tX}([R]E5/V~?.Z}asZ<7`w8w}OSVm; ]5n49=:/ZLk.`5M-2Y/g_z=;kx>>Am\|R7x7i\|q!+N84n4sxY:t(jzyl{
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: f9 a9 8e 7d bf a0 e8 f7 5a 04 f4 eb ba 0f a2 d9 be 70 03 41 af e6 d7 bc 00 47 53 08 5d 8c 82 57 88 77 67 d1 55 60 26 29 10 5a ba b0 34 61 ea 22 6d 88 9c 81 96 c5 bb 0a 14 11 e2 2d df d5 7f 25 cc 21 bc eb 1b b8 b7 b6 49 e8 5b e8 c6 ef 85 80 69 8a 83 0c 3c 9c c0 4b d0 c3 92 d0 0e 09 fd 59 61 7c 59 18 2f d3 9b c0 d3 d2 51 41 61 a3 02 46 4c 4d 0b 2a 65 fb e2 b9 da 85 b3 f6 d5 cb fe d4 44 68 d7 02 7a 9a 9a f4 59 0c 8b 39 b4 b3 df 07 fa 0d 68 6f 5f b6 33 4c c4 0d 53 cb e6 8c fe cd 99 43 87 b3 0f 3f 9e 3d fa a8 9e ef 40 4f 35 b7 56 d8 00 00 9a 6d d7 f1 06 ef 0b 97 c5 a5 ab e2 f2 75 71 7b 04 5f 33 86 6f da bf 9b 0e b8 22 80 0a d0 5a 37 5f 5e 2e 34 a8 93 1b 06 70 ae 29 fb 6e d5 f7 80 66 d7 02 50 dc 4a e0 d7 02 bc e0 dc 0b fc 00 40 37 7a 43 66 16 2e 88 c3 e5 77 5a Data Ascii: }ZpAGS]WwgU`&)Z4a"m-%!I[i<KYa\|Y/QAaFLM*eDhzY9ho_3LSC?=@O5Vmuq{_3o"Z7_^.4p)nfPJ@7zCf.wZ
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: 9d 9e 79 2e 07 fe c5 41 57 a1 07 13 f4 32 70 70 ee 12 e6 2f 0a e3 ab 42 db 8b 8b e7 54 0f e9 98 44 bd 2a 66 26 f0 b7 f0 ee cd f8 88 75 d5 6d 15 d6 03 42 df 77 86 6e d6 4e 1d af 9e 3a ee 4d 8c 11 f1 86 01 89 d3 a0 73 df 0d da fa 2f 52 c8 7d 60 e0 8b 96 b0 6c e7 05 36 24 e1 b9 bc 35 b0 25 f7 e4 33 b9 27 9f 4b ed d9 ab 19 fc 86 42 05 85 f5 00 18 8c 67 e7 f0 22 f3 d3 e7 c5 b1 d3 e2 a3 13 b8 06 8e f7 4a af 01 e0 98 88 13 5a 5c 6a d6 34 7c 80 79 e0 cd 78 f6 8c 6b cf ba 36 d0 ef 8a e7 d8 01 5e fb 8a 83 3c 0d d5 26 30 60 7e f4 13 61 b1 0e 7f ef 48 ec 02 2f 6d 0f 04 2e b9 43 3d 61 7a 0e 35 49 e9 7a 4e 37 72 7a aa c7 4c f7 58 99 ee 4d 03 9d 3b 77 a5 5e 7c d6 7a f2 51 63 ff 5e 7d 73 3f be 1e 1c ef 5a 57 50 58 d3 e0 1e 54 f2 c3 f7 e7 bd 3f 9e 72 8e 97 3d 3b c0 ee 46 Data Ascii: y.AW2pp/BTD*f&umBwnN:Ms/R}`l6$5%3'KBg"JZ\j4\|yxk6^<&0`~aH/m.C=az5IzN7rzLXM;w^\|zQc^}s?ZWPXT?r=;F
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: 71 31 2c e6 dc ce fe 69 d3 6f 40 5b e7 b6 b6 84 a7 9e cb 99 7d fd 1d 2f 7d a1 f0 c2 e7 cc 4d 9b 3f 9d 9f 38 15 14 ee 0e 76 5d 54 2a e2 7b af 89 37 de 15 37 87 f0 89 6b 8e 83 cf 3e 5d 65 c0 88 ac f3 a2 b7 07 73 31 df 99 71 ed d1 7a 79 d2 a9 cd 38 35 8f 9e 61 6e ea 1a 4c 73 d1 11 dc 41 81 80 72 ae 29 d0 e9 00 a9 01 28 20 6e 18 c0 2c 08 8e 2a 97 ce f4 75 76 6d 3b fc d0 ae 17 5e ca 7d f6 c5 d4 67 5f c4 e7 d3 28 28 ac 19 f0 48 e6 04 e2 4c c5 ff 8d 31 e7 fd 79 bc cd 1b 1a 72 62 a9 99 91 8c 26 47 ca 58 6d eb b0 20 15 bb 32 eb 4d 61 94 bc 98 b1 61 27 ad 11 95 21 cc f0 11 c8 a5 db ca 1d 19 b8 0e ec 5a 72 6f 70 66 9d b8 b7 5c 0c 47 1d 14 f0 64 85 16 c0 f1 72 74 66 e3 5f 2a ec f9 d3 dd 47 0e a7 fb 4d 4d 5f 83 27 a8 b5 09 e3 57 fe fe df 97 ea c6 43 10 84 c5 f9 e0 e6 Data Ascii: q1,io@[}/}M?8v]T{77k>]es1qzy85anLsAr)( n,uvm;^}g_((HL1yrb&GXm 2Maa'!Zropf\Gdrtf_*GMM_'WC
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: 6f 17 73 80 ea 2e e3 37 b5 95 05 74 0a 20 de 46 3d 0c 2b 81 33 e6 94 07 ed d9 e1 7a 79 c6 b5 dd d0 87 f1 df d2 8d 4c 36 9b e9 ea ca f6 f7 e7 b6 6d cb ef d8 51 d8 bd bb b0 6f 5f 61 ff 7e 0c f7 ec e9 d8 bd 3b bf 7d 7b 6e cb 96 4c 5f 5f aa b3 d3 cc 64 74 5d e7 93 18 76 cc 35 20 04 da c2 a1 6a f8 0b 02 4c 0e c2 20 a8 95 4b 95 6a a9 32 3d a9 5b 56 aa ab 1b 5f a3 00 2e 0a 0a 9f 3a e0 2c e0 05 e2 b5 59 ff 97 6f ba b7 ec 00 e6 b2 f8 2f 01 6d 92 a5 a1 53 a4 c5 c8 40 3d 8a b4 49 8d b5 04 a4 0d 7a 07 a9 1c 95 21 9b 22 c4 9e 51 b0 a8 25 0a 65 7a 5b 30 9d 06 8f a4 93 e4 de a0 11 1d 01 85 68 76 82 87 53 1e 54 98 87 a3 0e 6e 58 86 8c 62 5e 2c 15 2f 4d 9f f2 2b 1f 55 87 7a cc ec 76 ab 0b 7f 3a 24 3f 85 b6 d8 b0 f4 3b b4 9d 70 7a d6 f9 de 5b de 9b 1f 8a 4a c5 18 d8 64 3e Data Ascii: os.7t F=+3zyL6mQo_a~;}{nL__dt]v5 jL Kj2=[V_.:,Yo/mS@=Iz!"Q%ez[0hvSTnXb^,/M+Uzv:$?;pz[Jd>
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: e3 c3 5f de f1 cf 9f cd 9f 6a 74 07 63 0f 32 70 bc 79 3b 2d 2d 2d 68 3f d5 5e 02 40 63 ea c2 9f 16 fe 8c 18 7f 4a dc da 2e de ff 18 df f8 02 c4 1b 6a 62 06 22 6d 89 6c 4a bc f8 57 c4 73 bf 28 72 bd 22 d5 21 f3 29 28 7c 6a 08 43 af 38 33 f3 47 df a8 9c 3c e6 cf 16 f9 3a 29 ea 81 88 b8 73 34 61 b1 8e 70 57 1d a4 ad 73 3b e3 22 14 77 11 2c bb 58 c2 b2 9d 17 29 60 91 ba 35 19 cd ee 9e dc 53 9f e9 f9 cf fe bc d9 ab de 32 a8 f0 a9 00 9a 25 30 ed 99 59 7c d6 1a 0c 3a df 7b 4d 8c 4f ca a4 d5 05 4e 51 f1 5e 2f 27 0c 80 7b 0f bb e5 29 dd 9f 31 45 aa d0 91 e9 ee ee 3b 70 a8 7b df fe fc ce 9d b9 1d 3b 72 db b7 03 f7 b6 ba ba 96 4f 4a 03 d7 75 8a c5 da f8 78 f5 f6 ed 0a c8 d0 50 e9 da 35 10 bf 56 f3 aa 55 08 81 a8 63 87 5d f4 6c b0 c2 88 fa be 3c 69 e8 7a ba ab 0b 88 Data Ascii: _jtc2py;---h?^@cJ.jb"mlJWs(r"!)(\|jC83G<:)s4apWs;"w,X)`5S2%0Y\|:{MONQ^/'{)1E;p{;rOJuxP5VUc]l<iz
2024-03-18 16:23:00 UTC	1369	IN	Data Raw: 1f d8 8d 2f c5 59 1e a0 bc 62 c9 3f 3f 54 ff de c7 a5 57 4f 55 de b9 50 bd 3e ee cd db a1 17 42 9b 42 ca 4d bf 05 b1 02 6d ad 2d fd 66 59 cc 0e 42 0d b6 29 ba 7c c1 9e d3 14 65 7e 0e 53 5c e4 de 1c 36 1c 3a 8c ca 73 99 13 4f e5 ce ec cd dd ee e0 37 7e 33 f4 7e 14 ce 76 4f ac bb 05 bc 63 4b 98 59 51 08 45 c1 17 35 17 6f af f5 a9 9e 06 9c 02 6b c2 2f 89 ee 5d a2 73 8b 30 d3 c2 50 3d 53 61 85 01 23 af ef 97 8f 7f 38 fd ed 3f ac 5d bb 0c 53 40 ec 20 d4 4c 21 80 fe c7 20 0d 3a 23 be 30 90 d3 56 05 f7 63 32 ba 7a b5 8f 00 33 7e 7f 7a ca 1d 1d d6 3b 0a d6 96 6d 78 50 f7 e1 b8 14 14 16 60 66 16 29 f7 77 5f c5 5b be d7 c4 ba 37 f4 3f 5c f7 76 c3 a0 ec d7 6f d6 e7 c6 f3 a6 f9 f8 c3 fd 5f fc c2 be af ff fc d6 97 5e ea 39 f2 50 76 cb 16 33 97 03 be 7d 7f 99 27 14 08 Data Ascii: /Yb??TWOUP>BBMm-fYB)\|e~S\6:sO7~3~vOcKYQE5ok/]s0P=Sa#8?]S@ L! :#0Vc2z3~z;mxP`f)w_[7?\vo_^9Pv3}'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.4	50352	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:00 UTC	1329	OUT	GET /static/img/dialog-warning.gif HTTP/1.1 Host: browser-update.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA; cto_bundle=VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE5DeE1QUDZrQ1p1REU2QzUzMm9iS3pISWVKOFREZG8lM0Q
2024-03-18 16:23:01 UTC	694	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:23:01 GMT Content-Type: image/gif Content-Length: 604 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=dialog-warning.gif last-modified: Sun, 21 Mar 2021 12:19:12 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BrghiwvpicvVs3Oa%2FeCZQHUtBrSmwQHh1wym7kpUdc7COqr%2FpCSLDTBZddf3%2Bwug4dmGSFDIwOjYZd0mn8eZlAGKx2ARYfnX5O%2BWUJv9KzN%2FP8IKko4MJzVuINQOSYfdAjxMdQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 866690970a8a8ce6-EWR
2024-03-18 16:23:01 UTC	604	IN	Data Raw: 47 49 46 38 39 61 10 00 10 00 c6 49 00 93 01 01 99 00 00 8d 04 03 8e 04 03 9f 00 00 9e 01 01 90 05 04 92 05 04 94 05 04 96 05 04 af 00 00 b4 00 00 b8 00 00 90 0c 08 bc 00 00 7f 12 0d c0 00 00 c4 00 00 d1 00 00 d6 00 00 31 31 31 88 20 16 bb 14 14 8d 27 1c 40 40 40 43 43 43 92 31 22 4d 4d 4d 98 3b 2a d7 29 29 dc 2f 2f 9c 45 30 dc 33 33 9d 46 31 5a 5a 5a 5b 5b 5b db 39 39 da 3c 3c d9 41 41 68 68 68 ac 62 45 c6 94 68 cc 9e 6f e6 93 93 d2 a8 77 e7 a4 a4 e5 a7 a7 d7 b2 7e e4 aa aa e2 ab ab e1 ae ae dc ba 84 e1 c3 8a ef db 9a e1 e1 e1 e5 e5 e5 e8 e7 e7 ea e8 e8 e9 e9 e9 ea ea ea ed ea ea eb eb eb ec ec ec fb ef a8 f0 ec ec ed ed ed ee ee ee fc f1 aa ef ef ef fd f2 ab f0 f0 f0 f1 f1 f1 f2 f2 f2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: GIF89aI111 '@@@CCC1"MMM;*))//E033F1ZZZ[[[99<<AAhhhbEhow~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.4	50353	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:00 UTC	1320	OUT	GET /static/img/big/e.png HTTP/1.1 Host: browser-update.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA; cto_bundle=VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE5DeE1QUDZrQ1p1REU2QzUzMm9iS3pISWVKOFREZG8lM0Q
2024-03-18 16:23:01 UTC	679	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:23:01 GMT Content-Type: image/png Content-Length: 26826 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=e.png last-modified: Sun, 01 Aug 2021 16:06:48 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nbzOcZQ%2FfTOS40PLria6hEkzs4VAoPcMTXNA0G9mCEVNXI%2FiNojZpkBEdtm50kfGTt7yQZZLnlJFajIZAEGIm3zrMGVfujhaH%2BVJq7PDYWusSfU%2BbMqIEUCap71ZqDjdTP9xrw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 866690971e7bc459-EWR
2024-03-18 16:23:01 UTC	690	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 06 00 00 00 5c 72 a8 66 00 00 68 91 49 44 41 54 78 01 ec c1 81 00 00 00 00 80 a0 fd a9 17 a9 02 00 00 00 00 00 00 66 d7 1e 80 24 d9 ba 2d 8e ff 56 56 7d f6 f7 6c db b6 6d db b6 6d db b6 6d db b6 6d db ef f2 cd 54 9d f5 d4 2f 6e c6 64 4c 46 57 bf e9 b9 73 bb eb 1f 71 22 4f ee dc 39 ec b5 ce de bb ea a2 11 47 2e 04 cf f0 13 bf 1a 0a a1 f3 3d 8a 16 28 5c 73 5f 01 9d e5 cf ef 95 9a ed 0b a8 fb 34 47 f2 8c 3f f1 c3 8e dc 37 68 1f 2b 08 42 03 18 18 ee 25 92 7f 9c 18 41 68 33 37 09 ea c8 2d 4d 9e e9 27 be cf ad c7 91 f6 09 83 94 50 18 ab 82 ca d5 87 e2 d1 f4 31 f0 18 f4 b1 e8 63 d0 47 e0 91 f4 61 78 10 fd ef 75 7f 6c e8 86 0a a5 7b 7a 05 57 e8 5d f4 4e dc 46 ff 9d fe 0b fe 95 fe 13 fd 67 Data Ascii: PNGIHDR\rfhIDATxf$-VV}lmmmmT/ndLFWsq"O9G.=(\s_4G?7h+B%Ah37-M'P1cGaxul{zW]NFg
2024-03-18 16:23:01 UTC	1369	IN	Data Raw: 53 55 10 45 39 dc 0c d6 de 9f 55 39 dd 52 94 40 ef a4 3f 8b ef a4 df 8d df 03 88 4e f3 b9 81 b3 72 34 80 6f 74 e4 ff 47 f6 cf 31 3f ed 35 77 6f b8 ff 4b d2 37 c2 cb e1 d1 40 95 3d 60 a2 59 17 ed 61 02 ef 0d 31 82 f5 fb 65 5b 70 d8 af 95 f5 1c 33 33 40 37 52 14 4a 7f 2e fa 4d f8 36 fc 01 40 b2 df 44 61 ef c8 41 e4 59 7f ea eb 1d 39 9c ee 9e 3b d8 60 07 d0 8c a7 c0 1b e3 f5 e9 53 02 d0 99 e8 05 aa 1c 7c d2 2f 73 0f a8 08 56 da 02 28 67 6f 0b 0e 36 93 9c ee 9d d2 21 2d b6 33 13 d9 e3 c7 e9 57 d1 6f c5 3f 01 6c a6 ab db a4 7b d4 91 75 90 67 ff 99 af 76 e4 f4 ec af bc c0 42 f8 8c 97 c5 db e1 15 c4 a6 0a 03 a5 13 b2 26 f0 ae 3c bb 01 46 70 f8 7c e0 00 31 e7 8c 06 70 58 4b 51 02 1d 27 6b 1b 45 49 ff 35 fa 6d d1 2f c6 8f 03 4c d3 d5 ed 64 ac cf 0a 8e c8 73 fe cc Data Ascii: SUE9U9R@?Nr4otG1?5woK7@=`Ya1e[p33@7RJ.M6@DaAY9;`S\|/sV(go6!-3Wo?l{ugvB&<Fp\|1pXKQ'kEI5m/Lds
2024-03-18 16:23:01 UTC	1369	IN	Data Raw: df 13 b0 c3 b6 38 7b bf 7f 4e bd be ea 79 b5 04 cb e7 e7 d0 0e 1c fa e9 40 65 11 5f f9 d2 4f 4a 86 c9 c9 bd 93 e7 b9 e7 7e 31 f4 4b c9 2c d7 bc 1d 58 b4 00 a8 a4 f7 c4 da 9d 74 1b 25 fd a6 fd c8 9b e3 df ef b7 d9 5f 88 96 60 9a 52 17 6d fd fb bf bc c9 36 b2 c3 e3 d3 9f c2 7b 92 41 06 b6 10 44 ce 5c e6 1f f0 9d 80 83 db 02 a7 cc 4f 23 b0 de 12 2c 62 e7 57 09 04 38 f5 e9 1e 5d c6 0f 3b fd 63 49 88 75 04 ba ac 20 e2 9e 58 11 db 50 b1 ff 4f f6 de 02 3a 92 eb da fe fe ed 5b d5 92 66 c6 b1 e3 c4 61 f8 53 e8 31 33 33 33 33 43 f2 f8 f9 31 fd 19 1f 33 33 73 1e 86 99 5f c8 8c f1 98 69 ec 61 94 d4 55 fb eb a5 a9 5e 7d d6 59 d5 2a b5 25 8d 67 e6 cb 9d 75 5c 97 bb 24 eb ec 83 f7 b6 e0 8b ea aa bd b1 2a cd c7 b6 66 3c aa 1a 81 0b 98 0b 95 0a 98 8b 85 8e 1c fa 7a 1d 3e Data Ascii: 8{Ny@e_OJ~1K,Xt%_`Rm6{AD\O#,bW8];cIu XPO:[faS13333C133s_iaU^}Y%gu\$f<z>
2024-03-18 16:23:01 UTC	1369	IN	Data Raw: 02 ce 07 2a 02 ce 57 ba ff fe ef 9e 3a fc be 0a f8 8d 18 29 4a 7f 58 e7 10 04 72 d9 9d 31 6d 6d dd 39 d3 02 72 ef f6 22 02 f3 2f 05 15 1e 7e 87 ec 03 c8 1f 30 57 fa 83 b2 07 30 cc 95 d2 de d1 44 d0 74 5c 41 ed 0f 8e 42 a7 9c 81 00 02 88 75 e1 0f bb 6c 69 f5 65 13 42 b8 1d 38 44 f4 ee c3 40 f7 dd ff dd a3 8e f9 3f 07 f8 93 60 f3 8b 9e b2 db 20 30 b4 76 e7 4d 81 e1 b1 dd d7 02 f2 d8 f6 fb 86 00 3b 4f f1 a0 fa ef d9 12 79 be 56 20 03 a4 63 bf 61 0f cf c9 27 48 fb c8 4e 92 3f 6b 13 06 05 2d 45 46 66 04 ac 23 7f 3c f2 0b 3b 6d a1 05 c4 a3 5c 0a e7 5f 99 30 ff f7 d6 a0 f5 2e b3 ef 1f 17 73 f8 2d 52 b4 f3 a6 c0 b6 bc fb f9 13 77 f6 a7 d0 36 7f 3f c3 00 b7 0d 90 51 64 e6 81 44 1f f5 8f f5 77 39 7b fa b3 2d 00 d1 8b cf 54 95 37 d9 ee 57 9f da ef ac 45 80 98 8d c9 Data Ascii: *W:)JXr1mm9r"/~0W0Dt\ABulieB8D@?` 0vM;OyV ca'HN?k-EFf#<;m\_0.s-Rw6?QdDw9{-T7WE
2024-03-18 16:23:01 UTC	1369	IN	Data Raw: 67 5f 6e 27 b3 42 ae 30 63 e1 0f 6e cd 0f 01 ff 6f 37 4d 81 ba d0 72 2e ca 2d b7 ff 68 01 8f 81 a7 85 5b 7d ca b9 57 70 bd 83 8a f8 ce 4b ff ed ab ff 8b da ff ee ab 9d 43 10 f6 d6 a4 bd 0c 04 da e2 fe da 2a b8 cd 3b 6d e8 bc 8f a7 94 00 c1 c9 13 ea 9e d4 62 b2 46 90 41 ab 6b ba 92 a0 c0 ff 68 da ea 6f 1a b3 5f f2 ae 44 05 ea d6 85 73 5c 7e 03 bc 6f fb aa ff 39 60 7c 3b 32 2d 8a 35 85 3d a5 38 0b 3c ad 1b ec cc 82 c3 12 79 d8 dc 78 54 d4 7f 6f d7 01 28 b6 5c a4 b4 6c e1 08 c1 30 f0 08 50 0f a3 02 20 b2 f3 2f 46 0d 33 20 04 27 9f bb 39 fd df 3e 9c 99 bf 9b 17 c7 ba 1a 63 89 51 55 35 bf 08 7c ce 72 3d 66 37 4a bd 67 69 8d dd 2e d7 de f2 93 53 15 e6 2b 80 cf 4e aa ff f9 c1 f8 36 8e d7 4c 0b 54 15 a4 02 12 12 18 83 cf 92 db 16 db d0 86 3a ee e6 76 eb 8b 40 55 Data Ascii: g_n'B0cno7Mr.-h[}WpKC*;mbFAkho_Ds\~o9`\|;2-5=8<yxTo(\l0P /F3 '9>cQU5\|r=f7Jgi.S+N6LT:v@U
2024-03-18 16:23:01 UTC	1369	IN	Data Raw: cf 19 28 65 b3 45 3d 96 83 c7 c0 f2 a8 6a 7f 14 78 41 29 de 19 00 18 d5 cd ae 39 fe 84 be 07 f8 f7 3b ee f8 33 18 53 aa 8a aa ae 36 a4 fb d1 fd 77 73 64 ff 3d 9c 7e f8 08 6d cb 86 67 bd da bb 0f 54 f2 f7 ce cd 31 ce 84 12 00 40 bf 83 0f a5 9e dc 74 30 07 b2 01 28 b0 3d eb 2d 31 3e 48 92 e0 a1 cf 67 49 a5 42 d5 88 c2 59 5f c0 fa 89 35 d6 ae bb 93 e3 37 df c5 f2 15 97 b1 ef df 3f 65 03 10 26 26 0d 1e 8f 71 d3 0f 04 de b2 ea ff 48 a4 bf b7 2a fd 07 8a b7 98 15 e8 4d c0 64 c8 1c f3 40 84 d4 f3 b7 9a 2f f0 f3 bb 65 67 61 96 fc 91 f9 93 66 31 e3 29 19 90 bf 65 3c 2e 3f d3 34 da af 1d d0 02 ea c9 66 ec 64 b9 71 43 fa 7b 0c 5c 2e f4 23 3b 7d c3 8f 6d 4a 7d d6 49 b7 76 f4 38 47 6e 9b 30 fe ed f7 b2 7a e2 34 a5 aa 29 cb 7b a8 4b 01 0a 68 9e 4a 2f 50 7a 02 16 09 04 Data Ascii: (eE=jxA)9;3S6wsd=~mgT1@t0(=-1>HgIBY_57?e&&qH*Md@/egaf1)e<.?4fdqC{\.#;}mJ}Iv8Gn0z4){KhJ/Pz
2024-03-18 16:23:01 UTC	1369	IN	Data Raw: a1 f1 4e b9 d8 e7 8e 30 2e 20 0b d1 b5 21 7d b2 50 55 40 15 6e c7 68 b9 a0 51 c3 e9 7b 0e b1 7a e0 28 97 be cf 33 d9 f7 ec 27 83 85 9b 06 c4 23 63 7e 79 40 aa 33 e0 f9 f7 d6 bc f1 36 a8 1f a0 44 2c fd 67 f4 e3 4d 3d 79 7a de 37 95 05 af 20 f3 76 be 02 22 bd 63 f8 11 64 d9 67 bf 54 64 cf 52 f3 15 c0 6f 3e c2 33 02 3b a2 01 04 55 9f af 01 3f b9 33 05 04 5b 91 ff c6 36 f5 f2 88 b5 e3 a7 b8 f3 15 ef e4 fe b7 df 8a 55 51 ad ac 10 a5 9a a2 14 e4 6c 5b 51 2a c6 39 59 65 8e e6 80 48 ea 77 1c 8f 7d 1d 11 d6 96 40 9a 91 e7 9a 03 85 38 2e 15 22 31 87 1c 4c 06 4a d0 78 10 90 de 9d 6e ff ae 2d 0a 22 98 22 ea e6 57 d5 59 b3 60 42 54 23 ca de 7d e0 8a 23 6f bd 8d 83 af b9 81 e6 d4 19 ca 72 cd 14 58 16 67 7e 86 99 bf a7 5f d3 9a 07 13 89 16 4e 63 0e e8 89 95 5c ad 76 ff Data Ascii: N0. !}PU@nhQ{z(3'#c~y@36D,gM=yz7 v"cdgTdRo>3;U?3[6UQl[Q*9YeHw}@8."1LJxn-""WY`BT#}#orXg~_Nc\v
2024-03-18 16:23:01 UTC	1369	IN	Data Raw: 36 16 a0 60 7f b4 9f 62 f8 8f 86 d6 50 82 bc 9f fd b3 37 24 c8 43 d7 dd 3d 71 f8 ed a7 d4 35 2a 55 96 f8 d9 41 d7 9f 4a 9b 9c 7a 42 c4 90 9a 92 54 8b e4 0c 2e 25 79 f8 4b 60 82 ec e1 cf 7d 91 34 5d ab d0 17 68 20 75 18 84 10 2a 42 19 f8 e6 ee 27 94 34 9c a4 09 24 12 94 ac 29 85 88 4a 76 7c 56 67 b5 01 2d 2d 6d 00 c1 91 b7 de cd 89 1b ee 9f d4 2b f0 62 99 9d ea 68 78 ee 70 1e 80 d3 ba cc ec fd 76 3e 61 6e 66 f4 61 27 9f 31 78 ab e1 bc fc f6 ea 97 f4 99 c9 51 18 0b 90 e7 bc 5e 18 47 c4 91 71 23 b8 bc aa db 8f 9f 10 a5 b8 4c 88 ad 51 6c 2c 40 30 25 a6 d2 df f3 72 fa ab e5 8a 87 ae b9 7b 12 df bf 93 b2 34 0a 1e fc cc 54 43 9a 80 10 31 c4 55 40 15 31 cf df 94 94 fb df a7 d2 f7 a6 03 a7 5c 01 0d 9b 1a d9 1c e8 71 60 26 a6 4d cc 9c 24 3e 21 33 51 42 a4 77 56 01 Data Ascii: 6`bP7$C=q5UAJzBT.%yK`}4]h uB'4$)Jv\|Vg--m+bhxpv>anfa'1xQ^Gq#LQl,@0%r{4TC1U@1\q`&M$>!3QBwV
2024-03-18 16:23:01 UTC	1369	IN	Data Raw: a1 1e 4d 20 d2 dc bd e9 c6 73 a6 22 49 dd 97 50 a4 d9 dc ae 4e 4e 06 0a 5b 15 14 db 80 e6 a6 52 7b 56 cf ef 40 1e 07 a9 ef 36 65 a1 ba d0 9c 58 a7 39 b9 c6 9e 67 ee 8b a6 40 47 c3 75 4d 9f 62 56 87 90 6d 47 37 d6 b5 4b 1c 07 69 56 07 a7 36 b9 1d 32 00 1d 4c 9d 59 3f 71 ef 64 8a 20 47 33 60 be 99 20 91 b3 f8 f2 5c 39 27 9e 2a cd ed bb 91 da b1 96 b5 92 e9 06 97 ad 8c fc a7 7b 97 7c 48 a2 44 c5 b0 8f 4a 68 0c d2 0d 77 7e b7 2c 1a cb 7b 11 9f 80 00 28 4c 3d fe 4b 85 07 af ba 97 e3 f7 1d 3f 7b c9 84 bb e1 d2 67 87 77 d4 d3 6f 41 94 76 79 ae 63 7f 51 3e f3 3f ff 98 6d 9f 74 2c 69 1c 01 19 e6 e3 23 75 f4 7b 89 e7 1f 36 13 bd 49 43 ce e6 44 54 f3 4b c1 59 55 8f 9a 51 ec 67 06 a0 16 80 e6 99 18 49 db 12 96 82 46 c6 f4 f7 83 51 02 cf 99 63 b4 ec 5b e1 f4 dd 67 38 Data Ascii: M s"IPNN[R{V@6eX9g@GuMbVmG7KiV62LY?qd G3` \9'*{\|HDJhw~,{(L=K?{gwoAvycQ>?mt,i#u{6ICDTKYUQgIFQc[g8
2024-03-18 16:23:01 UTC	1369	IN	Data Raw: f4 ee 6d f2 82 54 4d ef 1b 3c f8 8d 91 91 2a 8a 8a 54 de 0a fa 76 a4 67 b9 94 2f 70 55 fd ae eb fa 26 4a 35 d6 78 bd 68 bc 56 6b bc 5a 6b 7d b5 d2 fa 99 4a 6b a7 26 74 b2 2e ab 27 6a 9d 39 56 e9 f4 d1 c2 78 bc 8a 7d 23 e8 f7 ad f2 e5 94 f2 2c a4 af 80 f2 0a e8 bc ad a5 d8 a8 c9 79 02 5a aa 58 3d 04 a7 ee 58 a3 8c 22 50 0d 90 7a fa 9c db 5b ba a5 38 8d cd f3 fe a7 44 9d 4d d6 1b 72 5f 7f ae bf 83 3b d0 e9 19 df 3c a6 05 03 ee a4 b1 a7 6c a6 29 b7 69 ce 19 3b 77 04 d3 25 88 d9 02 53 09 3d 59 88 a1 a2 2f bb e3 7b d8 4a b9 e1 ae e7 4f 91 e4 d5 98 8f 53 a5 66 fd e4 7a 75 fb 8b ee c2 6d c7 88 39 a6 9e 12 60 c2 33 98 03 dd 1c 42 bf e2 2d 3e 39 74 45 37 ae 61 69 3b ac 09 0c ab dd 3d 45 da 1d 4d 20 9b 04 9b 54 01 9b 52 1a a0 a6 6d 01 fe 55 f8 e7 80 57 30 2d cd 6a Data Ascii: mTM<*Tvg/pU&J5xhVkZk}Jk&t.'j9Vx}#,yZX=X"Pz[8DMr_;<l)i;w%S=Y/{JOSfzum9`3B->9tE7ai;=EM TRmUW0-j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.4	50354	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:01 UTC	1320	OUT	GET /static/img/big/s.png HTTP/1.1 Host: browser-update.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA; cto_bundle=VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE5DeE1QUDZrQ1p1REU2QzUzMm9iS3pISWVKOFREZG8lM0Q
2024-03-18 16:23:01 UTC	681	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:23:01 GMT Content-Type: image/png Content-Length: 52207 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=s.png last-modified: Sun, 01 Aug 2021 16:06:49 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FnRHrMM7OTFDSgN2UDklI5TFJDsSWPJ0CtMN84o%2FThPXYTzyqFdKp%2BJYmCOhLt8pgwa2bwPZITQnqEhzoolizHMYvddtx0k3lMuyOO3H%2BCE9h91RM79J9ykgHyknJ%2FEPjHGgLg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86669099097f0cbe-EWR
2024-03-18 16:23:01 UTC	688	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 dc 00 00 00 dc 08 06 00 00 00 1b 5a cf 81 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 1b af 00 00 1b af 01 5e 1a 91 1c 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ec bd 77 bc 25 45 99 ff ff 7e aa ba 4f b8 61 12 33 cc 0c 39 88 44 95 a4 62 04 54 82 ba e6 84 ae a2 ae bb 2a 8a 7e 8d 3f 5d bf ea ba ae ab ae ae bb eb 7e 15 15 59 75 45 01 05 04 89 06 a2 20 20 c3 c0 c0 90 73 1a 26 dd 99 3b 37 9f d0 5d cf ef 8f aa ea ee 73 87 49 88 0c 2a 35 af 3b e7 de 73 aa ab ab bb eb 53 9f cf 13 aa 8e a8 2a 4f 95 a7 ca 53 e5 89 29 66 6b 77 e0 a9 f2 54 f9 6b 2a c9 d6 ee c0 53 65 f3 cb e8 e8 a8 Data Ascii: PNGIHDRZsBIT\|dpHYs^tEXtSoftwarewww.inkscape.org< IDATxw%E~Oa39DbT~?]~YuE s&;7]sI5;sSOS)fkwTkSe
2024-03-18 16:23:01 UTC	1369	IN	Data Raw: 8f f4 b6 4e a7 73 72 ab d5 fa e9 ac 59 b3 1e dc da 9d 79 32 95 a7 00 57 29 93 93 93 7b 89 c8 a7 eb f5 fa 5b 80 c6 9f f2 5c 55 20 0d b7 60 6d 07 ee 1f 15 d6 75 60 32 87 a9 3c 00 47 21 c3 ff ae f8 bf 23 fc 55 c3 af e2 5f 8d 40 62 fc fb 56 a0 99 40 bf 85 79 0d d8 75 86 32 bb ee df 23 b4 f3 04 3c 79 ed 74 3a 97 a8 ea bf 35 9b cd df fe e9 4f f7 e4 2f 4f 01 0e 18 1f 1f 3f b0 d9 6c 7e 06 78 1d 8f 21 dd 6d 73 e4 58 ac 32 de 85 7b 47 85 9b d7 c2 a2 55 c2 aa 29 78 78 02 5a ce 03 c6 00 88 07 cc f4 e3 23 d6 84 f2 f7 f8 f4 04 70 80 04 20 a9 fa 1f 47 09 d6 d9 35 d8 a6 0e cf d8 46 d9 67 36 ec 3d 1b 16 f6 2b fd 01 84 7f ca a1 e0 9c 5b 34 35 35 f5 65 e0 97 83 83 83 7f b5 83 ee af 1a 70 93 93 93 2f 4a d3 f4 33 c6 98 a3 1f cf 76 8d 40 a6 b0 6c 4c b8 6a b9 30 9e c3 44 07 ee Data Ascii: NsrYy2W){[\U `mu`2<G!#U_@bV@yu2#<yt:5O/O?l~x!msX2{GU)xxZ#p G5Fg6=+[455ep/J3v@lLj0D
2024-03-18 16:23:01 UTC	1369	IN	Data Raw: 38 f5 06 e1 93 17 1a 3e 7a 8e e5 d6 55 11 a0 5b 5e 44 a4 af d1 68 7c b9 d9 6c de 34 32 32 f2 b2 c7 d6 ca 93 b3 fc c5 00 6e 74 74 b4 6f 72 72 f2 cb 03 03 03 37 01 5b fc 90 44 60 f9 a8 70 ca f5 86 e3 ce b4 fc f3 6f 0c 2b c7 84 14 30 61 a0 e1 fc ec 2e aa 88 2b 81 d7 67 72 3e f5 bc 0e bb 0c 3a 5e bc 53 86 cb 5d 19 fc 0a 60 70 ce b0 34 ac 34 db 6f 9e 22 b9 83 dc b7 a9 4e c1 09 56 85 35 93 00 c2 dc ba 97 70 a2 ea 99 34 ba 17 a7 3b 2b 02 a8 63 df d4 79 30 a8 7a f6 5d 36 0e 16 f1 7d c8 7d 5d cd 61 df 39 14 ce 96 3b d7 08 09 52 9e c3 79 89 db ed e6 7c fe 85 6d e6 35 1c c7 1f dc a1 13 27 80 00 4a 75 1e 7c 46 fd 0f aa 24 0a 37 2d 87 f7 9d 61 f8 fa 65 86 9f 5e 2f e4 31 40 bf 85 c5 18 b3 67 5f 5f df 6f 27 26 26 7e 36 3e 3e be fd 63 68 e2 49 57 fe 22 24 e5 c8 c8 c8 b3 Data Ascii: 8>zU[^Dh\|l422nttorr7[D`po+0a.+gr>:^S]`p44o"NV5p4;+cy0z]6}}]a9;Ry\|m5'Ju\|F$7-ae^/1@g__o'&&~6>>chIW"$
2024-03-18 16:23:01 UTC	1369	IN	Data Raw: fe c7 30 9c b6 4a f9 b3 01 dc ba 75 eb e6 35 1a 8d 0b 93 24 f9 0a 5b e8 ec 39 6f a9 e1 a3 3f 4f 39 fd 3a cf 1e 7e a0 7a c0 e4 28 47 ec dd e6 27 ef 98 c0 91 a1 38 5c a0 03 05 54 84 4c 2c 43 e3 7e 34 ec 34 db 71 f8 6e 79 01 ca e0 f3 40 45 38 f3 66 21 0d f1 af ed 66 fa 76 9c 94 e6 57 86 70 d3 0a 80 38 11 b8 1e 70 63 60 d2 59 4e b9 a5 c6 d9 77 d5 70 d6 a2 46 70 22 3d ed 94 eb 6a 24 0c fe f2 2d 35 02 d6 f2 e3 a5 35 ae 78 38 45 8d 89 8a b6 00 d4 de f3 1c a9 f1 47 4c 39 c1 18 21 07 34 00 65 32 57 5e b3 b7 23 cb 7d 92 f5 65 0f fa 28 7f 3c de 9b 8c 8e 03 16 66 64 21 fd f8 b4 eb 0d eb da 16 15 09 31 93 a8 a4 95 7d e7 77 38 f1 2d e3 ec b7 a0 43 1e e5 b0 f1 a0 9d e8 c0 8f af 36 bc ed fb 96 3f dc 2b c5 bd d9 9c 1f 80 7a bd 7e ac b5 f6 ba b5 6b d7 3e 63 4b c6 c4 d6 2a Data Ascii: 0Ju5$[9o?O9:~z(G'8\TL,C~44qny@E8f!fvWp8pc`YNwpFp"=j$-55x8EGL9!4e2W^#}e(<fd!1}w8-C6?+z~k>cK*
2024-03-18 16:23:01 UTC	1369	IN	Data Raw: 58 2a 30 a5 67 b8 32 58 18 65 67 1e 3e 73 e2 6d 32 27 4a 16 32 42 b0 5e 4a 8b 81 05 03 8e 4e ee 93 b0 2f 7e 50 a8 25 12 bc 98 c1 19 12 da b4 89 04 89 eb 27 8e 5c 7d 5b 5d a7 bc fb 19 5d 76 9c e9 bb f0 b9 4b 2c b5 7a 52 4c 10 9e bd 1c dd 3c e3 65 4f 73 de 0e 54 e1 8c 9b bd 03 c7 b7 a5 05 c3 75 f2 9c 8f 1e 36 ce d5 1f 59 c7 07 5e 3c 49 c7 69 29 ab 45 b9 fa 3e e1 d0 af d4 f8 f9 75 16 b3 91 d1 3a 1d 80 cd 66 f3 58 55 3d 77 dd ba 75 4f 2a 0f e6 93 0a 70 23 23 23 69 ad 56 fb 71 92 24 9f dc 5c 4f d5 5d 2b 85 8f fd 2c e5 ec 25 a6 58 32 13 07 ad 02 83 0d c7 ec 86 a3 d5 11 5e b5 4f ce ac 46 c7 db 68 01 24 7e 26 f7 b3 f9 75 cb 7c c2 6d cd 2a 7f b3 57 de 63 c7 69 70 b9 ff bf eb 92 82 f1 76 9e 91 d3 c9 f3 c0 20 25 23 45 39 18 7f 2f 80 14 98 ab eb 04 63 94 3c 87 e7 2c Data Ascii: X0g2Xeg>sm2'J2B^JN/~P%'\}[]]vK,zRL<eOsTu6Y^<Ii)E>u:fXU=wuOp###iVq$\O]+,%X2^OFh$~&u\|m*Wcipv %#E9/c<,
2024-03-18 16:23:01 UTC	1369	IN	Data Raw: 3f d9 54 9f 8a fa 75 40 10 18 d9 bf 86 05 9e 01 90 8f 36 41 09 ea 3d 7e 45 1a 8a 03 e7 98 df 70 ac 6a c5 60 1d 38 15 12 23 3e 89 3b 80 34 18 aa 88 06 cf a6 53 be f6 bc 09 9e bb 40 31 02 df 5d 6a 39 f9 b6 86 6f 23 80 14 c5 b7 81 16 39 9f 16 88 4b 8a fc 9a 42 47 9e 75 b9 fa bd 53 74 33 a1 9e c0 47 ce 4d f9 c3 b2 3a 06 af 42 24 24 5b bb 5c d9 b6 2f e3 f8 17 4e 71 c5 3d 29 bf be bd e9 d7 f6 05 10 3a 27 bc ef b0 8c f7 bc 20 df 6c db ae d3 e9 5c 9f 65 d9 61 b3 67 cf de 2a 5f 42 b2 55 25 a5 b5 f6 df d9 4c b0 89 c0 d7 7f 95 72 f6 0d b6 b0 91 e2 44 fe fa fd db bc eb b9 1d de 7e 70 9b f7 3f 7f 12 c4 5b 09 71 f3 1e 82 bc bb 65 4d 8d f8 6d 13 83 35 e1 f5 fb 75 41 5c b0 29 08 60 93 8a bc 0a 80 d5 8a 53 c2 80 b5 86 d3 ef 4e c8 f1 03 fd d8 7d 1c ad 4c e3 18 0d 72 48 4a Data Ascii: ?Tu@6A=~Epj`8#>;4S@1]j9o#9KBGuSt3GM:B$$[\/Nq=):' l\eag*_BU%LrD~p?[qeMm5uA\)`SN}LrHJ
2024-03-18 16:23:01 UTC	1369	IN	Data Raw: 49 34 d4 7c 7b 94 e7 2d 58 2d b6 59 ba 18 79 c5 6e 6d de b6 4f 8e 53 61 b4 0b 9f bc b4 41 9a 24 28 7e a5 bc 06 b0 35 4c c6 0f 5f 3f 89 c1 c7 f0 be 77 75 c2 85 77 35 31 89 0d 7d f7 13 40 c5 69 4b 9f 4e b1 60 62 39 63 b5 99 3c b0 d6 92 1a 61 bf ed dd 46 33 53 c0 5f 67 9a a6 87 8e 8e 8e 0e f5 f5 f5 2d da d4 98 7c 3c ca 13 26 29 87 86 86 e6 37 1a 8d 33 44 a4 b1 39 39 71 ff 74 76 8d 45 0f 94 60 eb 2a cc 1b ec b0 df 76 2d 3a 59 5c 8f 56 c9 77 14 61 32 4f f8 fc 45 4d 9f 16 84 70 c8 f6 8e d7 ed db 29 74 7f e1 40 10 e1 fe f1 94 5f de ed 5d fe b3 1b f0 ad 23 db 64 1a 1c 28 d5 35 6a 02 54 a4 a6 9a 8a ad 14 92 96 73 31 74 d5 14 52 34 ee 49 37 1d 0c 1a ee 76 31 88 2b 4c 1a a5 5f 35 ee 54 95 88 3d ed 50 4a de 0d b1 5a f5 1c 05 98 85 1e 69 5c 0d 76 17 59 26 e2 81 52 b5 Data Ascii: I4\|{-X-YynmOSaA$(~5L_?wuw51}@iKN`b9c<aF3S_g-\|<&)73D99qtvE`*v-:Y\Vwa2OEMp)t@_]#d(5jTs1tR4I7v1+L_5T=PJZi\vY&R
2024-03-18 16:23:01 UTC	1369	IN	Data Raw: 7f 6f fc 02 58 11 42 82 83 9f 14 6b ae c5 9b 57 9c c1 b9 b7 7e 92 59 2b 1f e2 e1 15 2b b9 e7 05 c7 f0 b6 1f 24 ac 9c 4c 83 8d 17 53 f9 fc f5 4a 18 3f 1f ff 59 8d 35 63 6c d2 9e 53 55 ac b5 5f 1a 1a 1a 7a dc be 37 70 7a f9 93 31 dc d0 d0 90 b5 d6 5e 94 a6 e9 61 9b aa 9b e5 70 d0 3f f7 63 13 82 e4 09 3b 1e db ea c0 0e 0f 54 1d cd a4 cb 55 1f 9a a2 1d f6 36 3c fb 76 cb bf fc ae 8f 34 0d 29 52 55 f6 09 6e fc e8 f8 28 a5 57 65 b3 c6 10 b0 fe d5 ab a7 78 78 dc f0 c1 ab fa c8 35 2c a8 8c f6 4b 68 a6 fa fb a3 ba ee 2b 7f 47 cf 5d f9 7e 65 8e 0d f6 a4 2f 25 ab 68 64 ca 40 3d 71 ff e6 e2 f3 a2 a9 c0 b4 15 f7 b8 4a d8 8e ae ca 40 b1 f9 2a 25 56 dd 89 da fb 51 f9 99 16 f4 aa 4e 7d 3f 9c b7 c3 50 8a 9c c6 62 7e 54 3f a0 cb db aa d4 c9 f9 f2 c1 53 d4 8c f2 b1 2b 1b 74 Data Ascii: oXBkW~Y++$LSJ?Y5clSU_z7pz1^ap?c;TU6<v4)RUn(Wexx5,Kh+G]~e/%hd@=qJ@*%VQN}?Pb~T?S+t
2024-03-18 16:23:01 UTC	1369	IN	Data Raw: 67 d2 72 42 d6 6d 93 e7 1d 9c 56 83 01 19 7b cc 99 e2 9c bf 9f a0 db f5 7d 6c e7 70 c7 50 52 a8 0d 07 88 81 0b 6e da bc d5 05 c6 98 a4 dd 6e 7f f7 f1 dc 01 ec 71 65 b8 e5 cb 97 3f b3 bf bf 7f 31 9b d8 19 d9 29 bc ed 7b 4d ee 5c 65 0a c7 44 e1 c4 10 65 46 23 e3 c4 63 c6 d9 71 a6 1f e8 f5 44 f9 fc 45 0d 7e 79 7b 1d 63 cb 98 5a 1c 70 8a a3 2f 75 9c fe a6 36 0b fb 7d 33 43 6d e1 a5 67 0c 90 86 ac 75 2d d2 b3 2a 83 4c fc e3 8a 3b 48 55 f3 26 7b 9c 1a 71 5a 2a 6c b7 e2 ee 11 6d cc 42 96 c4 e3 aa ea 69 ba 64 8c 40 aa 00 b4 fc 6c 5a dd 4d 96 e9 95 2a cf 53 7b 79 b1 07 83 15 1b 0d 42 6a 55 3c bd 42 0c 90 15 7f 87 d7 c8 64 e1 e6 95 aa 2e 6a 34 ad fc 1d 5c a9 52 7d 3f 0f e7 89 0e 12 e7 10 85 8e 31 7c e7 fa af f2 da d5 d7 11 d7 5f ad 5b bb 96 07 6f be 15 31 86 9b b6 Data Ascii: grBmV{}lpPRnnqe?1){M\eDeF#cqDE~y{cZp/u6}3Cmgu-L;HU&{qZlmBid@lZM*S{yBjU<Bd.j4\R}?1\|_[o1
2024-03-18 16:23:01 UTC	1369	IN	Data Raw: 25 47 d2 1a b6 de 87 ad 37 91 5a 9d ab 96 d5 38 71 71 8d eb 1e 31 bc ea e4 26 8b 57 a4 a4 49 a9 56 aa d3 8e 6a 4e 3b 77 f4 d7 ba 64 79 9c 9c 94 3b 57 0a d7 dd 17 c4 ee 46 56 af 24 49 22 22 f2 dd d1 d1 d1 3f 6a 37 e7 3f da 69 b2 7a f5 ea 17 d6 6a b5 df d1 6b 01 ac 57 6e 5f 2e 1c 73 42 a3 f8 92 89 c9 ae 72 c6 df af 63 f7 6d 1d 8d 04 de fa bf fd dc bc 3a dc b0 42 b6 94 6c 27 a2 48 d8 d5 d8 15 19 ff 54 1e 76 b8 d1 26 d8 3c 16 9c 18 06 9a 96 b6 1a 5c f8 f2 8d 9e ed a3 82 e4 e8 b5 c5 82 bd 16 a5 64 11 bb 0a e7 10 4a 1b 0f 7a 3e 2b ed 37 a1 ea 3c 89 a5 9a 07 a9 e1 b0 1e 0f 9e 4c 7b 2d 8f f4 6f 0a 95 03 37 7c af ab 1f 57 89 bb e8 04 5a bc a7 c4 60 73 d9 74 19 c8 d6 9e 59 a0 fc 4c 03 a6 04 55 d7 eb 3c 81 c2 61 a2 ae 74 f7 e3 94 4c 12 be ff 87 af f1 ea e5 d7 21 62 Data Ascii: %G7Z8qq1&WIVjN;wdy;WFV$I""?j7?izjkWn_.sBrcm:Bl'HTv&<\dJz>+7<L{-o7\|WZ`stYLU<atL!b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.4	50355	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:02 UTC	1611	OUT	GET /contact.html HTTP/1.1 Host: browser-update.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA; cto_bundle=VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE5DeE1QUDZrQ1p1REU2QzUzMm9iS3pISWVKOFREZG8lM0Q
2024-03-18 16:23:03 UTC	546	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:23:03 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hjt1nfaamKuLYiby0MVdoRFv3NFntIqN0d7P6llVEQtZ30Up2xQdaBSSxvZ8y5fvRtVqS3L7af8GCDorzTge%2F0NWQYvk3EcYtzCrdtg6UsA15vUChxMPeY3fWdZMI4AJeZRlug%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 866690a488137d1a-EWR
2024-03-18 16:23:03 UTC	823	IN	Data Raw: 39 37 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 43 6f 6e 74 61 63 74 20 2d 20 42 72 6f 77 73 65 72 2d 55 70 64 61 74 65 2e 6f 72 67 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 62 72 6f 77 73 65 72 2c 20 77 65 62 62 72 6f 77 73 65 72 2c 20 75 70 67 72 61 64 65 Data Ascii: 974<!DOCTYPE html ><html lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><title>Contact - Browser-Update.org</title><meta name="description" content /><meta name="keywords" content="browser, webbrowser, upgrade
2024-03-18 16:23:03 UTC	1369	IN	Data Raw: 69 63 2f 62 61 73 65 32 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 65 20 49 45 20 37 5d 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 73 74 61 74 69 63 2f 64 72 65 63 6b 73 69 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 0a 20 20 20 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 65 20 49 45 20 36 5d 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 73 74 61 74 69 63 2f 64 72 65 63 6b 73 69 65 36 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 0a 20 20 20 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c Data Ascii: ic/base2.css" type="text/css" />...[if lte IE 7]> <link rel="stylesheet" href="/static/drecksie.css" type="text/css" /> <![endif]-->...[if lte IE 6]> <link rel="stylesheet" href="/static/drecksie6.css" type="text/css" /> <![endif]--><
2024-03-18 16:23:03 UTC	235	IN	Data Raw: 0a 3c 61 20 68 72 65 66 3d 22 2f 73 76 2f 22 3e 73 76 65 6e 73 6b 61 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 68 75 2f 22 3e 6d 61 67 79 61 72 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 66 61 2f 22 3e d9 81 d8 a7 d8 b1 d8 b3 db 8c 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 67 6c 2f 22 3e 67 61 6c 65 67 6f 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 68 65 2f 22 3e d7 a2 d7 91 d7 a8 d7 99 d7 aa 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 63 73 2f 22 3e c4 8c 65 c5 a1 74 69 6e 61 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 6e 62 2f 22 3e 4e 6f 72 73 6b 20 62 6f 6b 6d c3 a5 6c 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 7a 68 2f 22 3e e7 b0 a1 e9 ab 94 e4 b8 ad e6 96 87 3c 2f 61 3e 0d 0a Data Ascii: <a href="/sv/">svenska</a><a href="/hu/">magyar</a><a href="/fa/"></a><a href="/gl/">galego</a><a href="/he/"></a><a href="/cs/">etina</a><a href="/nb/">Norsk bokml</a><a href="/zh/"></a>
2024-03-18 16:23:03 UTC	1369	IN	Data Raw: 31 31 64 37 0d 0a 0a 3c 61 20 68 72 65 66 3d 22 2f 7a 68 5f 54 57 2f 22 3e e6 ad a3 e9 ab 94 e4 b8 ad e6 96 87 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 66 69 2f 22 3e 73 75 6f 6d 69 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 74 72 2f 22 3e 54 c3 bc 72 6b c3 a7 65 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 72 6f 2f 22 3e 52 6f 6d c3 a2 6e c4 83 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 68 72 2f 22 3e 68 72 76 61 74 73 6b 69 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 62 67 2f 22 3e d0 b1 d1 8a d0 bb d0 b3 d0 b0 d1 80 d1 81 d0 ba d0 b8 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 65 6c 2f 22 3e ce 95 ce bb ce bb ce b7 ce bd ce b9 ce ba ce ac 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 61 72 2f 22 3e d8 a7 d9 84 d8 b9 d8 b1 d8 a8 d9 8a d8 a9 3c Data Ascii: 11d7<a href="/zh_TW/"></a><a href="/fi/">suomi</a><a href="/tr/">Trke</a><a href="/ro/">Romn</a><a href="/hr/">hrvatski</a><a href="/bg/"></a><a href="/el/"></a><a href="/ar/"><
2024-03-18 16:23:03 UTC	1369	IN	Data Raw: 61 73 65 20 63 6f 6e 74 61 63 74 20 3c 62 3e 3c 61 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 6c 2f 65 6d 61 69 6c 2d 70 72 6f 74 65 63 74 69 6f 6e 22 20 63 6c 61 73 73 3d 22 5f 5f 63 66 5f 65 6d 61 69 6c 5f 5f 22 20 64 61 74 61 2d 63 66 65 6d 61 69 6c 3d 22 36 65 30 64 30 31 30 30 31 61 30 66 30 64 31 61 32 65 30 63 31 63 30 31 31 39 31 64 30 62 31 63 34 33 31 62 31 65 30 61 30 66 31 61 30 62 34 30 30 31 31 63 30 39 22 3e 5b 65 6d 61 69 6c 26 23 31 36 30 3b 70 72 6f 74 65 63 74 65 64 5d 3c 2f 61 3e 3c 2f 62 3e 20 66 6f 72 20 71 75 65 73 74 69 6f 6e 73 20 61 6e 64 20 69 64 65 61 73 2e 0a 3c 2f 70 3e 0a 3c 68 32 3e 54 65 61 6d 3c 2f 68 32 3e 0a 3c 70 3e 0a 57 65 20 61 72 65 20 61 20 74 65 61 6d 20 6f 66 20 77 65 62 64 65 73 69 67 6e 65 72 73 2c 20 77 Data Ascii: ase contact <b><a href="/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="6e0d01001a0f0d1a2e0c1c01191d0b1c431b1e0a0f1a0b40011c09">[email protected]</a></b> for questions and ideas.</p><h2>Team</h2><p>We are a team of webdesigners, w
2024-03-18 16:23:03 UTC	1369	IN	Data Raw: 6d 20 74 68 65 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 74 61 6e 67 6f 2e 66 72 65 65 64 65 73 6b 74 6f 70 2e 6f 72 67 2f 54 61 6e 67 6f 5f 49 63 6f 6e 5f 4c 69 62 72 61 72 79 22 3e 54 61 6e 67 6f 20 49 63 6f 6e 20 4c 69 62 72 61 72 79 3c 2f 61 3e 0a 6c 69 63 65 6e 65 73 65 64 20 75 6e 64 65 72 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 72 65 61 74 69 76 65 63 6f 6d 6d 6f 6e 73 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 62 79 2d 73 61 2f 32 2e 35 2f 22 3e 43 43 2d 42 59 2d 53 41 20 3c 2f 61 3e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 54 68 69 73 20 73 69 74 65 20 75 73 65 73 20 47 65 6f 4c 69 74 65 32 20 64 61 74 61 20 63 72 65 61 74 65 64 20 62 79 20 4d 61 78 4d 69 6e 64 2c 20 61 76 61 69 6c 61 62 6c 65 20 66 72 6f 6d 0a 3c 61 20 68 72 65 66 3d Data Ascii: m the<a href="http://tango.freedesktop.org/Tango_Icon_Library">Tango Icon Library</a>licenesed under <a href="http://creativecommons.org/licenses/by-sa/2.5/">CC-BY-SA </a></p><p>This site uses GeoLite2 data created by MaxMind, available from<a href=
2024-03-18 16:23:03 UTC	468	IN	Data Raw: 6d 79 2d 62 72 6f 77 73 65 72 2e 68 74 6d 6c 27 22 3e 57 68 61 74 20 69 73 20 6d 79 20 77 65 62 62 72 6f 77 73 65 72 3f 3c 2f 61 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 3e 3c 61 20 68 72 65 66 3d 22 2f 73 74 61 74 2e 68 74 6d 6c 22 3e 53 74 61 74 69 73 74 69 63 73 3c 2f 61 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 3e 3c 61 20 68 72 65 66 3d 22 2f 63 75 73 74 6f 6d 69 7a 65 2e 68 74 6d 6c 22 3e 43 75 73 74 6f 6d 69 7a 65 20 61 6e 64 20 74 65 73 74 3c 2f 61 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 6f 74 65 72 2d 63 6f 6c 75 6d 6e 22 3e 0a 3c 64 69 76 3e 3c 61 20 68 72 65 66 3d 22 2f 22 3e 41 62 6f 75 74 20 74 68 65 20 50 72 6f 6a 65 63 74 3c 2f 61 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 3e 3c 61 20 68 72 65 66 3d 22 2f 62 6c Data Ascii: my-browser.html'">What is my webbrowser?</a></div><div><a href="/stat.html">Statistics</a></div><div><a href="/customize.html">Customize and test</a></div></div><div class="footer-column"><div><a href="/">About the Project</a></div><div><a href="/bl
2024-03-18 16:23:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.4	50356	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:03 UTC	1574	OUT	GET /static/img/wmp_logo.png HTTP/1.1 Host: browser-update.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://browser-update.org/contact.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA; cto_bundle=VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE5DeE1QUDZrQ1p1REU2QzUzMm9iS3pISWVKOFREZG8lM0Q
2024-03-18 16:23:03 UTC	689	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:23:03 GMT Content-Type: image/png Content-Length: 5875 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=wmp_logo.png last-modified: Sun, 21 Mar 2021 12:19:12 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bVKZVWYJQRi1L2QplFnQ2efQ3Kjw%2BAMblh%2B2wVqwORbnwkZb%2F9EB9E%2FZPhguGkSZXmDY7%2BJx2ki8UEX8SZxeqBxSvoQlmtQQvoiZagObvFs%2BcsMkp6PYz7C0oXs9dicd7QJkpA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 866690a7ba6643ed-EWR
2024-03-18 16:23:03 UTC	680	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f8 00 00 00 34 08 03 00 00 00 90 25 05 f6 00 00 02 fd 50 4c 54 45 ff ff ff fe ff fe fd fd fd fc fc fc fb fb fb fa fa fa f6 f6 f6 f9 f9 f9 f8 f8 f8 3c 3c 3c 3a 3a 3a f5 f5 f5 9f 9f 9f cf cf cf 39 39 39 3e 3e 3e 45 45 45 9c 9c 9c d3 d3 d3 f4 f4 f4 40 40 40 a1 a1 a1 d1 d1 d1 f0 f0 f0 34 34 34 ed ed ed f2 f2 f2 71 71 71 37 37 37 d6 d6 d6 98 98 98 42 42 42 f3 f3 f3 9a 9a 9a 3f 3f 3f cd cd cd ca ca ca 68 68 68 66 66 66 44 44 44 6b 6b 6b 59 59 59 43 43 43 41 41 41 32 32 32 a6 a6 a6 6c 6c 6c 4f 4f 4f 38 38 38 e1 e1 e1 c8 c8 c8 80 80 80 5d 5d 5d dd dd dd ce ce ce 92 92 92 70 70 70 49 49 49 30 30 30 db db db b2 b2 b2 ab ab ab 76 76 76 51 51 51 47 47 47 36 36 36 b5 b5 b5 9e 9e 9e 7d 7d 7d 79 79 79 74 74 74 53 Data Ascii: PNGIHDR4%PLTE<<<:::999>>>EEE@@@444qqq777BBB???hhhfffDDDkkkYYYCCCAAA222lllOOO888]]]pppIII000vvvQQQGGG666}}}yyytttS
2024-03-18 16:23:03 UTC	1369	IN	Data Raw: db b0 a2 e3 ab 9b ff ad 9a c7 7c 7b c6 7c 6f bc 78 68 b0 65 55 c8 63 51 c0 4f 4e ca 42 41 be 52 3d 24 24 24 b9 5a 20 e0 ff ff e6 ff f8 db de e5 f2 ff e3 f5 f7 e1 d6 d6 d8 cd ca d5 fe d5 c3 f1 b2 ba f1 c2 b8 c5 b7 b6 a9 bd b2 e3 af b1 d6 95 8f c5 87 88 e1 9b 81 f7 8e 78 dd 73 66 5b 68 61 cf 63 60 b8 67 4c b2 42 3e 4f 45 3c 40 33 39 3c 42 36 9f 4b 31 31 32 2a ba 36 29 ad 4b 28 b2 7b 55 ed 00 00 13 b1 49 44 41 54 68 de ec d5 3f 6b 94 41 10 c7 f1 ef fc 66 f6 d9 27 39 89 d1 20 21 11 82 45 fa 80 06 41 44 82 22 8a f0 14 fe b9 20 92 a0 77 60 0a 41 24 5a 1b 48 02 46 bb dc 5d b0 b1 b0 08 f6 91 88 b5 af c0 bc 26 b9 7b 30 8d d5 b5 3e f9 34 bb 0b b3 2c 3b b3 ec 70 e6 4c 2d 21 83 04 66 46 73 24 50 10 80 43 a6 39 02 5c 58 89 81 05 0d 52 3a 78 5d 6d d1 1c 8e 51 62 5c 21 Data Ascii: \|{\|oxheUcQONBAR=$$$Z xsf[hac`gLB>OE<@39<B6K112*6)K({UIDATh?kAf'9 !EAD" w`A$ZHF]&{0>4,;pL-!fFs$PC9\XR:x]mQb\!
2024-03-18 16:23:03 UTC	1369	IN	Data Raw: d0 d3 a0 ba 16 a1 3c 10 af 37 f4 ca d3 5c f1 43 82 55 2a 1b 65 2e 02 1f be f6 d6 43 df de f5 e3 5b 0f df bd e1 a6 ab 77 de ff dc 4b f7 ef b9 f3 52 b2 17 13 27 b0 d1 c6 54 53 95 b1 78 66 99 39 7d ca d0 fc a3 8e 9a d2 d8 52 8c f2 64 99 7b ac 94 8f be 04 8b 3b 21 33 f8 04 1c ca 34 1c 14 3a 86 36 73 0f ad 33 23 6e 08 4b 53 33 e0 e1 7c 3d 91 07 b8 5a 4a 0a 98 72 32 a1 bd dc 6c 92 b1 8c 25 3c b6 82 c2 89 6e 94 73 ee 11 ab d8 02 90 69 c1 15 40 71 8c 03 a4 89 95 d9 90 f5 f7 56 a4 99 59 bc 0f 71 30 5e 25 a3 d7 88 69 58 17 53 9a 7b 08 69 63 fb 49 02 99 f1 6b f3 d9 4f ae b9 7e ed 86 4f b7 bd f9 e5 9a c1 3b 1e dd 7e cf 59 b7 ee 7c e8 f9 6b 57 7d b5 65 f7 ad 83 ab 6e c0 5e a0 a6 ba 6b 28 70 bc 7f 99 7a b4 00 4a 09 c1 81 93 5d 3d 59 13 0c c7 a2 69 bd 90 ac 80 a1 20 82 Data Ascii: <7\CU*e.C[wKR'TSxf9}Rd{;!34:6s3#nKS3\|=ZJr2l%<nsi@qVYq0^%iXS{icIkO~O;~Y\|kW}en^k(pzJ]=Yi
2024-03-18 16:23:03 UTC	1369	IN	Data Raw: f1 82 92 bf da 35 f7 a6 a6 8e 30 8c ff f6 72 ce 1e 4d 52 42 62 82 24 0d 06 b9 8b 84 46 08 97 72 2d 0a 28 0c 57 07 04 e5 32 03 72 d3 02 63 ad 77 67 fc a3 75 46 3b ea 7f 55 3f 5e 3f 4a dd 3d 99 94 da 7e 82 96 67 60 38 bb 7b ce bb ef f3 be cf 59 f6 dd 24 02 d2 f0 f9 87 bb 1a ed bb 1a 49 7b dc ff ee e6 94 00 cf 90 18 1c f8 5b 65 a8 1d 7b 24 ae c2 46 86 32 a9 0c b9 10 80 12 78 04 f8 ee f4 4e 49 21 ec b0 08 2b 59 1b 8f f2 7a 19 56 f5 61 44 05 52 53 77 b6 2a 6a 50 42 4a db a2 5c f0 e2 a3 50 ca b5 f0 40 85 77 58 08 eb 4a 80 34 76 3c 70 7b 0d ec dc 88 30 1b ce 99 b0 22 c4 3b c9 23 2c 47 84 7e 7c e3 62 74 06 8c 5b ed e4 fd b6 1b fd ef cb 25 74 52 60 10 94 e1 ac fb e5 c2 2d 70 21 48 a2 70 15 ac 2b c4 2d 49 a1 09 33 68 f0 ed 85 87 14 81 75 d8 9a 32 01 21 a4 ca 00 6e Data Ascii: 50rMRBb$Fr-(W2rcwguF;U?^?J=~g`8{Y$I{[e{$F2xNI!+YzVaDRSw*jPBJ\P@wXJ4v<p{0";#,G~\|bt[%tR`-p!Hp+-I3hu2!n
2024-03-18 16:23:03 UTC	1088	IN	Data Raw: c2 3c cc b5 cc 49 ce d8 f4 ca f5 ea c4 26 2a d5 11 3b d7 12 bf 50 4d a1 81 76 71 6b f4 42 4b 55 a2 b4 d8 56 42 a2 aa 53 5d ef 69 fe 39 9e e9 b8 d8 1f bf 74 7b b6 da 10 ed b8 9a 92 5e 47 34 5d 15 af 8a a7 6a b2 d7 07 69 98 a0 35 a7 e5 70 3a 31 81 48 45 a9 c0 40 ba ee 0e 33 47 75 19 6f ec c9 73 a5 21 d7 b5 73 6d f4 46 34 40 ff 1b 71 af 67 b5 29 c7 25 9e 0f a3 5e a4 1b 16 02 7a b2 74 2f cb 9e 2e 3f f2 6a 1f 66 d7 69 87 9e 09 8c c4 e6 be e5 4b e3 9a 3f 11 73 95 fd 78 0c fa 72 eb eb 50 78 2a a8 4f 91 4d 8b 49 27 2d 66 0a 83 f8 4b 2f ef a8 ce cc 70 03 dc 3a 6c 1c 47 46 ab 97 87 01 c9 f1 53 ef 9c 1a 72 09 13 1c 76 a3 a0 67 65 75 8b a3 b7 ad 0c 45 7d a0 fe 16 54 d7 77 44 a1 ae a3 94 c5 1d 4b 3f 9d 5c 7e b3 49 5f 23 6a a3 31 d1 a7 88 a6 24 27 e1 fb 20 6b 80 7d e1 Data Ascii: <I&;PMvqkBKUVBS]i9t{^G4]ji5p:1HE@3Guos!smF4@qg)%^zt/.?jfiK?sxrPxOMI'-fK/p:lGFSrvgeuE}TwDK?\~I_#j1$' k}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.4	50357	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:03 UTC	1553	OUT	GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1 Host: browser-update.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://browser-update.org/contact.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA; cto_bundle=VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE5DeE1QUDZrQ1p1REU2QzUzMm9iS3pISWVKOFREZG8lM0Q
2024-03-18 16:23:03 UTC	766	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:23:03 GMT Content-Type: application/javascript Content-Length: 1239 Connection: close Last-Modified: Tue, 12 Mar 2024 18:07:56 GMT ETag: "65f099fc-4d7" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fm3x5sUPYdxKu%2BIQ%2BeeqJuC2Q6wo%2BDTJr9OeIuzht3PPq1hU9swKkZR9yOjNkVD4tvIfX32VTnYqLXNP1339ytQW0N7Nywprp8Rd%2B%2F4%2BwFHeaowyUN3t233lpMUFnEAg6%2B4tlw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 866690a97b3541bb-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Wed, 20 Mar 2024 16:23:03 GMT Cache-Control: max-age=172800 Cache-Control: public Accept-Ranges: bytes
2024-03-18 16:23:03 UTC	603	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 74 72 79 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 29 72 65 74 75 72 6e 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 3a 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 3c 61 20 68 72 65 66 3d 22 27 2b 65 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2b 27 22 3e 3c 2f 61 3e 27 2c 64 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 Data Ascii: !function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href
2024-03-18 16:23:03 UTC	636	IN	Data Raw: 69 6c 74 6f 3a 22 2b 6e 28 6f 2e 68 72 65 66 2c 61 2b 6c 2e 6c 65 6e 67 74 68 29 29 7d 63 61 74 63 68 28 69 29 7b 65 28 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 75 29 2c 63 3d 30 3b 63 3c 72 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 74 72 79 7b 76 61 72 20 6f 3d 72 5b 63 5d 2c 61 3d 6f 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 69 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 66 29 3b 69 66 28 69 29 7b 76 61 72 20 6c 3d 6e 28 69 2c 30 29 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 6c 29 3b 61 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 64 2c 6f 29 7d 7d 63 61 74 63 68 28 68 29 7b 65 28 68 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 Data Ascii: ilto:"+n(o.href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.4	50358	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:04 UTC	1588	OUT	GET /static/img/blog/logo-browserstack.png HTTP/1.1 Host: browser-update.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://browser-update.org/contact.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA; cto_bundle=VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE5DeE1QUDZrQ1p1REU2QzUzMm9iS3pISWVKOFREZG8lM0Q
2024-03-18 16:23:04 UTC	692	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:23:04 GMT Content-Type: image/png Content-Length: 5380 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=logo-browserstack.png last-modified: Sun, 21 Mar 2021 12:19:17 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KPITm3NGGFCcOFQVY4dajH4xBAWvFjyhU8K7SQ%2BE0cVxrTTAeCdt5K8u8imStZSrIzx84j%2BQxZCzrJinIe0H8NJhipo8C1DpgaSo4etKDl7Gq0qorzvR%2FMdYfK6JLGsJy7mspw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 866690ab4e310ca4-EWR
2024-03-18 16:23:04 UTC	677	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 00 91 08 03 00 00 00 28 c0 36 bb 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 ae 50 4c 54 45 00 00 00 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 21 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 f0 a3 5c ea 84 4b 20 20 20 d7 7b 45 f2 a9 60 f4 b8 68 f4 b8 68 f4 b7 67 f4 b8 68 e6 6c 3e e6 6d 3d 20 20 20 e5 6f 3b f4 b8 68 6d b5 55 21 1f 1f ae da e5 e2 3d 44 bc d0 52 57 b9 dc 0e b0 d2 e0 4b 44 ff ff ff ef 9f 5a e3 5d 43 84 cb e0 c5 b8 4e 9d c5 53 81 b5 54 74 bb 76 9e d1 c2 cd 99 4a 2d b5 d6 8e c7 9e 2b 38 3b 44 b7 d9 31 52 5a 31 70 7f aa 78 4c 5f b2 ab 22 8f a8 be cf ca b7 cd 8e 91 90 90 ca 87 88 17 b9 d2 80 00 00 00 18 74 52 4e Data Ascii: PNGIHDRX(6gAMAasRGBPLTE "! \K {E`hhghl>m= o;hmU!=DRWKDZ]CNSTtvJ-+8;D1RZ1pxL_"tRN
2024-03-18 16:23:04 UTC	1369	IN	Data Raw: 14 b4 6e 1b b2 c6 34 b8 c4 95 ce d5 45 8d d5 f2 d4 a4 8d 6b 2d ae 80 70 78 46 64 51 3d 58 49 49 af 2a ac ce 4f cd 2a 02 a2 ec 5a 25 59 ab 39 91 d5 e7 fe d5 0c 4e dc d7 df 7f 2f 1d ec aa 35 2d 09 ad 92 ac 22 81 a7 3c ab af 3a 81 03 e1 da 64 57 8f a5 d4 4c 4b 8a 87 25 59 43 22 8b b8 92 03 e1 ba b6 2b 8d ab c7 bb 1f 8d ee ee 1e 25 b2 44 d3 2a c9 2a d2 2c ea 67 f5 3c 71 17 03 e1 0a e1 ea f1 87 a6 9a 2d 90 ac 32 18 ce a9 07 df eb 04 4b 0c 84 30 57 77 3f 40 55 68 6d c9 ba 92 bb 0e a5 65 4d 68 de b0 cf 81 70 a5 73 b5 b4 b8 55 83 16 4c d6 a8 aa 0c a9 34 ec 73 20 14 0c eb 7f 10 57 77 3f 4c 7a 6c 6a 43 91 ac 75 95 bf 53 02 df df 40 28 64 ee a3 a5 1e 08 1f 7f 58 54 9a d6 42 21 6b 93 66 6d 2d 8b d2 2c 32 ac 7f 56 6f 3b 70 b5 25 eb 97 4a d6 6d 95 65 cd 27 34 da 3d 35 Data Ascii: n4Ek-pxFdQ=XIIOZ%Y9N/5-"<:dWLK%YC"+%D**,g<q-2K0Ww?@UhmeMhpsUL4s Ww?LzljCuS@(dXTB!kfm-,2Vo;p%Jme'4=5
2024-03-18 16:23:04 UTC	1369	IN	Data Raw: 43 fc 22 99 2d 0b 07 8b 23 f3 18 99 f2 0d 88 80 8b 49 23 13 58 a1 ed d4 5c c0 da c6 c2 0e 60 6d 27 0b 1f 6d 60 8d 3b 82 a5 56 df 2d 58 83 29 70 5b 0e 58 6a 5e 1f 91 42 6d 31 0e 37 cb 32 25 dd 41 67 9e 04 a3 e3 09 fc 96 1c 00 2b 81 ae 20 00 3c b8 0b 58 2c 76 9b 6f cd cd e7 09 80 e5 5b 0b 74 04 ac eb a5 66 59 0f ee 60 55 91 f0 da 02 d6 a4 1b 58 5a b7 81 9b e7 66 d1 61 ad c9 ca a1 c1 89 c0 21 63 0a d3 be cb e2 8b 00 7b 4b ae 07 77 70 3e d4 77 5b d7 87 82 c5 63 7c 26 9f 5b b9 6a ce 53 07 cb a1 f1 a3 80 55 2d f4 5b 2d 96 9a 65 3d 39 73 55 ad 9b 59 2e 2c 60 cd bb 80 25 b8 7a 76 60 01 2b e3 72 3f 15 19 55 06 4d 11 25 e0 c4 91 2f 1b 12 c3 b9 4a ec f7 4b b8 1d d8 9d 4f b9 7e 81 71 e2 c3 85 2d 1e 0a 7d 97 f3 34 ac f8 62 30 58 9e 43 df 07 03 eb 46 b3 ac d7 8e 45 e1 Data Ascii: C"-#I#X\`m'm`;V-X)p[Xj^Bm172%Ag+ <X,vo[tfY`UXZfa!c{Kwp>w[c\|&[jSU-[-e=9sUY.,`%zv`+r?UM%/JKO~q-}4b0XCFE
2024-03-18 16:23:04 UTC	1369	IN	Data Raw: 2a 12 ce e4 14 eb b8 2b 58 4a e3 6a 97 1c 2b 44 5b a2 bc b9 3b 9e 60 39 51 7b 77 94 4f f1 32 d3 dc 40 f0 c1 60 71 97 03 99 9f 28 b2 27 58 b1 b9 30 fc 32 1f 22 96 75 85 93 b5 61 eb f9 61 2a fc 30 c5 53 f1 94 e4 e6 7f ea 5c 2d 2a c3 92 53 ac a3 ae 60 1d c8 7b cb 0d 60 a1 55 61 a2 55 41 69 73 c8 48 1c e3 bc 39 74 8c 15 e4 cc 0f 62 6c ad 49 03 56 12 c2 8a f6 03 ab 8d b5 09 7a 20 69 dd 42 9c 55 8f 2c 48 25 b0 f2 0e 55 e1 96 63 c7 29 9d 83 f9 99 c9 b2 a0 34 ab d6 cd af e7 e7 a7 e7 e7 e7 5f a7 e7 e7 d2 eb 3a 57 db 48 38 93 23 a1 65 33 05 74 de a9 2b 58 07 da 12 75 78 d6 4f 18 da a4 fe e8 40 74 b2 b8 c1 2d 86 9d a3 d8 58 13 4a 4d 80 5c ba 0c 73 92 fb 0e 60 e1 8e 95 0b eb 2b 38 d2 c7 72 98 44 38 90 8d d6 75 77 e7 18 00 ab ec 65 ad 16 36 b2 10 de 16 a8 61 c9 91 d0 Data Ascii: +XJj+D[;`9Q{wO2@`q('X02"uaa0S\-*S`{`UaUAisH9tblIVz iBU,H%Uc)4_:WH8#e3t+XuxO@t-XJM\s`+8rD8uwe6a
2024-03-18 16:23:04 UTC	596	IN	Data Raw: 21 f6 93 a0 51 58 be 2b 4e 13 c9 f3 b2 66 47 51 f9 e9 c8 47 32 3f 19 a4 c5 af aa 68 c7 f7 e0 67 42 f2 e6 ee 98 d2 77 34 18 16 64 ad 76 e7 aa 3a c8 dc 31 75 ff 18 71 c6 22 c6 3e e8 d9 b6 2e 0f ce 2d 1e 81 bb ff 09 70 87 e7 d3 ca 7b 98 a5 eb 3f f8 f7 55 a4 ef 68 30 2c c2 a1 d4 75 70 54 dd 6f 87 02 21 9a ba 93 fe 2e 1d cf 0d c1 70 a7 70 78 d5 86 41 20 10 4e 68 c8 fb a1 d2 b2 ce 70 b2 36 a6 f5 72 d5 35 0c d6 76 a5 73 45 86 d5 2f cb 32 91 b5 5e 75 30 2d c9 ae f4 04 8b 0c ab 67 96 65 48 b3 4a b4 56 2f bb 60 a5 27 58 64 58 3d d2 91 9d ac 4d 40 74 40 eb ea 52 c6 0a e0 8a 0c ab 4f 9a b8 90 b5 b1 2d 63 ae 55 52 75 2b fd 85 ce 15 de c3 22 fd 85 3a 9c 3b 91 b5 61 6b 8d b0 75 75 79 b9 a1 4a f9 71 1e 80 ab 63 1a ec fe e5 ef 2e 64 15 70 8d 5e 24 ba ae 36 50 5d 68 50 c1 Data Ascii: !QX+NfGQG2?hgBw4dv:1uq">.-p{?Uh0,upTo!.ppxA Nhp6r5vsE/2^u0-geHJV/`'XdX=M@t@RO-cURu+":;akuuyJqc.dp^$6P]hP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.4	50359	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:04 UTC	1323	OUT	GET /static/img/wmp_logo.png HTTP/1.1 Host: browser-update.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA; cto_bundle=VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE5DeE1QUDZrQ1p1REU2QzUzMm9iS3pISWVKOFREZG8lM0Q
2024-03-18 16:23:04 UTC	685	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:23:04 GMT Content-Type: image/png Content-Length: 5875 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=wmp_logo.png last-modified: Sun, 21 Mar 2021 12:19:12 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YDsQY9mbgortg8xjcxk4NkOxiofPxQ0WWGL%2Fj4%2BGI5QMBnE4rf45R7xG6RzsfBZiHyTcvsQUXGdehsG9yM9b%2BIRRujMrEWSj40c4i6%2BOA7pnqvqVwb6pUseC5uSSl1rPeHs0Tw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 866690abdf30435b-EWR
2024-03-18 16:23:04 UTC	684	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f8 00 00 00 34 08 03 00 00 00 90 25 05 f6 00 00 02 fd 50 4c 54 45 ff ff ff fe ff fe fd fd fd fc fc fc fb fb fb fa fa fa f6 f6 f6 f9 f9 f9 f8 f8 f8 3c 3c 3c 3a 3a 3a f5 f5 f5 9f 9f 9f cf cf cf 39 39 39 3e 3e 3e 45 45 45 9c 9c 9c d3 d3 d3 f4 f4 f4 40 40 40 a1 a1 a1 d1 d1 d1 f0 f0 f0 34 34 34 ed ed ed f2 f2 f2 71 71 71 37 37 37 d6 d6 d6 98 98 98 42 42 42 f3 f3 f3 9a 9a 9a 3f 3f 3f cd cd cd ca ca ca 68 68 68 66 66 66 44 44 44 6b 6b 6b 59 59 59 43 43 43 41 41 41 32 32 32 a6 a6 a6 6c 6c 6c 4f 4f 4f 38 38 38 e1 e1 e1 c8 c8 c8 80 80 80 5d 5d 5d dd dd dd ce ce ce 92 92 92 70 70 70 49 49 49 30 30 30 db db db b2 b2 b2 ab ab ab 76 76 76 51 51 51 47 47 47 36 36 36 b5 b5 b5 9e 9e 9e 7d 7d 7d 79 79 79 74 74 74 53 Data Ascii: PNGIHDR4%PLTE<<<:::999>>>EEE@@@444qqq777BBB???hhhfffDDDkkkYYYCCCAAA222lllOOO888]]]pppIII000vvvQQQGGG666}}}yyytttS
2024-03-18 16:23:04 UTC	1369	IN	Data Raw: ab 9b ff ad 9a c7 7c 7b c6 7c 6f bc 78 68 b0 65 55 c8 63 51 c0 4f 4e ca 42 41 be 52 3d 24 24 24 b9 5a 20 e0 ff ff e6 ff f8 db de e5 f2 ff e3 f5 f7 e1 d6 d6 d8 cd ca d5 fe d5 c3 f1 b2 ba f1 c2 b8 c5 b7 b6 a9 bd b2 e3 af b1 d6 95 8f c5 87 88 e1 9b 81 f7 8e 78 dd 73 66 5b 68 61 cf 63 60 b8 67 4c b2 42 3e 4f 45 3c 40 33 39 3c 42 36 9f 4b 31 31 32 2a ba 36 29 ad 4b 28 b2 7b 55 ed 00 00 13 b1 49 44 41 54 68 de ec d5 3f 6b 94 41 10 c7 f1 ef fc 66 f6 d9 27 39 89 d1 20 21 11 82 45 fa 80 06 41 44 82 22 8a f0 14 fe b9 20 92 a0 77 60 0a 41 24 5a 1b 48 02 46 bb dc 5d b0 b1 b0 08 f6 91 88 b5 af c0 bc 26 b9 7b 30 8d d5 b5 3e f9 34 bb 0b b3 2c 3b b3 ec 70 e6 4c 2d 21 83 04 66 46 73 24 50 10 80 43 a6 39 02 5c 58 89 81 05 0d 52 3a 78 5d 6d d1 1c 8e 51 62 5c 21 9a f6 d6 75 Data Ascii: \|{\|oxheUcQONBAR=$$$Z xsf[hac`gLB>OE<@39<B6K112*6)K({UIDATh?kAf'9 !EAD" w`A$ZHF]&{0>4,;pL-!fFs$PC9\XR:x]mQb\!u
2024-03-18 16:23:04 UTC	1369	IN	Data Raw: 16 a1 3c 10 af 37 f4 ca d3 5c f1 43 82 55 2a 1b 65 2e 02 1f be f6 d6 43 df de f5 e3 5b 0f df bd e1 a6 ab 77 de ff dc 4b f7 ef b9 f3 52 b2 17 13 27 b0 d1 c6 54 53 95 b1 78 66 99 39 7d ca d0 fc a3 8e 9a d2 d8 52 8c f2 64 99 7b ac 94 8f be 04 8b 3b 21 33 f8 04 1c ca 34 1c 14 3a 86 36 73 0f ad 33 23 6e 08 4b 53 33 e0 e1 7c 3d 91 07 b8 5a 4a 0a 98 72 32 a1 bd dc 6c 92 b1 8c 25 3c b6 82 c2 89 6e 94 73 ee 11 ab d8 02 90 69 c1 15 40 71 8c 03 a4 89 95 d9 90 f5 f7 56 a4 99 59 bc 0f 71 30 5e 25 a3 d7 88 69 58 17 53 9a 7b 08 69 63 fb 49 02 99 f1 6b f3 d9 4f ae b9 7e ed 86 4f b7 bd f9 e5 9a c1 3b 1e dd 7e cf 59 b7 ee 7c e8 f9 6b 57 7d b5 65 f7 ad 83 ab 6e c0 5e a0 a6 ba 6b 28 70 bc 7f 99 7a b4 00 4a 09 c1 81 93 5d 3d 59 13 0c c7 a2 69 bd 90 ac 80 a1 20 82 95 be 8d ba Data Ascii: <7\CU*e.C[wKR'TSxf9}Rd{;!34:6s3#nKS3\|=ZJr2l%<nsi@qVYq0^%iXS{icIkO~O;~Y\|kW}en^k(pzJ]=Yi
2024-03-18 16:23:04 UTC	1369	IN	Data Raw: da 35 f7 a6 a6 8e 30 8c ff f6 72 ce 1e 4d 52 42 62 82 24 0d 06 b9 8b 84 46 08 97 72 2d 0a 28 0c 57 07 04 e5 32 03 72 d3 02 63 ad 77 67 fc a3 75 46 3b ea 7f 55 3f 5e 3f 4a dd 3d 99 94 da 7e 82 96 67 60 38 bb 7b ce bb ef f3 be cf 59 f6 dd 24 02 d2 f0 f9 87 bb 1a ed bb 1a 49 7b dc ff ee e6 94 00 cf 90 18 1c f8 5b 65 a8 1d 7b 24 ae c2 46 86 32 a9 0c b9 10 80 12 78 04 f8 ee f4 4e 49 21 ec b0 08 2b 59 1b 8f f2 7a 19 56 f5 61 44 05 52 53 77 b6 2a 6a 50 42 4a db a2 5c f0 e2 a3 50 ca b5 f0 40 85 77 58 08 eb 4a 80 34 76 3c 70 7b 0d ec dc 88 30 1b ce 99 b0 22 c4 3b c9 23 2c 47 84 7e 7c e3 62 74 06 8c 5b ed e4 fd b6 1b fd ef cb 25 74 52 60 10 94 e1 ac fb e5 c2 2d 70 21 48 a2 70 15 ac 2b c4 2d 49 a1 09 33 68 f0 ed 85 87 14 81 75 d8 9a 32 01 21 a4 ca 00 6e 63 af b4 0d Data Ascii: 50rMRBb$Fr-(W2rcwguF;U?^?J=~g`8{Y$I{[e{$F2xNI!+YzVaDRSw*jPBJ\P@wXJ4v<p{0";#,G~\|bt[%tR`-p!Hp+-I3hu2!nc
2024-03-18 16:23:04 UTC	1084	IN	Data Raw: cc 49 ce d8 f4 ca f5 ea c4 26 2a d5 11 3b d7 12 bf 50 4d a1 81 76 71 6b f4 42 4b 55 a2 b4 d8 56 42 a2 aa 53 5d ef 69 fe 39 9e e9 b8 d8 1f bf 74 7b b6 da 10 ed b8 9a 92 5e 47 34 5d 15 af 8a a7 6a b2 d7 07 69 98 a0 35 a7 e5 70 3a 31 81 48 45 a9 c0 40 ba ee 0e 33 47 75 19 6f ec c9 73 a5 21 d7 b5 73 6d f4 46 34 40 ff 1b 71 af 67 b5 29 c7 25 9e 0f a3 5e a4 1b 16 02 7a b2 74 2f cb 9e 2e 3f f2 6a 1f 66 d7 69 87 9e 09 8c c4 e6 be e5 4b e3 9a 3f 11 73 95 fd 78 0c fa 72 eb eb 50 78 2a a8 4f 91 4d 8b 49 27 2d 66 0a 83 f8 4b 2f ef a8 ce cc 70 03 dc 3a 6c 1c 47 46 ab 97 87 01 c9 f1 53 ef 9c 1a 72 09 13 1c 76 a3 a0 67 65 75 8b a3 b7 ad 0c 45 7d a0 fe 16 54 d7 77 44 a1 ae a3 94 c5 1d 4b 3f 9d 5c 7e b3 49 5f 23 6a a3 31 d1 a7 88 a6 24 27 e1 fb 20 6b 80 7d e1 b6 38 77 36 Data Ascii: I&;PMvqkBKUVBS]i9t{^G4]ji5p:1HE@3Guos!smF4@qg)%^zt/.?jfiK?sxrPxOMI'-fK/p:lGFSrvgeuE}TwDK?\~I_#j1$' k}8w6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.4	50360	104.26.13.241	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:05 UTC	1337	OUT	GET /static/img/blog/logo-browserstack.png HTTP/1.1 Host: browser-update.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJjc3JmX3Rva2VuIjoiODc1YWM4MDRmZDY4ZDZhMDAzMGMyOWQ0NGUzYjcwNWYyOTI3YWQ3MSJ9.ZfhqKw.yVJbJsCRIRLuq_w-KP0OMrtVzh0; browserupdateorg=pause; _pbjs_userid_consent_data=3524755945110770; _cc_id=cd7195d98b33730cda0d063b9003130e; panoramaId_expiry=1710865328829; __gads=ID=a03b10676721d111:T=1710778928:RT=1710778928:S=ALNI_MbTOr6rF_KIJQbe5i41sqMNRCh_Tw; __gpi=UID=00000a13780b938e:T=1710778928:RT=1710778928:S=ALNI_MZ6rQGi_ovuOEMZrP72E-zG-C9LYg; __eoi=ID=5f8efe71a1fb6213:T=1710778928:RT=1710778928:S=AA-AfjZiDBXA7pQZE65NhBSAOZCc; cto_bidid=gJKqxl84a2dDMnBzVVdMMGRDaEc5TGpYMURaeDV3M3dlcSUyQnVjeXQ4c2hMQWF3YiUyRmZpanRhYjZTcm5nckVuN3RqdnBIc1BXRm1MJTJGQjQ2eXNRNUgzQ2VOU2tFQSUzRCUzRA; cto_bundle=VeNI818wRkVwRWwwMEN3bE9TanNMMU4zM24lMkJnUUFuSU5nRjRSN3VWT2dtVG1INnFBMGZoOVN3JTJCRmx3aiUyRlZwakpORFAlMkJIeGxzSXJ6SnM1c2lFVGsyTVZtWDJLZmNQcmlwM3pNRSUyQkFxQXoxUmlmSUU0UkVYbWZoa1JWMVpvZnJyQjdiUVFSM3cxV3ZBN3VuJTJCcE5DeE1QUDZrQ1p1REU2QzUzMm9iS3pISWVKOFREZG8lM0Q
2024-03-18 16:23:05 UTC	698	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:23:05 GMT Content-Type: image/png Content-Length: 5380 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=logo-browserstack.png last-modified: Sun, 21 Mar 2021 12:19:17 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9llyleI2ky45%2BDoZ%2BtFHmWQ5UipsMyxt77xEiXo0UXNJN74FHI7M57U1csm25HBpjcNmfCT18kwR3hw1bY9FYu2kBk%2BSBQp%2BLCl0KIZcN3Nkq4l%2F016MDVREu8umd%2BrSa7lJQg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 866690b17a564325-EWR
2024-03-18 16:23:05 UTC	671	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 00 91 08 03 00 00 00 28 c0 36 bb 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 ae 50 4c 54 45 00 00 00 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 21 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 f0 a3 5c ea 84 4b 20 20 20 d7 7b 45 f2 a9 60 f4 b8 68 f4 b8 68 f4 b7 67 f4 b8 68 e6 6c 3e e6 6d 3d 20 20 20 e5 6f 3b f4 b8 68 6d b5 55 21 1f 1f ae da e5 e2 3d 44 bc d0 52 57 b9 dc 0e b0 d2 e0 4b 44 ff ff ff ef 9f 5a e3 5d 43 84 cb e0 c5 b8 4e 9d c5 53 81 b5 54 74 bb 76 9e d1 c2 cd 99 4a 2d b5 d6 8e c7 9e 2b 38 3b 44 b7 d9 31 52 5a 31 70 7f aa 78 4c 5f b2 ab 22 8f a8 be cf ca b7 cd 8e 91 90 90 ca 87 88 17 b9 d2 80 00 00 00 18 74 52 4e Data Ascii: PNGIHDRX(6gAMAasRGBPLTE "! \K {E`hhghl>m= o;hmU!=DRWKDZ]CNSTtvJ-+8;D1RZ1pxL_"tRN
2024-03-18 16:23:05 UTC	1369	IN	Data Raw: 51 55 b1 b5 58 2c 14 b4 6e 1b b2 c6 34 b8 c4 95 ce d5 45 8d d5 f2 d4 a4 8d 6b 2d ae 80 70 78 46 64 51 3d 58 49 49 af 2a ac ce 4f cd 2a 02 a2 ec 5a 25 59 ab 39 91 d5 e7 fe d5 0c 4e dc d7 df 7f 2f 1d ec aa 35 2d 09 ad 92 ac 22 81 a7 3c ab af 3a 81 03 e1 da 64 57 8f a5 d4 4c 4b 8a 87 25 59 43 22 8b b8 92 03 e1 ba b6 2b 8d ab c7 bb 1f 8d ee ee 1e 25 b2 44 d3 2a c9 2a d2 2c ea 67 f5 3c 71 17 03 e1 0a e1 ea f1 87 a6 9a 2d 90 ac 32 18 ce a9 07 df eb 04 4b 0c 84 30 57 77 3f 40 55 68 6d c9 ba 92 bb 0e a5 65 4d 68 de b0 cf 81 70 a5 73 b5 b4 b8 55 83 16 4c d6 a8 aa 0c a9 34 ec 73 20 14 0c eb 7f 10 57 77 3f 4c 7a 6c 6a 43 91 ac 75 95 bf 53 02 df df 40 28 64 ee a3 a5 1e 08 1f 7f 58 54 9a d6 42 21 6b 93 66 6d 2d 8b d2 2c 32 ac 7f 56 6f 3b 70 b5 25 eb 97 4a d6 6d 95 65 Data Ascii: QUX,n4Ek-pxFdQ=XIIOZ%Y9N/5-"<:dWLK%YC"+%D**,g<q-2K0Ww?@UhmeMhpsUL4s Ww?LzljCuS@(dXTB!kfm-,2Vo;p%Jme
2024-03-18 16:23:05 UTC	1369	IN	Data Raw: 37 60 f1 81 ba 8c 43 fc 22 99 2d 0b 07 8b 23 f3 18 99 f2 0d 88 80 8b 49 23 13 58 a1 ed d4 5c c0 da c6 c2 0e 60 6d 27 0b 1f 6d 60 8d 3b 82 a5 56 df 2d 58 83 29 70 5b 0e 58 6a 5e 1f 91 42 6d 31 0e 37 cb 32 25 dd 41 67 9e 04 a3 e3 09 fc 96 1c 00 2b 81 ae 20 00 3c b8 0b 58 2c 76 9b 6f cd cd e7 09 80 e5 5b 0b 74 04 ac eb a5 66 59 0f ee 60 55 91 f0 da 02 d6 a4 1b 58 5a b7 81 9b e7 66 d1 61 ad c9 ca a1 c1 89 c0 21 63 0a d3 be cb e2 8b 00 7b 4b ae 07 77 70 3e d4 77 5b d7 87 82 c5 63 7c 26 9f 5b b9 6a ce 53 07 cb a1 f1 a3 80 55 2d f4 5b 2d 96 9a 65 3d 39 73 55 ad 9b 59 2e 2c 60 cd bb 80 25 b8 7a 76 60 01 2b e3 72 3f 15 19 55 06 4d 11 25 e0 c4 91 2f 1b 12 c3 b9 4a ec f7 4b b8 1d d8 9d 4f b9 7e 81 71 e2 c3 85 2d 1e 0a 7d 97 f3 34 ac f8 62 30 58 9e 43 df 07 03 eb 46 Data Ascii: 7`C"-#I#X\`m'm`;V-X)p[Xj^Bm172%Ag+ <X,vo[tfY`UXZfa!c{Kwp>w[c\|&[jSU-[-e=9sUY.,`%zv`+r?UM%/JKO~q-}4b0XCF
2024-03-18 16:23:05 UTC	1369	IN	Data Raw: a3 25 62 a5 07 c2 2a 12 ce e4 14 eb b8 2b 58 4a e3 6a 97 1c 2b 44 5b a2 bc b9 3b 9e 60 39 51 7b 77 94 4f f1 32 d3 dc 40 f0 c1 60 71 97 03 99 9f 28 b2 27 58 b1 b9 30 fc 32 1f 22 96 75 85 93 b5 61 eb f9 61 2a fc 30 c5 53 f1 94 e4 e6 7f ea 5c 2d 2a c3 92 53 ac a3 ae 60 1d c8 7b cb 0d 60 a1 55 61 a2 55 41 69 73 c8 48 1c e3 bc 39 74 8c 15 e4 cc 0f 62 6c ad 49 03 56 12 c2 8a f6 03 ab 8d b5 09 7a 20 69 dd 42 9c 55 8f 2c 48 25 b0 f2 0e 55 e1 96 63 c7 29 9d 83 f9 99 c9 b2 a0 34 ab d6 cd af e7 e7 a7 e7 e7 e7 5f a7 e7 e7 d2 eb 3a 57 db 48 38 93 23 a1 65 33 05 74 de a9 2b 58 07 da 12 75 78 d6 4f 18 da a4 fe e8 40 74 b2 b8 c1 2d 86 9d a3 d8 58 13 4a 4d 80 5c ba 0c 73 92 fb 0e 60 e1 8e 95 0b eb 2b 38 d2 c7 72 98 44 38 90 8d d6 75 77 e7 18 00 ab ec 65 ad 16 36 b2 10 de Data Ascii: %b+XJj+D[;`9Q{wO2@`q('X02"uaa0S\-*S`{`UaUAisH9tblIVz iBU,H%Uc)4_:WH8#e3t+XuxO@t-XJM\s`+8rD8uwe6
2024-03-18 16:23:05 UTC	602	IN	Data Raw: f5 b8 90 69 9c 05 21 f6 93 a0 51 58 be 2b 4e 13 c9 f3 b2 66 47 51 f9 e9 c8 47 32 3f 19 a4 c5 af aa 68 c7 f7 e0 67 42 f2 e6 ee 98 d2 77 34 18 16 64 ad 76 e7 aa 3a c8 dc 31 75 ff 18 71 c6 22 c6 3e e8 d9 b6 2e 0f ce 2d 1e 81 bb ff 09 70 87 e7 d3 ca 7b 98 a5 eb 3f f8 f7 55 a4 ef 68 30 2c c2 a1 d4 75 70 54 dd 6f 87 02 21 9a ba 93 fe 2e 1d cf 0d c1 70 a7 70 78 d5 86 41 20 10 4e 68 c8 fb a1 d2 b2 ce 70 b2 36 a6 f5 72 d5 35 0c d6 76 a5 73 45 86 d5 2f cb 32 91 b5 5e 75 30 2d c9 ae f4 04 8b 0c ab 67 96 65 48 b3 4a b4 56 2f bb 60 a5 27 58 64 58 3d d2 91 9d ac 4d 40 74 40 eb ea 52 c6 0a e0 8a 0c ab 4f 9a b8 90 b5 b1 2d 63 ae 55 52 75 2b fd 85 ce 15 de c3 22 fd 85 3a 9c 3b 91 b5 61 6b 8d b0 75 75 79 b9 a1 4a f9 71 1e 80 ab 63 1a ec fe e5 ef 2e 64 15 70 8d 5e 24 ba ae Data Ascii: i!QX+NfGQG2?hgBw4dv:1uq">.-p{?Uh0,upTo!.ppxA Nhp6r5vsE/2^u0-geHJV/`'XdX=M@t@RO-cURu+":;akuuyJqc.dp^$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.4	50361	142.251.35.162	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:07 UTC	1698	OUT	GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:23:07 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:23:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.4	50362	142.251.35.162	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:07 UTC	2693	OUT	GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5884294479391638&output=html&h=90&slotname=3654094576&adk=228266070&adf=3493768505&pi=t.ma~as.3654094576&w=970&url=https%3A%2F%2Fbrowser-update.org%2F&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1710778930134&bpp=1204&bdt=1441&idt=2890&shv=r20240313&mjsv=m202403130201&ptt=5&saldr=sd&correlator=966864692783&frm=24&ife=3&pv=2&ga_vid=751177015.1710778933&ga_sid=1710778933&ga_hid=640648971&ga_fc=0&nhd=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=-12245933&bih=-12245933&isw=970&ish=90&ifk=1017635361&scr_x=-12245933&scr_y=-12245933&eid=44759875%2C44759926%2C44759842%2C31081793%2C95325975%2C95327950%2C95327954%2C31081901%2C95320376%2C95322388%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=862165079531677&tmod=1386792793&uas=0&nvt=1&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C970%2C90&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=1.bp47bps3drp4&fsb=1&dtd=2937 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:23:07 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:23:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.4	50364	142.251.40.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:07 UTC	1414	OUT	GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:23:08 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:23:08 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.4	50363	142.251.40.194	443	4124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:07 UTC	1246	OUT	GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:23:08 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:23:08 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
485	192.168.2.4	50365	104.36.115.113	443

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:13 UTC	3020	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=75737307&p=156011&s=165626&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; pi=156011:4; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; KRTBCOOKIE_153=1923-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&19420-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&22979-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&23462-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF; KRTBCOOKIE_52=22772-R35CA5_112946CAA_57D5D193&KRTB&23092-R35CA5_112946CAA_57D5D193; chkChromeAb67Sec=4; DPSync3=1711929600%3A261_260_258_236_256_263_201_245_262_259%7C1710806400%3A248_255%7C1711756800%3A257%7C1711324800%3A253_252_265; SyncRTB3=1711929600%3A3_220_21_46_166_54_250_178_5_233_104_48_165_231_55_22_8_13_249_71%7C1711584000%3A63%7C1711324800%3A223_2_15; KRTBCOOKIE_860=16335-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23334-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23417-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23426-kMV4FFfoUmxPTw0WMkb-TL9g48I; KRTBCOOKIE_18=22947-8259856715668781746; KRTBCOOKIE_107=1471-uid:Ru9JGeXJ1RMfLb5&KRTB&23421-uid:Ru9JGeXJ1RMfLb5; KRTBCOOKIE_466=16530-2b28c092-dd0b-42bb-b143-c15d16fc69ab; SPugT=1710778972; KRTBCOOKIE_22=14911-3317571013507089770&KRTB&23150-3317571013507089770&KRTB&23527-3317571013507089770; KRTBCOOKIE_188=3189-691baf7a-d9e5-4c92-bd01-b05ff60933fe-65f86a5b-5553&KRTB&23418-691baf7a-d9e5-4c92-bd01-b05ff60933fe-65f86a5b-5553; PugT=1710778973
2024-03-18 16:23:13 UTC	1086	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=5; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=156011:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1711929600%3A260_226_228_261_236_263_245_262_235_258_201_259_219_256%7C1711324800%3A252_265_253%7C1711756800%3A257%7C1710806400%3A248_255; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1711324800%3A15_2_223%7C1711929600%3A240_176_266_56_220_22_249_166_55_231_54_250_165_5_233_3_46_178_104_48_13_21_8_71%7C1712016000%3A35%7C1711584000%3A63%7C1713312000%3A224; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Mon, 18 Mar 2024 16:23:12 GMT Content-Length: 1740 Connection: close
2024-03-18 16:23:13 UTC	1740	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 61 2e 61 75 64 72 74 65 2e 63 6f 6d 2f 6d 61 74 63 68 3f 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 70 3d 4d 31 37 31 37 30 35 34 39 30 31 26 75 69 64 3d 32 36 46 43 35 42 43 34 2d 43 30 45 41 2d 34 38 31 45 2d 41 43 36 44 2d 32 39 37 45 46 34 39 33 30 45 33 35 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 61 61 2e 61 67 6b 6e 2e 63 6f 6d 2f 61 64 73 63 6f 72 65 73 2f 67 2e 70 69 78 65 6c 3f 73 69 64 3d 39 32 31 32 33 30 38 32 37 38 26 70 75 69 64 3d 32 36 46 43 35 42 43 34 2d 43 30 45 41 2d 34 38 31 45 2d 41 43 36 44 2d 32 39 37 45 46 34 39 33 30 Data Ascii: PubMatic.loadAsyncImagePixel('https://a.audrte.com/match?gdpr=0&gdpr_consent=&p=M1717054901&uid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35');PubMatic.loadAsyncImagePixel('https://aa.agkn.com/adscores/g.pixel?sid=9212308278&puid=26FC5BC4-C0EA-481E-AC6D-297EF4930

Session ID	Source IP	Source Port	Destination IP	Destination Port
486	192.168.2.4	50367	74.119.119.150	443

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:13 UTC	924	OUT	GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=093ace46-161d-4e4e-95d2-1bedb200f6ec
2024-03-18 16:23:14 UTC	532	IN	HTTP/1.1 302 Found content-length: 0 date: Mon, 18 Mar 2024 16:23:13 GMT server: Kestrel cache-control: no-cache expires: Mon, 18 Mar 2024 00:00:00 GMT location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent= pragma: no-cache x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 1982260 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
487	192.168.2.4	50368	104.18.25.173	443

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:13 UTC	857	OUT	GET /i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1 Host: a.tribalfusion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:23:14 UTC	931	IN	HTTP/1.1 302 Found Date: Mon, 18 Mar 2024 16:23:14 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 206 X-Reuse-Index: 2913 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=aunoeUwl6hnbQQw9RCEJQ4KE7PVa29HqJIqbmHET; path=/; domain=.tribalfusion.com; expires=Sun, 16-Jun-2024 16:23:14 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=aunoeUwl6hnbQQw9RCEJQ4KE7PVa29HqJIqbmHET; path=/; domain=.tribalfusion.com; expires=Sun, 16-Jun-2024 16:23:14 GMT; Location: https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 866690e8ca3c43fa-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:23:14 UTC	42	IN	Data Raw: 32 34 0d 0a 3c 68 31 3e 45 72 72 6f 72 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 68 31 3e 0d 0a Data Ascii: 24<h1>Error 302 Moved Temporarily</h1>
2024-03-18 16:23:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
488	192.168.2.4	50366	54.205.163.173	443

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:13 UTC	816	OUT	GET /pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=$UID HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:23:14 UTC	337	IN	HTTP/1.1 302 Found Date: Mon, 18 Mar 2024 16:23:14 GMT Content-Length: 0 Connection: close Server: Kestrel Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=91635b6e-8347-4069-9237-61dd42a5b7ac&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID}

Session ID	Source IP	Source Port	Destination IP	Destination Port
489	192.168.2.4	50369	69.90.254.78	443

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:14 UTC	695	OUT	GET /tum?umid=6 HTTP/1.1 Host: ums.acuityplatform.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:23:14 UTC	27	IN	HTTP/1.1 204 No Content

Session ID	Source IP	Source Port	Destination IP	Destination Port
490	192.168.2.4	50372	108.138.128.44	443

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:14 UTC	644	OUT	GET /adscores/g.pixel?sid=9212308278&puid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35 HTTP/1.1 Host: aa.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:23:14 UTC	836	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Mon, 18 Mar 2024 16:23:14 GMT Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3A2jYyReqQhZXvsaM7ma5pAxLE%2B7Mx1Naq; Path=/; Domain=.agkn.com; Expires=Tue, 18-Mar-2025 16:23:14 GMT; Max-Age=31536000; Secure; SameSite=None X-Cache: Miss from cloudfront Via: 1.1 eabcac050cde7358c94fc7ecf124ea4a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P4 X-Amz-Cf-Id: RSCn2cXL4GngULbW4_cB1rhNw5uD0eh7jTA3y3wBiCG9Ni879qGXjA==
2024-03-18 16:23:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
491	192.168.2.4	50370	52.46.155.104	443

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:14 UTC	803	OUT	GET /ecm3?ex=pubmatic.com&id=PM_UID26FC5BC4-C0EA-481E-AC6D-297EF4930E35 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AylOXD6udEkArigs61cOqe8; ad-privacy=0
2024-03-18 16:23:14 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 18 Mar 2024 16:23:14 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: QBVA8W8AM9T7TWDZ8NPH Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-18 16:23:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
492	192.168.2.4	50373	8.28.7.83	443

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:14 UTC	3279	OUT	GET /AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=91635b6e-8347-4069-9237-61dd42a5b7ac&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID} HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; pi=156011:4; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; KRTBCOOKIE_153=1923-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&19420-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&22979-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&23462-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF; KRTBCOOKIE_52=22772-R35CA5_112946CAA_57D5D193&KRTB&23092-R35CA5_112946CAA_57D5D193; KRTBCOOKIE_860=16335-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23334-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23417-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23426-kMV4FFfoUmxPTw0WMkb-TL9g48I; KRTBCOOKIE_18=22947-8259856715668781746; KRTBCOOKIE_107=1471-uid:Ru9JGeXJ1RMfLb5&KRTB&23421-uid:Ru9JGeXJ1RMfLb5; KRTBCOOKIE_466=16530-2b28c092-dd0b-42bb-b143-c15d16fc69ab; SPugT=1710778972; KRTBCOOKIE_22=14911-3317571013507089770&KRTB&23150-3317571013507089770&KRTB&23527-3317571013507089770; KRTBCOOKIE_188=3189-691baf7a-d9e5-4c92-bd01-b05ff60933fe-65f86a5b-5553&KRTB&23418-691baf7a-d9e5-4c92-bd01-b05ff60933fe-65f86a5b-5553; PugT=1710778973; chkChromeAb67Sec=5; DPSync3=1711929600%3A260_226_228_261_236_263_245_262_235_258_201_259_219_256%7C1711324800%3A252_265_253%7C1711756800%3A257%7C1710806400%3A248_255; SyncRTB3=1711324800%3A15_2_223%7C1711929600%3A240_176_266_56_220_22_249_166_55_231_54_250_165_5_233_3_46_178_104_48_13_21_8_71%7C1712016000%3A35%7C1711584000%3A63%7C1713312000%3A224
2024-03-18 16:23:14 UTC	781	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 18 Mar 2024 16:23:13 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_1278=23329-91635b6e-8347-4069-9237-61dd42a5b7ac&KRTB&23340-91635b6e-8347-4069-9237-61dd42a5b7ac&KRTB&23498-91635b6e-8347-4069-9237-61dd42a5b7ac; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 16-Jun-2024 16:23:13 GMT; path=/ Set-Cookie: PugT=1710778993; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 17-Apr-2024 16:23:13 GMT; path=/ Location: https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-18 16:23:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
493	192.168.2.4	50374	8.28.7.83	443

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:14 UTC	3177	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=26FC5BC4-C0EA-481E-AC6D-297EF4930E35; KRTBCOOKIE_148=19421-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23486-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23489-uid:D1B83109A4A44EA780D9F28ECD179B12&KRTB&23539-uid:D1B83109A4A44EA780D9F28ECD179B12; KRTBCOOKIE_80=22987-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23025-CAESEJj1o7j5msW-un8qiMIIebo&KRTB&23386-CAESEJj1o7j5msW-un8qiMIIebo; KRTBCOOKIE_377=6810-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22918-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&22926-476a305c-888e-468c-8d57-ea927e6c6f82&KRTB&23031-476a305c-888e-468c-8d57-ea927e6c6f82; pi=156011:4; KRTBCOOKIE_57=22776-9164480480629189644&KRTB&23339-9164480480629189644; KRTBCOOKIE_1003=22761-ae5763be-e543-11ee-a76c-71e45aeeda27&KRTB&23275-ae5763be-e543-11ee-a76c-71e45aeeda27; KRTBCOOKIE_279=22890-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23011-2b5667c9-681a-4026-b198-22bfa86cb93f&KRTB&23355-2b5667c9-681a-4026-b198-22bfa86cb93f; KRTBCOOKIE_32=11175-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22713-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&22715-AAAGHVotKVdnRwM0DdtRAAAAAAA&KRTB&23519-AAAGHVotKVdnRwM0DdtRAAAAAAA; KRTBCOOKIE_699=22727-AAARQ07L8NQAABPzJYe3uw; KRTBCOOKIE_153=1923-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&19420-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&22979-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF&KRTB&23462-vp2Bsb7J1LClmIXq7Z3K7bjNhrClmN677pmenWiF; KRTBCOOKIE_52=22772-R35CA5_112946CAA_57D5D193&KRTB&23092-R35CA5_112946CAA_57D5D193; KRTBCOOKIE_860=16335-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23334-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23417-kMV4FFfoUmxPTw0WMkb-TL9g48I&KRTB&23426-kMV4FFfoUmxPTw0WMkb-TL9g48I; KRTBCOOKIE_18=22947-8259856715668781746; KRTBCOOKIE_107=1471-uid:Ru9JGeXJ1RMfLb5&KRTB&23421-uid:Ru9JGeXJ1RMfLb5; KRTBCOOKIE_466=16530-2b28c092-dd0b-42bb-b143-c15d16fc69ab; SPugT=1710778972; KRTBCOOKIE_22=14911-3317571013507089770&KRTB&23150-3317571013507089770&KRTB&23527-3317571013507089770; KRTBCOOKIE_188=3189-691baf7a-d9e5-4c92-bd01-b05ff60933fe-65f86a5b-5553&KRTB&23418-691baf7a-d9e5-4c92-bd01-b05ff60933fe-65f86a5b-5553; PugT=1710778973; chkChromeAb67Sec=5; DPSync3=1711929600%3A260_226_228_261_236_263_245_262_235_258_201_259_219_256%7C1711324800%3A252_265_253%7C1711756800%3A257%7C1710806400%3A248_255; SyncRTB3=1711324800%3A15_2_223%7C1711929600%3A240_176_266_56_220_22_249_166_55_231_54_250_165_5_233_3_46_178_104_48_13_21_8_71%7C1712016000%3A35%7C1711584000%3A63%7C1713312000%3A224
2024-03-18 16:23:14 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Mar 2024 02:15:11 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-18 16:23:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
494	192.168.2.4	50375	104.18.24.173	443

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:14 UTC	917	OUT	GET /z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1 Host: s.tribalfusion.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID=aunoeUwl6hnbQQw9RCEJQ4KE7PVa29HqJIqbmHET
2024-03-18 16:23:14 UTC	799	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:23:14 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 43 Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 302 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=ajntuJOleq9PZabpryMqnvolKLdl2JKTRZdf7jeZaU33irsvNYW26Sprx0dDpgc8frSPr95IogYPxSFoC5bA1Pb2tp6; path=/; domain=.tribalfusion.com; expires=Sun, 16-Jun-2024 16:23:14 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=ajntuJOleq9PZabpryMqnvolKLdl2JKTRZdf7jeZaU33irsvNYW26Sprx0dDpgc8frSPr95IogYPxSFoC5bA1Pb2tp6; path=/; domain=.tribalfusion.com; expires=Sun, 16-Jun-2024 16:23:14 GMT; CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 866690ec5f161993-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:23:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 44 01 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
495	192.168.2.4	50377	108.138.128.21	443

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:14 UTC	462	OUT	GET /adscores/g.pixel?sid=9212308278&puid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35 HTTP/1.1 Host: aa.agkn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3A2jYyReqQhZXvsaM7ma5pAxLE%2B7Mx1Naq
2024-03-18 16:23:14 UTC	836	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Mon, 18 Mar 2024 16:23:14 GMT Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3A2jYyReqQhZXvsaM7ma5pAxLE%2B7Mx1Naq; Path=/; Domain=.agkn.com; Expires=Tue, 18-Mar-2025 16:23:14 GMT; Max-Age=31536000; Secure; SameSite=None X-Cache: Miss from cloudfront Via: 1.1 609b92127df3778f333c9eba7213368e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P4 X-Amz-Cf-Id: _iPYYRXDF8RYV8GJFjfM8bt_iyz755ks9OeOZYAwGVt50DjCI91qZg==
2024-03-18 16:23:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
496	192.168.2.4	50371	34.251.192.134	443

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:14 UTC	653	OUT	GET /match?gdpr=0&gdpr_consent=&p=M1717054901&uid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35 HTTP/1.1 Host: a.audrte.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:23:14 UTC	1030	IN	HTTP/1.1 302 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Origin: * Date: Mon, 18 Mar 2024 16:23:14 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=ar101281&google_hm=ZDdsUUVwWUVUNUNSMVNvZVhNZktTUGhLQQ%3D%3D&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fa.audrte.com%2Fddp%3Fred%3DeyJ1IjoiaHR0cHM6Ly9hLmF1ZHJ0ZS5jb206NDQzL3AiLCJkIjpbeyJuYW1lIjoiYWRmb3JtIn1dfQ%253D%253D Server: nginx/1.22.1 Set-Cookie: arcki2=d7lQEpYET5CR1SoeXMfKSPhKA!20220908!1710778994598!ip#191.96.227.194; Max-Age=1296000; Expires=Tue, 02 Apr 2024 16:23:14 GMT; Domain=audrte.com; Path=/; Secure; HttpOnly; SameSite=none; Secure Set-Cookie: arcki2_pubmatic=26FC5BC4-C0EA-481E-AC6D-297EF4930E35!20220908!1710778994598; Max-Age=1296000; Expires=Tue, 02 Apr 2024 16:23:14 GMT; Domain=audrte.com; Path=/; Secure; HttpOnly; SameSite=none; Secure Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port
497	192.168.2.4	50378	54.205.163.173	443

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:14 UTC	742	OUT	GET /pbmtc.gif?puid=26FC5BC4-C0EA-481E-AC6D-297EF4930E35 HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:23:14 UTC	440	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:23:14 GMT Content-Type: image/gif Content-Length: 42 Connection: close Server: Kestrel Set-Cookie: UID=775e1fcf-9db6-449a-9ca9-58013d9d9737; expires=Tue, 18 Mar 2025 16:23:14 GMT; path=/; secure; samesite=none Set-Cookie: ss=gi5ccXZL4HcvGPX6xUhwbLzmtN11IMpxrRAb4ZM6nDrL8oz0sKMB6jt1Ylzd6JB9Pg4tu8rrBqdCRkuSyVK4RA%3D%3D; expires=Tue, 18 Mar 2025 16:23:14 GMT; path=/; secure; samesite=none
2024-03-18 16:23:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
498	192.168.2.4	50376	50.57.31.206	443

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:14 UTC	696	OUT	GET /pubmatic/1/info?sType=sync&sExtCookieId=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:23:14 UTC	688	IN	HTTP/1.1 302 Found Location: /pubmatic/1/info2?sType=sync&sExtCookieId=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&sInitiator=external&gdpr=0&gdpr_consent= UIP-Response-Status: Ok Frontend-ID: 4 Set-Cookie: SEUNCY=33934688FF1329DE; Expires=Tue, 18 Mar 2025 16:23:14 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Connection: close Date: Mon, 18 Mar 2024 16:23:14 GMT Content-Length: 0 Routing-Server-ID: -1 Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port
499	192.168.2.4	50379	142.250.80.98	443

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:14 UTC	901	OUT	GET /pixel?google_nid=ar101281&google_hm=ZDdsUUVwWUVUNUNSMVNvZVhNZktTUGhLQQ%3D%3D&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fa.audrte.com%2Fddp%3Fred%3DeyJ1IjoiaHR0cHM6Ly9hLmF1ZHJ0ZS5jb206NDQzL3AiLCJkIjpbeyJuYW1lIjoiYWRmb3JtIn1dfQ%253D%253D HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:23:15 UTC	704	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://a.audrte.com/ddp?red=eyJ1IjoiaHR0cHM6Ly9hLmF1ZHJ0ZS5jb206NDQzL3AiLCJkIjpbeyJuYW1lIjoiYWRmb3JtIn1dfQ%3D%3D&gdpr=0&gdpr_consent= Date: Mon, 18 Mar 2024 16:23:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 339 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:23:15 UTC	339	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 61 2e 61 75 64 72 74 65 2e 63 6f 6d 2f 64 64 70 3f 72 65 64 3d 65 79 4a 31 49 6a 6f 69 61 48 52 30 63 48 4d 36 4c 79 39 68 4c 6d 46 31 5a 48 4a 30 5a 53 35 6a 62 32 30 36 4e 44 51 7a 4c 33 41 69 4c 43 4a 6b 49 6a 70 62 65 79 4a 75 59 57 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://a.audrte.com/ddp?red=eyJ1IjoiaHR0cHM6Ly9hLmF1ZHJ0ZS5jb206NDQzL3AiLCJkIjpbeyJuYW

Session ID	Source IP	Source Port	Destination IP	Destination Port
500	192.168.2.4	50380	50.57.31.206	443

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:14 UTC	730	OUT	GET /pubmatic/1/info2?sType=sync&sExtCookieId=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SEUNCY=33934688FF1329DE
2024-03-18 16:23:15 UTC	580	IN	HTTP/1.1 200 OK Content-Type: image/gif UIP-Response-Status: Ok Frontend-ID: 3 Set-Cookie: SEUNCY=33934688FF1329DE; Expires=Tue, 18 Mar 2025 16:23:15 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Date: Mon, 18 Mar 2024 16:23:15 GMT Content-Length: 42 Routing-Server-ID: -1 Access-Control-Allow-Origin: * Connection: close
2024-03-18 16:23:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port
501	192.168.2.4	50382	142.251.35.162	443

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:15 UTC	1698	OUT	GET /pagead/interaction/?ai=CtY_WL2r4ZfWLOLLfjvQPu7ihwALFm4GEXPKJ9ov6CMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQngAgCoAwHIAwKqBJUCT9ARx5emEMSt95pF9TNVm7JV-vcfa04EzADodgtba7etGWp1DhiIFk8MZ7junXUs5bl_aeHOhcTmFB8T4y73HxbxaDuk0-c1BGHyoGJVquYAHaAtZWSK4ogHZUGDRvXaNsv7xdDkgfbzb9OGzuM9MerHYIQu9ZxP_HFI0QKcmEQrF6Y8SNEhHk2p9vxfNzz0Lw5PT-mWBjd9FYvoiiLSOyHMB5Yv9TzH9Uc_4B9y1BYxV0n6Mii4NZBRcRL6wGRrUmqTvBcfh-RGvsNjPvshWDOlq1QyN875eyfjsc590rRLCTMWYl2qbck-YD5i46oCB0LHkOoWtmcRhly8ibslWvGVctq0vcAmFt4F1WMAiTO7gpk0ReAEAYAG-oT4yLvm6PmyAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WMTEpJKc_oQD-gsCCAGADAHiDRMIuvOkkpz-hAMVsq-DCB07XAgo0BUBgBcB&sigh=ATBHAHNyStw&cid=CAQSTgB7FLtqluJ-zEHHAkkFEbdEfZlGkI9KOWLNgLtFbBh1cdw8m-gv6vmbrn1kEREiRvUXSgnLVN9wwJ93GzaB3Yiu4uvMol00MeZCHhSaGg&label=window_focus&gqid&qqid=CLXfppKc_oQDFbKvgwgdO1wIKA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://e5ce99fb55a457e652ab0f6a69aeecca.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:23:15 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:23:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
502	192.168.2.4	50381	34.251.192.134	443

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:15 UTC	845	OUT	GET /ddp?red=eyJ1IjoiaHR0cHM6Ly9hLmF1ZHJ0ZS5jb206NDQzL3AiLCJkIjpbeyJuYW1lIjoiYWRmb3JtIn1dfQ%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: a.audrte.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: arcki2=d7lQEpYET5CR1SoeXMfKSPhKA!20220908!1710778994598!ip#191.96.227.194; arcki2_pubmatic=26FC5BC4-C0EA-481E-AC6D-297EF4930E35!20220908!1710778994598
2024-03-18 16:23:15 UTC	672	IN	HTTP/1.1 302 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Origin: * Date: Mon, 18 Mar 2024 16:23:15 GMT Location: https://dmp.adform.net/serving/cookie/match/?party=1003&r=eyJ1IjoiaHR0cHM6Ly9hLmF1ZHJ0ZS5jb206NDQzL3AiLCJkIjpbXX0%3D&gdpr=0&gdpr_consent= Server: nginx/1.22.1 Set-Cookie: arcki2_ddp2=d7lQEpYET5CR1SoeXMfKSPhKA!20220908!1710778995796; Max-Age=1296000; Expires=Tue, 02 Apr 2024 16:23:15 GMT; Domain=audrte.com; Path=/; Secure; HttpOnly; SameSite=none; Secure Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port
503	192.168.2.4	50383	142.251.35.162	443

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:15 UTC	2693	OUT	GET /pagead/interaction/?ai=CnCP4Nmr4ZZ2GDpLboPMP54uN-AzD6NO8c-ezuajMDMCNtwEQASAAYMnGqYvApNgPggEXY2EtcHViLTU4ODQyOTQ0NzkzOTE2MzjIAQmoAwHIAwKqBMcBT9DtffZiq2WE9NFHtjU0DiqreoKvDdrJW0MLie2eO_79toniWFysoayjkYEe-oHYvA0pKiKQ8ZVotfY3V1KdW2WOcVV7W3cNQO23ngQ_d2H908WdW4pM9V7neSzyK7A7RRZ50L6tkUIlznpSFy7xDuy-F774WxTC20I0zPy_pU9c8_KXV9P5qzq_OTGfpUhjTKwhHWI1bGYqZ0HCJ0dC1ahZ6WS4cOLyBkEGyFxiWqIT6Je3Tdh2OSh1j9vH9YsrnC0uk30RJYAG_LuokbvCrPhhoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpYpMunlZz-hAP6CwIIAYAMAdAVAYAXAQ&sigh=ONT58YACuUg&cid=CAQSKQB7FLtqL4SkK_6FK9yQyAJYAycwkSkXqZkXwVP9IxTyBUEOkmp5QuQV&label=window_focus&gqid=Nmr4ZZWrDfG0oPMP2OGfsAw&qqid=CJ35p5Wc_oQDFZItaAgd50UDzw&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5884294479391638&output=html&h=90&slotname=3654094576&adk=228266070&adf=3493768505&pi=t.ma~as.3654094576&w=970&url=https%3A%2F%2Fbrowser-update.org%2F&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1710778930134&bpp=1204&bdt=1441&idt=2890&shv=r20240313&mjsv=m202403130201&ptt=5&saldr=sd&correlator=966864692783&frm=24&ife=3&pv=2&ga_vid=751177015.1710778933&ga_sid=1710778933&ga_hid=640648971&ga_fc=0&nhd=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=-12245933&bih=-12245933&isw=970&ish=90&ifk=1017635361&scr_x=-12245933&scr_y=-12245933&eid=44759875%2C44759926%2C44759842%2C31081793%2C95325975%2C95327950%2C95327954%2C31081901%2C95320376%2C95322388%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=862165079531677&tmod=1386792793&uas=0&nvt=1&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C970%2C90&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=1.bp47bps3drp4&fsb=1&dtd=2937 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_48QAIHqqkIkRGt3V7AwI2klWlhLNok39OZpjrr6dNgKfG5Qj2eJgpHprAFY
2024-03-18 16:23:15 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:23:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
504	192.168.2.4	50384	50.57.31.206	443

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:23:15 UTC	494	OUT	GET /pubmatic/1/info2?sType=sync&sExtCookieId=26FC5BC4-C0EA-481E-AC6D-297EF4930E35&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SEUNCY=33934688FF1329DE
2024-03-18 16:23:15 UTC	580	IN	HTTP/1.1 200 OK Content-Type: image/gif UIP-Response-Status: Ok Frontend-ID: 3 Set-Cookie: SEUNCY=33934688FF1329DE; Expires=Tue, 18 Mar 2025 16:23:15 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Date: Mon, 18 Mar 2024 16:23:15 GMT Content-Length: 42 Routing-Server-ID: -1 Access-Control-Allow-Origin: * Connection: close
2024-03-18 16:23:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Target ID:	0
Start time:	17:21:44
Start date:	18/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	17:21:46
Start date:	18/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=2008,i,17467844057206675136,12934562213064335950,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	17:21:49
Start date:	18/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" "http://iwu.marketing/
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://iwu.marketing/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Chrome Cache Entry: 217

Chrome Cache Entry: 218

Chrome Cache Entry: 219

Chrome Cache Entry: 220

Chrome Cache Entry: 221

Chrome Cache Entry: 222

Windows Analysis Report
http://iwu.marketing/